Skip to content
anlyon.devby Anlyon

A.U.G.U.R Foresight · Wallets & Risk

com.augur-trade/foresight-riskaugur-trade.comstreamable-httpv3.0.0Scanned

Pre-trade safety + wallets: Solana/EVM token risk, honeypots, counterparties, balances, txs, CVEs.

15 tools: 13 change things and 2 only read.

Tools: 0 delete, 0 irreversible, 13 write, 2 read.
  • Reads private data · 1
  • Reads text others write · 15
  • Can send data out · 0
  • No findings

Anlyon alternative

13 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

15 tools

Changes things 13Claude Code: ask
  • address_checkIs this a valid address, and for which chain?Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Is this a valid address, and for which chain? EVM (with checksum fix), Solana (on-curve wallet vs PDA), Bitcoin (legacy/P2SH/SegWit/Taproot), Tron, Cosmos-style bech32. Pure checksum and format validation, no network calls. Catches the typo that would send funds to nowhere, and tells a Solana wallet (on curve) from a program-derived address. Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Address validator (any chain)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • bitcoin_networkBitcoin right now: fee rates, mempool size, block height, next difficulty adjustment (% and ETA), hashrate.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Bitcoin right now: fee rates, mempool size, block height, next difficulty adjustment (% and ETA), hashrate. From mempool.space public API. Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Bitcoin network status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • counterparty_checkOne-call verdict on a Solana wallet before you deal with it: serial token launcher, fast dumper, trading bot, or clean.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One-call verdict on a Solana wallet before you deal with it: serial token launcher, fast dumper, trading bot, or clean. Combines the wallet's pump.fun launch history (graduation rate, how fast it sells its own launches) with its trading profile into a risk level and reasons. When to use: Before sending to or trading with a Solana wallet; for full trade stats use pump_wallet (on the A.U.G.U.R Foresight · Pump & LP server, https://augur-trade.com/hub/mcp/pump). Price: $0.005 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Counterparty check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • erc20_infoName, symbol, decimals, total supply and USD price of any ERC-20 — plus a wallet's balance of it — read on chain.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Name, symbol, decimals, total supply and USD price of any ERC-20 — plus a wallet's balance of it — read on chain. Direct contract calls (name/symbol/decimals/totalSupply/balanceOf) on the chosen EVM chain, priced via DefiLlama. Works for any token, listed or not. When to use: For token facts; for scam/honeypot checks use evm_token_security. Price: $0.002 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: ERC-20 token + balance
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • evm_addressNative balance (with USD), transaction count, contract or wallet, ENS name — for any address on 17 EVM chains at once or one chain.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Native balance (with USD), transaction count, contract or wallet, ENS name — for any address on 17 EVM chains at once or one chain. Reads straight from each chain's RPC. chain="all" checks every supported chain in parallel and returns only where the address has balance, transactions or code — the quick "where is this wallet active" answer. When to use: For EVM addresses; for Solana wallets use wallet_holdings. Price: $0.002 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: EVM address lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • evm_token_securityHoneypot and scam check for any ERC-20 on 15+ EVM chains: buy/sell tax, can the owner mint, pause, blacklist or change taxes, proxy, holder concentration, LP lock.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Honeypot and scam check for any ERC-20 on 15+ EVM chains: buy/sell tax, can the owner mint, pause, blacklist or change taxes, proxy, holder concentration, LP lock. GoPlus Security token analysis plus a plain verdict. Flags are the ones that actually drain buyers: honeypot (cannot sell), sell tax above 10%, hidden owner, owner can modify balances or taxes, trading cooldown, blacklist, self-destruct. Top holders and LP holders with lock status included. When to use: For ERC-20s; for Solana tokens use token_risk. Price: $0.005 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: EVM token security scan
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • evm_txAny EVM transaction in plain terms: status, from/to, value, fee in native and USD, method called, every ERC-20 transfer decoded with symbols and amounts.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Any EVM transaction in plain terms: status, from/to, value, fee in native and USD, method called, every ERC-20 transfer decoded with symbols and amounts. Fetches the transaction and receipt from the chain, decodes ERC-20 Transfer events (token symbols/decimals read on chain), and prices the fee. When to use: For 0x hashes; for Solana signatures use tx_explain. Price: $0.003 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Explain an EVM transaction
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • launch_scanOne call, one verdict on a pump.fun launch: 0-100 score with positives and risks, graduation odds, dev record, snipers, holders, flow.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One call, one verdict on a pump.fun launch: 0-100 score with positives and risks, graduation odds, dev record, snipers, holders, flow. Runs pump_token + pump_dev + pump_odds together (cheaper than calling them separately) and folds them into a single score and verdict an agent can act on: strong / neutral / weak / avoid. When to use: The one-call verdict on a pump.fun launch; it combines pump_token (on the A.U.G.U.R Foresight · Pump & LP server, https://augur-trade.com/hub/mcp/pump), pump_dev (on the A.U.G.U.R Foresight · Pump & LP server, https://augur-trade.com/hub/mcp/pump), pump_odds (on the A.U.G.U.R Foresight · Pump & LP server, https://augur-trade.com/hub/mcp/pump) and token_risk signals. Price: $0.025 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Launch scan (bundle)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • priceUSD price, 24h change and liquidity for up to 100 Solana mints; flags illiquid (dead) tokens.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    USD price, 24h change and liquidity for up to 100 Solana mints; flags illiquid (dead) tokens. Jupiter price data with a liquidity floor: anything under $1,000 of liquidity is flagged dead, because round-trip quotes on dead curves look fine and are not. When to use: For Solana mints by address; for majors or other chains by symbol use crypto_price (on the A.U.G.U.R Foresight · Chain server, https://augur-trade.com/hub/mcp/chain). Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Token prices
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • solana_networkSolana right now: TPS (total and non-vote), slot and block height, epoch progress and ETA, priority-fee percentiles, cluster version.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Solana right now: TPS (total and non-vote), slot and block height, epoch progress and ETA, priority-fee percentiles, cluster version. Read from mainnet RPC: recent performance samples, epoch info, prioritization fees. When to use: For Solana fees/TPS; for EVM and BTC fee costs use gas_now (on the A.U.G.U.R Foresight · Chain server, https://augur-trade.com/hub/mcp/chain). Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Solana network status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • token_risk0-100 rug-risk score for any Solana token: mint/freeze authority, Token-2022 traps, holder concentration, liquidity depth — plus pump.fun curve flags.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    0-100 rug-risk score for any Solana token: mint/freeze authority, Token-2022 traps, holder concentration, liquidity depth — plus pump.fun curve flags. Contract state is read live from Solana (authorities, Token-2022 extensions such as transfer fees, hooks, permanent delegate, pausable), holders from the largest accounts, market from DexScreener; for tokens still on any launchpad bonding curve (pump.fun, Meteora DBC, letsbonk…) liquidity is the SOL/USDC in the curve, read from chain (field `curve`). For pump.fun mints the curve forensics flags are merged in. When to use: For any Solana token, pump.fun or not. For pump.fun curve-stage detail use pump_token (on the A.U.G.U.R Foresight · Pump & LP server, https://augur-trade.com/hub/mcp/pump); for EVM tokens use evm_token_security. Price: $0.005 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Token risk score
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • vuln_checkKnown security vulnerabilities for a package version (npm, PyPI, crates, Go, Maven, NuGet, RubyGems, Packagist) with severity, CVE/GHSA ids, and the version that fixes each.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Known security vulnerabilities for a package version (npm, PyPI, crates, Go, Maven, NuGet, RubyGems, Packagist) with severity, CVE/GHSA ids, and the version that fixes each. Queries OSV.dev, the open vulnerability database that aggregates GitHub advisories, PyPA, RustSec, Go and more. Pass up to 50 packages at once as "ecosystem:name@version" to audit a lockfile. When to use: For CVEs in one package version; for general package facts use package_info (on the A.U.G.U.R Foresight · Web & Research server, https://augur-trade.com/hub/mcp/web). Price: $0.002 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Dependency vulnerability check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • wallet_holdingsEverything a Solana wallet holds — SOL, SPL and Token-2022 tokens — valued in USD and sorted by value.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Everything a Solana wallet holds — SOL, SPL and Token-2022 tokens — valued in USD and sorted by value. Reads token accounts from both token programs and prices them in one pass. Empty accounts are counted as reclaimable rent. When to use: For Solana wallets; for EVM wallets use evm_address. Price: $0.003 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Wallet holdings
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 2Show 2 read-only tools
  • ens_resolveENS name → address and address → primary name, with avatar, twitter, github, url and email text records.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "ens_resolve" says "resolve": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    ENS name → address and address → primary name, with avatar, twitter, github, url and email text records. Reads ENS on Ethereum mainnet (forward resolution verified; reverse lookup confirmed by forward-resolving the name). Price: free. Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: ENS resolve
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • tx_explainTurns any Solana transaction signature into plain facts: status, fee, programs by name, SOL and token balance changes per owner, a one-line summary.Reads text others writeNo findings

    Why it is in this group

    • The name "tx_explain" says "explain": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Turns any Solana transaction signature into plain facts: status, fee, programs by name, SOL and token balance changes per owner, a one-line summary. Works for swaps, pump.fun trades, LP moves, transfers and failures (includes the error log lines). When to use: For Solana signatures; for 0x hashes use evm_tx. Price: $0.003 per call (10 free/day; after that a payment-required result lists x402 options). Errors: returns isError with a message for invalid input or an upstream failure (not charged).

    Annotations the server declares

    • title: Explain a transaction
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write15
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 3.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http foresight-risk https://augur-trade.com/foresight/mcp/risk
claude mcp add --transport http foresight-risk https://augur-trade.com/foresight/mcp/risk

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__foresight-risk__tx_explain",
      "mcp__foresight-risk__ens_resolve"
    ],
    "ask": [
      "mcp__foresight-risk__token_risk",
      "mcp__foresight-risk__launch_scan",
      "mcp__foresight-risk__counterparty_check",
      "mcp__foresight-risk__price",
      "mcp__foresight-risk__wallet_holdings",
      "mcp__foresight-risk__evm_token_security",
      "mcp__foresight-risk__evm_address",
      "mcp__foresight-risk__erc20_info",
      "mcp__foresight-risk__evm_tx",
      "mcp__foresight-risk__solana_network",
      "mcp__foresight-risk__bitcoin_network",
      "mcp__foresight-risk__address_check",
      "mcp__foresight-risk__vuln_check"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as foresight-risk. Review it before you use it.

Capability tags behind 15 rules
  • mcp__foresight-risk__token_risk untrusted-input
  • mcp__foresight-risk__launch_scan untrusted-input
  • mcp__foresight-risk__counterparty_check untrusted-input
  • mcp__foresight-risk__price untrusted-input
  • mcp__foresight-risk__wallet_holdings untrusted-input
  • mcp__foresight-risk__tx_explain untrusted-input
  • mcp__foresight-risk__evm_token_security untrusted-input
  • mcp__foresight-risk__evm_address untrusted-input
  • mcp__foresight-risk__erc20_info untrusted-input
  • mcp__foresight-risk__evm_tx untrusted-input
  • mcp__foresight-risk__ens_resolve private-data, untrusted-input
  • mcp__foresight-risk__solana_network untrusted-input
  • mcp__foresight-risk__bitcoin_network untrusted-input
  • mcp__foresight-risk__address_check untrusted-input
  • mcp__foresight-risk__vuln_check untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.augur-trade/foresight-risk/verify?hash=36b06c91c5405b8db52d9f3cb36d8793cff0b822aee50b20717750873cbae8d6" | jq -e '.changed == false'

Pinned hash 36b06c91c540, from Oct 25, 2026, 05:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.augur-trade/foresight-risk/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.augur-trade/foresight-risk
[![anlyon.dev](https://anlyon.dev/badge/com.augur-trade/foresight-risk.svg)](https://anlyon.dev/servers/com.augur-trade/foresight-risk)

Source: MCP Registry. Synced Oct 25, 2026, 05:17 UTC.