Connect
8 clients · secrets stay placeholdersQuality 83 / 100good
protocol75 · weight 25
- warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a
protocol.statelessonly applies to 2026-07-28 servers
- pass
protocol.transportstreamable HTTP
- n/a
protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
- n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
- n/a
auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
- pass
tools.descriptionsevery tool has a description
- pass
tools.description_lengthdescriptions are concise
- pass
tools.schemasevery tool has an object input schema
- fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: x402_conformance_check (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); simulate_base_transaction (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); approval_risk (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass
tools.token_costabout 2,038 tokens to load every tool
- pass
tools.api_dumptools are not a one-to-one API dump
dependencies100 · weight 15
20 tools, about 2,038 tokens to load them all · tool set ee340209cbcc · checked 2026-10-19 12:00 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Trust 97 / 100
+repository +namespace-matches-repo +website +reachable +uptime-96% +updated-21d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
@celorodrigues/[email protected] npm0 dependencies, resolved · advisories checked 2026-10-19
No known advisory affects this dependency graph.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Official server.json
{
"name": "io.github.baianomarceloeduardo-jpg/automaton-token-safety-mcp",
"title": "Automaton Token Safety",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.automaton-sovereign.workers.dev/mcp",
"type": "streamable-http"
}
],
"version": "2.0.2",
"packages": [
{
"version": "2.0.2",
"transport": {
"type": "stdio"
},
"identifier": "@celorodrigues/token-safety-mcp",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"environmentVariables": [
{
"name": "VALUE_API_BASE",
"format": "string",
"default": "https://api.automaton-sovereign.workers.dev",
"isRequired": true,
"description": "Base URL of the Automaton Token Safety API the tools call."
},
{
"name": "AUTOMATON_ORIGIN_BASE",
"format": "string",
"description": "Origin URL for routes the edge defers with a use_origin answer (for example the free conformance checker). Optional; without it such a tool reports which variable to set."
},
{
"name": "AUTOMATON_MCP_PAYER_KEY",
"format": "string",
"isSecret": true,
"description": "Private key of the wallet that pays for calls. The server only SIGNS an EIP-3009 authorisation; it never sends a transaction. Also required: ALLOW_OUTBOUND_SPEND=1, and this key is not loaded into the process without it. Never set this to the payee/treasury wallet: that is rejected."
},
{
"name": "ALLOW_OUTBOUND_SPEND",
"format": "string",
"default": "0",
"description": "Set to 1 to permit this server to sign paid calls. Any other value (including absent) leaves every paid tool answering with the price only."
},
{
"name": "AUTOMATON_MCP_MAX_AMOUNT_UNITS",
"format": "number",
"default": "10000",
"description": "Per-call ceiling in USDC base units (6 decimals, so 10000 = 0.01 USDC). A requirement above it is refused before signing."
},
{
"name": "AUTOMATON_MCP_TOTAL_CAP_UNITS",
"format": "number",
"default": "100000",
"description": "Ceiling for the whole process lifetime, in USDC base units. Stops a runaway loop, not just a single expensive call."
},
{
"name": "MCP_HTTP_PORT",
"format": "number",
"description": "When set, serve Streamable HTTP on this port instead of stdio. Binds to 127.0.0.1 by default."
}
]
}
],
"repository": {
"url": "https://github.com/baianomarceloeduardo-jpg/automaton-x402",
"source": "github",
"subfolder": "mcp-bundle"
},
"websiteUrl": "https://api.automaton-sovereign.workers.dev",
"description": "Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk."
}