Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

Trust Check

Base crypto safety for agents: honeypot/tax test, address poisoning, rug feed, creator record.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 678 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 5 tools say they only read.
Endpointhttps://trust-check.gm-tools.workers.dev/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 1.1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 5 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (5)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • check_token_safetyBefore buying a token on Base, check it: simulates a real buy and sell (honeypot and hidden-tax test), reads owner powers (mint, blacklist, fee changes, pause), whale concentration, liquidity lock an…Read-only
  • check_address_safetyBefore sending crypto on Base, check the destination: scam blacklists, address poisoning (a look-alike of an address you really use; pass `from` = your wallet), token contracts and burn addresses whe…Read-only
  • recent_liquidity_collapsesNew Base tokens whose pool liquidity collapsed (fell 90%+ from its peak: a rug pull or a heavy dump) in the last hours, newest first, with peak and remaining liquidity, hours from launch and the crea…Read-only
  • check_token_creatorBefore buying a newly launched Base token, check the wallet that deployed it: how many of its earlier tokens Rug Watch followed, and how many collapsed (rug pull or dump). Verdict: serial_collapser /…Read-only
  • deep_token_safety_reportFull due diligence before a bigger buy of a Base token: the token check (buy/sell simulation, taxes, owner powers, whales, liquidity, scam lists) plus the creator's Rug Watch record, wallet check and…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200678 ms
initializedHTTP 20250 ms
tools/listHTTP 200653 ms
unknown-methodHTTP 20052 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.