io.github.baianomarceloeduardo-jpg/automaton-token-safety-mcp

Automaton Token Safety

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

2.0.2
Version
remote + npm
Transport
20
Tools

Security review

Review passed

Reviewed 1d ago.

  • tools: 20 tools scanned
  • metadata: scanned
  • packages: 1 checked

No findings.

Tools (20)

  • x402_conformance_check

    FREE, runs locally. Lint any x402 paid endpoint for protocol conformance: HTTP 402 challenge, x402Version, accepts[] (exact scheme), Base network and addresses, EIP-712 domain, and rejection of malformed, forged, expired, underpaid and wrong-recipient EIP-3009 payments. Returns verdict, grade and per-check results.

  • simulate_base_transaction

    FREE, runs locally against Base Mainnet RPC. Dry-run a transaction before sending it: eth_call + eth_estimateGas at the latest block. Predicts whether it will revert and decodes the reason (Error(string), Panic(uint256) codes, custom-error selector, or node rejection such as insufficient funds). Returns { ok, willRevert, revertReason, estimatedGas, returnData }.

  • token_scan

    PAID 0.001 USDC/call, or free trial (3/day/IP). Bytecode security scan of a Base token contract: honeypot opcodes, mint/blacklist/pause/tax capabilities, a risk score and a verdict. Read-only — no transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Exposed as `security_scan` on older clients.)

  • tx_simulate

    PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only buy/sell simulation of a Base token through the Uniswap V2 WETH pool: returns reverts, the MEASURED transfer tax and a honeypot verdict. No transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Not the same tool as simulate_base_transaction, which dry-runs arbitrary calldata for free.)

  • approval_risk

    PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only audit of the ERC-20 approvals an owner granted for a token: spender, allowance, contract vs EOA, verified flag, drainable amount and a drain-risk verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.

  • liquidity_risk

    PAID 0.01 USDC/call, or free trial (3/day/IP). One-block liquidity audit of a Base token: Uniswap V3 / Aerodrome pools, the USD needed to move the price 1/2/5/10%, holder concentration, LP burn evidence and explicit coverage gaps. On 402, pay the accepts[] terms then retry with the payment tx hash.

  • sentinel_latest

    PAID 0.001 USDC/call, or free trial (3/day/IP). Newest liquidity pools created on Base (Uniswap v3/v4, Aerodrome) with a bytecode risk score per new token. Filters are optional. On 402, pay the accepts[] terms then retry with the payment tx hash.

  • security_scan

    LEGACY NAME of token_scan — same route, same arguments, kept so clients written against this server keep working. PAID 0.001 USDC/call, or free trial (3/day/IP). Base token safety analysis: honeypot detection, mint traps, selfdestruct/delegatecall, proxy and tax risks from contract bytecode, with a risk score and signed verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.

  • attest

    Create a SIGNED, hash-chained, append-only attestation (verifiable proof-of-existence) for a payload. PAID: 0.05 USDC/call, or free trial (3/day/IP). On 402, pay the accepts[] terms then retry with the payment tx hash.

  • verify_attestation

    FREE. Verify a ledger entry by index or by data hash: recomputes hash, checks ECDSA signature and chain link.

  • attestation_pubkey

    FREE. Get the ECDSA P-256 public key (PEM) and keyId used to sign ledger entries.

  • read_ledger

    FREE. Read the attestation ledger (paginated).

  • oracle_base

    PAID 0.001 USDC/call. Get real-time Base L2 gas estimates and asset prices (ETH, USDC, cbBTC, AERO, VIRTUAL) with an ECDSA P-256 digital signature from the sovereign agent.

  • merkle_prove

    PAID 0.001 USDC/call. Generate a cryptographic Merkle inclusion proof for a list of items and target element.

  • merkle_verify

    FREE. Verify a cryptographic Merkle inclusion proof against a root.

  • sentiment_analysis

    PAID 0.001 USDC/call. Web3 token risk, security checks, and sentiment scoring with signed verdict.

  • hash_sha256

    PAID 0.001 USDC/call. SHA-256 hex of a string.

  • uuid

    PAID 0.001 USDC/call. Generate a UUIDv4.

  • pricing

    FREE. Full pricing terms, endpoints, and payment mechanics.

  • health

    FREE. Service liveness and version.