mcpbeat Sign in

presign-guard MCP Server

answering

presign-guard is answering right now. Last checked 4 min ago. It exposes 8 tools. Last commit 15 Oct 2026.

Safe to sign? EVM, Solana, XRPL, Algorand txs, permits, tokens; OFAC wallet screen: green/orange/red

Uptime history 22 days of history · worst day 99%
22 days agonow
100.0%
Uptime 24h
184 of 184 checks
8
Tools
read from the server
308 ms
Response time
average over 24h
1
Stars
last commit 15 Oct 2026

What changed 49

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 26 September 2026. No other catalogue keeps this.

15 Oct a tool changed the parameters it asks for wallet_approvals
15 Oct a tool description was rewritten wallet_approvals
11 Oct 5 tools changed the parameters they ask for14 times that day presign_check, presign_check_explain, presign_quick_check and 2 more
11 Oct 4 tool descriptions were rewritten5 times that day presign_check, presign_check_explain, presign_quick_check and 1 more
11 Oct a tool changed version2 times that day
11 Oct a tool appeared screen_wallet
10 Oct 3 tools changed the parameters they ask for9 times that day presign_check, presign_check_explain, presign_quick_check
7 Oct 3 tools changed the parameters they ask for presign_check, presign_check_explain, presign_quick_check
7 Oct 2 tool descriptions were rewritten presign_check, presign_quick_check
7 Oct a tool changed version2 times that day
and 27 more, back to 26 September 2026

What the code does

We read the source, 23 h ago · tools taken from the live server · rules ccca72095570

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a dangerous call presign_quick_check.method → src/credits.js:114, presign_quick_check.method → src/credits.js:119, presign_check_explain.method → src/credits.js:114 и ещё 3
      const r = Number(await client.eval(TAKE, { keys: [k(hash)], arguments: [String(n)] }));
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command media/explainer/build.py:29
    info = subprocess.run([ffmpeg, "-i", path], capture_output=True, text=True).stderr
Builds a file path from a variable media/explainer/build.py:59, media/explainer/tts.py:81
        inputs += ["-i", os.path.join(out, "audio", f"{seg['id']}.wav")]
Executes code built at runtime src/credits.js:114
      const r = Number(await client.eval(TAKE, { keys: [k(hash)], arguments: [String(n)] }));
Page executes code built at runtime public/sign-receipt-key.html:75
      $("who").innerHTML = account.toLowerCase() === AUTHORITY.toLowerCase()

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 4 min ago.

run in your terminal
claude mcp add presign-guard --transport http https://presign-guard.onrender.com/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "presign-guard": {
      "url": "https://presign-guard.onrender.com/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.presign-guard]
url = "https://presign-guard.onrender.com/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "presign-guard": {
      "url": "https://presign-guard.onrender.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "presign-guard": {
      "url": "https://presign-guard.onrender.com/mcp"
    }
  }
}

This server publishes 1 more address. The block above uses the one we reach during checks; the full list is under Endpoints below, and the author may intend a particular one for your client.

Available tools 8

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

presign
presign_check
Paid ($0.01 USDC via x402 on Base or Solana): call this before you sign. Send the transaction, token approval or EIP-712 signature (Permit, Permit2, EIP-3009 x402 payment, Seaport) your agent is about to sign; get back green, orange or red with reason codes: who gets access, whether the spender or recipient is flagged, sanctioned (OFAC SDN) or unverified, unlimited allowances, and the token itself (honeypot, fake look-alike, high tax). On Solana (type solana, the base64 wire transaction): every instruction decoded and the transaction simulated (token account takeovers, System Assign, unlimited delegates, durable nonces, hidden owner or delegate changes). On the XRP Ledger (type xrpl, the unsigned tx JSON): account takeovers (SetRegularKey, SignerListSet, disabling the master key), fake RLUSD, partial payments, missing destination tags, trust-line and issuer risks, and DEX offers far below market. On Algorand (type algorand, base64 msgpack transaction or group in transactions): rekeys, closing the account or an asset to someone else, clawbacks, fake USDC, app update/delete/clear, simulated. Only proceed on green; on orange ask your user; never sign on red. Same as POST /v1/check. The answer carries a signed receipt (EIP-191, bound to your arguments) that proves later which verdict you got.
presign_check_explain
Paid ($0.03 USDC via x402 on Base or Solana): the same verdict and reason codes as presign_check, plus a 3 to 5 sentence plain-language explanation a person can read before approving (lang en or nl). Same as POST /v1/check/explain. The answer carries a signed receipt (EIP-191, bound to your arguments) that proves later which verdict you got.
presign_quick_check
Free: the green/orange/red verdict only, for a transaction, token approval, EIP-712 signature, XRP Ledger transaction (type xrpl) or Algorand transaction (type algorand) your agent is about to sign. Limited to 10 calls per hour. For the reason codes and details use presign_check ($0.01); for a plain-language explanation presign_check_explain ($0.03).
token
token_quick_verdict
Free: the green/orange/red verdict and grade only, for a Solana or EVM token your agent is about to buy, hold or accept. Limited to 10 free calls per hour (shared with presign_quick_check). For the reasons, one-line summary and market data use token_verdict ($0.01).
token_verdict
Paid ($0.01 USDC via x402 on Base or Solana): call this before your agent buys, holds or accepts a token. Send the chain (solana, base, ethereum, arbitrum, optimism, polygon, bsc, xrpl, algorand) and the token address, mint, CURRENCY.rIssuer or Algorand asset id; get back green/orange/red, a grade (SAFE, CAUTION, RISKY, AVOID), reason codes (mint or freeze authority still active, honeypot, tax or transfer fee, LP not locked, low liquidity, new token, concentrated holders, rugged), a one-line summary, and market data (price, liquidity, market cap, 24h volume, age). Same as GET /v1/token. The answer carries a signed receipt (EIP-191, bound to your arguments) that proves later which verdict you got.
feedback
feedback
Report a bug, a missing feature or anything else about this service, in a structured way. Free. A person reads every report; nothing is run or changed automatically.
screen
screen_wallet
Paid ($0.01 USDC via x402 on Base or Solana): call this before your agent pays an address, or before accepting money from one. Send any chain's wallet address (EVM 0x..., Solana, Tron, Bitcoin, XRP Ledger, Algorand, or another currency OFAC lists). Get back green/orange/red: red SANCTIONED_ADDRESS with the SDN entry (name, programs, currency) when the address is on the OFAC SDN list, red or orange when GoPlus reports theft, phishing, laundering or mixer use (EVM). Never pay or accept funds on red. The answer carries a signed receipt (EIP-191, bound to your arguments) that proves later which verdict you got.
wallet
wallet_approvals
Paid ($0.02 USDC via x402 on Base or Solana): audit the open token approvals of a wallet on an EVM chain (base, ethereum, arbitrum, optimism, polygon, bsc) or on Solana, for example your agent's own wallet as a periodic check. Get back green/orange/red, a grade, a one-line summary and every approval with its spender. EVM, every ERC-20 allowance: flagged malicious (red), a plain wallet, on a doubt list, an unverified contract or an unlimited allowance to a spender not on the GoPlus trust list (orange), with a revoke.cash link. Solana, every SPL token delegation (Approve): a delegate on the OFAC SDN list (red), a delegate that is a plain wallet or an unlimited delegation (orange), with the token account to revoke on; Token-2022 tokens with a permanent delegate are listed too. NFT approvals are not covered. Same as GET /v1/approvals. The answer carries a signed receipt (EIP-191, bound to your arguments) that proves later which verdict you got.

Endpoints

URLTransportStateLatencyChecked
https://presign-guard.onrender.com/mcp streamable-http answering 239 ms 4 min ago
https://presign-guard.fizzl.eu/mcp streamable-http answering 280 ms 4 min ago

Alternatives to presign-guard

same job, measured the same way
presign-guard wallet
by fizzl13

Agent wallet with limits: pays x402/MPP on Base, Solana, Tempo, XRPL and Algorand; phone approval.

2 390 installs/wk local only
Vino & Views
by oriondrayke

Free reports, EVM/Solana token payment links and capped zero-fee EVM USDC escrow. Wallet signatures.

23 tools answering
O
Obol
by fly-obol-x402

Pre-trade safety verdicts for agents: token rug/honeypot, calldata guard, wallet risk — signed x402.

3 tools answering
MAD Synapse · Wallets & Risk
by maddegen-agent

Pre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.

15 tools answering
Obol
by halfkey

Solana agent gateway via x402. Wallet, token, DeFi, and swap tools. Pay per request.

31 installs/wk local only
RugRadar
by jimmybr-pdx

Rug-pull, token-safety and honeypot risk checks for Solana and EVM tokens. $0.01 per call.

3 tools answering
Infinihash Kyt MCP
by infinihash

Screen crypto wallets vs OFAC SDN + threat intel; pre-payment checks, signed receipts; SAR drafts

424 installs/wk answering
CYRE Guardian
by milesdev888

Solana address risk grades and token scans for AI agents. Pay-per-call via x402 (USDC on Base).

3 tools answering

presign-guard — questions

Answers built from our own checks of this server.

What can presign-guard do?
It exposes 8 tools, read directly from the server on our last check. Among them: feedback, presign_check, presign_check_explain, presign_quick_check, screen_wallet, token_quick_verdict and 2 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
What is presign-guard mostly used for?
Its tools cluster around presign and token. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is presign-guard working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 184 of 184 checks got a reply (100.0%), average response time 308 ms. The bar chart above shows every period we have measured.
How do I connect presign-guard?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does presign-guard need an API key?
No. presign-guard completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 8 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is presign-guard?
It answers our handshake in 308 ms on average, which is faster than 43% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is presign-guard open source?
Yes — it is published under the AGPL-3.0 licence, written in JavaScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.