mcpbeat Sign in

Automaton Token Safety MCP Server

by baianomarceloeduardo-jpg Your server? Claim it
answering

Automaton Token Safety is answering right now. Last checked 10 min ago. 51 installs a week from npm. It exposes 20 tools.

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 378 · avg 20 · -61% w/w
a month agotoday
Uptime history 19 days of history · worst day 98%
19 days agonow
100.0%
Uptime 24h
92 of 92 checks
20
Tools
read from the server
1068 ms
Response time
average over 24h
51
Installs / week
npm and PyPI

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 30 September 2026. No other catalogue keeps this.

30 Sep a tool changed version

What the code does

We have not read this server's code yet, 17 d ago · tools taken from the live server · rules ccca72095570

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

File ships in the package but is absent from the source [пакет] automaton-token-safety-mcp.js:1, [пакет] x402-value-mcp.js:1
этот файл ставится пользователю, но в репозитории его нет

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

run in your terminal
claude mcp add automaton-token-safety-mcp --transport http https://api.automaton-sovereign.workers.dev/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "automaton-token-safety-mcp": {
      "url": "https://api.automaton-sovereign.workers.dev/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.automaton-token-safety-mcp]
url = "https://api.automaton-sovereign.workers.dev/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "automaton-token-safety-mcp": {
      "url": "https://api.automaton-sovereign.workers.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "automaton-token-safety-mcp": {
      "url": "https://api.automaton-sovereign.workers.dev/mcp"
    }
  }
}

This one needs environment variables set before it will start: VALUE_API_BASE (Base URL of the Automaton Token Safety API the tools call.), AUTOMATON_ORIGIN_BASE (Origin URL for routes the edge defers with a use_origin answer (for example the free conformance checker). Optional; without it such a tool reports which variable to set.), AUTOMATON_MCP_PAYER_KEY (Private key of the wallet that pays for calls. The server only SIGNS an EIP-3009 authorisation; it never sends a transaction. Also required: ALLOW_OUTBOUND_SPEND=1, and this key is not loaded into the process without it. Never set this to the payee/treasury wallet: that is rejected.), ALLOW_OUTBOUND_SPEND (Set to 1 to permit this server to sign paid calls. Any other value (including absent) leaves every paid tool answering with the price only.), AUTOMATON_MCP_MAX_AMOUNT_UNITS (Per-call ceiling in USDC base units (6 decimals, so 10000 = 0.01 USDC). A requirement above it is refused before signing.), AUTOMATON_MCP_TOTAL_CAP_UNITS (Ceiling for the whole process lifetime, in USDC base units. Stops a runaway loop, not just a single expensive call.), MCP_HTTP_PORT (When set, serve Streamable HTTP on this port instead of stdio. Binds to 127.0.0.1 by default.). The author declared them in the registry entry; get the values from the project itself.

Available tools 20

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

merkle
merkle_prove
PAID 0.001 USDC/call. Generate a cryptographic Merkle inclusion proof for a list of items and target element.
merkle_verify
FREE. Verify a cryptographic Merkle inclusion proof against a root.
simulate
simulate_base_transaction
FREE, runs locally against Base Mainnet RPC. Dry-run a transaction before sending it: eth_call + eth_estimateGas at the latest block. Predicts whether it will revert and decodes the reason (Error(string), Panic(uint256) codes, custom-error selector, or node rejection such as insufficient funds). Returns { ok, willRevert, revertReason, estimatedGas, returnData }.
tx_simulate
PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only buy/sell simulation of a Base token through the Uniswap V2 WETH pool: returns reverts, the MEASURED transfer tax and a honeypot verdict. No transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Not the same tool as simulate_base_transaction, which dry-runs arbitrary calldata for free.)
approval
approval_risk
PAID 0.01 USDC/call, or free trial (3/day/IP). Read-only audit of the ERC-20 approvals an owner granted for a token: spender, allowance, contract vs EOA, verified flag, drainable amount and a drain-risk verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.
attest
attest
Create a SIGNED, hash-chained, append-only attestation (verifiable proof-of-existence) for a payload. PAID: 0.05 USDC/call, or free trial (3/day/IP). On 402, pay the accepts[] terms then retry with the payment tx hash.
attestation
attestation_pubkey
FREE. Get the ECDSA P-256 public key (PEM) and keyId used to sign ledger entries.
hash
hash_sha256
PAID 0.001 USDC/call. SHA-256 hex of a string.
health
health
FREE. Service liveness and version.
ledger
read_ledger
FREE. Read the attestation ledger (paginated).
liquidity
liquidity_risk
PAID 0.01 USDC/call, or free trial (3/day/IP). One-block liquidity audit of a Base token: Uniswap V3 / Aerodrome pools, the USD needed to move the price 1/2/5/10%, holder concentration, LP burn evidence and explicit coverage gaps. On 402, pay the accepts[] terms then retry with the payment tx hash.
oracle
oracle_base
PAID 0.001 USDC/call. Get real-time Base L2 gas estimates and asset prices (ETH, USDC, cbBTC, AERO, VIRTUAL) with an ECDSA P-256 digital signature from the sovereign agent.
pricing
pricing
FREE. Full pricing terms, endpoints, and payment mechanics.
security
security_scan
LEGACY NAME of token_scan — same route, same arguments, kept so clients written against this server keep working. PAID 0.001 USDC/call, or free trial (3/day/IP). Base token safety analysis: honeypot detection, mint traps, selfdestruct/delegatecall, proxy and tax risks from contract bytecode, with a risk score and signed verdict. On 402, pay the accepts[] terms then retry with the payment tx hash.
sentiment
sentiment_analysis
PAID 0.001 USDC/call. Web3 token risk, security checks, and sentiment scoring with signed verdict.
sentinel
sentinel_latest
PAID 0.001 USDC/call, or free trial (3/day/IP). Newest liquidity pools created on Base (Uniswap v3/v4, Aerodrome) with a bytecode risk score per new token. Filters are optional. On 402, pay the accepts[] terms then retry with the payment tx hash.
token
token_scan
PAID 0.001 USDC/call, or free trial (3/day/IP). Bytecode security scan of a Base token contract: honeypot opcodes, mint/blacklist/pause/tax capabilities, a risk score and a verdict. Read-only — no transaction is sent. On 402, pay the accepts[] terms then retry with the payment tx hash. (Exposed as `security_scan` on older clients.)
uuid
uuid
PAID 0.001 USDC/call. Generate a UUIDv4.
verify
verify_attestation
FREE. Verify a ledger entry by index or by data hash: recomputes hash, checks ECDSA signature and chain link.
x402
x402_conformance_check
FREE, runs locally. Lint any x402 paid endpoint for protocol conformance: HTTP 402 challenge, x402Version, accepts[] (exact scheme), Base network and addresses, EIP-712 domain, and rejection of malformed, forged, expired, underpaid and wrong-recipient EIP-3009 payments. Returns verdict, grade and per-check results.

Endpoints

URLTransportStateLatencyChecked
https://api.automaton-sovereign.workers.dev/mcp streamable-http answering 1118 ms 10 min ago

Alternatives to Automaton Token Safety

same job, measured the same way
Vetagent
by vetagent

Pre-trade safety check for AI agents: honeypot, tax, liquidity and rug risk before you buy.

3 tools answering
Onchain Safety MCP
by aitools420

Token-safety for AI agents: rug/honeypot verdict + score across PulseChain, Monad, Base & BSC

65 installs/wk local only
Hive Swap
by srotzin

Cross-chain token swaps for autonomous agents on Base L2 and partner rails

1 tools answering
Agentforge
by acarchidi

DeFi safety layer for AI agents: wallet safety, token risk, tx decode/simulate. 20 tools.

20 tools answering
Defi Guard MCP
by iinniitt

DeFi safety checks on Base before you sign: honeypot, owner-power scan, approval risk, Aave health.

34 installs/wk local only
RugShield 402
by ak10082247-max

Real-time token contract safety scanner and honeypot auditor via x402 on Base.

6 tools answering
Token risk x402
by ogenalabs

Pre-trade token safety checks for AI agents on Solana and Base. x402 USDC per call, no key.

2 tools answering
MiniURL
by addychang

OAuth 2.1 short-link tools for AI agents with scoped tokens, approvals, audit logs, and revocation.

24 tools answering

Automaton Token Safety — questions

Answers built from our own checks of this server.

What can Automaton Token Safety do?
It exposes 20 tools, read directly from the server on our last check. Among them: approval_risk, attest, attestation_pubkey, hash_sha256, health, liquidity_risk and 14 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
What is Automaton Token Safety mostly used for?
Its tools cluster around simulate and merkle. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is Automaton Token Safety working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 1068 ms. The bar chart above shows every period we have measured.
Is Automaton Token Safety still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect Automaton Token Safety?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Automaton Token Safety need an API key?
No. Automaton Token Safety completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 20 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Automaton Token Safety?
It answers our handshake in 1068 ms on average, which is faster than 7% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.
How many people use Automaton Token Safety?
The npm package @celorodrigues/token-safety-mcp was installed 51 times in the last week. Week over week that is -61%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.