A.U.G.U.R Foresight
com.augur-trade/foresightaugur-trade.comstreamable-httpv3.0.0Scanned
Solana + pump.fun intel for agents: launch verdicts, token risk, dev/wallet records, smart money.
15 tools: 14 change things and 1 only read.
- Reads private data · 0
- Reads text others write · 15
- Can send data out · 0
- 1 finding
Anlyon alternative
14 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
15 tools
Changes things 14Claude Code: ask
bundle_forensicsWho bundled a Solana pump.fun launch: every block-0 wallet labelled sniper bot / bundle / dev-linked, supply bought and still held, holders who got tokens by transfer, serial-dev c…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Who bundled a Solana pump.fun launch: every block-0 wallet labelled sniper bot / bundle / dev-linked, supply bought and still held, holders who got tokens by transfer, serial-dev check, top-10 concentration, RugCheck — plus a back-tested skip/pass verdict. The rug guard MAD snipers use before every buy. Skip rules were tested on 2,221 real caller calls (held-out: stop-outs 10%→5%, rugs 16%→11%): creator launched another coin in the prior 24 h; top-10 wallets >35%; block-0 wallets that also bundled this creator's earlier launches; block-0 buys >20% of supply. Extra flags: RugCheck danger risks, insider wallets >15%, and >10% held by wallets that never bought on the curve (tokens moved in by transfer, the layered-bundle pattern of launch tools like Proxima). "ok:true" means no red flags were found, not that the coin is safe. When to use: To see WHO bundled a launch and get the skip/pass rug guard MAD snipers use; for a scored launch verdict use launch_scan. Price: $0.003 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Bundle forensics + rug guard
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
copy_backtestWould copying this wallet have made money?Reads text others write1 finding
Why it is in this group
- The name "copy_backtest" says "copy": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The server marks "copy_backtest" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "copy_backtest" says "copy": a word for a change.
Description, as the server wrote it Would copying this wallet have made money? Replays its pump.fun entries and exits 0–25 slots late on the recorded curve and shows where the edge dies. Takes the wallet's pump.fun positions over the last 1–14 days and simulates a copier that buys the same token and sells when the leader sells, arriving 0, 1, 2, 5, 10 or 25 slots (0–10 s) late. Fills use the bonding-curve reserves our tape recorded at that moment, including curve fees and the copy's own price impact. Returns PnL, win rate and ROI per latency, the leader's own median ROI for contrast, and a verdict: copyable, latency-sensitive (edge gone by N slots), or not copyable. A wallet that looks great on its own PnL often loses money for anyone who follows it. When to use: After pump_wallet or smart_money, to check copying survives realistic delay. Price: $0.03 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Copy-trade backtest
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
counterparty_checkOne-call verdict on a Solana wallet before you deal with it: serial token launcher, fast dumper, trading bot, or clean.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One-call verdict on a Solana wallet before you deal with it: serial token launcher, fast dumper, trading bot, or clean. Combines the wallet's pump.fun launch history (graduation rate, how fast it sells its own launches) with its trading profile into a risk level and reasons. When to use: Before sending to or trading with a Solana wallet; for full trade stats use pump_wallet. Price: $0.005 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Counterparty check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
dlmm_whalesMeteora DLMM liquidity providers ranked by measured on-chain edge: net USD, median multiple, win rate, hold time, size, recency.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Meteora DLMM liquidity providers ranked by measured on-chain edge: net USD, median multiple, win rate, hold time, size, recency. Produced by our own discovery engine, which decodes DLMM liquidity instructions across high-volume and high-yield pools every few hours and scores each wallet's completed round trips. These are the wallets our live copier watches. Price: $0.02 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: DLMM LP whales
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
launch_scanOne call, one verdict on a pump.fun launch: 0-100 score with positives and risks, graduation odds, dev record, snipers, holders, flow.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One call, one verdict on a pump.fun launch: 0-100 score with positives and risks, graduation odds, dev record, snipers, holders, flow. Runs pump_token + pump_dev + pump_odds together (cheaper than calling them separately) and folds them into a single score and verdict an agent can act on: strong / neutral / weak / avoid. When to use: The one-call verdict on a pump.fun launch; it combines pump_token (callable here by name), pump_dev, pump_odds (callable here by name) and token_risk signals. Price: $0.025 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Launch scan (bundle)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
priceUSD price, 24h change and liquidity for up to 100 Solana mints; flags illiquid (dead) tokens.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it USD price, 24h change and liquidity for up to 100 Solana mints; flags illiquid (dead) tokens. Jupiter price data with a liquidity floor: anything under $1,000 of liquidity is flagged dead, because round-trip quotes on dead curves look fine and are not. When to use: For Solana mints by address; for majors or other chains by symbol use crypto_price (callable here by name). Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Token prices
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
pump_devA creator wallet's launch history: launches, graduation rate, launch cadence, how fast the dev sells, verdict.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it A creator wallet's launch history: launches, graduation rate, launch cadence, how fast the dev sells, verdict. Looks up every token the wallet created since recording began and replays the dev's own trades on its 15 most recent launches. When to use: For the creator of a token; pass the dev wallet, not the mint (pump_token (callable here by name) reports the dev of a mint). Price: $0.01 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: pump.fun dev track record
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
pump_launchesThe newest pump.fun tokens with dev buy, early buyers/volume, curve progress, market cap and creator launch count.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it The newest pump.fun tokens with dev buy, early buyers/volume, curve progress, market cap and creator launch count. Returns up to 50 of the most recent launches (seconds old) with the first-N-seconds flow already aggregated, so an agent can shortlist without replaying the chain. When to use: To discover new mints; then use launch_scan for a verdict on one of them. Price: $0.002 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Newest pump.fun launches
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
pump_pulseLive pump.fun heartbeat: trades/min, launches, graduations, graduation rate, hottest tokens in the last 15 min.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Live pump.fun heartbeat: trades/min, launches, graduations, graduation rate, hottest tokens in the last 15 min. Computed from our own live recording of every pump.fun bonding-curve trade. Use it to decide whether the launch market is hot or dead before scanning individual tokens. When to use: For the market right now; for trends over days use pump_history (callable here by name). Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: pump.fun market pulse
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
pump_walletAny wallet's pump.fun trading record: realized PnL, win rate, hold time, frequency (bot or human), tokens it launched.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Any wallet's pump.fun trading record: realized PnL, win rate, hold time, frequency (bot or human), tokens it launched. Analyses up to the last 20,000 curve trades of the wallet. Use it to judge whether a wallet is smart money, a sniper bot, a serial dumper or a dev. When to use: For a trader's pump.fun performance. For a quick deal/no-deal verdict on any wallet use counterparty_check; to test whether copying it pays use copy_backtest. Price: $0.01 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: pump.fun wallet profile
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
smart_moneyThe pump.fun wallets with the best realized PnL in the last 24 h — and the tokens those wallets are buying right now.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it The pump.fun wallets with the best realized PnL in the last 24 h — and the tokens those wallets are buying right now. Leaderboard of wallets by realized profit on fully-closed curve positions (min 8 closed, rebuilt every 30 min), sortable by PnL, win rate or ROI, plus a live feed of what the top 50 bought in the last N minutes, ranked by how many of them piled in. When to use: To find wallets worth watching; then copy_backtest to test copying one. Price: $0.02 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Smart money on pump.fun
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
solana_networkSolana right now: TPS (total and non-vote), slot and block height, epoch progress and ETA, priority-fee percentiles, cluster version.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Solana right now: TPS (total and non-vote), slot and block height, epoch progress and ETA, priority-fee percentiles, cluster version. Read from mainnet RPC: recent performance samples, epoch info, prioritization fees. When to use: For Solana fees/TPS; for EVM and BTC fee costs use gas_now (callable here by name). Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Solana network status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
token_risk0-100 rug-risk score for any Solana token: mint/freeze authority, Token-2022 traps, holder concentration, liquidity depth — plus pump.fun curve flags.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it 0-100 rug-risk score for any Solana token: mint/freeze authority, Token-2022 traps, holder concentration, liquidity depth — plus pump.fun curve flags. Contract state is read live from Solana (authorities, Token-2022 extensions such as transfer fees, hooks, permanent delegate, pausable), holders from the largest accounts, market from DexScreener; for tokens still on any launchpad bonding curve (pump.fun, Meteora DBC, letsbonk…) liquidity is the SOL/USDC in the curve, read from chain (field `curve`). For pump.fun mints the curve forensics flags are merged in. When to use: For any Solana token, pump.fun or not. For pump.fun curve-stage detail use pump_token (callable here by name); for EVM tokens use evm_token_security (callable here by name). Price: $0.005 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Token risk score
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
wallet_holdingsEverything a Solana wallet holds — SOL, SPL and Token-2022 tokens — valued in USD and sorted by value.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Everything a Solana wallet holds — SOL, SPL and Token-2022 tokens — valued in USD and sorted by value. Reads token accounts from both token programs and prices them in one pass. Empty accounts are counted as reclaimable rent. When to use: For Solana wallets; for EVM wallets use evm_address (callable here by name). Price: $0.003 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Wallet holdings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 1Show 1 read-only tool
tx_explainTurns any Solana transaction signature into plain facts: status, fee, programs by name, SOL and token balance changes per owner, a one-line summary.Reads text others writeNo findings
Why it is in this group
- The name "tx_explain" says "explain": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Turns any Solana transaction signature into plain facts: status, fee, programs by name, SOL and token balance changes per owner, a one-line summary. Works for swaps, pump.fun trades, LP moves, transfers and failures (includes the error log lines). When to use: For Solana signatures; for 0x hashes use evm_tx (callable here by name). Price: $0.003 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).
Annotations the server declares
- title: Explain a transaction
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write15
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
- Warncopy_backtest
The server marks "copy_backtest" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "copy_backtest" says "copy": a word for a change.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 3.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http foresight https://augur-trade.com/foresight/mcpclaude mcp add --transport http foresight https://augur-trade.com/foresight/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__foresight__tx_explain"
],
"ask": [
"mcp__foresight__launch_scan",
"mcp__foresight__token_risk",
"mcp__foresight__pump_launches",
"mcp__foresight__pump_pulse",
"mcp__foresight__pump_dev",
"mcp__foresight__pump_wallet",
"mcp__foresight__smart_money",
"mcp__foresight__copy_backtest",
"mcp__foresight__counterparty_check",
"mcp__foresight__dlmm_whales",
"mcp__foresight__price",
"mcp__foresight__wallet_holdings",
"mcp__foresight__bundle_forensics",
"mcp__foresight__solana_network"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as foresight. Review it before you use it.
Capability tags behind 15 rules
- mcp__foresight__launch_scan untrusted-input
- mcp__foresight__token_risk untrusted-input
- mcp__foresight__pump_launches untrusted-input
- mcp__foresight__pump_pulse untrusted-input
- mcp__foresight__pump_dev untrusted-input
- mcp__foresight__pump_wallet untrusted-input
- mcp__foresight__smart_money untrusted-input
- mcp__foresight__copy_backtest untrusted-input
- mcp__foresight__counterparty_check untrusted-input
- mcp__foresight__dlmm_whales untrusted-input
- mcp__foresight__price untrusted-input
- mcp__foresight__wallet_holdings untrusted-input
- mcp__foresight__tx_explain untrusted-input
- mcp__foresight__bundle_forensics untrusted-input
- mcp__foresight__solana_network untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.augur-trade/foresight/verify?hash=5fe38c69e89c1079aa8ce1442a15181ac98f03bffeccedf5b57ee5d234e99d65" | jq -e '.changed == false'Pinned hash 5fe38c69e89c, from Oct 25, 2026, 05:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.augur-trade/foresight/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.augur-trade/foresight)Source: MCP Registry. Synced Oct 25, 2026, 05:17 UTC.