io.github.gl1tchbased-pixel由 GitHub 帳號 gl1tchbased-pixel 發布v1.0.0更新於 Oct 29, 2026
Token rug-risk scans, Know Your Agent wallet checks and deployer reputation for AI agents.
遠端 MCP 伺服器，讓助理在交易前執行唯讀的代幣安全掃描、查詢錢包信任評分與部署者信譽。
Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。
把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。
閱讀 https://sourceweft.com/mcp/io.github.gl1tchbased-pixel%2Fgl1tch/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。把它新增到你客戶端的 mcpServers 設定中。
{
"mcpServers": {
"gl1tch-token-safety": {
"type": "http",
"url": "https://gl1tchbased.xyz/api/mcp"
}
}
}A free, open-source token safety scanner for Solana (plus 15 EVM chains). Paste any token and get a 0–100 risk score with a plain-language reason for every check, in seconds. Read-only: it never asks for a signature, never touches a wallet, and costs nothing to use.
mobile/Most tokens launched on Pump.fun collapse shortly after launch (Solidus Labs counted 98.6% of 7M+ tokens from Jan 2024 to Mar 2025 as pump-and-dumps). The warning signs sit in on-chain state that buyers can't read: a live mint authority, a freeze authority, a hidden Token-2022 transfer fee, unlocked liquidity, bundled sniper wallets, a deployer with a history of rugs. GL1TCH reads that state, explains it in plain words, and gives it away for free.
A token whose volume is botted, or whose holders are mostly one linked network, can't read better than CAUTION,
whatever its contract looks like. The scan also flags a token that has fallen 85% or more from its peak, and paid
DexScreener promotion. EVM chains use GoPlus for honeypot, sell tax, mintable, ownership, pausable and blacklist
checks, plus the same trading-activity check.
Every scan also feeds the Signal Graph, a cross-scan memory of deployers, so a serial
rugger's next token is flagged. Scoring changes are logged in
docs/scoring-changelog.md.
Verdicts: CLEAN, LOW RISK, CAUTION, HIGH RISK, RUG-SHAPED, UNKNOWN. The API is rate
limited per IP (40 requests/min), the same for every caller. If you are building an integration
that needs more, ask at [email protected]; it stays free.
Embed a live badge that links to the full report:
Machine-readable docs for agents: https://gl1tchbased.xyz/llms.txt.
A working mobile-first Android prototype (mobile/, MIT) built for Solana Seeker and Android devices:
mobile/README.md.Requires Node.js 22.
CI type-checks and tests the site and the bot on every push, and a security workflow runs a secret scan, a dependency audit and a check that no code ever requests a fund-moving or approval signature.
SECURITY.md to report a vulnerability, and
docs/threat-model.md.docs/verdict-anchoring.md./api/stats returns user, auto and splitSince, or a 503 while the counter is unreachable,
never a made-up 0). Automated means Rug Radar, Watchtower, link previews, badge renders and our own
pages' self-checks of $GL1TCH. Those self-checks were at first miscounted as people's scans, so the
split restarted once that was fixed (splitSince is the restart).The project also has a community token, $GL1TCH
(3HQJwwHvzy8pGkPqGQcb4thZCH88MUCHVVSNtHn6pump), launched on Pump.fun on 29 May 2026:
Token-2022, mint and freeze authority revoked, 0% tax, fixed 1B supply, liquidity in the Pump.fun bonding curve.
More: whitepaper · token page · Quantum Core and verifiable randomness.
Issues and pull requests are welcome. See CONTRIBUTING.md.
來源：README.md，提交 10c82e5
Scan a token for rug risk
Pre-trade token safety check (Solana and EVM): rug-pull and honeypot verdict, 0-100 safety score, mint/freeze authority, LP lock, buy/sell tax, holder concentration, deployer history and bot-volume flags.
mint必填chainKnow Your Agent: trust-check a wallet
Trust score and level for an AI-agent wallet (or any wallet) before you transact with it: signature-verified identity plus its on-chain track record in GL1TCH scans.
chainaddress必填Token deployer reputation
How many tokens a deployer wallet launched and how many scanned as high risk or rug-shaped (serial rugger check), from the GL1TCH Signal Graph.
chainaddress必填已滿足適用檢查項的 100%
該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。
// Full safety report for one tokenconst r = await fetch("https://gl1tchbased.xyz/api/scan?mint=<address>&chain=solana");const report = await r.json(); // { verdict, score, confidence, checks[], meta, bottomLine, ... }
// Search by name or symbol across chainsconst s = await fetch("https://gl1tchbased.xyz/api/scan?q=bonk").then((x) => x.json()); // { candidates }<a href="https://gl1tchbased.xyz/scan/solana-<address>"> <img src="https://gl1tchbased.xyz/api/badge?t=solana-<address>" alt="Scanned by GL1TCH" /></a>flowchart LR U[Browser · Telegram · API caller] --> S["/api/scan (Next.js on Vercel)"] S --> RPC[Solana RPC: mint, authorities, holders, deployer balance] S --> RC[RugCheck: LP lock, insiders, deployer] S --> MK[DexScreener / GeckoTerminal: market] S --> GP[GoPlus: EVM checks] S --> BOT[(Bot on an Oracle Cloud VM: Signal Graph, counters, Watchtower)] BOT --> TG[Telegram alerts]npm installcp .env.example .env.local # optional: a private Solana RPC in SCAN_RPC; public RPCs work for light usenpm run dev # http://localhost:3000/scannpm test # unit tests (vitest)
cd bot && npm install && npm test # the Telegram bot has its own package and tests