Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "backend": {
      "type": "http",
      "url": "https://api.collarguardrail.com/mcp-http/mcp"
    }
  }
}

claude mcp add --transport http backend https://api.collarguardrail.com/mcp-http/mcp

[mcp_servers.backend]
url = "https://api.collarguardrail.com/mcp-http/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "backend": {
      "type": "remote",
      "url": "https://api.collarguardrail.com/mcp-http/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "backend": {
      "type": "http",
      "url": "https://api.collarguardrail.com/mcp-http/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=backend&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmNvbGxhcmd1YXJkcmFpbC5jb20vbWNwLWh0dHAvbWNwIn0%3D"
}

{
  "servers": {
    "backend": {
      "type": "http",
      "url": "https://api.collarguardrail.com/mcp-http/mcp"
    }
  }
}

{
  "mcpServers": {
    "backend": {
      "httpUrl": "https://api.collarguardrail.com/mcp-http/mcp"
    }
  }
}

extensions:
  "backend":
    enabled: true
    name: "backend"
    type: streamable_http
    uri: "https://api.collarguardrail.com/mcp-http/mcp"
    timeout: 300

Quality 75 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations6 of 6 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,359 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes19 tool changes in 30 days
fail
stability.rug_pull1 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

6 tools, about 1,359 tokens to load them all · tool set e7987f5cf6af · tools last changed 2026-10-14 · checked 2026-10-19 23:18 UTC

Tool changes

2026-10-14verify_audit_trailadded
Verify the tamper-evident audit trail for a wallet's past guardrail decisions.
2026-10-14get_supported_assetsadded
List every asset in the guardrail's official Robinhood Chain registry, with its canonical contract address.
2026-10-14simulate_balanceadded
Simulate a wallet's ERC-20 balance after a hypothetical trade using eth_call state override. Read-only: no transaction is ever sent.
2026-10-14check_token_safetyadded
Honeypot / contract safety check for any ERC-20 token. Returns a severity classification (safe / warn / danger), the specific risk factors detected, and the result of a simulated sell. When severity=danger, the next `evaluate_trade` for the same contract is automatically denied regardless of any other checks. This is a heuristic bytecode + simulation check, not a formal audit. Use it before trading unknown tokens, memecoins, or any contract that is absent from the official Robinhood Chain registry. It is safe to call repeatedly; no transaction is ever sent.
2026-10-14evaluate_trade_paidadded
Pre-trade risk check gated by an x402 payment. Evaluated as COLR Tier 2: $25,000 notional ceiling, 10/25 per-minute rate limits. No COLR holdings are required — the on-chain payment is the credential. FLOW ---- 1. Call WITHOUT payment_proof → the tool returns a `PaymentRequiredOutput` describing the on-chain payment (network, asset, amount, payTo, resource). 2. Settle the payment on-chain using an x402-capable client. The facilitator returns a proof string. 3. Call again with `payment_proof=<proof>` → the tool forwards the proof to the guardrail's x402-paid endpoint and returns a full `EvaluateTradeOutput` with `tier=2`.
2026-10-14evaluate_tradeadded
Pre-trade risk check for a proposed trade. Call this BEFORE executing any trade and treat a "deny" decision as a hard stop. Evaluated at a fixed Tier 1 ceiling ($5,000 notional). For higher limits, use `evaluate_trade_paid` (Tier 2, $25,000) which settles an x402 payment on-chain.
2026-10-14simulate_balanceremoved
Simulate a wallet's ERC-20 balance after a hypothetical trade using eth_call state override. Read-only: no transaction is ever sent.
2026-10-14check_token_safetyremoved
Honeypot / contract safety check for any ERC-20 token. Returns a severity classification (safe / warn / danger), the specific risk factors detected, and the result of a simulated sell. When severity=danger, the next `evaluate_trade` for the same contract is automatically denied regardless of any other checks. This is a heuristic bytecode + simulation check, not a formal audit. Use it before trading unknown tokens, memecoins, or any contract that is absent from the official Robinhood Chain registry. It is safe to call repeatedly; no transaction is ever sent.
2026-10-14verify_audit_trailremoved
Verify the tamper-evident audit trail for a wallet's past guardrail decisions.
2026-10-14get_supported_assetsremoved
List every asset in the guardrail's official Robinhood Chain registry, with its canonical contract address.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-13d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://api.collarguardrail.com/mcp-http/mcp` streamable-http	none	yes	100%	398 ms	2025-11-25	2026-10-19

Tools (6)

`check_token_safety`read-only	Honeypot / contract safety check for any ERC-20 token. Returns a severity classification (safe / warn / danger), the specific risk factors detected, and the result of a simulated sell. When severity=danger, the next `evaluate_trade` for the same contract is automatically denied regardless of any other checks. This is a heuristic bytecode + simulation check, not a formal audit. Use it before trading unknown tokens, memecoins, or any contract that is absent from the official Robinhood Chain registry. It is safe to call repeatedly; no transaction is ever sent.
`evaluate_trade`read-only	Pre-trade risk check for a proposed trade. Call this BEFORE executing any trade and treat a "deny" decision as a hard stop. Evaluated at a fixed Tier 1 ceiling ($5,000 notional). For higher limits, use `evaluate_trade_paid` (Tier 2, $25,000) which settles an x402 payment on-chain.
`evaluate_trade_paid`read-only	Pre-trade risk check gated by an x402 payment. Evaluated as COLR Tier 2: $25,000 notional ceiling, 10/25 per-minute rate limits. No COLR holdings are required — the on-chain payment is the credential. FLOW ---- 1. Call WITHOUT payment_proof → the tool returns a `PaymentRequiredOutput` describing the on-chain payment (network, asset, amount, payTo, resource). 2. Settle the payment on-chain using an x402-capable client. The facilitator returns a proof string. 3. Call again with `payment_proof=<proof>` → the tool forwards the proof to the guardrail's x402-paid endpoint and returns a full `EvaluateTradeOutput` with `tier=2`.
`get_supported_assets`read-only	List every asset in the guardrail's official Robinhood Chain registry, with its canonical contract address.
`simulate_balance`read-only	Simulate a wallet's ERC-20 balance after a hypothetical trade using eth_call state override. Read-only: no transaction is ever sent.
`verify_audit_trail`read-only	Verify the tamper-evident audit trail for a wallet's past guardrail decisions.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.aiguardrail/backend",
  "title": "Collar Guardrail — Pre-Trade Risk Layer",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.collarguardrail.com/mcp-http/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.5",
  "repository": {
    "url": "https://github.com/aiguardrail/backend-mcp",
    "source": "github"
  },
  "websiteUrl": "https://collarguardrail.com",
  "description": "Deterministic pre-trade risk checks for AI agents on Robinhood Chain. Returns allow/warn/deny."
}