FabTally Safe
Provides crypto safety verification tools for the Ethereum blockchain, including token safety checks, signature decoding, approval scanning, and transaction simulation.
Provides crypto safety verification tools for the Optimism blockchain, including token safety checks, signature decoding, approval scanning, and transaction simulation.
Provides crypto safety verification tools for the Polygon blockchain, including token safety checks, signature decoding, approval scanning, and transaction simulation.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@FabTally SafeCheck honeypot risk for token 0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
FabTally Safe — MCP server
Read-only crypto safety + "what am I signing" verification for AI agents and wallets. Fronts the FabTally Safe HTTP API (https://safe.fabtally.com).
Read-only. Never holds, moves, signs for, or broadcasts funds. No private key. Outputs are descriptive facts from public sources — not financial advice.
8 tools: 4 free teasers + 4 paid (x402, USDC on Base).
Tools
Tool | Tier | What it does |
| paid $0.02 | Multi-chain token honeypot/rug check — aggregates GoPlus + honeypot.is into a 0-100 risk score with explainable reasons. |
| paid $0.01 | "What am I signing" — decode EIP-712 / Permit / Permit2 / Seaport typed-data into plain English + risk flags (unlimited approval, malicious spender, expiry, NFT-drain). |
| paid $0.01 | Wallet approval-risk scan ranked by exposure + address-poisoning "revoke bait" detection + the revoke calldata you execute yourself. |
| paid $0.02 | Keyless pre-sign transaction analysis: eth_call revert check + static delta prediction + risk flags. |
| free | Real teaser results, no wallet. |
Chains: ethereum, base, bsc, polygon, arbitrum, optimism (honeypot.is signals on ethereum/base/bsc).
Related MCP server: aegis-defi
Payment
Paid tools use x402 (USDC on Base, eip155:8453). Call a paid tool with no
x_payment to receive the decoded 402 challenge (price, network, asset, payTo);
build an x402 authorization and call again with the token in x_payment. Humans
can instead prepay by card and use an X-FabTally-Key credit header on the HTTP API.
Transports
stdio (default):
node index.js— for Claude Desktop and local MCP clients.streamable-http:
MCP_HTTP_PORT=8113 node http.js— hosted athttps://safe.fabtally.com/mcp.
Config
FABTALLY_SAFE_BASE— API base (defaulthttps://safe.fabtally.com).
Operator: Sunstone Soft · https://fabtally.com · Not financial advice · read-only.
Available Tools
8 toolsapprovalsWallet approval-risk scan + revoke calldata (paid $0.01)AInspect
PAID $0.01 (x402, USDC on Base). Scan a wallet's ERC-20/721 approvals ranked by exposure; flags unlimited amounts, unverified/known-malicious spenders, and address-poisoning 'fake-approval revoke bait'; returns the exact revoke calldata you execute YOURSELF (never executed/broadcast by us). Without payment returns the x402 challenge; pass x_payment. Free teaser: approvals_free.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Chain: ethereum | base | bsc | polygon | arbitrum | optimism. | |
| address | Yes | 0x wallet address to scan. | |
| x_payment | No | x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden and does so well: it discloses payment requirements (x402, USDC on Base), the 402 challenge response when unpaid, the fact that it never broadcasts calldata, and security caveats like 'fake-approval revoke bait'. This is exceptionally transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense yet compact—three sentences covering payment, functionality, flags, return value, and security. Each sentence adds distinct value, front-loaded with the paid cost and x402 context. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no annotations, the description is thorough: it covers what the tool scans, what it flags, what it returns (revoke calldata), execution responsibility, payment flow, and free alternative. It's sufficiently complete for an agent to use correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description adds minimal new parameter semantics beyond the schema—'pass x_payment' restates what the schema already explains. No additional insight on address/chain formats is provided.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it scans wallet ERC-20/721 approvals, ranks them by exposure, flags risky spenders, and returns revoke calldata. It explicitly names the free sibling 'approvals_free' for comparison, distinguishing the paid version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides clear payment context ('PAID $0.01', x402 mechanics) and points to 'approvals_free' as an alternative. It doesn't explicitly exclude other sibling tools like token_safety/simulate, but the paid/free distinction and execution guidance ('execute YOURSELF') give solid contextual usage rules.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
approvals_freeApprovals — counts + top-3 risks (FREE)AInspect
FREE. Approval counts + top-3 riskiest spenders for {address, chain}. Real result, no wallet. Upgrade to approvals for EVERY approval ranked + revoke calldata.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Chain: ethereum | base | bsc | polygon | arbitrum | optimism. | |
| address | Yes | 0x wallet address to scan. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden. It discloses that the tool is free, returns a real result, and requires no wallet, which partly conveys its non-destructive nature. However, it does not explain limitations such as data freshness, error behaviors, or why a wallet is not needed. This is basic but not exhaustive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise: three short sentences, with the 'FREE' tag front-loaded. Each sentence serves a purpose: stating the output, clarifying the no-wallet behavior, and offering an upgrade path. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity and lack of output schema, the description provides adequate context: what the tool returns (counts and top-3 risks), the fact it is free, and the upgrade option. It does not specify the exact result structure, but for a quick-risk tool this is sufficient. It could be slightly more detailed about the output shape.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already covers both parameters fully (address and chain). The description merely references {address, chain} without adding any additional meaning, format details, or usage nuances beyond the schema. Thus, it meets the baseline but adds no extra value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: providing approval counts and top-3 riskiest spenders for a given address and chain. It distinguishes itself from the sibling 'approvals' tool by explicitly noting the free tier offers limited data (top-3 risks) versus the full ranking and revoke calldata.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use this tool: for a free, quick risk overview without wallet connection. It also points to the upgrade path to 'approvals' for more detailed results. However, it does not contrast with other free sibling tools like 'token_safety_free', so the guidance is not fully explicit about alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
decode_signatureDecode 'what am I signing' EIP-712 signature (paid $0.01)AInspect
PAID $0.01 (x402, USDC on Base). Decode an off-chain EIP-712 typed-data signature (Permit / Permit2 / Seaport / generic) into plain English with risk flags: unlimited approval, unknown/known-malicious spender, never-expiring or already-expired deadlines, zero-consideration NFT-drain orders. Off-chain signatures are the top wallet-drainer vector. Pure offline decode — never signs/broadcasts. Without payment returns the x402 challenge; pass x_payment. Free teaser: decode_signature_free.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Optional chain override (else read from domain.chainId). | |
| x_payment | No | x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. | |
| typed_data | Yes | EIP-712 typed data object: {domain, types, primaryType, message}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it excels. It discloses that this is a PAID tool ($0.01, x402/USDC on Base), explains the payment/response flow, and explicitly states 'Pure offline decode — never signs/broadcasts', which is critical safety information. It also indicates what happens without payment (returns challenge), giving the agent a clear behavioral model.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but each sentence provides distinct value: payment notice, decode functionality with risk flags, context on wallet-drainers, safety guarantee, payment flow, and free alternative. It is front-loaded with the most critical pricing/payment information and avoids fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite lacking an output schema, the description adequately covers the return behavior (plain English with risk flags, challenge vs real result). It provides enough context for an agent to understand the tool's role in wallet-drainer defense, its offline nature, and the payment mechanism, making the description self-sufficient for a tool of this complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds meaning beyond the schema by explaining the payment workflow (x_payment forwarded as X-PAYMENT header, omitted to get price challenge) and how chain relates to domain.chainId (override semantics). It clarifies why typed_data is required and how it is used, exceeding the schema's bare property descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Decode') and clearly specifies the resource (off-chain EIP-712 typed-data signatures) and the output (plain English with risk flags). It lists concrete signature types (Permit, Permit2, Seaport, generic) and enumerates the risk flags, making the tool's function unmistakable and distinct from sibling tools like decode_signature_free.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides operational guidance: it explains the payment flow (without payment returns an x402 challenge; pass x_payment to get the real result) and points to decode_signature_free as a free alternative. It implies the tool is for paid/production use and the free version for teasers, but it does not explicitly contrast with siblings like approvals or simulate beyond stating its offline nature.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
decode_signature_freeSignature decode — type + summary + risk level (FREE)AInspect
FREE. Type + plain-English summary + risk level for an EIP-712 typed_data. Real result, no wallet. Upgrade to decode_signature for the full field-by-field decode + all risk flags + malicious-spender screening.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | Optional chain override (else read from domain.chainId). | |
| typed_data | Yes | EIP-712 typed data object: {domain, types, primaryType, message}. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Since no annotations are provided, the description must carry the full burden. It states 'Real result, no wallet' which implies a live decode without side effects, and mentions it's a free version with limited scope. However, it does not disclose output format, error behavior, or any API key/auth requirements, so it only partially covers behavioral transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four short sentences, each earning its place: 'FREE' states the cost, the core function is front-loaded, 'Real result, no wallet' adds behavioral context, and the upgrade path is clearly indicated. No fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a simple input schema (one required object, one optional string) and no output schema, the description explains the key return elements (type, summary, risk level) and the distinction from the full version. It is sufficient for an agent to understand the tool's purpose and invocation, though it stops short of describing the output structure in detail.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (both 'chain' and 'typed_data' have descriptions in the schema). The description itself adds no parameter-level detail beyond what the schema already states, so it meets the baseline for high schema coverage without providing extra value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Type + plain-English summary + risk level for an EIP-712 typed_data.' It uses a specific resource (EIP-712 typed data) and distinguishes itself from the sibling tool decode_signature by being the free, summary-only version. The title also reinforces this.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit usage guidance is provided: it's FREE, produces a real result without a wallet, and the description directly recommends 'Upgrade to decode_signature' when full field-by-field decoding is needed. This tells the agent when to use this tool versus the alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simulateKeyless pre-sign transaction simulation (paid $0.02)AInspect
PAID $0.02 (x402, USDC on Base). Keyless pre-sign analysis of {chain, from?, to, data, value?}: public-RPC eth_call revert check + static calldata decode predicting approval/transfer deltas + risk flags (unlimited approval, approval-for-all, reverts). Honest keyless limitation stated in the response (no full fork trace). Without payment returns the x402 challenge; pass x_payment. Free teaser: simulate_free.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | 0x target contract/recipient. | |
| data | No | 0x calldata (omit for a plain value transfer). | |
| from | No | 0x sender (optional but improves accuracy). | |
| chain | Yes | Chain: ethereum | base | bsc | polygon | arbitrum | optimism. | |
| value | No | Value in wei (optional). | |
| x_payment | No | x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully discloses behavioral traits: it is paid, keyless (with the limitation 'no full fork trace'), uses public RPC, performs static decode, flags risks, and returns a 402 challenge without payment. This is highly transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is moderately sized but extraordinarily dense, covering cost, function, limitations, payment flow, and free alternative in about four sentences. It could be better structured with bullets, but every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (paid, with payment flow and keyless limitation) and lack of output schema/annotations, the description covers the critical points: payment behavior, what the tool checks, and its limitation. It omits error handling or rate limits, but those are not essential for basic selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all 6 parameters. The description lists the parameter set ({chain, from?, to, data, value?}) and mentions x_payment, but generally repeats schema information without adding new meaning beyond the overall purpose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Keyless pre-sign analysis' with revert check, calldata decode, and risk flags. It also distinguishes itself from the sibling tool simulate_free by pointing to it as a free teaser, clarifying the paid nature.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides practical usage guidance: it tells users that without payment they get an x402 challenge, and to pass x_payment for real results. It also mentions simulate_free for a free alternative, though it does not explicitly exclude other sibling tools for different use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simulate_freeSimulate — method + revert + risk level (FREE)AInspect
FREE. Method + revert flag + risk level + predicted effect types for a transaction. Real result, no wallet. Upgrade to simulate for the full predicted deltas + all risk flags.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | 0x target contract/recipient. | |
| data | No | 0x calldata (omit for a plain value transfer). | |
| from | No | 0x sender (optional but improves accuracy). | |
| chain | Yes | Chain: ethereum | base | bsc | polygon | arbitrum | optimism. | |
| value | No | Value in wei (optional). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of behavioral disclosure. It discloses that it produces a 'real result' and requires 'no wallet', which is useful, but it does not state whether the operation is read-only, what 'risk level' means, or any limitations like rate limits or API key requirements. It adds some context but leaves notable gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with 'FREE', and immediately states the core outputs. It avoids redundancy, clearly separates the free vs. full offerings, and every phrase adds value. It is a model of conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has 5 parameters and no output schema, and the description mentions the output categories but not their structure or possible values. It is adequate for a simple free simulation tool, yet leaves the agent uncertain about the exact response format and edge cases. Given the complexity, a bit more detail would be expected.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description does not add parameter-specific detail beyond what is already in the schema, but it does contextualize the parameters by listing the output types they influence (method, revert, risk level, effect types). No meaningful enhancement is provided.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as a simulation service that returns method, revert flag, risk level, and predicted effect types for a transaction. It distinguishes itself from the sibling 'simulate' tool by explicitly framing this as the free tier and naming the upgrade path.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage by contrasting with the paid 'simulate' tool: the free version provides method, revert, risk level, and predicted effect types, while the full version adds 'predicted deltas + all risk flags'. This gives an explicit alternative, though it does not detail when to choose one over the other beyond feature comparison.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
token_safetyToken honeypot / rug safety check (paid $0.02)AInspect
PAID $0.02 (x402, USDC on Base). Multi-chain token honeypot/rug check aggregating GoPlus token-security + honeypot.is buy/sell-tax simulation into a normalized 0-100 risk score with explainable reasons: honeypot/can't-sell, buy/sell tax, mint/blacklist/pausable/ownership privileges, top-holder concentration, LP-lock, contract verified/bytecode. Descriptive facts only — NOT a buy/sell signal. Without payment returns the x402 challenge; pass x_payment to settle. Free teaser: token_safety_free.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Chain: ethereum | base | bsc | polygon | arbitrum | optimism. | |
| address | Yes | 0x token contract address. | |
| x_payment | No | x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It transparently discloses the paid nature ($0.02, x402 on Base), the challenge-and-settle behavior, the output type (normalized risk score with reasons), and a caveat that it is descriptive only, not a signal. It does not cover failure modes or rate limits, but given the complexity, this is solid disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: cost/payment, functionality, output details, caveat, and free alternative are all covered. It is front-loaded with the most important fact (PAID $0.02) and uses a structured list of risk factors. Slightly long but appropriately so for a multi-feature paid tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (paid, multi-chain, aggregated data source, no output schema), the description covers the key aspects: what it does, what it costs, how payment works, what it returns, and its limitations. It does not specify the exact response format, but that is not required since no output schema is provided and the risk score description gives adequate expectations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds minimal extra meaning to the parameters themselves (address/chain are obvious), though it does contextualize x_payment by explaining the 402 challenge behavior. This does not significantly raise the score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: a multi-chain token honeypot/rug check aggregating GoPlus and honeypot.is into a 0-100 risk score with explainable reasons. It uses a specific verb ('check') and resource, and distinguishes from the sibling 'token_safety_free' by noting it is the paid version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: it is a paid tool, notes the free teaser alternative, and explains the payment flow ('Without payment returns the x402 challenge; pass x_payment to settle'). It also warns that it is not a buy/sell signal. However, it does not explicitly exclude other sibling tools (e.g., simulate, approvals) or provide comparison-based guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
token_safety_freeToken safety — score band + top-line flags (FREE)AInspect
FREE. Score band + top-line honeypot/tax/privilege flags for a token {address, chain}. Real result, no wallet. Upgrade to token_safety for the full numeric breakdown.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | Chain: ethereum | base | bsc | polygon | arbitrum | optimism. | |
| address | Yes | 0x token contract address. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, but the description states that this tool returns a real result without requiring a wallet, which sets expectations about side-effect-free usage. It describes the output as a score band plus honeypot/tax/privilege flags, giving a clear behavioral picture. It doesn't disclose rate limits or data freshness, but for a simple read-only query this is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two compact sentences, front-loaded with 'FREE' and immediately conveying purpose, key result fields, and the upgrade path. Every clause adds value, and there is no fluff or repetition of schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has only two required parameters and no output schema, so the description carries the burden of explaining the return value. It does so at a high level (score band plus three flag categories) and directs users to token_safety for more detail, which is sufficient for a free-tier preview. It could be more precise about the exact flag values or limitations, but for the tool's simple scope it is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Both parameters (address, chain) are fully described in the schema with examples and enum-like chain list, so schema coverage is 100%. The description references {address, chain} but adds no additional parameter-specific semantics beyond what the schema already documents. Therefore a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly identifies the tool as a free token safety check that returns a score band and top-line flags for honeypot/tax/privilege risks, specifying the required inputs. It distinguishes itself from the sibling token_safety by explicitly stating it is the free tier, with the full version offering a numeric breakdown.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description indicates this is the free tier for quick safety flags, and explicitly points to token_safety for the full numeric breakdown, providing a clear upgrade path. It also states 'Real result, no wallet,' which clarifies that no wallet connection is needed. However, it doesn't enumerate specific scenarios where free vs paid should be chosen beyond the breakdown detail.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v1.0.0- First observed
approvals - First observed
approvals_free - First observed
decode_signature - First observed
decode_signature_free - First observed
simulate - First observed
simulate_free - First observed
token_safety - First observed
token_safety_free
TDQS
The four core domains (token safety, signature decode, approvals, simulate) are distinct, but each has a paid and free pair with overlapping purpose. The descriptions clarify that free versions are teasers, but agents may still struggle to pick between them based on the level of detail needed.
All names use snake_case and the _free suffix is consistent, but base names mix grammatical patterns: token_safety (noun_noun), decode_signature (verb_noun), approvals (plural noun), and simulate (bare verb). No uniform verb_noun convention is present.
Eight tools is within the well-scoped 3-15 range, but since the set is really four features each with a paid and free variant, the count feels slightly inflated. Still, the free teasers provide a useful way to test functionality without payment.
The server covers token risk, signature decoding, approval scanning, and transaction simulation, forming a solid wallet-safety toolkit. Minor gaps exist (e.g., no address profiling or historical trend analysis), but core workflows are covered.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
DeFi safety layer for AI agents: wallet safety, token risk, tx decode/simulate. 20 tools.
Email safety MCP server. Detects phishing, prompt injection, CEO fraud for AI agents.
Crypto market intelligence, token rug-checks, and wallet verification in one MCP server.
Free token-safety scans + paid x402 verdicts, signals, radar & EVM swap quotes for AI agents.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceMCP server for real-time Solana token risk analysis. Cross-references RugCheck.xyz, DexScreener, and GoPlus Security to generate three-layer reports: machine verdict → LLM analysis → raw on-chain evidence. Live on Solana mainnet with USDC micropayments ($0.02/audit). Give any AI agent the ability to check if a token is safe before trading.2MIT
- AlicenseAqualityDmaintenanceSafety layer for autonomous DeFi agents. Scans contracts for exploit patterns, simulates transactions, blocks honeypots.4141MIT
- AlicenseAqualityDmaintenanceReal-time DeFi analytics MCP server for AI agents. Provides token risk analysis, yield scanning, and wallet exposure checking across Base, Ethereum, and Arbitrum.3141MIT
- AlicenseNot gradedqualityCmaintenanceMCP server that provides AI agents with crypto token safety checks (honeypot, liquidity, rug risk) and alpha signals (smart money buys, fresh rug radar) across PulseChain, Monad, Base, and BSC.61MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/zvmzaretsky/crypto-safety-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server