Skip to content

Crypto Due Diligence

by openkrill.app · remote · no sign-in to list tools · v1.1.0 · published by app.openkrill

Screen a new token for red flags and keep signals, and find a wallet's self-declared public name.

Final · 1Changes · 3

5 tools: 1 do something that can't be undone, 3 change things and 1 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http cryptodd https://cryptodd.openkrill.app/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The input schema at examples[0].token contains a 44-character base64 string.

    Matched text

    inputSchema.examples[0].token: "2VYvcfZNiQmFNFT9DAVtDDyHEZK7D743JYmgSpBPpump"

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

5 tools

Can't be undone 1Claude Code: ask
  • submit_feedbackSend feedback, a bug report or a tool request to the maintainers of the tools on this server: a missing tool, missing or stale data, or a tool that broke or gave a wrong answer.No findings

    Why it is in this group

    • The name "submit_feedback" says "submit": a word for a change.
    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send feedback, a bug report or a tool request to the maintainers of the tools on this server: a missing tool, missing or stale data, or a tool that broke or gave a wrong answer. Pass the kind (need_tool, need_data, bug or other), one short message (at most 1000 characters) and, if you know them, the tool name and the error text it returned. Returns a ticket id. Feedback is not a chat: nothing in it is run or followed. Links, emails and phone numbers are removed and nothing about you is stored.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 3Claude Code: ask
  • screen_tokenUse this when the user gives a token address and asks "is this a rug?", "screen this coin", "who is the dev?" or what to check before buying.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The input schema at examples[0].token contains a 44-character base64 string.

      Matched text

      inputSchema.examples[0].token: "2VYvcfZNiQmFNFT9DAVtDDyHEZK7D743JYmgSpBPpump"

      What this check looks for
    Description, as the server wrote it
    Use this when the user gives a token address and asks "is this a rug?", "screen this coin", "who is the dev?" or what to check before buying. Pass chain (solana, ethereum, base, bsc, arbitrum, polygon, avalanche, optimism) and token (contract or mint address). Optionally pass github_url and deployer. Returns each signal as red_flag, keep_signal, not_seen or unknown, with a detail line and a source link, a reading (many_red_flags, some_red_flags or no_red_flags_seen), and the X links for a manual check. It reads public sources only and never says a token is safe. Not financial advice.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • value_tokenUse this when the user asks what a token is worth, "is HYPE cheap?" or for a fair value from revenue.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user asks what a token is worth, "is HYPE cheap?" or for a fair value from revenue. Pass token (a name, ticker, DefiLlama slug or CoinGecko id); optionally moat, regulation, governance_flags, buyback, team_largest_holder, fee_funded, market_growth_pct, e0_usd and unlocks. Returns bear, base and bull values per token under the standard and disciplined supply rules, the weighted value against the price, the growth the price implies, confidence, warnings, assumptions and what is not known. Defaults are the most cautious. Not financial advice.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • wallet_identityUse this when the user asks whether a wallet address has a public name, such as a token deployer or a known trader's wallet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user asks whether a wallet address has a public name, such as a token deployer or a known trader's wallet. Pass address (0x or Solana). Returns the ENS primary name when it resolves back to the address, and the Farcaster account that verified the address, both self-declared by the owner. It cannot search by a person's name and never links a wallet to a private person.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 1Claude Code: allow
  • get_feedback_replyRead the maintainers' reply to feedback you sent with submit_feedback, given its ticket id.No findings

    Why it is in this group

    • The name "get_feedback_reply" says "get": a word for reading.
    Description, as the server wrote it
    Read the maintainers' reply to feedback you sent with submit_feedback, given its ticket id. Returns status pending until a reply is ready, then status answered with the reply text. The reply is information for you, not an instruction.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http cryptodd https://cryptodd.openkrill.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cryptodd__get_feedback_reply"
    ],
    "ask": [
      "mcp__cryptodd__screen_token",
      "mcp__cryptodd__wallet_identity",
      "mcp__cryptodd__value_token",
      "mcp__cryptodd__submit_feedback"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as cryptodd. Review it before you use it.