Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

Automaton Onchain Tools

Paid x402 crypto safety tools (Base/ETH/BSC): tx, approvals, contract risk, token deep scan.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 60 of 60 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 293 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://automaton-tx-explainer.vercel.app/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 1.15.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 60 of 60 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • base_tx_explain
    • base_token_approvals
    • base_address_inspect
    • base_contract_risk
    • ethereum_tx_explain
    • ethereum_token_approvals
    • ethereum_address_inspect
    • ethereum_contract_risk
    • and 52 more

Tools

  • Passed: 60 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (60)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • base_tx_explainUse when: what did this Base transaction do? Explain a Base transaction: status, fee, decoded method + args (openchain signature DB), and ERC-20 transfers with symbols and human amounts. Costs $0.01.Doesn't say
  • base_token_approvalsUse when: which token approvals on this Base wallet should I revoke? Check a Base wallet's ERC-20 approvals: allowances for 8 major tokens (USDC, WETH, USDbC, DAI...) to common spenders (Permit2, Uni…Doesn't say
  • base_address_inspectUse when: what is this Base address (wallet, contract, proxy, token)? Inspect any Base address: EOA vs contract vs EIP-7702 delegated, ETH balance, nonce, proxy implementation (EIP-1967/1167/zos), an…Doesn't say
  • base_contract_riskUse when: is this Base contract risky (owner, proxy, mint, pause, blacklist)? Heuristic risk flags for a Base contract from free public data: Sourcify verification, upgradeable proxy + admin, owner t…Doesn't say
  • ethereum_tx_explainUse when: what did this Ethereum transaction do? Explain a Ethereum transaction: status, fee, decoded method + args (openchain signature DB), and ERC-20 transfers with symbols and human amounts. Cost…Doesn't say
  • ethereum_token_approvalsUse when: which token approvals on this Ethereum wallet should I revoke? Check a Ethereum wallet's ERC-20 approvals: allowances for 8 major tokens (USDC, USDT, WETH, DAI...) to common spenders (Permi…Doesn't say
  • ethereum_address_inspectUse when: what is this Ethereum address (wallet, contract, proxy, token)? Inspect any Ethereum address: EOA vs contract vs EIP-7702 delegated, ETH balance, nonce, proxy implementation (EIP-1967/1167/…Doesn't say
  • ethereum_contract_riskUse when: is this Ethereum contract risky (owner, proxy, mint, pause, blacklist)? Heuristic risk flags for a Ethereum contract from free public data: Sourcify verification, upgradeable proxy + admin,…Doesn't say
  • bsc_tx_explainUse when: what did this BNB Smart Chain transaction do? Explain a BNB Smart Chain transaction: status, fee, decoded method + args (openchain signature DB), and ERC-20 transfers with symbols and human…Doesn't say
  • bsc_token_approvalsUse when: which token approvals on this BNB Smart Chain wallet should I revoke? Check a BNB Smart Chain wallet's ERC-20 approvals: allowances for 8 major tokens (USDT, USDC, WBNB, BUSD...) to common…Doesn't say
  • bsc_address_inspectUse when: what is this BNB Smart Chain address (wallet, contract, proxy, token)? Inspect any BNB Smart Chain address: EOA vs contract vs EIP-7702 delegated, BNB balance, nonce, proxy implementation (…Doesn't say
  • bsc_contract_riskUse when: is this BNB Smart Chain contract risky (owner, proxy, mint, pause, blacklist)? Heuristic risk flags for a BNB Smart Chain contract from free public data: Sourcify verification, upgradeable…Doesn't say
  • arbitrum_tx_explainUse when: what did this Arbitrum transaction do? Explain a Arbitrum transaction: status, fee, decoded method + args (openchain signature DB), and ERC-20 transfers with symbols and human amounts. Cost…Doesn't say
  • arbitrum_token_approvalsUse when: which token approvals on this Arbitrum wallet should I revoke? Check a Arbitrum wallet's ERC-20 approvals: allowances for 8 major tokens (USDC, USDC.e, USDT0, WETH...) to common spenders (P…Doesn't say
  • arbitrum_address_inspectUse when: what is this Arbitrum address (wallet, contract, proxy, token)? Inspect any Arbitrum address: EOA vs contract vs EIP-7702 delegated, ETH balance, nonce, proxy implementation (EIP-1967/1167/…Doesn't say
  • arbitrum_contract_riskUse when: is this Arbitrum contract risky (owner, proxy, mint, pause, blacklist)? Heuristic risk flags for a Arbitrum contract from free public data: Sourcify verification, upgradeable proxy + admin,…Doesn't say
  • optimism_tx_explainUse when: what did this Optimism transaction do? Explain a Optimism transaction: status, fee, decoded method + args (openchain signature DB), and ERC-20 transfers with symbols and human amounts. Cost…Doesn't say
  • optimism_token_approvalsUse when: which token approvals on this Optimism wallet should I revoke? Check a Optimism wallet's ERC-20 approvals: allowances for 8 major tokens (USDC, USDC.e, USDT, USDT0...) to common spenders (P…Doesn't say
  • optimism_address_inspectUse when: what is this Optimism address (wallet, contract, proxy, token)? Inspect any Optimism address: EOA vs contract vs EIP-7702 delegated, ETH balance, nonce, proxy implementation (EIP-1967/1167/…Doesn't say
  • optimism_contract_riskUse when: is this Optimism contract risky (owner, proxy, mint, pause, blacklist)? Heuristic risk flags for a Optimism contract from free public data: Sourcify verification, upgradeable proxy + admin,…Doesn't say
  • polygon_tx_explainUse when: what did this Polygon transaction do? Explain a Polygon transaction: status, fee, decoded method + args (openchain signature DB), and ERC-20 transfers with symbols and human amounts. Costs…Doesn't say
  • polygon_token_approvalsUse when: which token approvals on this Polygon wallet should I revoke? Check a Polygon wallet's ERC-20 approvals: allowances for 8 major tokens (USDC, USDC.e, USDT0, WETH...) to common spenders (Per…Doesn't say
  • polygon_address_inspectUse when: what is this Polygon address (wallet, contract, proxy, token)? Inspect any Polygon address: EOA vs contract vs EIP-7702 delegated, POL balance, nonce, proxy implementation (EIP-1967/1167/zo…Doesn't say
  • polygon_contract_riskUse when: is this Polygon contract risky (owner, proxy, mint, pause, blacklist)? Heuristic risk flags for a Polygon contract from free public data: Sourcify verification, upgradeable proxy + admin, o…Doesn't say
  • avalanche_tx_explainUse when: what did this Avalanche C-Chain transaction do? Explain a Avalanche C-Chain transaction: status, fee, decoded method + args (openchain signature DB), and ERC-20 transfers with symbols and h…Doesn't say
  • avalanche_token_approvalsUse when: which token approvals on this Avalanche C-Chain wallet should I revoke? Check a Avalanche C-Chain wallet's ERC-20 approvals: allowances for 8 major tokens (USDC, USDt, USDC.e, USDT.e...) to…Doesn't say
  • avalanche_address_inspectUse when: what is this Avalanche C-Chain address (wallet, contract, proxy, token)? Inspect any Avalanche C-Chain address: EOA vs contract vs EIP-7702 delegated, AVAX balance, nonce, proxy implementat…Doesn't say
  • avalanche_contract_riskUse when: is this Avalanche C-Chain contract risky (owner, proxy, mint, pause, blacklist)? Heuristic risk flags for a Avalanche C-Chain contract from free public data: Sourcify verification, upgradea…Doesn't say
  • url_safety_checkUse when: is this link a phishing or scam site? Check a URL for phishing/scam signals: MetaMask eth-phishing-detect + Phishing.Database blocklists, RDAP domain age, punycode and brand-lookalike detec…Doesn't say
  • gas_snapshotUse when: how much gas will a transfer or swap cost right now? Live gas snapshot for Base, Ethereum and BNB Smart Chain: gas price, base fee, block utilization, and estimated native cost of a transfe…Doesn't say
  • ens_resolveUse when: what address is behind this ENS name or Basename (or vice versa)? Resolve an ENS name or Basename to an address (plus url/twitter/github text records), or reverse-resolve an address to its…Doesn't say
  • calldata_decodeUse when: what am I about to sign with this calldata? Decode EVM calldata before signing: function signature candidates (openchain DB), decoded args, and plain-English warnings for approve/setApprova…Doesn't say
  • wallet_portfolioUse when: what tokens does this wallet hold on Base, Ethereum and BNB? Wallet snapshot across Base, Ethereum and BNB Smart Chain: native balance plus balances of 8 major tokens per chain (USDC, USDT,…Doesn't say
  • wallet_reportUse when: is this wallet safe (approvals, delegation, balances) in one report? Premium one-call wallet report across Base, Ethereum and BNB Smart Chain: balances, token approvals (flags unlimited), a…Doesn't say
  • token_reportUse when: should I trust this token contract (owner, supply, flags)? Premium one-call token due-diligence on Base, Ethereum or BNB Smart Chain: token metadata, proxy/upgradeability, owner and admin,…Doesn't say
  • token_deep_scanUse when: is this token a honeypot or rug (sell sim, liquidity, LP lock, holders)? Premium token deep scan on Base, Ethereum or BNB Smart Chain: simulated buy+sell against the main DEX pool (honeypot…Doesn't say
  • solana_token_checkUse when: is this Solana or pump.fun token a rug (authorities, holders)? From public RPC data: mint and freeze authority status, mutable metadata (Metaplex or Token-2022), Token-2022 extensions (tran…Doesn't say
  • solana_address_lookupUse when: what is this Solana address and what does it hold? Look up any Solana address from public RPC data: account type (wallet, token mint, token account, program, program-owned), SOL balance, SP…Doesn't say
  • solana_token_delegatesUse when: which token delegates on this Solana wallet should I revoke? Check a Solana wallet's live SPL and Token-2022 token delegates (Solana's version of token approvals, the way drainers move fund…Doesn't say
  • approval_sweep_all_chainsUse when: which approvals on this wallet should I revoke, on every EVM chain? Sweeps a wallet on Base, Ethereum, BNB, Arbitrum, Optimism, Polygon and Avalanche for live ERC-20 allowances and NFT setA…Doesn't say
  • bsc_bundle_sniper_checkUse when: was this BNB token bundled or sniped at launch? For a four.meme or PancakeSwap launch: finds the launch block, reads the next 10 blocks and clusters the wallets that bought in the launch bl…Doesn't say
  • base_honeypot_checkUse when: can I sell this Base token, and what is the buy/sell tax? Can you actually sell this Base token? Simulates a small buy and a sell back into its deepest WETH pool (Uniswap V2/V3 and Aerodrom…Doesn't say
  • ethereum_honeypot_checkUse when: can I sell this Ethereum token, and what is the buy/sell tax? Can you actually sell this Ethereum token? Simulates a small buy and a sell back into its deepest WETH pool (Uniswap V2/V3 and…Doesn't say
  • bsc_honeypot_checkUse when: can I sell this BNB Smart Chain token, and what is the buy/sell tax? Can you actually sell this BNB Smart Chain token? Simulates a small buy and a sell back into its deepest WBNB pool (Panc…Doesn't say
  • base_token_verdictUse when: should I buy this Base token (quick SAFE / CAUTION / AVOID)? SAFE, CAUTION or AVOID for this Base token, plus sellable, buy/sell tax, owner renounced, proxy, mint/pause/blacklist/fee, LP bu…Doesn't say
  • ethereum_token_verdictUse when: should I buy this Ethereum token (quick SAFE / CAUTION / AVOID)? SAFE, CAUTION or AVOID for this Ethereum token, plus sellable, buy/sell tax, owner renounced, proxy, mint/pause/blacklist/fe…Doesn't say
  • bsc_token_verdictUse when: should I buy this BNB Smart Chain token (quick SAFE / CAUTION / AVOID)? SAFE, CAUTION or AVOID for this BNB Smart Chain token, plus sellable, buy/sell tax, owner renounced, proxy, mint/paus…Doesn't say
  • base_safe_to_sendUse when: is it safe to send to this Base address? Checks this Base recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is set, dust-only spam histor…Doesn't say
  • ethereum_safe_to_sendUse when: is it safe to send to this Ethereum address? Checks this Ethereum recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is set, dust-only spa…Doesn't say
  • bsc_safe_to_sendUse when: is it safe to send to this BNB Smart Chain address? Checks this BNB Smart Chain recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is set,…Doesn't say
  • arbitrum_safe_to_sendUse when: is it safe to send to this Arbitrum address? Checks this Arbitrum recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is set, dust-only spa…Doesn't say
  • optimism_safe_to_sendUse when: is it safe to send to this Optimism address? Checks this Optimism recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is set, dust-only spa…Doesn't say
  • polygon_safe_to_sendUse when: is it safe to send to this Polygon address? Checks this Polygon recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is set, dust-only spam…Doesn't say
  • avalanche_safe_to_sendUse when: is it safe to send to this Avalanche C-Chain address? Checks this Avalanche C-Chain recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is…Doesn't say
  • solana_safe_to_sendUse when: is it safe to send to this Solana address? Checks this Solana recipient before a transfer: lookalike poisoning against the sender's recent counterparties when from is set, dust-only spam hi…Doesn't say
  • launch_feedUse when: what tokens just launched on Base + BNB + Solana, and are they risky? Newest launches (four.meme, PancakeSwap, pump.fun...), up to 20 per chain, risk-checked at request time. Base/BNB: veri…Doesn't say
  • base_launch_feedUse when: what tokens just launched on Base, and are they risky? Newest launches on Base (Uniswap, Aerodrome, Bankr, launchpads), up to 20, risk-checked at request time: Sourcify verification, upgrad…Doesn't say
  • bsc_launch_feedUse when: what tokens just launched on BNB, and are they risky? Newest token launches on BNB Chain (four.meme, PancakeSwap v2/v3/Infinity, Uniswap v4), up to 20, each risk-checked at request time: So…Doesn't say
  • solana_launch_feedUse when: what tokens just launched on Solana, and are they risky? Newest token launches on Solana (mostly pump.fun curves, plus PumpSwap/Meteora), up to 20, each with our Solana token check at reque…Doesn't say
  • pingFree health check.Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200293 ms
initializedHTTP 202206 ms
tools/listHTTP 20073 ms
unknown-methodHTTP 20065 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.