Skip to content

SafeRoute

by crystalsignal · remote · no sign-in to list tools · v0.18.1 · published by GitHub user crystalsignal

Noncustodial Base x402 payment control and seller settlement recovery

Final · 7Changes · 2
CompareRegistry entry

13 tools: 7 do something that can't be undone, 2 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http saferoute https://api.usesaferoute.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Can't be undone 7Claude Code: ask
  • check_base_swapWallet-free approved-token Base swap safety preflight.No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Wallet-free approved-token Base swap safety preflight. Costs $0.001 USDC.
  • guard_base_tradeComplete pre-sign trade guard with route and simulation evidence.No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Complete pre-sign trade guard with route and simulation evidence. Costs $0.12 USDC.
  • preflight_transactionDecode and simulate approved Base ERC-20 calldata or SafeRoute's exact official ERC-8004 registration.No findings

    Why it is in this group

    • The input addresses people (input.transaction.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Decode and simulate approved Base ERC-20 calldata or SafeRoute's exact official ERC-8004 registration. Costs $0.05 USDC.
  • prepare_token_transferPrepare a bounded, simulated unsigned Base token transfer.No findings

    Why it is in this group

    • The name "prepare_token_transfer" says "transfer": a word for a change that another call does not undo.
    • The input addresses people (input.recipient): what it sends cannot be taken back.
    Description, as the server wrote it
    Prepare a bounded, simulated unsigned Base token transfer. Costs $0.10 USDC.
  • protect_paymentOne automatic x402 payment-safety front door: pre-payment ALLOW/BLOCK, duplicate-safe ID binding, policy risk reasons, and optional mined-settlement verification.No findings

    Why it is in this group

    • The name "protect_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    One automatic x402 payment-safety front door: pre-payment ALLOW/BLOCK, duplicate-safe ID binding, policy risk reasons, and optional mined-settlement verification. Free and rate-limited; the buyer signs and pays.
  • prove_safe_actionCreate a signed pre-sign ALLOW, BLOCK, or REVIEW receipt.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Create a signed pre-sign ALLOW, BLOCK, or REVIEW receipt. Costs $0.05 USDC.
  • route_agent_paymentPrepare a bounded, simulated exact-buy route to a payer-owned Base USDC target covering the x402 payment and optional buffer.No findings

    Why it is in this group

    • The name "route_agent_payment" says "payment": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Prepare a bounded, simulated exact-buy route to a payer-owned Base USDC target covering the x402 payment and optional buffer. Costs $0.05 USDC; buyer confirms funding, then retries standard x402 once.
Changes things 2Claude Code: ask
  • check_token_riskApproved Base token risk and liquidity check.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Approved Base token risk and liquidity check. Costs $0.03 USDC.
  • verify_swap_executionVerify a standard-mode SafeRoute Base execution against its signed receipt.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a standard-mode SafeRoute Base execution against its signed receipt. Free; referral payouts remain disabled.
Only reads 4Claude Code: allow
  • check_wallet_riskRead-only Base wallet account-posture check.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only Base wallet account-posture check. Costs $0.01 USDC.
  • get_safe_swap_quoteSafety-checked noncustodial Base swap quote.No findings

    Why it is in this group

    • The name "get_safe_swap_quote" says "get": a word for reading.
    Description, as the server wrote it
    Safety-checked noncustodial Base swap quote. Costs $0.01 USDC; the buyer signs and broadcasts.
  • list_supported_assetsList SafeRoute's seven approved Base assets, limits, fees, and execution modes.No findings

    Why it is in this group

    • The name "list_supported_assets" says "list": a word for reading.
    Description, as the server wrote it
    List SafeRoute's seven approved Base assets, limits, fees, and execution modes. Free.
  • verify_transaction_intentCompare a mined Base transaction with buyer intent.No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    Description, as the server wrote it
    Compare a mined Base transaction with buyer intent. Costs $0.05 USDC.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.18.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http saferoute https://api.usesaferoute.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__saferoute__get_safe_swap_quote",
      "mcp__saferoute__check_wallet_risk",
      "mcp__saferoute__verify_transaction_intent",
      "mcp__saferoute__list_supported_assets"
    ],
    "ask": [
      "mcp__saferoute__protect_payment",
      "mcp__saferoute__check_base_swap",
      "mcp__saferoute__prove_safe_action",
      "mcp__saferoute__check_token_risk",
      "mcp__saferoute__preflight_transaction",
      "mcp__saferoute__prepare_token_transfer",
      "mcp__saferoute__guard_base_trade",
      "mcp__saferoute__verify_swap_execution",
      "mcp__saferoute__route_agent_payment"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as saferoute. Review it before you use it.