Skip to content
anlyon.devby Anlyon

Coinlight: pay-per-call crypto data for agents (x402)

io.github.ygfalcon/coinlightygfalconstreamable-httpv0.3.0Scanned

31 x402 crypto tools: honeypot sell-check, cross-chain portfolio, tx explainer, launches.

27 tools: 1 do something that can't be undone, 22 change things and 4 only read.

Tools: 0 delete, 1 irreversible, 22 write, 4 read.
  • Reads private data · 0
  • Reads text others write · 27
  • Can send data out · 1
  • 6 findings

Anlyon alternative

23 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

27 tools

Can't be undone 1Claude Code: ask
  • encodeConvert data between utf8, hex, base64 and base58 (Solana keys and signatures use base58).Reads text others writeCan send data out1 finding

    Why it is in this group

    • The description's first verb is "convert": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "encode" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert data between utf8, hex, base64 and base58 (Solana keys and signatures use base58). ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/encode)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Changes things 22Claude Code: ask
  • base_balanceETH and USDC balance of any address on Base mainnet, read live from the chain.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ETH and USDC balance of any address on Base mainnet, read live from the chain. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/base-balance)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • base_gasCurrent Base gas price and latest block, in wei and gwei, plus the cost of a plain ETH transfer and an ERC-20 transfer.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Current Base gas price and latest block, in wei and gwei, plus the cost of a plain ETH transfer and an ERC-20 transfer. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/base-gas)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • base_transactionLook up a Base transaction hash: success or failure, block, from, to, value, gas used and fee paid.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Look up a Base transaction hash: success or failure, block, from, to, value, gas used and fee paid. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/base-transaction)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • hashHash a string with sha256, sha512, sha1 or keccak256 and get hex and base64 output.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hash a string with sha256, sha512, sha1 or keccak256 and get hex and base64 output. Handy for commitments, idempotency keys and checks. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/hash)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_account_infoWhat is this Solana address?Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    What is this Solana address? Owner program, lamports, executable flag, data size and parsed type (wallet, token account, mint, program, stake...). ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-account-info)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_associated_token_addressDerive the associated token account (ATA) address for an owner wallet and mint, offline and deterministic.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Derive the associated token account (ATA) address for an owner wallet and mint, offline and deterministic. Supports spl-token and token-2022. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-associated-token-address)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_priority_feesRecent Solana prioritization fees (micro-lamports per compute unit) as p25/p50/p75/p90 so an agent can price a transaction that lands.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Recent Solana prioritization fees (micro-lamports per compute unit) as p25/p50/p75/p90 so an agent can price a transaction that lands. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-priority-fees)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_recent_transactionsMost recent transaction signatures for a Solana address with slot, time, success flag and memo.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Most recent transaction signatures for a Solana address with slot, time, success flag and memo. limit 1-50 (default 10). ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-recent-transactions)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_sol_balanceNative SOL balance of any Solana address, in SOL and lamports, read live from mainnet.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Native SOL balance of any Solana address, in SOL and lamports, read live from mainnet. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-sol-balance)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_token_balancesAll non-zero SPL and Token-2022 balances held by a Solana wallet: mint, amount, decimals, token account.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    All non-zero SPL and Token-2022 balances held by a Solana wallet: mint, amount, decimals, token account. Live mainnet data. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-token-balances)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_token_safetySolana token safety check.Reads text others write2 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The description contains a 44-character base64 string.

      Matched text

      description: "...a mint (for example DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263) and get mint autho..."

      What this check looks for
    • Warn

      The input schema at properties.mint.description contains a 44-character base64 string.

      Matched text

      inputSchema.properties.mint.description: "...mint address, e.g. DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263"

      What this check looks for
    Description, as the server wrote it
    Solana token safety check. Pass a mint (for example DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263) and get mint authority, freeze authority, indexed liquidity, largest-account concentration, market age, and a simple risk score. Token data is read from Solana mainnet. Price is 0.01 USDC per call. ($0.01 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-token-safety)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_token_supplyTotal supply, decimals, mint authority and freeze authority for any SPL token mint.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Total supply, decimals, mint authority and freeze authority for any SPL token mint. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-token-supply)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_top_holdersLargest 20 token accounts of an SPL mint with owner wallet and share of supply.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Largest 20 token accounts of an SPL mint with owner wallet and share of supply. Spot whale or insider concentration. ($0.003 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-top-holders)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_transactionDecode a Solana transaction by signature into a plain summary: status, fee, signer, programs called, and per-account SOL and token balance changes.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Decode a Solana transaction by signature into a plain summary: status, fee, signer, programs called, and per-account SOL and token balance changes. ($0.003 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-transaction)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_usdc_balanceUSDC balance of a Solana wallet (sum of all USDC token accounts).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    USDC balance of a Solana wallet (sum of all USDC token accounts). Useful before paying or invoicing an agent. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-usdc-balance)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • time_convertConvert a unix timestamp (seconds or ms) or ISO date into ISO UTC, unix seconds, unix ms and a relative 'x ago' string.Reads text others write1 finding

    Why it is in this group

    • The name "time_convert" says "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "time_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "time_convert" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Convert a unix timestamp (seconds or ms) or ISO date into ISO UTC, unix seconds, unix ms and a relative 'x ago' string. Omit input for the current time. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/time-convert)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_boostedTokens with the most active DexScreener boosts right now (a proxy for paid promotion and attention), optionally filtered by chain.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Tokens with the most active DexScreener boosts right now (a proxy for paid promotion and attention), optionally filtered by chain. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/token-boosted)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_new_profilesLatest tokens that just published a DexScreener profile (logo, links): an early signal of new launches.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest tokens that just published a DexScreener profile (logo, links): an early signal of new launches. Optional chain filter. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/token-new-profiles)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_pairsTop DEX trading pairs for a token on any chain (Solana, Base, Ethereum...), sorted by liquidity: price, liquidity, 24h volume, FDV, pair age.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Top DEX trading pairs for a token on any chain (Solana, Base, Ethereum...), sorted by liquidity: price, liquidity, 24h volume, FDV, pair age. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/token-pairs)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_priceLive USD prices for up to 20 Solana token mints in one call (Jupiter price feed), with 24h change where available.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live USD prices for up to 20 Solana token mints in one call (Jupiter price feed), with 24h change where available. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/token-price)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • units_convertExact, bigint-safe conversion between human and atomic units: SOL<->lamports, ETH<->gwei<->wei, USDC<->atomic (6 decimals) or any decimals.Reads text others write1 finding

    Why it is in this group

    • The name "units_convert" says "convert": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "units_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "units_convert" says "convert": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Exact, bigint-safe conversion between human and atomic units: SOL<->lamports, ETH<->gwei<->wei, USDC<->atomic (6 decimals) or any decimals. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/units-convert)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • uuidGenerate 1-50 random v4 UUIDs from a cryptographic RNG, e.g.Reads text others write1 finding

    Why it is in this group

    • The description's first verb is "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "uuid" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Generate 1-50 random v4 UUIDs from a cryptographic RNG, e.g. for idempotency keys. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/uuid)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 4Show 4 read-only tools
  • address_validateTell what kind of address a string is (Solana base58 or EVM 0x), whether it is valid, and its EIP-55 checksum form.Reads text others writeNo findings

    Why it is in this group

    • The name "address_validate" says "validate": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Tell what kind of address a string is (Solana base58 or EVM 0x), whether it is valid, and its EIP-55 checksum form. Catch typos before sending funds. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/address-validate)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • solana_network_statusSolana mainnet health in one call: current slot, block height, epoch progress, and recent transactions per second.Reads text others writeNo findings

    Why it is in this group

    • The name "solana_network_status" says "status": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Solana mainnet health in one call: current slot, block height, epoch progress, and recent transactions per second. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/solana-network-status)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • text_statsCount characters, words, lines, bytes and estimate LLM tokens for a text, so an agent can budget context before sending it.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "count": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Count characters, words, lines, bytes and estimate LLM tokens for a text, so an agent can budget context before sending it. ($0.002 USDC per call via x402 at https://coinlight-app.vercel.app/p/text-stats)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write27
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

6 warn
  • Warnuuid

    The server marks "uuid" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "generate": a word for a change.

    What this check looks for
  • Warntime_convert

    The server marks "time_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "time_convert" says "convert": a word for a change.

    What this check looks for
  • Warnencode

    The server marks "encode" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "convert": a word for a change.

    What this check looks for
  • Warnunits_convert

    The server marks "units_convert" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "units_convert" says "convert": a word for a change.

    What this check looks for
  • Warnsolana_token_safety

    The description contains a 44-character base64 string.

    Matched text

    description: "...a mint (for example DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263) and get mint autho..."

    What this check looks for
  • Warnsolana_token_safety

    The input schema at properties.mint.description contains a 44-character base64 string.

    Matched text

    inputSchema.properties.mint.description: "...mint address, e.g. DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263"

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.3.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http coinlight https://coinlight-app.vercel.app/mcp
claude mcp add --transport http coinlight https://coinlight-app.vercel.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__coinlight__text_stats",
      "mcp__coinlight__address_validate",
      "mcp__coinlight__token_search",
      "mcp__coinlight__solana_network_status"
    ],
    "ask": [
      "mcp__coinlight__uuid",
      "mcp__coinlight__time_convert",
      "mcp__coinlight__encode",
      "mcp__coinlight__hash",
      "mcp__coinlight__units_convert",
      "mcp__coinlight__base_transaction",
      "mcp__coinlight__base_gas",
      "mcp__coinlight__base_balance",
      "mcp__coinlight__token_new_profiles",
      "mcp__coinlight__token_boosted",
      "mcp__coinlight__token_pairs",
      "mcp__coinlight__token_price",
      "mcp__coinlight__solana_associated_token_address",
      "mcp__coinlight__solana_priority_fees",
      "mcp__coinlight__solana_top_holders",
      "mcp__coinlight__solana_token_supply",
      "mcp__coinlight__solana_account_info",
      "mcp__coinlight__solana_transaction",
      "mcp__coinlight__solana_recent_transactions",
      "mcp__coinlight__solana_usdc_balance",
      "mcp__coinlight__solana_token_balances",
      "mcp__coinlight__solana_sol_balance",
      "mcp__coinlight__solana_token_safety"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as coinlight. Review it before you use it.

Capability tags behind 27 rules
  • mcp__coinlight__uuid untrusted-input
  • mcp__coinlight__text_stats untrusted-input
  • mcp__coinlight__time_convert untrusted-input
  • mcp__coinlight__encode untrusted-input, outbound
  • mcp__coinlight__hash untrusted-input
  • mcp__coinlight__units_convert untrusted-input
  • mcp__coinlight__address_validate untrusted-input
  • mcp__coinlight__base_transaction untrusted-input
  • mcp__coinlight__base_gas untrusted-input
  • mcp__coinlight__base_balance untrusted-input
  • mcp__coinlight__token_new_profiles untrusted-input
  • mcp__coinlight__token_boosted untrusted-input
  • mcp__coinlight__token_search untrusted-input
  • mcp__coinlight__token_pairs untrusted-input
  • mcp__coinlight__token_price untrusted-input
  • mcp__coinlight__solana_associated_token_address untrusted-input
  • mcp__coinlight__solana_network_status untrusted-input
  • mcp__coinlight__solana_priority_fees untrusted-input
  • mcp__coinlight__solana_top_holders untrusted-input
  • mcp__coinlight__solana_token_supply untrusted-input
  • mcp__coinlight__solana_account_info untrusted-input
  • mcp__coinlight__solana_transaction untrusted-input
  • mcp__coinlight__solana_recent_transactions untrusted-input
  • mcp__coinlight__solana_usdc_balance untrusted-input
  • mcp__coinlight__solana_token_balances untrusted-input
  • mcp__coinlight__solana_sol_balance untrusted-input
  • mcp__coinlight__solana_token_safety untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.ygfalcon/coinlight/verify?hash=8c79bc70a21412947128631c0e536acc49f7ec9e987e8505409db9b4ae7a0f42" | jq -e '.changed == false'

Pinned hash 8c79bc70a214, from Oct 23, 2026, 19:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.ygfalcon/coinlight/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.ygfalcon/coinlight
[![anlyon.dev](https://anlyon.dev/badge/io.github.ygfalcon/coinlight.svg)](https://anlyon.dev/servers/io.github.ygfalcon/coinlight)

Source: MCP Registry. Synced Oct 23, 2026, 20:17 UTC.