# `dev.xroot/token-operations` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/dev.xroot/token-operations
- JSON: https://anlyon.dev/api/v1/servers/dev.xroot/token-operations
- Version: 1.1.0 (active)
- Publisher: dev.xroot (domain proven to the MCP Registry)
- Runs: remote (sse,streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:12:36.287Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Read-only Solana and Robinhood Chain tools: wallet recovery, token safety, unlocks, upgrades, fees.
```

Scanned 2026-10-21T18:59:50.725Z over streamable-http.

**18 tools: 3 change things and 15 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 3 | ask |
| Only reads | read | 15 | allow |

## Findings

- **warn** Annotations that disagree with the tool in `check_failed_deploys` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "check_failed_deploys" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_failed_deploys" says "deploy": a word for a change.
```

- **warn** Annotations that disagree with the tool in `audit_token` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "audit_token" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.
```

- **warn** Annotations that disagree with the tool in `check_token_unlocks` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "check_token_unlocks" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_token_unlocks" says "unlock": a word for a change.
```


## Changes things (3)

Creates or changes something that can be changed back. Claude Code: ask.

### `audit_token`

- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Run the free risk report on a token: who can still mint or freeze, transfer taxes and hooks, permanent delegates, liquidity status, holder concentration, and a verdict with a score. On Solana pass the mint address; on an EVM chain pass the token contract address. Use it when a user asks whether a token is safe, a rug, or a honeypot. Reads only.
```

### `check_failed_deploys`

- The name "check_failed_deploys" says "deploy": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Read the program buffer accounts left behind by a Solana wallet's failed or interrupted program deploys, and the SOL recovering them returns net of fees. Nothing is recovered.
```

### `check_token_unlocks`

- The name "check_token_unlocks" says "unlock": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Read a Solana token's on-chain locks: supply vesting and locked liquidity, per locker, with the cliff, start, period and released amounts each lock reports. Use it when a user asks when a token unlocks or whether its liquidity is locked. Reads public lock accounts only.
```

## Only reads (15)

Looks things up and changes nothing. Claude Code: allow.

### `check_approvals`

- The description's first verb is "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the standing token approvals on an EVM wallet — contracts still allowed to move its tokens — ranked by risk, with unlimited allowances, expired permits and flagged spenders called out. A risk read, not money: revoking returns nothing. Nothing is revoked.
```

### `check_closable_programs`

- The description's first verb is "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read the upgradeable programs a Solana wallet holds the upgrade authority for, and the gross rent their bytecode accounts hold. Closing a program is permanent, so this reads only.
```

### `check_dlmm_positions`

- The description's first verb is "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read a Solana wallet's Meteora DLMM and DAMM v2 positions by status, how many can be closed now, and the gross SOL deposit those closable positions hold — what closing them returns before fees. Nothing is closed.
```

### `check_frozen_tokens`

- The description's first verb is "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read the permissioned (Token ACL) tokens a Solana wallet holds, and which of them the holder can unlock itself under the token's published rules. Nothing is unlocked.
```

### `check_lookup_tables`

- The name "check_lookup_tables" says "lookup": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read the address lookup tables a Solana wallet owns: how many are ready to close, cooling down, or still active, and the gross rent each group holds. Nothing is deactivated or closed.
```

### `check_lp_fees`

- The description's first verb is "count": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Count a Solana wallet's liquidity positions with trading fees waiting to be claimed, per venue: Orca Whirlpools, Meteora, and locked Raydium liquidity. Fees are owed in many different tokens, so the answer is a count of positions, never a summed figure. Nothing is claimed.
```

### `check_reclaimable_rent`

- The description's first verb is "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read how much SOL a Solana wallet can reclaim from rent: the deposits parked in its empty token accounts, and the surplus the rent cut left in accounts it still uses. Returns counts and net figures in SOL. Nothing is closed or moved.
```

### `check_subscriptions`

- The description's first verb is "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read the on-chain subscriptions and recurring allowances a Solana wallet has granted, by state, plus the rent their accounts would return to this wallet (a sponsored subscription's rent goes back to its sponsor). Nothing is cancelled.
```

### `check_token_delegates`

- The description's first verb is "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the standing token delegates and approvals on a Solana wallet — programs still allowed to move its tokens. A risk read, not money: revoking returns no SOL. Nothing is revoked.
```

### `check_token_tax`

- The description's first verb is "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the transfer-tax tokens a Solana wallet launched through the platform, with each tax rate — the tokens whose withheld tax that wallet can collect. Nothing is collected.
```

### `check_wallet`

- The description's first verb is "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read everything a wallet can get back, in one call: on Solana, the rent in empty token accounts, the surplus the rent cut left, wrapped SOL, failed-deploy buffers, closable programs, lookup tables, dead Meteora positions, subscriptions, LP fees waiting on Orca, Meteora and locked Raydium positions, standing token delegates (a risk, not money), transfer-tax tokens it launched, and permissioned tokens it can unlock; on an EVM chain, LP fees, creator fees, bridge withdrawals and the wrapped native coin. Every venue is read independently and reports ok, failed or unavailable, and whether it answered in full, so a failed read is never mistaken for nothing there. Use it for "what can this wallet recover"; use the per-venue tools for one venue in detail.
```

### `check_wrapped_sol`

- The description's first verb is "read": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Read the wrapped SOL (wSOL) sitting in a Solana wallet's token accounts, and what unwrapping it back to SOL returns net of fees. Nothing is unwrapped.
```

### `get_fee_estimate`

- The name "get_fee_estimate" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Quote the exact cost of a token operation before anything is built: the platform fee for that service on that chain plus the estimated network fee (rent, base and priority), as decimal strings in the chain's currency. Use it when a user asks what a token deploy, authority revoke, airdrop or metadata update would cost. Reads only; nothing is prepared or sent.
```

### `list_upgrades`

- The name "list_upgrades" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List Solana's protocol upgrades (feature gates) with their state on mainnet, testnet and devnet — pending with an activation estimate, active with its activation epoch, or not yet queued — as read from the chain. Use it when a user asks whether a SIMD or feature has activated, or what is coming next. Optionally filter by mainnet state.
```

### `search_tokens`

- The name "search_tokens" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Find a token by name, symbol or address in the xroot.dev token directory — the trending and newest tokens the platform has indexed on an EVM chain — with each token's pool, price and cached audit verdict where one exists. Use it to resolve which of several same-named tokens a user means before auditing it.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `token-operations`:

```json
{
  "permissions": {
    "allow": [
      "mcp__token-operations__check_wallet",
      "mcp__token-operations__check_reclaimable_rent",
      "mcp__token-operations__check_wrapped_sol",
      "mcp__token-operations__check_token_delegates",
      "mcp__token-operations__check_closable_programs",
      "mcp__token-operations__check_lookup_tables",
      "mcp__token-operations__check_lp_fees",
      "mcp__token-operations__check_dlmm_positions",
      "mcp__token-operations__check_subscriptions",
      "mcp__token-operations__check_token_tax",
      "mcp__token-operations__check_frozen_tokens",
      "mcp__token-operations__search_tokens",
      "mcp__token-operations__list_upgrades",
      "mcp__token-operations__check_approvals",
      "mcp__token-operations__get_fee_estimate"
    ],
    "ask": [
      "mcp__token-operations__check_failed_deploys",
      "mcp__token-operations__audit_token",
      "mcp__token-operations__check_token_unlocks"
    ],
    "deny": []
  }
}
```