Agent Shaniu (SHANIU)
io.github.m284743/shanium284743streamable-httpv1.0.0Scanned
First AI-driven community meme coin on BSC. Mint, trade and referral tools for AI agents.
7 tools: 2 do something that can't be undone, 3 change things and 2 only read.
- Reads private data · 0
- Reads text others write · 0
- Can send data out · 2
- No findings
Anlyon alternative
5 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
7 tools
Can't be undone 2Claude Code: ask
shaniu_invite_registerRegister a referral binding.Can send data outNo findings
Why it is in this group
- The name "shaniu_invite_register" says "invite": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "shaniu_invite_register" says "invite": it sends or publishes something to other people.
Description, as the server wrote it Register a referral binding. Prefer mode=intent BEFORE the invitee calls claim(); or bind after the fact with the invitee's claim tx hash. Always ask your user for consent first. Rewards (10/50/200/1000 SHANIU tiers) roll automatically and are paid in batches.
shaniu_invite_statsReferral program stats: global slots/budget usage, and (with address) one inviter's bound count, earned and pending SHANIU.Can send data outNo findings
Why it is in this group
- The name "shaniu_invite_stats" says "invite": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "shaniu_invite_stats" says "invite": it sends or publishes something to other people.
Description, as the server wrote it Referral program stats: global slots/budget usage, and (with address) one inviter's bound count, earned and pending SHANIU. Invite link format: https://bn.shaniu.ai/?ref=<address>
Changes things 3Claude Code: ask
shaniu_prepare_buyPrepare an unsigned buy transaction that fills one or more sell orders.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare an unsigned buy transaction that fills one or more sell orders. Computes exact BNB cost. Single order uses the market contract; multiple orders use the cart contract (buyMany) in one tx.
shaniu_prepare_claimPrepare an unsigned claim() (mint) transaction.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prepare an unsigned claim() (mint) transaction. Caller wallet must hold a Binance Agent ID (.ai); one claim per address; reward is a block-hash lottery (50-150 typical, up to 21,000; last claim sweeps the pool). Returns {to, data, valueWei} to sign with the user's wallet.
shaniu_statsLive SHANIU stats: total supply, claim pool remaining, claim count, current claim fee (wei of BNB, ~0.2 USD via Chainlink oracle), whether claiming is open, and optionally a wallet…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Live SHANIU stats: total supply, claim pool remaining, claim count, current claim fee (wei of BNB, ~0.2 USD via Chainlink oracle), whether claiming is open, and optionally a wallet's balance / claimed status.
Only reads 2Show 2 read-only tools
shaniu_market_ordersList currently fillable sell orders on the on-chain order book, cheapest first.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it List currently fillable sell orders on the on-chain order book, cheapest first. Each order: id, maker, remainingSHANIU, priceBNBperToken. No AMM pool exists — buying fills these orders atomically.
shaniu_prepare_listPrepare unsigned transactions to list SHANIU for sale: (1) approve the market contract, (2) list(amount, priceWei).No findings
Why it is in this group
- The name "shaniu_prepare_list" says "list": a word for reading.
Description, as the server wrote it Prepare unsigned transactions to list SHANIU for sale: (1) approve the market contract, (2) list(amount, priceWei). The tokens stay in the seller's wallet until filled — the market is authorization-based, no custody.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out2
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http shaniu https://bn.shaniu.ai/mcpclaude mcp add --transport http shaniu https://bn.shaniu.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__shaniu__shaniu_market_orders",
"mcp__shaniu__shaniu_prepare_list"
],
"ask": [
"mcp__shaniu__shaniu_stats",
"mcp__shaniu__shaniu_prepare_claim",
"mcp__shaniu__shaniu_prepare_buy",
"mcp__shaniu__shaniu_invite_stats",
"mcp__shaniu__shaniu_invite_register"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as shaniu. Review it before you use it.
Capability tags behind 2 rules
- mcp__shaniu__shaniu_invite_stats outbound
- mcp__shaniu__shaniu_invite_register outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.github.m284743/shaniu/verify?hash=879d95f318228f4d760b57dd65fe8fe4c382454e5586eeabafe71112d955f71f" | jq -e '.changed == false'Pinned hash 879d95f31822, from Oct 24, 2026, 05:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.github.m284743/shaniu/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.github.m284743/shaniu)Source: MCP Registry · repository. Synced Oct 24, 2026, 05:17 UTC.