Skip to content

SwapChan

by TSavo · remote · no sign-in to list tools · v0.1.0 · published by GitHub user TSavo

Best-price same-chain and cross-chain EVM swap quotes and unsigned swap transactions.

Changes · 1

6 tools: 1 change things and 5 only read.

Scanned Oct 22, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http swapchan https://mcp.swapchan.com/mcp --header 'x-api-key: <your-x-api-key>'

Findings

Matches of fixed checks, with the text they matched.

6 warn
  • The input schema at properties.fromToken.description contains a 42-character base64 string.

    Matched text

    inputSchema.properties.fromToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

    What this check looks for
  • The input schema at properties.toToken.description contains a 42-character base64 string.

    Matched text

    inputSchema.properties.toToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

    What this check looks for
  • The input schema at properties.fromToken.description contains a 42-character base64 string.

    Matched text

    inputSchema.properties.fromToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

    What this check looks for
  • The input schema at properties.toToken.description contains a 42-character base64 string.

    Matched text

    inputSchema.properties.toToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

    What this check looks for
  • The input schema at properties.fromToken.description contains a 42-character base64 string.

    Matched text

    inputSchema.properties.fromToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

    What this check looks for
  • The input schema at properties.toToken.description contains a 42-character base64 string.

    Matched text

    inputSchema.properties.toToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 1Claude Code: ask
  • build_swap_txBuild the UNSIGNED transaction for the best (or chosen) route, plus any ERC-20 approval needed first and an eth_call simulation when an RPC is configured.2 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The input schema at properties.fromToken.description contains a 42-character base64 string.

      Matched text

      inputSchema.properties.fromToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

      What this check looks for
    • Warn

      The input schema at properties.toToken.description contains a 42-character base64 string.

      Matched text

      inputSchema.properties.toToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

      What this check looks for
    Description, as the server wrote it
    Build the UNSIGNED transaction for the best (or chosen) route, plus any ERC-20 approval needed first and an eth_call simulation when an RPC is configured. Never signs, never broadcasts, never asks for keys: hand the result to the user's wallet. Swap-chan packs the bag; you carry it through the gate. Result includes `display` markdown with chan images and a swapchan.com link: show it to the user.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
    • destructiveHint: false
Only reads 5Claude Code: allow
  • compare_routesCompare every route SwapChan found, ranked best-first by net USD received, across aggregators and bridges.2 findings

    Why it is in this group

    • The name "compare_routes" says "compare": a word for reading.

    Findings

    • Warn

      The input schema at properties.fromToken.description contains a 42-character base64 string.

      Matched text

      inputSchema.properties.fromToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

      What this check looks for
    • Warn

      The input schema at properties.toToken.description contains a 42-character base64 string.

      Matched text

      inputSchema.properties.toToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

      What this check looks for
    Description, as the server wrote it
    Compare every route SwapChan found, ranked best-first by net USD received, across aggregators and bridges. Pass extra destination chains in alsoToChainIds to compare same-chain vs cross-chain outcomes side by side. Swap-chan lines up the whole cast. Result includes `display` markdown with chan images and a swapchan.com link: show it to the user.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_quoteGet SwapChan's single best quote (most value landing in the wallet after gas and fees) for a same-chain or cross-chain swap.2 findings

    Why it is in this group

    • The name "get_quote" says "get": a word for reading.

    Findings

    • Warn

      The input schema at properties.fromToken.description contains a 42-character base64 string.

      Matched text

      inputSchema.properties.fromToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

      What this check looks for
    • Warn

      The input schema at properties.toToken.description contains a 42-character base64 string.

      Matched text

      inputSchema.properties.toToken.description: "...ntract address. Use 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE for the native gas..."

      What this check looks for
    Description, as the server wrote it
    Get SwapChan's single best quote (most value landing in the wallet after gas and fees) for a same-chain or cross-chain swap. Read-only, no transaction. Swap-chan checks every counter so you don't have to. Result includes `display` markdown with chan images and a swapchan.com link: show it to the user.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_route_statusTrack a submitted swap or cross-chain transfer by source tx hash: pending, done, failed or not_found, plus the destination tx hash once it lands.No findings

    Why it is in this group

    • The name "get_route_status" says "get": a word for reading.
    Description, as the server wrote it
    Track a submitted swap or cross-chain transfer by source tx hash: pending, done, failed or not_found, plus the destination tx hash once it lands. Swap-chan waves from the arrival gate. Result includes `display` markdown with chan images and a swapchan.com link: show it to the user.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_supported_chainsList the chains SwapChan routes on, each with its chain-chan mascot.No findings

    Why it is in this group

    • The name "get_supported_chains" says "get": a word for reading.
    Description, as the server wrote it
    List the chains SwapChan routes on, each with its chain-chan mascot. Swap-chan says: pick your departure gate! Result includes `display` markdown with chan images and a swapchan.com link: show it to the user.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_supported_tokensList tokens SwapChan knows (address, symbol, decimals), optionally for one chain or filtered by symbol/name.No findings

    Why it is in this group

    • The name "get_supported_tokens" says "get": a word for reading.
    Description, as the server wrote it
    List tokens SwapChan knows (address, symbol, decimals), optionally for one chain or filtered by symbol/name. Swap-chan keeps the coin purse tidy. Result includes `display` markdown with chan images and a swapchan.com link: show it to the user.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http swapchan https://mcp.swapchan.com/mcp --header 'x-api-key: <your-x-api-key>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__swapchan__get_supported_chains",
      "mcp__swapchan__get_supported_tokens",
      "mcp__swapchan__get_quote",
      "mcp__swapchan__compare_routes",
      "mcp__swapchan__get_route_status"
    ],
    "ask": [
      "mcp__swapchan__build_swap_tx"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as swapchan. Review it before you use it.