MCP server for Base L2 token safety: bytecode scans, swap simulations, approval and liquidity risk, and the live new-pool channel — six paid x402 surfaces plus x402 infrastructure tools, with payment handled server-side.
Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
AUTOMATON_MCP_PAYER_KEYAPI keyoptionalPrivate key of the wallet that pays for calls. The server only SIGNS an EIP-3009 authorisation; it never sends a transaction. Also required: ALLOW_OUTBOUND_SPEND=1, and this key is not loaded into…
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
x402_healthCheck that the x402 Value API is live and read its advertised payment terms (network, chainId, asset, payTo, schemes).Check that the x402 Value API is live and read its advertised payment terms (network, chainId, asset, payTo, schemes).
No input schema was published for this tool.
x402_pricingRead per-route pricing for the Value API (USDC amounts per route, the six surfaces, the free trial).Read per-route pricing for the Value API (USDC amounts per route, the six surfaces, the free trial).
No input schema was published for this tool.
x402_conformanceAudit ANY x402 service: fetches its 402 challenge and returns a pass/fail conformance verdict (scheme, network, chainId, asset, payTo, amount).Audit ANY x402 service: fetches its 402 challenge and returns a pass/fail conformance verdict (scheme, network, chainId, asset, payTo, amount).
No input schema was published for this tool.
verify_paymentVerify an on-chain ERC-20/USDC transfer on Base (free). Confirms the tx is real and confirmed, paid the right recipient, and met a minimum amount.Verify an on-chain ERC-20/USDC transfer on Base (free). Confirms the tx is real and confirmed, paid the right recipient, and met a minimum amount.
No input schema was published for this tool.
x402_indexRead the live x402 service leaderboard (objectively scored by the conformance engine).Read the live x402 service leaderboard (objectively scored by the conformance engine).
No input schema was published for this tool.
x402_submitFree self-submission: add your own x402 service to the public leaderboard. Returns the queued entry.Free self-submission: add your own x402 service to the public leaderboard. Returns the queued entry.
No input schema was published for this tool.
x402_paid_uuidPAID call (0.001 USDC on Base) that returns a settled UUID, proving the whole x402 loop end to end. Settled by this server on your behalf when a payer is configured.PAID call (0.001 USDC on Base) that returns a settled UUID, proving the whole x402 loop end to end. Settled by this server on your behalf when a payer is configured.
No input schema was published for this tool.
token_scanBytecode security scan of a Base token contract (PAID, 0.001 USDC). Reports honeypot opcodes, mint/blacklist/pause/tax capabilities, a risk score and a verdict. Read-only: no transaction is sent.Bytecode security scan of a Base token contract (PAID, 0.001 USDC). Reports honeypot opcodes, mint/blacklist/pause/tax capabilities, a risk score and a verdict. Read-only: no transaction is sent.
No input schema was published for this tool.
tx_simulateRead-only buy/sell simulation of a Base token through the Uniswap V2 WETH pool (PAID, 0.01 USDC). Returns reverts, the measured transfer tax and a honeypot verdict. No transaction is sent.Read-only buy/sell simulation of a Base token through the Uniswap V2 WETH pool (PAID, 0.01 USDC). Returns reverts, the measured transfer tax and a honeypot verdict. No transaction is sent.
No input schema was published for this tool.
approval_riskRead-only audit of the ERC-20 approvals an owner granted for a token (PAID, 0.01 USDC): spender, allowance, contract vs EOA, verified flag, drainable amount and a drain-risk verdict.Read-only audit of the ERC-20 approvals an owner granted for a token (PAID, 0.01 USDC): spender, allowance, contract vs EOA, verified flag, drainable amount and a drain-risk verdict.
No input schema was published for this tool.
liquidity_riskOne-block liquidity audit of a Base token (PAID, 0.01 USDC): Uniswap V3 / Aerodrome pools, USD needed to move the price 1/2/5/10%, concentration, LP burn evidence and explicit coverage gaps.One-block liquidity audit of a Base token (PAID, 0.01 USDC): Uniswap V3 / Aerodrome pools, USD needed to move the price 1/2/5/10%, concentration, LP burn evidence and explicit coverage gaps.
No input schema was published for this tool.
sentinel_latestNewest liquidity pools created on Base (Uniswap v3/v4, Aerodrome) with a bytecode risk score per new token (PAID, 0.001 USDC). Filters are optional.Newest liquidity pools created on Base (Uniswap v3/v4, Aerodrome) with a bytecode risk score per new token (PAID, 0.001 USDC). Filters are optional.
No input schema was published for this tool.
sentinel_streamSubscribe to the live Base pool channel (/v2/sentinel/stream, SSE, 0.01 USDC). Unlike the other five this is a CONTINUOUS channel, not a discrete RPC action: this tool opens it, collects events for a bounded window and returns what arrived, saying so plainly. Reading again is another call. The serv…Subscribe to the live Base pool channel (/v2/sentinel/stream, SSE, 0.01 USDC). Unlike the other five this is a CONTINUOUS channel, not a discrete RPC action: this tool opens it, collects events for a bounded window and returns what arrived, saying so plainly. Reading again is another call. The serv…
No input schema was published for this tool.
13 of 13 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for Base L2 token safety: bytecode scans, swap simulations, approval and liquidity risk, and the live new-pool channel — six paid x402 surfaces plus x402 infrastructure tools, with payment handled server-side.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.