Automaton Token Safety

io.github.baianomarceloeduardo-jpg由 GitHub 帳號 baianomarceloeduardo-jpg 發布v2.0.2更新於 Oct 25, 2026

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

已驗證Streamable HTTP可網頁執行金融安全與監控資料與分析

概覽

AI 產生的概覽

用來檢查 Base L2 代幣安全性的 MCP 伺服器：蜜罐掃描、兌換模擬、授權與流動性風險，以及簽章存證和實用工具。

可以做什麼
掃描 Base 代幣合約的蜜罐、增發、黑名單、暫停和稅費風險，並透過 Uniswap 池進行唯讀買賣模擬，量測轉帳稅和蜜罐行為。稽核 ERC-20 授權和單區塊流動性，包括價格影響估算和持倉集中度。列出 Base 上新建的流動性池及每個代幣的風險評分，並在送出前對 Base 主網交易進行試跑。建立、驗證和讀取帶簽章的雜湊鏈存證，產生或驗證 Merkle 證明。取得帶簽章的 Gas 和資產價格資料、代幣情緒評分、SHA-256 雜湊、UUID、定價條款和服務健康狀態。
適用情境
適合在助理交易或與某個 Base 代幣互動前進行審查、檢查授權或流動性部位是否有風險，或需要產生可驗證的證明與存證時使用。免費工具（一致性檢查、交易模擬、存證驗證、Merkle 驗證、定價、健康檢查）無需付費即可使用。
執行需求
可作為遠端端點執行，也可作為本機 npm 套件透過 stdio 執行。需要設定 VALUE_API_BASE 環境變數指向 Automaton Token Safety API。付費工具需要將 ALLOWOUT_SPEND 設為 1、在 AUTOMATON_MCP_PAYER_KEY 中提供付款錢包私鑰，並可選擇透過 AUTOMATON_MCP_MAX_AMOUNT_UNITS 和 AUTOMATON_MCP_TOTAL_CAP_UNITS 設定單次和總限額。需要連線至 Base 主網 RPC 和該 API 的網路存取。
安裝前請注意
付費工具按次收取 USDC（0.001 至 0.05），並需要在 AUTOMATON_MCP_PAYER_KEY 中提供錢包私鑰；請設定支出上限以控制風險。伺服器只簽署 EIP-3009 授權而不送出交易，但簽章仍會動用資金。免費試用依 IP 限制次數。結果僅為風險提示而非保證，呼叫會將代幣和位址資料傳送給第三方 API。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Automaton Token Safety，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.baianomarceloeduardo-jpg%2Fautomaton-token-safety-mcp/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "automaton-token-safety": {
      "type": "http",
      "url": "https://api.automaton-sovereign.workers.dev/mcp"
    }
  }
}

README

該儲存庫沒有 README。

工具

20

x402_conformance_check

FREE, runs locally. Lint any x402 paid endpoint for protocol conformance: HTTP 402 challenge, x402Version, accepts[] (exact scheme), Base network and addresses, EIP-712 domain, and rejection of malformed, forged, expired, underpaid and wrong-recipient EIP-3009 payments. Returns verdict, grade and per-check results.

輸入參數url必填

simulate_base_transaction

FREE, runs locally against Base Mainnet RPC. Dry-run a transaction before sending it: eth_call + eth_estimateGas at the latest block. Predicts whether it will revert and decodes the reason (Error(string), Panic(uint256) codes, custom-error selector, or node rejection such as insufficient funds). Returns { ok, willRevert, revertReason, estimatedGas, returnData }.

輸入參數to必填datafromvalue

token_scan

PAID 0.001 USDC/call, or free trial (3/day/IP). Bytecode security scan of a Base token contract: honeypot opcodes, mint/blacklist/pause/tax capabilities, a risk score and a verdict. Read-only — no transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Exposed as `security_scan` on older clients.)

輸入參數address必填payment

tx_simulate

PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only buy/sell simulation of a Base token through the Uniswap V2 WETH pool: returns reverts, the MEASURED transfer tax and a honeypot verdict. No transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Not the same tool as simulate_base_transaction, which dry-runs arbitrary calldata for free.)

輸入參數side必填token必填amount必填wallet必填payment

approval_risk

PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only audit of the ERC-20 approvals an owner granted for a token: spender, allowance, contract vs EOA, verified flag, drainable amount and a drain-risk verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.

輸入參數owner必填token必填paymentspenders

liquidity_risk

PAID 0.01 USDC/call, or free trial (3/day/IP). One-block liquidity audit of a Base token: Uniswap V3 / Aerodrome pools, the USD needed to move the price 1/2/5/10%, holder concentration, LP burn evidence and explicit coverage gaps. On 402, pay the accepts[] terms then retry with the payment tx hash.

輸入參數pairtoken必填payment

sentinel_latest

PAID 0.001 USDC/call, or free trial (3/day/IP). Newest liquidity pools created on Base (Uniswap v3/v4, Aerodrome) with a bytecode risk score per new token. Filters are optional. On 402, pay the accepts[] terms then retry with the payment tx hash.

輸入參數dexlimitsincemaxRiskminRiskpayment

security_scan

LEGACY NAME of token_scan — same route, same arguments, kept so clients written against this server keep working. PAID 0.001 USDC/call, or free trial (3/day/IP). Base token safety analysis: honeypot detection, mint traps, selfdestruct/delegatecall, proxy and tax risks from contract bytecode, with a risk score and signed verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.

輸入參數address必填payment

attest

Create a SIGNED, hash-chained, append-only attestation (verifiable proof-of-existence) for a payload. PAID: 0.05 USDC/call, or free trial (3/day/IP). On 402, pay the accepts[] terms then retry with the payment tx hash.

輸入參數data必填payment

verify_attestation

FREE. Verify a ledger entry by index or by data hash: recomputes hash, checks ECDSA signature and chain link.

輸入參數indexdataHash

attestation_pubkey

FREE. Get the ECDSA P-256 public key (PEM) and keyId used to sign ledger entries.

無需輸入參數。

read_ledger

FREE. Read the attestation ledger (paginated).

輸入參數fromlimit

oracle_base

PAID 0.001 USDC/call. Get real-time Base L2 gas estimates and asset prices (ETH, USDC, cbBTC, AERO, VIRTUAL) with an ECDSA P-256 digital signature from the sovereign agent.

輸入參數payment

merkle_prove

PAID 0.001 USDC/call. Generate a cryptographic Merkle inclusion proof for a list of items and target element.

輸入參數items必填targetpayment

merkle_verify

FREE. Verify a cryptographic Merkle inclusion proof against a root.

輸入參數item必填root必填proof必填

sentiment_analysis

PAID 0.001 USDC/call. Web3 token risk, security checks, and sentiment scoring with signed verdict.

輸入參數asset必填payment

hash_sha256

PAID 0.001 USDC/call. SHA-256 hex of a string.

輸入參數input必填payment

uuid

PAID 0.001 USDC/call. Generate a UUIDv4.

輸入參數payment

pricing

FREE. Full pricing terms, endpoints, and payment mechanics.

無需輸入參數。

health

FREE. Service liveness and version.

無需輸入參數。

版本歷史

2
  1. v2.0.2最新Sep 29, 2026
  2. v2.0.1Sep 27, 2026

評分

已滿足適用檢查項的 75%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫，或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。