Arbitrum Transaction Preflight

io.github.naur9n由 GitHub 帳號 naur9n 發布v4.0.0更新於 Oct 24, 2026

Paid Arbitrum transaction simulation and risk scoring for wallets and AI agents.

發布方自己的服務:Preflight

已驗證STDIO僅桌面金融安全與監控

概覽

AI 產生的概覽

本機 MCP 伺服器,提供付費的 Arbitrum 交易預檢:在交易送出前進行模擬,回傳 Gas 估算與風險評分。

可以做什麼
模擬待送出的 Arbitrum 交易,回報模擬成功或回滾詳情、Gas 估算、Gas 價格與預估 ETH 成本。檢查目標位址是 EOA 還是合約。偵測 ERC-20 approve 與 NFT setApprovalForAll 授權。回傳加權風險評分、警告、區塊號與檢查時間戳。每次檢查透過託管 API 依報告付費,使用設定的付款金鑰。
適用情境
當助理或代理即將簽署或送出 Arbitrum One 交易,希望先做模擬、Gas 估算和授權/風險檢查時適用。適合能支付小額按次費用的錢包、機器人與代理工作流程。
執行需求
透過 npx 在本機執行,需要 Node.js 22 以上版本。需要在 CLIENT_PRIVATE_KEY 提供專用的低價值付款錢包金鑰,在 SERVER_URL 提供託管 API 位址,並將 CHAIN_ID 設為 42161。付款方需在 Arbitrum One 持有原生 USDC;付款本身不需要 ETH。需要能連線至託管 API 的網路。
安裝前請注意
每次工具呼叫都會花費真實資金:每份報告 0.10 USDC,從 CLIENT_PRIVATE_KEY 對應的錢包扣除。請使用專用的低價值付款金鑰,切勿使用有價值的錢包金鑰;服務方表示從不索取交易簽署錢包。交易詳情會傳送給第三方託管 API。結果為啟發式判斷,不保證安全。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Arbitrum Transaction Preflight,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Arbitrum Transaction Preflight

Paid transaction simulation and risk reports for wallets, bots, and AI agents. Before a transaction is signed, the API checks whether it simulates successfully, estimates gas, detects token/NFT approvals, inspects the target, and returns a machine-readable risk score.

Production API: https://arbitrum-mpp-transaction-preflight-production.up.railway.app

Product and pricing

  • Network: Arbitrum One (42161)
  • Asset: native USDC (0xaf88d065e77c8cC2239327C5EDb3A432268e5831)
  • Launch price: 0.10 USDC per report (100000 raw USDC units)
  • Primary payment channel: MPP with EIP-3009
  • Optional distribution channel: x402 with Coinbase CDP/Bazaar
  • Agent interface: MCP stdio server that pays the MPP endpoint with the caller's wallet

The service never asks for a transaction-signing wallet. The example MPP/MCP clients use a separate low-value payer key only to authorize the API payment.

Discovery endpoints

The hosted service exposes free discovery metadata:

  • GET / — product, network, price, and endpoint summary
  • GET /health — health check
  • GET /openapi.json — MPP-aware OpenAPI 3.1 discovery document
  • GET /llms.txt — concise instructions for AI agents
  • GET /.well-known/agent.json — agent/service metadata

MPP clients call:

text
POST /v1/preflight

When x402 is enabled, x402 clients call:

text
POST /x402/v1/preflight

Request and report

json
{  "from": "0x0000000000000000000000000000000000000001",  "to": "0x0000000000000000000000000000000000000002",  "data": "0x",  "valueEth": "0"}

from and to are required. data defaults to 0x. Use either valueEth or valueWei for native value. A successful paid response contains:

  • call simulation success/revert details;
  • gas estimate, gas price, and estimated ETH cost;
  • EOA/contract target inspection;
  • ERC-20 approve and NFT setApprovalForAll detection;
  • weighted risk score and warnings;
  • block number and check timestamp.

Automated simulation and heuristics reduce risk but are not a guarantee of safety.

Run locally

Requirements: Node.js 22+ and a dedicated server wallet. On mainnet, the server wallet needs a small Arbitrum One ETH balance for MPP settlement gas.

bash
npm installcp .env.example .envnpm run server

Minimum production configuration:

dotenv
SERVER_PRIVATE_KEY=0x...CHAIN_ID=42161ARBITRUM_RPC=https://arb1.arbitrum.io/rpcPRICE_RAW_USDC=100000ENABLE_FREE_DEMO=falseSERVER_URL=https://arbitrum-mpp-transaction-preflight-production.up.railway.app

Never commit .env or expose SERVER_PRIVATE_KEY.

MPP client

The included client performs the complete 402 -> authorization -> retry -> receipt flow:

dotenv
CLIENT_PRIVATE_KEY=0x...TARGET_ADDRESS=0x...SERVER_URL=https://arbitrum-mpp-transaction-preflight-production.up.railway.appCHAIN_ID=42161
bash
npm run client

The payer needs native USDC on Arbitrum One. It does not need ETH for the MPP payment; the merchant settles the signed EIP-3009 authorization.

MCP integration

The MCP server exposes check_arbitrum_transaction. It uses the caller's dedicated CLIENT_PRIVATE_KEY to pay the hosted MPP API, so each tool call produces API revenue instead of bypassing payment.

bash
npm run mcp

After the npm package is published, MCP hosts can run:

json
{  "mcpServers": {    "arbitrum-preflight": {      "command": "npx",      "args": ["-y", "arbitrum-mpp-transaction-preflight"],      "env": {        "CLIENT_PRIVATE_KEY": "0x...",        "SERVER_URL": "https://arbitrum-mpp-transaction-preflight-production.up.railway.app",        "CHAIN_ID": "42161"      }    }  }}

Use a dedicated low-value payer wallet. Never reuse a valuable wallet key.

Enable x402 and Bazaar

Production x402 settlement on Arbitrum uses Coinbase's CDP facilitator. Create a CDP project and add these Railway variables:

dotenv
ENABLE_X402=trueCDP_API_KEY_ID=...CDP_API_KEY_SECRET=...

The server then exposes POST /x402/v1/preflight with Bazaar discovery metadata. MPP remains available at POST /v1/preflight; the two payment channels share the same analysis engine and merchant address.

Development checks

bash
npm run typechecknpm run buildnpm pack --dry-run

Set ENABLE_FREE_DEMO=true only for local development to expose POST /demo/preflight without payment. Never enable it in production.

Publishing surfaces

The repository includes server.json and npm metadata for the official MCP Registry. Release order:

  1. deploy this version to Railway;
  2. publish arbitrum-mpp-transaction-preflight to npm;
  3. publish server.json with mcp-publisher;
  4. enable CDP x402 to become eligible for Bazaar indexing;
  5. submit the live MPP endpoint to the MPP services catalog.

Official Arbitrum MPP guide: https://docs.arbitrum.io/build-decentralized-apps/machine-payments-protocol

來源:README.md,提交 e3440ba

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v4.0.0最新Sep 16, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。

其他 Preflight 整合