protogrid

Search / io.github.julian-martin89/token-oracle

token-oracle — Token Trust Oracle

R0· no sign-in

Flags fake/mismatched token contract addresses and hallucinated supply figures before you trade.

v1.0.0 · active · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality76good
Trust76of 100
Uptime, 30 days98%
Latency p50271 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "token-oracle": {
      "type": "http",
      "url": "https://token-oracle.fly.dev/mcp"
    }
  }
}
claude mcp add --transport http token-oracle https://token-oracle.fly.dev/mcp
[mcp_servers.token-oracle]
url = "https://token-oracle.fly.dev/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "token-oracle": {
      "type": "remote",
      "url": "https://token-oracle.fly.dev/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "token-oracle": {
      "type": "http",
      "url": "https://token-oracle.fly.dev/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=token-oracle&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdG9rZW4tb3JhY2xlLmZseS5kZXYvbWNwIn0%3D"
}
{
  "servers": {
    "token-oracle": {
      "type": "http",
      "url": "https://token-oracle.fly.dev/mcp"
    }
  }
}
{
  "mcpServers": {
    "token-oracle": {
      "httpUrl": "https://token-oracle.fly.dev/mcp"
    }
  }
}
extensions:
  "token-oracle":
    enabled: true
    name: "token-oracle"
    type: streamable_http
    uri: "https://token-oracle.fly.dev/mcp"
    timeout: 300

Quality 76 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene64 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • warn
    tools.description_length1 tools have descriptions over 1,024 characters, which crowds the context
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: verify_token (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
  • pass
    tools.token_costabout 473 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

1 tools, about 473 tokens to load them all · tool set 39d4e8e31ef1 · checked 2026-10-20 17:34 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 76 / 100

no-repository
provenance35
liveness99
freshness100
hygiene80

+reachable +uptime-98% +updated-12d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://token-oracle.fly.dev/mcp streamable-httpnoneyes98%271 ms2025-11-252026-10-20

Tools (1)

verify_tokenToken Trust Oracle. Call this BEFORE trading against, writing code that references, or reporting figures about any token contract address you were not given directly by the user (one you generated, recalled, or inferred). This closes two separate failure modes: address-poisoning/impersonation (an address that doesn't actually match the token name everyone assumes it is), and tokenomics hallucination (LLMs are documented to get total supply, circulating supply, and other figures wrong more often than almost any other crypto data point). Checks the address has real contract bytecode, cross-references CoinGecko for an independent listing, and compares on-chain totalSupply() against CoinGecko's reported figures. Pass expectedSymbol when you believe you know what token this is — a mismatch is the strongest possible signal something is wrong. Returns a synthetic verdict: ALLOW (no issues found), WARN (proceed with caution — read the findings), or BLOCK (do not trust this address — likely not a contract at all, or doesn't match the token it claims to be). First 5 calls per caller are free; after that this tool requires x402 payment (USDC on Base) and will return a payment-required error with the amount and address to pay.

Schemas: list_tools.

Similar MCP servers

More from io.github.julian-martin89

Official server.json
{
  "name": "io.github.julian-martin89/token-oracle",
  "title": "token-oracle — Token Trust Oracle",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://token-oracle.fly.dev/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "description": "Flags fake/mismatched token contract addresses and hallucinated supply figures before you trade."
}