Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

io.github.acarchidi/agentforge

Safety checks for AI agents: preflight before signing, prompt-injection scan, sanctions, rug checks.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 220 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 29 tools say they only read.
Endpointhttps://agentforge-taupe.vercel.app/mcp

Source code Streamable HTTP · protocol 2025-11-25 · server version 1.13.1

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 29 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (29)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • token_intelLightweight token lookup: price, market cap, volume, and basic risk assessment for any EVM or Solana token. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endp…Read-only
  • token_researchMulti-source token intelligence: market data, DeFi metrics, contract verification, prediction markets, holder analysis, price history, and AI risk assessment. Aggregates CoinGecko, DeFiLlama, Ethersc…Read-only
  • contract_docsGenerate documentation for any verified EVM smart contract. Returns function descriptions, risk flags, interaction patterns, and security posture. Free over MCP for 10 calls per day; beyond that the…Read-only
  • contract_monitorMonitor recent contract activity for suspicious admin operations, proxy upgrades, ownership changes, and pause events. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-cal…Read-only
  • token_compareCompare a primary token against up to 3 others. Returns full research on primary, abbreviated metrics on comparisons, plus AI comparative analysis. Free over MCP for 10 calls per day; beyond that the…Read-only
  • tx_decodeDecode any EVM transaction: function call, parameters, token transfers, and plain-English explanation. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint…Read-only
  • approval_scanScan a wallet for risky token approvals. On EVM chains: identifies unlimited ERC-20 approvals and unverified spenders. On Solana: scans SPL token delegate authorities. Returns risk assessment. Free o…Read-only
  • gas_oracleCurrent gas prices (slow/standard/fast) for any supported EVM chain with trend analysis.Read-only
  • sentimentAnalyze sentiment of text in crypto, finance, social media, or general context. Returns score (-1 to 1), confidence, label (very_bearish to very_bullish), reasoning, and per-entity sentiment. Free ov…Read-only
  • summarizeSummarize text with configurable length (brief/standard/detailed), format (prose/bullet_points/structured), and optional topic focus. Returns summary, key points, and compression ratio. Free over MCP…Read-only
  • translateTranslate text to any language with tone control (formal/casual/technical). Auto-detects source language. Preserves formatting and cultural nuances. Free over MCP for 10 calls per day; beyond that th…Read-only
  • wallet_safetyComprehensive wallet safety check: scans approvals, analyzes recent transaction activity for suspicious patterns, and assesses target contract risk. Returns composite risk score (0-100), risk level,…Read-only
  • pool_snapshotGet a cached snapshot of top DeFi liquidity pools. Filter by protocol (e.g. "uniswap-v3"), chain (e.g. "ethereum"), or token symbol (e.g. "ETH"). Returns TVL, APY, 24h volume, IL risk, and registry e…Read-only
  • token_risk_metricsQuantitative risk metrics for any ERC-20 token: holder concentration (top 10 holder %), contract permissions (can mint/burn/pause/blacklist), liquidity depth vs market cap, deployer history, and weig…Read-only
  • trade_checkCheck a token before you buy it: one call bundling quantitative rug-check metrics (holder concentration, permissions, liquidity), AI risk assessment with market data, and current gas — rolled into a…Read-only
  • risk_batchBatch rug-check: risk scores (holder concentration, mint/blacklist/pause/upgrade permissions, liquidity depth) for 2-25 EVM tokens in one call. Use it to screen a watchlist or a list of candidate tra…Read-only
  • address_checkScreen counterparty addresses before sending, approving, or interacting: OFAC sanctions, known scam/phishing wallets, labeled protocol contracts, and brand-new-address detection. 1-100 EVM or Solana…Read-only
  • content_scanScan untrusted text (tool results, web pages, emails, token metadata) for prompt injection before feeding it to your LLM: instruction overrides, fund-movement directives, payloads hidden in base64, M…Read-only
  • launch_feedNewly launched tokens on Base, Ethereum, or Arbitrum, each already risk-scored (verification, owner powers, proxy, supply held off-pool, thin liquidity, honeypot trading pattern). Poll it: pass the p…Read-only
  • preflightIs this action safe? Call once before any on-chain action: send the transactions, signature request, x402 payment request, recipients, and/or tokens the agent is about to act on, and get back one pro…Read-only
  • tx_simulateSimulate an EVM transaction (or a sequence of up to 5, e.g. approve then swap) before signing: revert check with reason, every asset leaving or entering the wallet, approvals granted, sanctions/scam…Read-only
  • signature_checkCheck a signature request BEFORE signing it: decodes EIP-712 typed data (ERC-20 permit, Permit2, Seaport order, transfer authorization) or an x402 payment request, explains in one sentence what signi…Read-only
  • lending_healthHow close a wallet is to liquidation on Aave v3 (Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Linea, and Sonic in one call): collateral, debt, health factor, status, and how far…Read-only
  • send_feedbackSend AgentForge feedback: a bug or wrong result, a complaint, a feature or new-check request, or an idea. Free. Include a contact (email, wallet, or URL) if you want a reply.Read-only
  • registry_lookupLook up a contract address in the Known Contract Label Registry. Returns protocol name, category, risk level, and tags. Free — no payment required.Read-only
  • solana_program_lookupLook up a Solana program ID in the program label registry. Returns protocol name, category, risk level. Free — no payment required.Read-only
  • solana_tx_explainExplain a Solana transaction in plain English: labeled programs, token/SOL movements, success status, and risk flags. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call…Read-only
  • solana_tx_simulateSimulate a Solana transaction before signing it: balance changes, labeled programs, deterministic risk rules, and a proceed/caution/avoid recommendation. Free over MCP for 10 calls per day; beyond th…Read-only
  • solana_token_risk_scanSolana token rug check: mint/freeze authority, holder concentration, liquidity depth, and a composite 0-100 risk score. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-ca…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200220 ms
initializedHTTP 202119 ms
tools/listHTTP 200162 ms
unknown-methodHTTP 200321 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.