io.github.castralis122/base-web3-m2m-hub

by castralis122 · remote · no sign-in to list tools · v46.0.0 · published by GitHub user castralis122

Live Base Mainnet on-chain data (gas, DEX, Aave, token risk, prices). Pay per call in USDC via x402.

Changes · 14

Compare Registry entry

17 tools: 14 change things and 3 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things14Claude Code: ask: see these tools
Only reads3Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http base-web3-m2m-hub https://auditor-x402.onrender.com/mcp/v1

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warntoken-deploy-radar
The server marks "token-deploy-radar" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "token-deploy-radar" says "deploy": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

17 tools

Changes things 14Creates or changes something that can be changed back.Claude Code: ask

aave-yieldLive Aave v3 reserve rates on Base read on-chain: current supply APY and variable borrow APY for any listed asset (default WETH).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Live Aave v3 reserve rates on Base read on-chain: current supply APY and variable borrow APY for any listed asset (default WETH). For yield and borrow-cost bots. Price: 0.0040 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
contract-profileContract structure ONLY: bytecode size, proxy detection (EIP-1167 / EIP-1967 implementation and admin) and owner() for any address on Base.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Contract structure ONLY: bytecode size, proxy detection (EIP-1167 / EIP-1967 implementation and admin) and owner() for any address on Base. NOT a security audit. For a full token check that also adds risk flags and pool liquidity, use token-due-diligence; to read an arbitrary view function use contract-read. Price: 0.0030 USDC per call (first call free).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
dex-arbitrageDEX pricing/spread ONLY: WETH/USDC spot price on-chain from Uniswap v3 and Aerodrome v2, with gross spread in bps and which side is cheaper (fees, gas and slippage excluded).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
DEX pricing/spread ONLY: WETH/USDC spot price on-chain from Uniswap v3 and Aerodrome v2, with gross spread in bps and which side is cheaper (fees, gas and slippage excluded). Use this for cross-DEX pricing; for expected slippage of a given trade size use pool-slippage; if you also need gas use market-snapshot. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
flash-loansAave v3 on Base: available flash-loan liquidity and flash-loan fee for any listed asset (default WETH), read on-chain.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Aave v3 on Base: available flash-loan liquidity and flash-loan fee for any listed asset (default WETH), read on-chain. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
gas-optimizerGas ONLY: live Base Mainnet gas from eth_feeHistory — latest and 10-block average base fee (gwei), priority-fee percentiles (p25/p50/p75) and a congestion label.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Gas ONLY: live Base Mainnet gas from eth_feeHistory — latest and 10-block average base fee (gwei), priority-fee percentiles (p25/p50/p75) and a congestion label. Use this when you need gas and nothing else; if you also want WETH/USDC pricing, use market-snapshot instead (one cheaper call). Price: 0.0020 USDC per call (first call free).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
liquidation-monitorAave v3 on Base: total collateral, debt, health factor and risk band (LIQUIDATABLE / AT_RISK / WATCH / HEALTHY / NO_DEBT) for any wallet.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Aave v3 on Base: total collateral, debt, health factor and risk band (LIQUIDATABLE / AT_RISK / WATCH / HEALTHY / NO_DEBT) for any wallet. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
liquidity-healthToken risk flags ONLY: for an ERC-20 on Base (honeypot, tax over 10%, mintable, unverified source, hidden owner, pausable...) from GoPlus plus on-chain facts (symbol, supply, owner…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Token risk flags ONLY: for an ERC-20 on Base (honeypot, tax over 10%, mintable, unverified source, hidden owner, pausable...) from GoPlus plus on-chain facts (symbol, supply, owner). No safety verdict; no flags is not a guarantee. For a full check that ALSO adds contract/proxy facts and pool liquidity in one call, use token-due-diligence instead. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
multi-token-pricePrice of MANY tokens (BATCH): on-chain USD spot price for up to 15 ERC-20s in one call, each from its deepest Uniswap v3 pool vs USDC/WETH.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Price of MANY tokens (BATCH): on-chain USD spot price for up to 15 ERC-20s in one call, each from its deepest Uniswap v3 pool vs USDC/WETH. Tokens with no pool return an error entry. Use this for 2+ tokens; for a single token use token-spot-price (cheaper). Price: 0.0080 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
pool-slippageEstimated price impact / slippage for a WETH/USDC trade of a given USD size on Uniswap v3, from on-chain pool depth.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Estimated price impact / slippage for a WETH/USDC trade of a given USD size on Uniswap v3, from on-chain pool depth. Order-of-magnitude signal (v3 is concentrated liquidity), useful for MEV/execution bots before trading. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
token-deploy-radarNewest Uniswap v3 pools created on Base (PoolCreated events) with token symbols, fee tier and block.1 finding
Why it is in this group
- The name "token-deploy-radar" says "deploy": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "token-deploy-radar" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "token-deploy-radar" says "deploy": a word for a change.
  What this check looks for
Description, as the server wrote it
Newest Uniswap v3 pools created on Base (PoolCreated events) with token symbols, fee tier and block. A new pool does not imply a legitimate token. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
token-due-diligenceFULL token check (BUNDLE): combines GoPlus risk flags (= liquidity-health) + contract/proxy/owner facts (= contract-profile) + Uniswap v3 pools vs WETH/USDC with quote-side liquidi…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
FULL token check (BUNDLE): combines GoPlus risk flags (= liquidity-health) + contract/proxy/owner facts (= contract-profile) + Uniswap v3 pools vs WETH/USDC with quote-side liquidity in USD, in a single call. Objective signals, not a verdict. Use this instead of calling liquidity-health and contract-profile separately; use the individual tools only if you need just one aspect. Price: 0.0100 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
token-spot-pricePrice of ONE token: on-chain USD spot price for a single ERC-20 on Base, from the deepest Uniswap v3 pool vs USDC/WETH (slot0), with the pool/fee tier used and its USD depth.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Price of ONE token: on-chain USD spot price for a single ERC-20 on Base, from the deepest Uniswap v3 pool vs USDC/WETH (slot0), with the pool/fee tier used and its USD depth. No off-chain feed; thin pools are easy to manipulate. To price MANY tokens at once, use multi-token-price instead (one cheaper call). Price: 0.0020 USDC per call (first call free).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
wallet-portfolioPortfolio of a wallet on Base: native ETH plus a curated set of major ERC-20s (USDC, WETH, cbETH, cbBTC, DAI, USDbC), each valued in USD on-chain via Uniswap v3.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Portfolio of a wallet on Base: native ETH plus a curated set of major ERC-20s (USDC, WETH, cbETH, cbBTC, DAI, USDbC), each valued in USD on-chain via Uniswap v3. Returns per-token amounts, USD values and the total. Price: 0.0040 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
whale-wallet-trackerLarge USDC transfers on Base over the most recent blocks (default ~300), from confirmed Transfer logs: amount, sender, receiver, tx hash, block.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Large USDC transfers on Base over the most recent blocks (default ~300), from confirmed Transfer logs: amount, sender, receiver, tx hash, block. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

Only reads 3Looks things up and changes nothing.Claude Code: allow

contract-logsRecent event logs for any contract on Base over a bounded recent window (reads eth_getLogs).No findings
Why it is in this group
- The name "contract-logs" says "log": a word for reading.
Description, as the server wrote it
Recent event logs for any contract on Base over a bounded recent window (reads eth_getLogs). Optionally filter by topic0 (event signature hash). Returns up to 50 logs with block, tx hash, topics and data. Window is limited by the RPC log-range quota. Use this for generic event queries not covered by whale-wallet-tracker or token-deploy-radar. Price: 0.0050 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
contract-readGeneric read-only call to any contract on Base: provide an address and hex calldata (4-byte selector, e.g.No findings
Why it is in this group
- The name "contract-read" says "read": a word for reading.
Description, as the server wrote it
Generic read-only call to any contract on Base: provide an address and hex calldata (4-byte selector, e.g. 0x18160ddd = totalSupply, optionally followed by ABI-encoded args) and get the raw return data plus best-effort uint/address/bool/string decoding. Read-only (never sends a transaction). Use this for arbitrary view functions not covered by a dedicated tool. Price: 0.0030 USDC per call (first call free).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
market-snapshotBUNDLE: one-call Base market snapshot combining live gas (base fee, priority-fee percentiles, congestion) AND WETH/USDC spot price + gross spread across Uniswap v3 / Aerodrome.No findings
Why it is in this group
- The name "market-snapshot" says "snapshot": a word for reading.
Description, as the server wrote it
BUNDLE: one-call Base market snapshot combining live gas (base fee, priority-fee percentiles, congestion) AND WETH/USDC spot price + gross spread across Uniswap v3 / Aerodrome. Use this when you want both gas and DEX pricing in a single cheaper call; do NOT also call gas-optimizer or dex-arbitrage for the same purpose. Prefer the individual tools only if you need just one of the two. Price: 0.0060 USDC per call (premium: always paid).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 46.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http base-web3-m2m-hub https://auditor-x402.onrender.com/mcp/v1

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__base-web3-m2m-hub__market-snapshot",
      "mcp__base-web3-m2m-hub__contract-read",
      "mcp__base-web3-m2m-hub__contract-logs"
    ],
    "ask": [
      "mcp__base-web3-m2m-hub__gas-optimizer",
      "mcp__base-web3-m2m-hub__dex-arbitrage",
      "mcp__base-web3-m2m-hub__whale-wallet-tracker",
      "mcp__base-web3-m2m-hub__flash-loans",
      "mcp__base-web3-m2m-hub__liquidity-health",
      "mcp__base-web3-m2m-hub__liquidation-monitor",
      "mcp__base-web3-m2m-hub__token-deploy-radar",
      "mcp__base-web3-m2m-hub__token-due-diligence",
      "mcp__base-web3-m2m-hub__contract-profile",
      "mcp__base-web3-m2m-hub__token-spot-price",
      "mcp__base-web3-m2m-hub__wallet-portfolio",
      "mcp__base-web3-m2m-hub__aave-yield",
      "mcp__base-web3-m2m-hub__multi-token-price",
      "mcp__base-web3-m2m-hub__pool-slippage"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as base-web3-m2m-hub. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.castralis122/base-web3-m2m-hub/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

14 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:26 UTC.

For agents: Markdown · JSON · report this listing