Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

ScanHood

On-chain honeypot/rug scanner, market data, and launch tools for Robinhood Chain (EVM 4663).The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 22 of 22 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 950 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://scanhood.xyz/mcp

Source code Streamable HTTP · protocol 2025-11-25 · server version 1.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 22 of 22 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • scan_token
    • get_scan_pricing
    • search_token
    • get_ohlcv
    • get_stock_fundamentals
    • get_swap_quote
    • get_bridge_quote
    • build_launch_tx
    • and 14 more

Tools

  • Passed: 22 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (22)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • scan_tokenComposite on-chain safety verdict for any Robinhood-Chain (chain 4663) token: honeypot buy+sell simulation, LP-lock status, contract verification, deployer reputation, RWA-impostor detection. Returns…Doesn't say
  • get_scan_pricingFree quota, price per scan, the Robinhood Chain treasury address, live wei amounts, and the step-by-step pay-and-retry recipe for when scan_token returns error free_quota_exceeded.Doesn't say
  • search_tokenFind any Robinhood-Chain token by symbol, name, or address across the whole chain (not just the top pairs).Doesn't say
  • get_ohlcvOn-chain OHLCV candles for a pool, for charting/backtesting.Doesn't say
  • get_stock_fundamentalsFundamentals for every US stock Robinhood has tokenized on Robinhood Chain (194 total, refreshed every 15min from public market data): price, market cap, trailing+forward P/E, EPS, price-to-book, div…Doesn't say
  • get_swap_quoteRead-only swap quote (no execution) for a token against the ScanHood swap contract — expected output for a given ETH-in (buy) or token-in (sell).Doesn't say
  • get_bridge_quoteRead-only quote (no execution) for bridging native ETH/BNB between Robinhood Chain and Ethereum, Base, Arbitrum, or BNB Chain, via relay.link — the same route ScanHood's own Bridge tab uses. No ScanH…Doesn't say
  • build_launch_txBuild (but do not sign or send) a launchToken transaction against ScanHood's live no-rug launchpad on Robinhood Chain — either Uniswap V3 (anti-snipe protection, supports an atomic initial buy) or V4…Doesn't say
  • get_watchlistReturns the token addresses a wallet has saved to its ScanHood watchlist.Doesn't say
  • save_watchlistOverwrites a wallet's saved token watchlist (up to 200 tokens). Requires a signature proving ownership of the address: sign the exact string in 'message' with that wallet's key (e.g. personal_sign /…Doesn't say
  • get_streakA wallet's consecutive-day ScanHood usage streak.Doesn't say
  • get_stockback_deckStockBack pays a share of real ScanHood trading-fee revenue as real tokenized stock, not points. Lists which real tokens are currently earnable and whether a reward auto-routes into a real covered-ca…Doesn't say
  • get_stockback_vaultReal Pending/Funded/Claimed StockBack state for one wallet. Pending is a promised USD value not yet backed by a purchase; Funded means a real on-chain stock purchase already confirmed and is waiting…Doesn't say
  • get_scan_logRecent completed token safety scans across all of ScanHood (real activity, not a sample) — powers the "recent rugs caught" / "safe launches today" homepage modules. Optionally filter by verdict.Doesn't say
  • get_scan_rollupDaily counts of PASS/CAUTION/DANGER verdicts plus a sample of real DANGER catches per day, for up to 60 days back. Powers the weekly "State of the Chain" report.Doesn't say
  • apply_partner_keyGet a free, higher-rate-limit (40r/s vs the 5r/s anonymous default) API key for a site that links back to scanhood.xyz. ScanHood fetches the site itself and checks for a real <a> to scanhood.xyz befo…Doesn't say
  • get_partner_statusLook up which site a partner key is registered to, when it was issued, and whether it has been upgraded to the paid tier.Doesn't say
  • get_paid_tier_infoTreasury address and minimum payment to upgrade an existing partner key from the free tier (40r/s) to the paid tier (200r/s) via a Robinhood-Chain ETH payment.Doesn't say
  • upgrade_to_paid_tierAfter sending at least the minimum ETH (see get_paid_tier_info) to the treasury address on Robinhood Chain, submit the transaction hash here to upgrade an existing partner key to the paid tier (200r/…Doesn't say
  • get_bots_statsStats from ScanHood's own arbitrage and fee-claim bots.Doesn't say
  • get_bots_claim_prefsPer-token preferences for automatic trading-fee claiming.Doesn't say
  • set_bots_claim_prefsEnable or disable automatic fee claiming for a token. Requires a signature proving ownership of 'address': sign the exact string in 'message' with that wallet's key and pass it as 'signature'. Not us…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200950 ms
initializedHTTP 202996 ms
tools/listHTTP 200588 ms
unknown-methodHTTP 200316 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.