# SealGuard

> Check Solana wallets and transactions for risky approvals and scam tokens; find SOL to take back.

- name: io.github.2cstudiodev-web/sealguard
- version: 1.1.0
- connection class: R0 (autonomous)
- trust: 96/100
- quality: 82/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.2cstudiodev-web%2Fsealguard
- tools: https://api.protogrid.dev/v1/servers/io.github.2cstudiodev-web%2Fsealguard/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "sealguard": {
      "type": "http",
      "url": "https://guard.2cstudio.app/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 95
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-88% +updated-1d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 82/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 88 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 4 of 4 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_transaction (destructiveHint, idempotentHint); list_token_approvals (destructiveHint, idempotentHint); scan_wallet (destructiveHint, idempotentHint); …
- pass `tools.token_cost`: about 790 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump
- pass `tools.hidden_text`: no hidden text in tool names, descriptions, schemas or annotations

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`, `stability.new_links`: tool history recorded for 1 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 4, about 790 tokens to load them all
- tool set hash: c94eefbe4044c74cfbf23ac70cd14a6d
- tools last changed: 2026-11-13T07:29:40.223Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.2cstudiodev-web/sealguard.svg)](https://protogrid.dev/servers/io.github.2cstudiodev-web/sealguard)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-11-13 `check_transaction` added
  - Before a wallet signs a Solana transaction, simulates it on mainnet and says whether it would hand anything over: the wallet account itself, a token account's owner, a standing approval on its tokens, a close authority, stake or nonce authorities. Also lists the SOL and token amounts that would leave and arrive, flags durable nonces (a signed transaction that can be sent much later) and programs SealGuard doesn't know. Verdict: do_not_sign, review or no_red_flags. Read-only: nothing is signed or sent. Paid: needs a SealGuard API key (Authorization: Bearer sgk_…); new keys come with 20 free checks, then US$0.01 a check, or 1,000 a month included with the SealGuard guard. Keys at https://guard.2cstudio.app/mcp-key
- 2026-11-13 `list_empty_token_accounts` changed (title, description)
  - before: Lists a Solana wallet's empty token accounts (left behind by sold or sent tokens), the SOL rent locked in each, and which ones SealGuard suggests closing. Accounts for tokens the owner will likely receive again, or used in the last 30 days, are marked to keep, with the reason. Also lists pump.fun and PumpSwap deposits the wallet can take back. Read-only; returns a link where the owner can close them.
  - after: Lists the SOL a Solana wallet could take back: empty token accounts (left behind by sold or sent tokens) with the rent in each and which ones SealGuard suggests closing (accounts for tokens the owner will likely receive again, or used in the last 30 days, are marked to keep, with the reason); pump.fun and PumpSwap deposits; small balances worth under US$1 that could be sold for SOL through Jupiter; and NFTs whose burn would return their rent. Selling and burning are never suggested by default: they're the owner's call. Read-only; returns a link where the owner can do it.
- 2026-11-13 `scan_wallet` changed (description)
  - before: Checks a Solana wallet for risks and gives a 0-100 safety score: open token approvals, phishing airdrops, Token-2022 permanent delegates and transfer restrictions, stake and nonce accounts controlled by someone else, and whether the wallet account itself has been taken over. Also totals the SOL locked in empty token accounts. Read-only; returns a link where the owner can fix what was found.
  - after: Checks a Solana wallet for risks and gives a 0-100 safety score: open token approvals, phishing airdrops, Token-2022 permanent delegates and transfer restrictions, stake and nonce accounts controlled by someone else, and whether the wallet account itself has been taken over. Also totals the SOL the wallet could take back: empty token accounts, pump.fun deposits, small balances it could sell, and NFTs it could burn. Read-only; returns a link where the owner can fix what was found.

Full history: https://api.protogrid.dev/v1/servers/io.github.2cstudiodev-web%2Fsealguard/changes

## Remotes

- https://guard.2cstudio.app/mcp (streamable-http, auth none, reachable true, uptime30d 0.875)

## Packages

_none_

## Tools (4)

- `check_transaction`: Before a wallet signs a Solana transaction, simulates it on mainnet and says whether it would hand anything over: the wallet account itself, a token account's owner, a standing approval on its tokens, a close authority, stake or nonce authorities. Also lists the SOL and token amounts that would leave and arrive, flags durable nonces (a signed transaction that can be sent much later) and programs SealGuard doesn't know. Verdict: do_not_sign, review or no_red_flags. Read-only: nothing is signed or sent. Paid: needs a SealGuard API key (Authorization: Bearer sgk_…); new keys come with 20 free checks, then US$0.01 a check, or 1,000 a month included with the SealGuard guard. Keys at https://guard.2cstudio.app/mcp-key
- `list_empty_token_accounts`: Lists the SOL a Solana wallet could take back: empty token accounts (left behind by sold or sent tokens) with the rent in each and which ones SealGuard suggests closing (accounts for tokens the owner will likely receive again, or used in the last 30 days, are marked to keep, with the reason); pump.fun and PumpSwap deposits; small balances worth under US$1 that could be sold for SOL through Jupiter; and NFTs whose burn would return their rent. Selling and burning are never suggested by default: they're the owner's call. Read-only; returns a link where the owner can do it.
- `list_token_approvals`: Lists every token approval (delegate) on a Solana wallet: which address can still move which token, and how much. Also lists Token-2022 permanent delegates, which holders can't revoke. Read-only; returns a link where the owner can revoke approvals for free.
- `scan_wallet`: Checks a Solana wallet for risks and gives a 0-100 safety score: open token approvals, phishing airdrops, Token-2022 permanent delegates and transfer restrictions, stake and nonce accounts controlled by someone else, and whether the wallet account itself has been taken over. Also totals the SOL the wallet could take back: empty token accounts, pump.fun deposits, small balances it could sell, and NFTs it could burn. Read-only; returns a link where the owner can fix what was found.