Token Honeypot & EVM Pre-Flight Audit MCP

io.github.ralf9090由 GitHub 帳號 ralf9090 發布v1.0.0更新於 Nov 12, 2026

Token honeypot detector, 360 rug-pull audit, EVM transaction simulator & OFAC compliance MCP.

發布方自己的服務:audit.domains - Domain Valuation

已驗證Streamable HTTP可網頁執行網頁搜尋與抓取金融安全與監控

概覽

AI 產生的概覽

遠端 MCP 伺服器,提供代幣安全檢測、DeFi 市場情報與 EVM 交易預檢,依次以 Base 上的 USDC 付費。

可以做什麼
  • 稽核代幣與網址的蜜罐、稅費、釣魚和提示注入風險,並篩查錢包的制裁與 AML 標記
  • 分析 DEX 訂單流、流動性、巨鯨持倉、DeFi 收益、永續資金費率、預測市場賠率與總體指標
  • 產生兌換與跨鏈橋 calldata,並在簽署前模擬 EVM 交易、Gas 與授權額度
  • 搜尋社群討論與學術論文,擷取網頁內容,查詢網域、GitHub 儲存庫與套件 CVE
  • 產生綜合盡職調查與 B2B 檔案,並可購買預付 API 通行證或測試 x402 付款結算
適用情境
適合在交易或轉帳前查核代幣與錢包、比較 DeFi 收益與市場訊號,或準備並模擬 EVM 交易的情況。也方便透過單一端點做社群、學術、網域與套件的快速調查。
執行需求
遠端 Streamable-HTTP 端點,不需本機安裝;文件另提供 Node.js 18+ 的 npx/stdio 方式。免費額度為每日兩次呼叫,不需帳號或金鑰;更高用量需 ak_live 預付通行證金鑰,或依次透過 Base 上的 x402 USDC 付款。
安裝前請注意
超出每日免費額度後,多數工具需支付 Base 上的 USDC,預付通行證也需付費購買。兌換報價工具會回傳可直接簽署的交易 calldata,簽署前應核對 calldata 與目標位址。關於代幣、錢包和網址的查詢會傳送給 GoPlus、DexScreener、LI.FI、ParaSwap 等第三方資料提供者。把通行證金鑰放在 URL 查詢參數中可能外洩到日誌。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Token Honeypot & EVM Pre-Flight Audit MCP,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.ralf9090%2Ftoken-honeypot-audit-mcp/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "token-honeypot-evm-pre-flight-audit": {
      "type": "http",
      "url": "https://agent-kiosk.vercel.app/mcp"
    }
  }
}

README

Token Honeypot Detector, Smart Contract Audit & AML MCP Server

[MCP Compatible] [Zero Dependencies] [Free Tier] [Unlimited Pass] [License: MIT]

Pre-flight 0x token honeypot & tax scanner, OFAC/sanctions wallet AML screening, DEX order-flow alpha, 3-in-1 token due diligence & executable Base swap calldata MCP.

Searching for a Token Honeypot MCP, Smart Contract Security Audit MCP, or Base DeFi Safety MCP server? token-honeypot-audit-mcp protects AI wallets and crypto researchers from rugpulls, hidden sell taxes, malicious URLs, and sanctioned addresses — while delivering live DexScreener order-flow alpha and executable DEX swap quotes.


Why Use token-honeypot-audit-mcp?

  • Honeypot, Tax & Drainer Scanner (security_audit) — Audits any 0x... contract on Base, Ethereum, Arbitrum, BSC, Polygon, or Optimism (GoPlus + DexScreener) OR scans web URLs for phishing/prompt-injection traps.
  • OFAC & Sanctions AML Check (compliance_check) — Screens wallet addresses and entities against sanctions & high-risk compliance lists before signing transactions.
  • DEX Order-Flow & Institutional Due Diligence (token_alpha, token_due_diligence) — Buy/sell pressure, liquidity depth, FDV velocity, plus a composite A–F investment grade combining on-chain security + DEX liquidity + social sentiment.
  • Free Executable DEX Swap Quotes (defi_swap_quote) — Generates live cross-chain/same-chain EVM swap calldata via Relay Instant Solver.
  • 2 Free Calls / Day Out of the Box — Works immediately with zero configuration and no API key required.
  • Instant Unlimited Upgrade — Need high-volume production calls? Grab an instant API key at https://agent-kiosk.vercel.app/buy ($1 Starter 7-Day Pass or $5 Pro 30-Day Pass) or pay per request natively via x402 (USDC on Base).

Option 1: Zero-Install Remote MCP URL (Fastest)

Connect directly via Streamable-HTTP MCP without installing anything locally:

  • Free Tier (2 Free Calls/Day, Zero Config):
    text
    https://agent-kiosk.vercel.app/mcp
  • Paid Unlimited URL (With Prepaid Pass Key):
    text
    https://agent-kiosk.vercel.app/mcp?api_key=ak_live_YOUR_KEY_HERE

Get an Instant API Key in 10 Seconds: https://agent-kiosk.vercel.app/buy

  • $1.00 USDC — 7-Day Starter Pass (Instant ak_live_... key)
  • $5.00 USDC — 30-Day Pro Pass (Full unmasked datasets across all endpoints)

Option 2: Local npx / Stdio Setup (Claude Desktop, Cursor, Codex)

This package is pure Node.js >= 18 with zero external npm dependencies, exposing only the 5 focused tools for this workflow so your LLM context window stays lean.

Claude Desktop (claude_desktop_config.json)

json
{  "mcpServers": {    "token-honeypot-audit-mcp": {      "command": "npx",      "args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],      "env": {        "AGENT_KIOSK_API_KEY": ""      }    }  }}

(Leave AGENT_KIOSK_API_KEY empty for 2 free calls/day, or paste your ak_live_... key from agent-kiosk.vercel.app/buy for unlimited access.)

Cursor (.cursor/mcp.json)

json
{  "mcpServers": {    "token-honeypot-audit-mcp": {      "command": "npx",      "args": ["-y", "github:ralf9090/token-honeypot-audit-mcp"],      "env": {        "AGENT_KIOSK_API_KEY": "ak_live_OPTIONAL_PASS_KEY"      }    }  }}

OpenAI Codex CLI (~/.codex/config.toml)

toml
[mcp_servers.token_honeypot_audit_mcp]command = "npx"args = ["-y", "github:ralf9090/token-honeypot-audit-mcp"]env = { AGENT_KIOSK_API_KEY = "" }

Run Directly via git clone + node index.js

bash
git clone https://github.com/ralf9090/token-honeypot-audit-mcp.gitcd token-honeypot-audit-mcpnode index.js

Included MCP Tools (5)

security_audit

Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).

ParameterTypeRequiredDescription
targetstringYes0x... token/contract address OR https://... URL to audit
chainbase | ethereum | bsc | arbitrum | polygon | optimismNoBlockchain network when target is a 0x address (default: 'base')
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

compliance_check

Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.

ParameterTypeRequiredDescription
addressstringYes0x... 40-hex EVM wallet or contract address to screen for AML/sanctions
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

token_alpha

Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.

ParameterTypeRequiredDescription
querystringYesToken symbol (e.g., 'AERO', 'PEPE', 'VIRTUAL') or contract address (0x...)
chainall | base | ethereum | solana | arbitrum | bscNoOptional chain filter (default: 'all')
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

token_due_diligence

Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).

ParameterTypeRequiredDescription
querystringYesToken symbol (e.g., 'AERO', 'VIRTUAL', 'PEPE') or 0x contract address
chainbase | ethereum | solana | arbitrum | bsc | allNoBlockchain network (default: 'base')
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

defi_swap_quote

Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.

ParameterTypeRequiredDescription
from_tokenstringYesSource token symbol (e.g., 'USDC', 'ETH', 'AERO') or 0x contract address
to_tokenstringYesDestination token symbol (e.g., 'ETH', 'USDC', 'AERO', 'cbBTC') or 0x address
amountstringNoAmount of from_token to swap (human-readable e.g. '10' or atomic units)
from_chainbase | ethereum | arbitrum | polygon | optimismNoSource blockchain network (default: 'base')
to_chainbase | ethereum | arbitrum | polygon | optimismNoDestination blockchain network (default: same as from_chain)
walletstringNoOptional 0x sender wallet address for transaction simulation
x_api_keystringNoOptional ak_live_... 30-day Prepaid API Pass key to unlock the full unmasked dataset

Example Prompts

  • "Audit 0x940181a94A35A4569E4529A3CDfB74e38FD98631 on Base for honeypot risk, buy/sell taxes, and mint permissions."
  • "Run a full 3-in-1 token_due_diligence report on VIRTUAL on Base and give me its safety grade."
  • "Check compliance_check on wallet 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 and quote a 100 USDC -> WETH swap on Base."

Pricing & Rate Limits

TierCostQuotaSetup
Free Trial$02 Free Calls / DayZero config — works out of the box
Starter Pass$1 USDC7 Days UnlimitedGet ak_live_... at agent-kiosk.vercel.app/buy
Pro Pass$5 USDC30 Days UnlimitedGet ak_live_... at agent-kiosk.vercel.app/buy
x402 Pay-Per-Call$0.008–$0.10Unlimited autonomousPass payment_signature (Base USDC EIP-3009)

License

MIT © ralf9090 — Powered by Agent Kiosk (Upgrade / Buy API Key).

來源:README.md,提交 89556d4

工具

24

maps_leads

Maps Leads

Find local businesses, companies, and places in any city worldwide. Extracts business name, phone number, website URL, address, opening hours, and GPS coordinates for lead generation and verification.

輸入參數limitquery必填locationx_api_keypayment_signature

web_extract

Web Extract

Extract clean, LLM-ready Markdown from any web URL while automatically scanning the page for hidden Prompt Injection traps targeting AI agents.

輸入參數url必填x_api_keymax_lengthpayment_signature

security_audit

Security Audit

Pre-flight security and scam radar for AI agents. Audits 0x smart contracts/tokens (honeypot check, buy/sell tax, mintable risk, DEX liquidity via GoPlus & DexScreener) or web URLs (phishing, wallet drainers, prompt injection).

輸入參數chaintarget必填x_api_keypayment_signature

token_alpha

Token Alpha

Real-time crypto & DeFi order-flow intelligence. Analyzes buy vs. sell transaction pressure, liquidity depth, volume velocity, FDV, and top DEX pools for any token ticker or contract address.

輸入參數chainquery必填x_api_keypayment_signature

domain_intel

Domain Intel

B2B company & domain infrastructure intelligence. Resolves DNS records (A, MX, TXT, NS), identifies email provider (Google Workspace, M365, etc.), detects SaaS tech stack from TXT verification records, queries RDAP registration dates, and discovers active subdomains.

輸入參數domain必填x_api_keypayment_signature

package_audit

Package Audit

Open-source package & CVE security scanner for coding agents. Checks npm, PyPI, or Rust crates against Google OSV.dev for known security vulnerabilities, deprecation status, and latest stable version.

輸入參數name必填versionecosystemx_api_keypayment_signature

wallet_profiler

Wallet Profiler

Multi-chain whale & wallet portfolio profiler across Base, Ethereum, Arbitrum, and Polygon. Returns live USDC and native ETH/POL balances, total outgoing transaction counts (nonce), wallet tier (Whale/Trader/Retail), and smart contract vs EOA detection.

輸入參數address必填x_api_keypayment_signature

prediction_markets

Prediction Markets

Query live prediction market odds & real-money implied probabilities (%) from Polymarket and Manifold Markets for any crypto, macro-economic, political, or technology event.

輸入參數limitquery必填x_api_keypayment_signature

defi_yields

Defi Yields

DeFi highest APY & yield radar powered by DeFiLlama. Finds top lending and liquidity pools for any token (USDC, ETH, USDT, WBTC) filtered by blockchain and minimum TVL.

輸入參數chainlimitsymbolx_api_keymin_tvl_usdpayment_signature

github_intel

Github Intel

GitHub repository & open-source competitive intelligence. Pass 'owner/repo' for deep repository metrics and latest releases, or a keyword topic to find the fastest-growing repositories.

輸入參數limitquery必填x_api_keypayment_signature

token_due_diligence

Token Due Diligence

Institutional 3-in-1 Token Due Diligence Report ($0.10 USDC). Combines GoPlus on-chain honeypot/tax security audit, DexScreener DEX order-flow alpha & liquidity depth, and live Reddit/HN social sentiment into a composite investment grade (A-F).

輸入參數chainquery必填x_api_keypayment_signature

b2b_company_dossier

B2b Company Dossier

Complete 4-in-1 B2B Sales & Competitive Intelligence Dossier ($0.10 USDC). Combines DNS/MX/SaaS tech stack infrastructure, clean website extraction, local business contact/phone leads, and live social mentions.

輸入參數domain必填companylocationx_api_keypayment_signature

whale_alpha_radar

Whale Alpha Radar

Complete Multi-Chain Whale Portfolio & DeFi Yield Optimizer Report ($0.10 USDC). Profiles any 0x wallet across 4 EVM chains (Base, Ethereum, Arbitrum, Polygon), matches idle USDC/ETH balances against top DeFiLlama yield pools, and calculates projected annual yield.

輸入參數address必填x_api_keypayment_signature

compliance_check

Compliance Check

Institutional AML, Sanctions (OFAC), Phishing, Mixer, and Malicious Counterparty Compliance Screening ($0.05 USDC). Screens any 0x EVM address against GoPlus Security (Base + Ethereum) and 4-chain RPC footprint before autonomous agents execute transfers.

輸入參數address必填x_api_keypayment_signature

defi_swap_quote

Defi Swap Quote

Executable DeFi Swap & Cross-Chain Bridge Action Calldata Builder ($0.05 USDC). Queries LI.FI and ParaSwap aggregators to compute the best DEX/Bridge route and returns ready-to-sign EVM transaction calldata (to, data, value, gasLimit) on Base, Ethereum, Arbitrum, Polygon, and Optimism.

輸入參數amountwalletto_chainto_token必填x_api_keyfrom_chainfrom_token必填payment_signature

evm_tx_simulator

Evm Tx Simulator

Pre-flight EVM Transaction Simulator, Gas Estimator, Revert Reason Decoder, ERC-20 Allowance Checker & EIP-1967 Proxy Detector ($0.005 USDC). Simulates any transaction via eth_call & eth_estimateGas across Base, Ethereum, Arbitrum, Optimism, and Polygon before signing.

輸入參數todatafromchaintokenvaluespendertx_hashx_api_keypayment_signature

perp_funding_arbitrage

Perp Funding Arbitrage

Real-time Cross-Exchange Perpetual Funding Rate Arbitrage, Annualized Basis Spread (APR), Open Interest & Crowded Positioning Radar ($0.008 USDC) across Hyperliquid and dYdX v4.

輸入參數limitsymbolx_api_keypayment_signature

tradfi_macro_radar

Tradfi Macro Radar

Global TradFi, Macro & DeFi Capital Flow Intelligence Radar ($0.008 USDC). Returns live S&P 500, Nasdaq, CBOE VIX Volatility, US Dollar Index (DXY), US 10Y Treasury Yield, Gold, WTI Crude Oil, Crypto Fear & Greed Index, BTC Dominance, and top DeFi chain TVL.

輸入參數focusx_api_keypayment_signature

kalshi_polymarket_arb

Kalshi Polymarket Arb

Unified Kalshi, Polymarket & Manifold Prediction Market Aggregator and Cross-Venue Probability Spread / Arbitrage Scanner ($0.015 USDC).

輸入參數limitquery必填x_api_keypayment_signature

llm_chat_completions

Llm Chat Completions

OpenAI-compatible LLM Chat Completions Gateway ($0.002 USDC/call). Drop-in replacement for /v1/chat/completions settled in Base USDC via x402 with zero account or API key required.

輸入參數modelpromptmessagesx_api_keypayment_signature

buy_prepaid_pass

Buy Prepaid Pass

Mint a 30-Day Prepaid API Key Pass (ak_live_...) for $5.00 USDC on Base via x402. Unlocks all 23 paid per-call Agent Kiosk REST & MCP intelligence tools for 30 days via the X-API-KEY header without per-call x402 signing (ideal for LangChain, n8n, Make.com, OpenAI Actions, and Python/JS bots).

輸入參數x_api_keyagent_namepayment_signature

x402_ping

X402 Ping

Ultra-low-cost ($0.001 USDC) x402 v2 & v1 wallet verification ping, payment settlement test, latency check, and round-trip echo endpoint on Base Mainnet.

輸入參數messagex_api_keypayment_signature

版本歷史

1
  1. v1.0.0最新Nov 12, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

其他 Audit 整合