# `app.replit.paid-mcp-opportunity-lab--taylorboucher1/base-token-tools` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/app.replit.paid-mcp-opportunity-lab--taylorboucher1/base-token-tools
- JSON: https://anlyon.dev/api/v1/servers/app.replit.paid-mcp-opportunity-lab--taylorboucher1/base-token-tools
- Version: 0.2.0 (active)
- Publisher: app.replit.paid-mcp-opportunity-lab--taylorboucher1 (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T17:44:55.017Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Paid Base Token Tools
Base token facts and ERC-20 allowance checks. Per-call USDC on Base; x402 wallet required.
```

Scanned 2026-10-21T18:43:15.466Z over streamable-http.

**6 tools: 3 change things and 3 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 3 | ask |
| Only reads | read | 3 | allow |

## Findings

- **warn** Annotations that disagree with the tool in `base_token_facts` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "base_token_facts" as not read-only (readOnlyHint: false), and its words say it reads.

annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "read": a word for reading.
```

- **warn** Annotations that disagree with the tool in `base_token_allowance` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "base_token_allowance" as not read-only (readOnlyHint: false), and its words say it reads.

annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "read": a word for reading.
```

- **warn** Annotations that disagree with the tool in `base_uniswap_v3_lp_accounting_audit` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "base_uniswap_v3_lp_accounting_audit" as not read-only (readOnlyHint: false), and its words say it reads.

annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "read": a word for reading.
```


## Changes things (3)

Creates or changes something that can be changed back. Claude Code: ask.

### `base_token_allowance`

- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Read an ERC-20 allowance on Base at a pinned block before an AI proposes spending. Returns exact units, decimals and provenance. Does not approve or transfer tokens. Version 253064e6ce6110d8. Requires 0.01 native USDC per call on Base; shared paid pilot limits apply.
```

### `base_token_facts`

- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Read a Base ERC-20 fact packet at one pinned block: metadata, exact supply, bytecode hash and EIP-1967 implementation slot. Requires 0.01 native USDC on Base; no financial advice.
```

### `base_uniswap_v3_lp_accounting_audit`

- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Read official Base Uniswap V3 NFT and pool state at one canonical block hash. Reconcile exact token inventory and fee-growth checkpoints against optional reported raw amounts. Return signed discrepancies, reproducible inputs and uint128 accounting semantics. Recorded tokensOwed may include withdrawn principal, not only fees. Read-only; no USD valuation, trading, custody or profitability claim. Version 234e52e42b53afb8. Requires 0.01 native USDC per call on Base; shared paid pilot limits apply.
```

## Only reads (3)

Looks things up and changes nothing. Claude Code: allow.

### `get_runtime_tools`

- The name "get_runtime_tools" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List mounted tool versions, per-call USDC prices and input schemas. Free. Releases share the receiving wallet and pilot limits, not a universal price.
```

### `get_tool_status`

- The name "get_tool_status" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read the available tool's Base USDC price, receiver and setup status. Free; configuration does not prove settlement.
```

### `preview_base_usdc`

- The name "preview_base_usdc" says "preview": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Free fixed sample of native USDC's on-chain facts on Base. No other token input accepted; does not make a payment.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `base-token-tools`:

```json
{
  "permissions": {
    "allow": [
      "mcp__base-token-tools__get_tool_status",
      "mcp__base-token-tools__preview_base_usdc",
      "mcp__base-token-tools__get_runtime_tools"
    ],
    "ask": [
      "mcp__base-token-tools__base_token_facts",
      "mcp__base-token-tools__base_token_allowance",
      "mcp__base-token-tools__base_uniswap_v3_lp_accounting_audit"
    ],
    "deny": []
  }
}
```