Search / io.github.julian-martin89/token-oracle
token-oracle — Token Trust Oracle
R0· no sign-inFlags fake/mismatched token contract addresses and hallucinated supply figures before you trade.
v1.0.0 · active · descriptor JSON · versions
Search / io.github.julian-martin89/token-oracle
R0· no sign-inFlags fake/mismatched token contract addresses and hallucinated supply figures before you trade.
v1.0.0 · active · descriptor JSON · versions
{
"mcpServers": {
"token-oracle": {
"type": "http",
"url": "https://token-oracle.fly.dev/mcp"
}
}
}claude mcp add --transport http token-oracle https://token-oracle.fly.dev/mcp[mcp_servers.token-oracle]
url = "https://token-oracle.fly.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"token-oracle": {
"type": "remote",
"url": "https://token-oracle.fly.dev/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"token-oracle": {
"type": "http",
"url": "https://token-oracle.fly.dev/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=token-oracle&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdG9rZW4tb3JhY2xlLmZseS5kZXYvbWNwIn0%3D"
}{
"servers": {
"token-oracle": {
"type": "http",
"url": "https://token-oracle.fly.dev/mcp"
}
}
}{
"mcpServers": {
"token-oracle": {
"httpUrl": "https://token-oracle.fly.dev/mcp"
}
}
}extensions:
"token-oracle":
enabled: true
name: "token-oracle"
type: streamable_http
uri: "https://token-oracle.fly.dev/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_length1 tools have descriptions over 1,024 characters, which crowds the contexttools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: verify_token (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)tools.token_costabout 473 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+reachable +uptime-98% +updated-12d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://token-oracle.fly.dev/mcp streamable-http | none | yes | 98% | 271 ms | 2025-11-25 | 2026-10-20 |
verify_token | Token Trust Oracle. Call this BEFORE trading against, writing code that references, or reporting figures about any token contract address you were not given directly by the user (one you generated, recalled, or inferred). This closes two separate failure modes: address-poisoning/impersonation (an address that doesn't actually match the token name everyone assumes it is), and tokenomics hallucination (LLMs are documented to get total supply, circulating supply, and other figures wrong more often than almost any other crypto data point). Checks the address has real contract bytecode, cross-references CoinGecko for an independent listing, and compares on-chain totalSupply() against CoinGecko's reported figures. Pass expectedSymbol when you believe you know what token this is — a mismatch is the strongest possible signal something is wrong. Returns a synthetic verdict: ALLOW (no issues found), WARN (proceed with caution — read the findings), or BLOCK (do not trust this address — likely not a contract at all, or doesn't match the token it claims to be). First 5 calls per caller are free; after that this tool requires x402 payment (USDC on Base) and will return a payment-required error with the amount and address to pay. |
Schemas: list_tools.
{
"name": "io.github.julian-martin89/token-oracle",
"title": "token-oracle — Token Trust Oracle",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://token-oracle.fly.dev/mcp",
"type": "streamable-http"
}
],
"version": "1.0.0",
"description": "Flags fake/mismatched token contract addresses and hallucinated supply figures before you trade."
}