Skip to content

io.github.HASAVAGE/teardrop

by HASAVAGE · remote · no sign-in to list tools · v1.0.0 · published by GitHub user HASAVAGE

Teardrop MCP gateway: paid tools for autonomous agents (x402, credits).

Changes · 6

35 tools: 6 change things and 29 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http teardrop https://api.teardrop.dev/tools/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "calculate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true}; The description's first verb is "evaluate": a word for a change.

    What this check looks for
  • The server marks "convert_currency" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true}; The name "convert_currency" says "convert": a word for a change.

    What this check looks for
  • The input schema at properties.token_in.description contains a 42-character base64 string.

    Matched text

    inputSchema.properties.token_in.description: "...address (Ethereum: 0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2; Base: 0x4200000000..."

    What this check looks for
  • The server marks "read_contract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true}; The name "read_contract" says "read": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

35 tools

Changes things 6Claude Code: ask
  • calculateEvaluate a safe arithmetic expression and return the numeric result.1 finding

    Why it is in this group

    • The description's first verb is "evaluate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "calculate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true}; The description's first verb is "evaluate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Evaluate a safe arithmetic expression and return the numeric result. Supports +,-,*,/,**,%,sqrt,abs,round,floor,ceil,log,sin,cos,tan,pi,e. Use for derived figures (ratios, differences, percentages) that no tool output already provides. Use when: Use when an agent must derive a value that tool outputs do not already include, such as a ratio, spread, or percentage. Do not use to re-derive pre-computed fields like std_30d or dca_baseline_90d that get_token_price_historical returns. Limitations: Arithmetic only — no aggregation over tool history, no unit conversion, and no financial modeling beyond the listed functions. Errors return an error field rather than raising. Alternatives: get_token_price_historical, get_datetime

    Annotations the server declares

    • readOnlyHint: true
  • convert_currencyConvert an amount between fiat currencies (USD, EUR, GBP) and crypto assets (BTC, ETH, USDC, SOL) and return the converted amount plus the exchange rate used.1 finding

    Why it is in this group

    • The name "convert_currency" says "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "convert_currency" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true}; The name "convert_currency" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert an amount between fiat currencies (USD, EUR, GBP) and crypto assets (BTC, ETH, USDC, SOL) and return the converted amount plus the exchange rate used. Use when: Use when an amount must be expressed in a different currency than the source data — for example converting a USD portfolio value into EUR, or a fiat amount into its crypto equivalent. For prices only, get_token_price returns the rate directly without a second call. Limitations: Spot-rate conversion at request time; no historical or forward rates, and no slippage or fee modeling. Actual swap execution differs — use get_dex_quote for executable on-chain quotes. Alternatives: get_token_price, get_dex_quote

    Annotations the server declares

    • readOnlyHint: true
  • decode_transactionDecode a transaction's calldata into a human-readable function name and arguments, and return transaction status (1=success, 0=revert), gas used, and block number.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Decode a transaction's calldata into a human-readable function name and arguments, and return transaction status (1=success, 0=revert), gas used, and block number. Uses a supplied ABI when provided, otherwise 4byte.directory. Supports Ethereum mainnet and Base. Use when: Use when one known transaction must be explained — what function was called, with what arguments, and whether it succeeded. For wallet-wide activity patterns use get_wallet_history instead. Limitations: 4byte.directory matching can be ambiguous or absent for custom contracts; supply an ABI for precise decoding. One transaction per call; Ethereum mainnet and Base only. Alternatives: get_transaction, get_wallet_history

    Annotations the server declares

    • readOnlyHint: true
  • delegate_to_agentDelegate a task to a remote A2A-compliant agent: discover its capabilities via its agent card, send it a message, handle payment, and return the result.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Delegate a task to a remote A2A-compliant agent: discover its capabilities via its agent card, send it a message, handle payment, and return the result. Use only when no local platform tool can fulfil the request. Use when: Use when a task requires specialist capabilities beyond the local tool set. Call discover_agents first when the remote agent URL is unknown. Do not retry unchanged after error_type=advertised_price_exceeds_cap; pick another result or adjust the cap. Limitations: Requires an allowlisted remote URL and sufficient delegation budget; the remote agent's price and capability claims are read from its card and are not independently verified. Involves real payment. Alternatives: discover_agents, web_search

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
  • read_contractCall any view/pure function on a smart contract and return the decoded result, using a supplied ABI fragment.1 finding

    Why it is in this group

    • The name "read_contract" says "read": a word for reading.
    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "read_contract" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true}; The name "read_contract" says "read": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Call any view/pure function on a smart contract and return the decoded result, using a supplied ABI fragment. Supports historical reads via block_identifier and caller_address context for msg.sender-dependent views. Read-only: state-changing functions are rejected. Use when: Use when a protocol question needs a contract read that no higher-level tool covers — e.g. a niche view function or a protocol outside the standard tool set. Prefer purpose-built tools (get_defi_positions, get_lending_rates) for supported protocols. Limitations: Requires a valid ABI fragment; payable/nonpayable functions are rejected. Ethereum mainnet and Base only, with bounded RPC timeout and retry. Alternatives: get_defi_positions, get_lending_rates, get_token_approvals

    Annotations the server declares

    • readOnlyHint: true
  • record_predictionsRecord a complete structured prediction document for downstream evaluation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Record a complete structured prediction document for downstream evaluation. Call once with the exact machine-readable prediction; the human-readable report is provided separately. Use when: Use at the end of a scheduled analysis run to persist the machine-readable prediction for later scoring. Call exactly once with the complete prediction document — never partially or repeatedly. Limitations: Internal sink for scheduled analysis, not a caller-facing marketplace tool. Stores the prediction as given; no validation of prediction quality or deduplication across calls. Alternatives: get_datetime

    Annotations the server declares

    • readOnlyHint: true
Only reads 29Claude Code: allow
  • assess_counterparty_riskReturn a decision-ready counterparty-risk verdict for an EVM address before funds or authority are committed.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return a decision-ready counterparty-risk verdict for an EVM address before funds or authority are committed. The result branches to high_risk, caution, acceptable, or insufficient_data with the evidence needed for the calling agent to act. Use when: Delegate this check before sending funds, granting approvals, or interacting with an unknown EVM address when the caller needs a bounded risk decision. Limitations: Analytics and heuristic risk assessment; not a credit bureau, fraud guarantee, or legal endorsement. Relies on DeBank indexing and on-chain Aave/Compound contract states. Alternatives: get_wallet_approvals, get_liquidation_risk, get_wallet_positions

    Annotations the server declares

    • readOnlyHint: true
  • assess_market_resolutionReturn a decision-ready resolution-risk verdict for one Polymarket market before an agent trades, quotes, or forecasts it.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return a decision-ready resolution-risk verdict for one Polymarket market before an agent trades, quotes, or forecasts it. The result branches to tradeable, ambiguous, avoid, or insufficient_data and names the resolution basis (price_feed, official_source, media_consensus, unspecified), UMA dispute state, rule-wording risks, and executability (liquidity, spread) so the calling agent can act without reading the full rules. Use when: Call once per market before placing, quoting, or forecasting a Polymarket position when the caller needs to know whether the rules and resolution state make the outcome well-defined. Repeat calls within two minutes return cached data. Limitations: Heuristic analysis of Polymarket rule wording and Gamma API state; not a probability forecast, legal advice, or a guarantee of how UMA voters resolve. Does not read order-book depth, event-level augmented negative-risk settings, or clarifications published off-platform. Alternatives: web_search, http_fetch

    Annotations the server declares

    • readOnlyHint: true
  • count_text_statsReturn word, character, sentence, and paragraph counts plus average words per sentence for a given text, for length checks and content sizing decisions.No findings

    Why it is in this group

    • The name "count_text_stats" says "count": a word for reading.
    Description, as the server wrote it
    Return word, character, sentence, and paragraph counts plus average words per sentence for a given text, for length checks and content sizing decisions. Use when: Use when output length must be validated or reported — e.g. verifying a summary meets a length contract or comparing document sizes. Do not use for semantic summarization; it counts only. Limitations: Pure counting on the provided text — no language detection, no reading-level or sentiment analysis, and no retrieval of external content. Alternatives: web_search, http_fetch

    Annotations the server declares

    • readOnlyHint: true
  • discover_agentsFind opt-in remote A2A agents, published tool capabilities, endpoints, and public reputation status.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find opt-in remote A2A agents, published tool capabilities, endpoints, and public reputation status. Use when: Use before delegate_to_agent when a specialist agent is needed but its URL is unknown. Limitations: Discovery is read-only and does not add an agent to the org allowlist; delegate_to_agent remains authoritative. Alternatives: delegate_to_agent

    Annotations the server declares

    • readOnlyHint: true
  • get_blockGet block details (timestamp, gas used, base fee, miner, transaction count) for an Ethereum or Base block by number, hash, or 'latest'.No findings

    Why it is in this group

    • The name "get_block" says "get": a word for reading.
    Description, as the server wrote it
    Get block details (timestamp, gas used, base fee, miner, transaction count) for an Ethereum or Base block by number, hash, or 'latest'. Use to anchor events to a point in chain time. Use when: Use when a question depends on when a block occurred, how full it was, or its base fee — for example dating a transaction or checking congestion at a specific height. For current fee levels use get_gas_price instead. Limitations: One block per call; Ethereum mainnet and Base only. Historical base fee data depends on RPC node retention for older heights. Alternatives: get_transaction, get_gas_price

    Annotations the server declares

    • readOnlyHint: true
  • get_chain_metricsCompare blockchain ecosystem health via DeFiLlama: current TVL, 7/30-day TVL change, and aggregate fee activity.No findings

    Why it is in this group

    • The name "get_chain_metrics" says "get": a word for reading.
    Description, as the server wrote it
    Compare blockchain ecosystem health via DeFiLlama: current TVL, 7/30-day TVL change, and aggregate fee activity. Pass chains such as ['Ethereum', 'Arbitrum', 'Solana'] for a focused comparison, or omit chains to inspect the highest-TVL ecosystems. Use when: Use for ecosystem-level comparisons — which chains are growing, where fee activity concentrates, or how a chain's TVL trended. For a single protocol's economics use get_protocol_tvl instead. Limitations: Third-party DeFiLlama analytics; historical and fee fields fail open (null) for uncovered chains. Not a real-time measure of chain throughput or security. Alternatives: get_protocol_tvl, get_dex_volume

    Annotations the server declares

    • readOnlyHint: true
  • get_datetimeReturn the current UTC date and time as a formatted string and ISO 8601 timestamp, for grounding time-relative reasoning in the actual clock rather than training-data assumptions.No findings

    Why it is in this group

    • The name "get_datetime" says "get": a word for reading.
    Description, as the server wrote it
    Return the current UTC date and time as a formatted string and ISO 8601 timestamp, for grounding time-relative reasoning in the actual clock rather than training-data assumptions. Use when: Use when a task must anchor on the current date or time — computing ages, windows, deadlines, or 'as of today' context. The runtime context block already states the date, so call this only when a specific strftime format or a precise timestamp is needed. Limitations: UTC only — no timezone conversion. An unsupported strftime format silently falls back to the default format instead of erroring. Alternatives: calculate, get_block

    Annotations the server declares

    • readOnlyHint: true
  • get_defi_positionsBlock-accurate DeFi positions for a wallet across Aave v3, Compound v3, Uniswap v3 LP, and Lido on Ethereum or Base.No findings

    Why it is in this group

    • The name "get_defi_positions" says "get": a word for reading.
    Description, as the server wrote it
    Block-accurate DeFi positions for a wallet across Aave v3, Compound v3, Uniswap v3 LP, and Lido on Ethereum or Base. Returns Aave account health (collateral, debt, health factor, LTV) with per-reserve breakdown, Compound v3 market positions, Uniswap v3 LP positions by token ID, and on Ethereum the Lido stETH/wstETH balances with the current wstETH-to-stETH equivalent. Per-protocol failures are isolated — other protocols still return. Use when: Use when a block-accurate single-wallet protocol snapshot is needed, including health factor and LP position detail. For broad all-chain discovery or net worth across many protocols use get_wallet_positions instead. Limitations: On-chain RPC view of four protocol families on Ethereum and Base only; does not discover wallets' unknown or long-tail protocol positions. Compound v3 reports only a boolean liquidation flag — never state a numeric Compound health factor. Errors list which protocols were unavailable. Alternatives: get_wallet_positions, get_liquidation_risk, get_wallet_portfolio

    Annotations the server declares

    • readOnlyHint: true
  • get_dex_quoteGet the best Uniswap v3 swap quote on Ethereum (chain_id=1) or Base (chain_id=8453) via direct on-chain QuoterV2 calls.1 finding

    Why it is in this group

    • The name "get_dex_quote" says "get": a word for reading.

    Findings

    • Warn

      The input schema at properties.token_in.description contains a 42-character base64 string.

      Matched text

      inputSchema.properties.token_in.description: "...address (Ethereum: 0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2; Base: 0x4200000000..."

      What this check looks for
    Description, as the server wrote it
    Get the best Uniswap v3 swap quote on Ethereum (chain_id=1) or Base (chain_id=8453) via direct on-chain QuoterV2 calls. Queries all four fee tiers (100/500/3000/10000 bps) in parallel and returns the tier with the highest output amount, along with per-tier breakdown. Inputs are raw uint256 amounts and EIP-55 checksummed addresses; native ETH is not quoted directly — pass the WETH address. Returns no_liquidity=true when no pool exists for the pair. Point-in-time quote at the returned block_number; do not cache. Use when: Choose when you need a best-execution Uniswap v3 swap quote on Ethereum or Base before executing a trade — e.g. price impact, output amount, or route selection. Limitations: Quotes raw uint256 amounts with EIP-55 checksummed addresses only; native ETH is not quoted directly (pass WETH). Point-in-time at the returned block_number — do not cache. Alternatives: get_token_price, get_dex_volume

    Annotations the server declares

    • readOnlyHint: true
  • get_dex_volumeCompare decentralized exchange activity via DeFiLlama: 24h/7d/30-day volume, period-over-period changes, and each protocol's share of reported global 24-hour DEX volume.No findings

    Why it is in this group

    • The name "get_dex_volume" says "get": a word for reading.
    Description, as the server wrote it
    Compare decentralized exchange activity via DeFiLlama: 24h/7d/30-day volume, period-over-period changes, and each protocol's share of reported global 24-hour DEX volume. Filter by protocol and rank by a 1-, 7-, or 30-day lookback window. Use when: Use for landscape questions — which DEXs dominate volume, how activity shifted week-over-week, or a specific protocol's relative share. For executable swap pricing use get_dex_quote instead. Limitations: Third-party DeFiLlama reporting, not on-chain truth; coverage gaps understate smaller protocols. 24-hour share is computed against the unfiltered global total, so filtered results retain landscape context. Alternatives: get_dex_quote, get_chain_metrics

    Annotations the server declares

    • readOnlyHint: true
  • get_erc20_balanceGet the exact on-chain ERC-20 balance of a wallet for one token contract, normalized by decimals and returned with the token's symbol.No findings

    Why it is in this group

    • The name "get_erc20_balance" says "get": a word for reading.
    Description, as the server wrote it
    Get the exact on-chain ERC-20 balance of a wallet for one token contract, normalized by decimals and returned with the token's symbol. Use for a precise single-token check. Use when: Use when a specific token contract's balance must be verified block-accurately — e.g. confirming funds before an approval or transfer. For a multi-asset portfolio view use get_wallet_portfolio instead. Limitations: One token contract per call on Ethereum or Base; the contract address is required, so unknown tokens cannot be looked up by symbol. Returns raw balance data only — no USD valuation. Alternatives: get_wallet_portfolio, get_eth_balance

    Annotations the server declares

    • readOnlyHint: true
  • get_eth_balanceGet the exact on-chain native ETH balance of an address on Ethereum or Base, in wei and ether.No findings

    Why it is in this group

    • The name "get_eth_balance" says "get": a word for reading.
    Description, as the server wrote it
    Get the exact on-chain native ETH balance of an address on Ethereum or Base, in wei and ether. get_wallet_portfolio already includes native ETH in its holdings — call this only for a standalone balance without a portfolio scan. Use when: Use when a wallet's gas-availability or standalone ETH amount must be verified block-accurately. Do not call after or alongside get_wallet_portfolio — the holdings list already includes native ETH. Limitations: Native ETH only; ERC-20 balances require get_erc20_balance. Requires an EIP-55 checksummed address. Ethereum mainnet and Base only. Alternatives: get_wallet_portfolio, get_erc20_balance

    Annotations the server declares

    • readOnlyHint: true
  • get_gas_priceGet current EIP-1559 gas fees on Ethereum or Base: base fee, priority fee, next-block base fee estimate, and congestion (gas_used_ratio >0.5 busy, >0.9 very congested).No findings

    Why it is in this group

    • The name "get_gas_price" says "get": a word for reading.
    Description, as the server wrote it
    Get current EIP-1559 gas fees on Ethereum or Base: base fee, priority fee, next-block base fee estimate, and congestion (gas_used_ratio >0.5 busy, >0.9 very congested). Optional USD estimates cover a simple transfer and a swap-like transaction. Cached 10 seconds per chain. Use when: Use before advising a transaction — to time execution, size a gas budget, or judge congestion. Call once per decision; the 10-second cache makes rapid re-calls pointless. Limitations: Point-in-time estimate that changes every block; USD figures are rough heuristics at 21k/150k gas, not an execution quote. Ethereum mainnet and Base only. Alternatives: get_block, get_dex_quote

    Annotations the server declares

    • readOnlyHint: true
  • get_lending_ratesGet current on-chain lending supply/borrow APYs for Aave v3 reserves and Compound v3 markets on Ethereum or Base, with per-asset snapshots and Compound utilization.No findings

    Why it is in this group

    • The name "get_lending_rates" says "get": a word for reading.
    Description, as the server wrote it
    Get current on-chain lending supply/borrow APYs for Aave v3 reserves and Compound v3 markets on Ethereum or Base, with per-asset snapshots and Compound utilization. Use for protocol-specific yield comparisons such as USDC on Aave vs Compound. Use when: Use for protocol-specific lending-rate questions (e.g. 'Aave vs Compound USDC rates'). Prefer over get_yield_rates when the protocols are known; use get_yield_rates for broad pool discovery across many protocols. Do not fall back to web_search when this returns errors — report them. Limitations: On-chain snapshots of Aave v3 and Compound v3 on Ethereum and Base only; not a multi-protocol yield aggregator. Rates are point-in-time and change per block. Returns an errors list — report each unavailable protocol explicitly and treat empty rates with empty errors as transient RPC unavailability. Alternatives: get_yield_rates, get_defi_positions, get_liquidation_risk

    Annotations the server declares

    • readOnlyHint: true
  • get_liquidation_riskAssess DeFi liquidation risk for up to 50 wallets across Aave v3 and Compound v3 on Ethereum or Base.No findings

    Why it is in this group

    • The name "get_liquidation_risk" says "get": a word for reading.
    Description, as the server wrote it
    Assess DeFi liquidation risk for up to 50 wallets across Aave v3 and Compound v3 on Ethereum or Base. Returns per-wallet health factor, tiered risk classification (liquidatable, critical, warning, caution, healthy, no_debt), and an overall_tier aggregate. Per-protocol failures are isolated — one protocol's RPC error does not blank the other's result. Use when: Use for multi-wallet batch risk assessment (2+ wallets). For a single-wallet DeFi analysis use get_defi_positions, which already includes risk metrics. Use assess_counterparty_risk when the question is counterparty trust rather than position health. Limitations: View-only scan of Aave v3 and Compound v3 on Ethereum and Base with hardcoded market addresses; not a liquidation simulation or guarantee. Compound v3 exposes only a boolean liquidation flag — no numeric health factor. Duplicate wallet addresses are silently removed. Alternatives: get_defi_positions, assess_counterparty_risk, get_wallet_positions

    Annotations the server declares

    • readOnlyHint: true
  • get_protocol_tvlGet Total Value Locked for one or many DeFi protocols from DeFiLlama: current USD TVL, 7/30-day change, fees and revenue when reported, per-chain breakdown, and optional daily hist…No findings

    Why it is in this group

    • The name "get_protocol_tvl" says "get": a word for reading.
    Description, as the server wrote it
    Get Total Value Locked for one or many DeFi protocols from DeFiLlama: current USD TVL, 7/30-day change, fees and revenue when reported, per-chain breakdown, and optional daily historical series. Batch multiple protocols via protocols=[...] — batch responses return one compact economic summary per protocol; single-protocol calls add chain and historical detail. Supports 3,000+ protocols; use DeFiLlama slugs ('aave-v3', 'uniswap-v3'); common aliases are auto-corrected. Use when: Use for protocol-level economic questions — size, growth, fees, or revenue of a specific protocol. For 2+ protocols always batch in one call rather than calling per-protocol. Pass include_historical=true with days when a trend is needed; without it the response is a current TVL scalar. For ecosystem-level chain comparisons use get_chain_metrics instead. Limitations: Third-party DeFiLlama analytics, not on-chain truth. Upstream revenue failures surface as revenue_error_type and null economic fields are data gaps — never fabricate values for them. Alternatives: get_chain_metrics, get_yield_rates, get_dex_volume

    Annotations the server declares

    • readOnlyHint: true
  • get_token_approvalsBlock-accurate audit of ERC-20 allowances for a wallet across curated DeFi spenders (Uniswap, Aave, Compound, 1inch, 0x, OpenSea) on Ethereum or Base.No findings

    Why it is in this group

    • The name "get_token_approvals" says "get": a word for reading.
    Description, as the server wrote it
    Block-accurate audit of ERC-20 allowances for a wallet across curated DeFi spenders (Uniswap, Aave, Compound, 1inch, 0x, OpenSea) on Ethereum or Base. Flags unlimited approvals by risk level (high=unknown spender, medium=trusted protocol, low=bounded). Use before swaps or after security incidents to detect active exploit vectors. Use when: Use for a free, block-accurate Ethereum/Base check of an address's exposure to the curated spender list. For broad all-chain spender discovery, hacked/abandoned flags, or NFT-adjacent exposure use get_wallet_approvals instead. Limitations: Covers only the tracked-asset registry and curated spenders — untracked tokens and custom spenders are excluded. Does not inspect NFT approvals or off-chain Permit2 sub-permits. An error field marks results as incomplete rather than clean. Alternatives: get_wallet_approvals, assess_counterparty_risk

    Annotations the server declares

    • readOnlyHint: true
  • get_token_priceGet current price, 24h change, market cap, FDV, and volume for one or more crypto tokens.No findings

    Why it is in this group

    • The name "get_token_price" says "get": a word for reading.
    Description, as the server wrote it
    Get current price, 24h change, market cap, FDV, and volume for one or more crypto tokens. Accepts ticker symbols, full names, or CoinGecko IDs; unknown symbols resolve automatically. Batch up to 50 tokens. Reuse price_usd/value_usd already returned by get_wallet_portfolio instead of re-calling. Use when: Use for spot pricing of named tokens — including batched multi-token queries. Do not call for tokens whose price get_wallet_portfolio already returned, or for address-only unknown tokens (report them as unrecognized). For historical windows use get_token_price_historical. Limitations: CoinGecko spot data; point-in-time and not an executable swap quote. Bare 0x addresses are not resolvable and should be treated as unknown tokens. Alternatives: get_token_price_historical, get_wallet_portfolio, get_dex_quote

    Annotations the server declares

    • readOnlyHint: true
  • get_token_price_historicalGet historical crypto prices over a 1–365 day window: period statistics (start, end, % change, high, low), a downsampled daily series, high_30d, std_30d, and dca_baseline_90d.No findings

    Why it is in this group

    • The name "get_token_price_historical" says "get": a word for reading.
    Description, as the server wrote it
    Get historical crypto prices over a 1–365 day window: period statistics (start, end, % change, high, low), a downsampled daily series, high_30d, std_30d, and dca_baseline_90d. Use for period comparisons and trend analysis; prefer over web_search for time-comparative financial queries. Pass stats_only=true when the daily series is unnecessary. Use when: Use for time-comparative financial questions — month-over-month, YTD, volatility, or DCA baselines. Prefer over web_search for such queries. Use the pre-computed stats directly; do not re-derive them with calculate. Limitations: Daily granularity (downsampled), max 365-day window, CoinGecko coverage only. Check dca_baseline_90d_partial before relying on the baseline — incomplete history yields a partial baseline. Alternatives: get_token_price, web_search

    Annotations the server declares

    • readOnlyHint: true
  • get_transactionGet details and receipt for one Ethereum or Base transaction by hash: bounded calldata, normalized event logs, transaction index, and receipt-derived effective gas price and fee wh…No findings

    Why it is in this group

    • The name "get_transaction" says "get": a word for reading.
    Description, as the server wrote it
    Get details and receipt for one Ethereum or Base transaction by hash: bounded calldata, normalized event logs, transaction index, and receipt-derived effective gas price and fee when available. Use to verify a specific transaction's status and outcome. Use when: Use when one known transaction must be verified — status, logs, gas paid, or execution outcome. To understand what the calldata means use decode_transaction; for wallet-wide activity use get_wallet_history. Limitations: One transaction hash per call on Ethereum or Base; pending transactions may not resolve yet. Calldata is returned bounded, not decoded — use decode_transaction for semantic decoding. Alternatives: decode_transaction, get_block, get_wallet_history

    Annotations the server declares

    • readOnlyHint: true
  • get_wallet_approvalsInspect a wallet's current ERC-20 token authorization exposure on one DeBank-supported chain.No findings

    Why it is in this group

    • The name "get_wallet_approvals" says "get": a word for reading.
    Description, as the server wrote it
    Inspect a wallet's current ERC-20 token authorization exposure on one DeBank-supported chain. Returns discovered spenders, USD exposure, protocol attribution, and hacked or abandoned protocol flags. This is broader than the curated block-accurate get_token_approvals tool. Use when: Use when broad spender discovery or cross-chain security screening is needed. Call once per chain because DeBank requires a chain_id. Use get_token_approvals for a free, block-accurate Ethereum or Base scan of curated tokens and spenders. Limitations: The result is third-party analytics and may be stale. It covers token approvals only, not NFT approvals or off-chain Permit2 sub-permits; each chain consumes a separate billable provider call. Alternatives: get_token_approvals

    Annotations the server declares

    • readOnlyHint: true
  • get_wallet_historyGet one page of decoded transaction history for an EVM wallet across DeBank-supported chains.No findings

    Why it is in this group

    • The name "get_wallet_history" says "get": a word for reading.
    Description, as the server wrote it
    Get one page of decoded transaction history for an EVM wallet across DeBank-supported chains. Returns send, receive, and approval categories with protocol, token, exchange, gas, and USD metadata. Use the returned next_cursor as start_time to page backward. Use when: Use for wallet activity discovery, protocol interaction history, exchange exposure, and gas analysis. Page backward with next_cursor for older activity. Use get_transaction or decode_transaction when one known transaction needs block-level details. Limitations: DeBank returns at most 20 entries per call and the data may be stale. This tool is not a complete ledger, PnL engine, or cost-basis calculator because historical execution prices and all transfer semantics are not guaranteed. Alternatives: get_transaction, decode_transaction

    Annotations the server declares

    • readOnlyHint: true
  • get_wallet_portfolioGet aggregated token holdings with USD values for a wallet address.No findings

    Why it is in this group

    • The name "get_wallet_portfolio" says "get": a word for reading.
    Description, as the server wrote it
    Get aggregated token holdings with USD values for a wallet address. Tracks 19 major assets on Ethereum and 12 on Base, including spot, lending, liquid-staking, restaking, and stablecoin assets. Sorted by USD value. Returns up to 20 holdings. Includes native ETH balance in the holdings list — calling get_eth_balance separately after this is redundant. Use when: Choose when you need a wallet's overall token exposure and USD value on Ethereum or Base in one call. Call once per chain for a cross-chain comparison. Limitations: Tracks a fixed set of major assets per chain, not arbitrary tokens. Returns up to 20 holdings. Native ETH is included, so calling get_eth_balance separately is redundant. Alternatives: get_eth_balance, get_token_price, get_defi_positions

    Annotations the server declares

    • readOnlyHint: true
  • get_wallet_positionsGet a wallet's DeFi positions across all DeBank-supported chains and protocols.No findings

    Why it is in this group

    • The name "get_wallet_positions" says "get": a word for reading.
    Description, as the server wrote it
    Get a wallet's DeFi positions across all DeBank-supported chains and protocols. Returns protocol-level positions, asset/debt/net USD values, optional token lists, aggregate exposure, and optional all-chain net worth. Set include_token_balances=true to also return DeBank's complete cross-chain wallet token list. Set include_token_lists=false for a compact balance and debt summary without nested position tokens. This covers substantially more protocols and chains than the block-accurate get_defi_positions tool. Use raw-RPC tools for liquidation, swap quotes, or other transaction-critical questions. Use when: Use for broad wallet discovery, portfolio allocation, protocol exposure, or cross-chain position questions. Set include_token_balances=true when complete wallet token discovery is required; otherwise the response only includes tokens attached to protocol positions. Set include_token_lists=false when only protocol balances, debt, or aggregate exposure are needed. Use get_defi_positions when the user needs a block-accurate Aave, Compound, Uniswap, or Lido snapshot. Limitations: DeBank portfolio data is third-party analytics and may be stale, including occasional long refresh delays. It is read-only, EVM wallet oriented, and does not prove current liquidation or execution state. include_token_balances adds a separate billable DeBank request; include_token_lists only changes response detail. Alternatives: get_defi_positions, get_wallet_portfolio, get_token_approvals

    Annotations the server declares

    • readOnlyHint: true
  • get_yield_ratesGet DeFi yield pool rates from DeFiLlama across 1,000+ protocols and all chains: pools sorted by APY with TVL, base/reward APY, and 7d/30d mean APY context, filterable by protocol,…No findings

    Why it is in this group

    • The name "get_yield_rates" says "get": a word for reading.
    Description, as the server wrote it
    Get DeFi yield pool rates from DeFiLlama across 1,000+ protocols and all chains: pools sorted by APY with TVL, base/reward APY, and 7d/30d mean APY context, filterable by protocol, chain, min TVL, min/max APY, and symbol. Returns up to 50 pools. For protocol-specific lending comparisons (Aave vs Compound) prefer get_lending_rates. Use when: Use for broad cross-protocol yield discovery. Call at most once per request — filter with min_apy, max_apy, min_tvl_usd, and symbols_any in a single call, then sort client-side rather than re-calling. For protocol-specific rate questions use get_lending_rates. Limitations: Third-party DeFiLlama analytics; up to 50 pools per call. The `symbol` field lists underlying tokens (e.g. 'ETH-USDC') — filter client-side instead of re-calling with different arguments. Reward APY indicates reward-dependent yield; do not present spot APY as durable. Alternatives: get_lending_rates, get_protocol_tvl, get_token_price

    Annotations the server declares

    • readOnlyHint: true
  • http_fetchFetch a web page and return its main text content, cleaned of markup.No findings

    Why it is in this group

    • The name "http_fetch" says "fetch": a word for reading.
    Description, as the server wrote it
    Fetch a web page and return its main text content, cleaned of markup. Use to read articles, documentation, and other resources referenced by URL. Blocks private and cloud-metadata addresses and re-validates every redirect hop. Use when: Use when a known URL's content is needed and structured tools cannot answer — e.g. reading a linked document or API docs. For general factual lookup prefer web_search; for token prices prefer get_token_price. Limitations: Read-only GET-style extraction returning cleaned text, not raw HTML or binary content. JS-heavy pages may yield little content; private/internal network targets are deliberately unreachable. Alternatives: web_search, get_token_price

    Annotations the server declares

    • readOnlyHint: true
  • resolve_ensResolve an ENS name (e.g.No findings

    Why it is in this group

    • The name "resolve_ens" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve an ENS name (e.g. 'vitalik.eth') to an Ethereum address, or an address to its primary ENS name, with avatar text record when available. Mainnet only. Use when: Use only when no 0x address is available and a name must become an address (or vice versa for attribution). If a 0x address is already present in the task or session, use it directly — resolution is redundant and adds latency. Limitations: Ethereum mainnet ENS only — no other chains or naming services. Reverse records are optional on ENS, so a valid address may legitimately have no primary name. Alternatives: get_wallet_portfolio, get_wallet_history

    Annotations the server declares

    • readOnlyHint: true
  • validate_opportunityReturn a decision-ready yield-opportunity verdict before capital is deployed.No findings

    Why it is in this group

    • The name "validate_opportunity" says "validate": a word for reading.
    Description, as the server wrote it
    Return a decision-ready yield-opportunity verdict before capital is deployed. The result branches to sustainable, caution, unsustainable, or insufficient_data and gives the calling agent the evidence needed to proceed, pause, or reject the opportunity. Use when: Delegate this check before deploying capital into a DeFi yield pool or staking opportunity when the caller needs an independent sustainability and liquidity decision. Limitations: Heuristic economic assessment based on DeFiLlama analytics and CoinGecko pricing. Does not audit smart contract bytecode, protocol governance, or admin key security. Alternatives: get_yield_rates, get_protocol_tvl, get_lending_rates, assess_counterparty_risk

    Annotations the server declares

    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http teardrop https://api.teardrop.dev/tools/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__teardrop__assess_counterparty_risk",
      "mcp__teardrop__assess_market_resolution",
      "mcp__teardrop__discover_agents",
      "mcp__teardrop__get_datetime",
      "mcp__teardrop__get_block",
      "mcp__teardrop__get_chain_metrics",
      "mcp__teardrop__get_dex_quote",
      "mcp__teardrop__get_dex_volume",
      "mcp__teardrop__get_defi_positions",
      "mcp__teardrop__get_gas_price",
      "mcp__teardrop__get_lending_rates",
      "mcp__teardrop__get_liquidation_risk",
      "mcp__teardrop__get_token_approvals",
      "mcp__teardrop__get_wallet_approvals",
      "mcp__teardrop__get_token_price",
      "mcp__teardrop__get_protocol_tvl",
      "mcp__teardrop__get_token_price_historical",
      "mcp__teardrop__get_yield_rates",
      "mcp__teardrop__web_search",
      "mcp__teardrop__count_text_stats",
      "mcp__teardrop__http_fetch",
      "mcp__teardrop__get_eth_balance",
      "mcp__teardrop__get_erc20_balance",
      "mcp__teardrop__get_transaction",
      "mcp__teardrop__get_wallet_portfolio",
      "mcp__teardrop__get_wallet_history",
      "mcp__teardrop__get_wallet_positions",
      "mcp__teardrop__resolve_ens",
      "mcp__teardrop__validate_opportunity"
    ],
    "ask": [
      "mcp__teardrop__calculate",
      "mcp__teardrop__convert_currency",
      "mcp__teardrop__decode_transaction",
      "mcp__teardrop__delegate_to_agent",
      "mcp__teardrop__read_contract",
      "mcp__teardrop__record_predictions"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as teardrop. Review it before you use it.