accueil / serveurs / Finance & Paiement / io.github.zvmzaretsky/crypto-safety
io.github.zvmzaretsky/crypto-safety
serveur MCP (Model Context Protocol) · fabtally-safe 1.0.0
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que io.github.zvmzaretsky/crypto-safety est sûr ?
Au dernier audit MCP Hub, le serveur MCP « io.github.zvmzaretsky/crypto-safety » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 8 outils
- approvals≈ 278 tokens
PAID $0.01 (x402, USDC on Base). Scan a wallet's ERC-20/721 approvals ranked by exposure; flags unlimited amounts, unverified/known-malicious spenders, and address-poisoning 'fake-approval revoke bait'; returns the exact revoke calldata you execute YOURSELF (never executed/broadcast by us). Without payment returns the x402 challenge; pass x_payment. Free teaser: approvals_free.
Paramètres, retour & exemple (3)
Paramètreschain· string · requis
Chain: ethereum | base | bsc | polygon | arbitrum | optimism.address· string · requis
0x wallet address to scan.x_payment· string · optionnel
x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.
Exemple d'appel{"name": "approvals", "arguments": {"chain": "texte", "address": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - approvals_free≈ 153 tokens
FREE. Approval counts + top-3 riskiest spenders for {address, chain}. Real result, no wallet. Upgrade to approvals for EVERY approval ranked + revoke calldata.
Paramètres, retour & exemple (2)
Paramètreschain· string · requis
Chain: ethereum | base | bsc | polygon | arbitrum | optimism.address· string · requis
0x wallet address to scan.
Exemple d'appel{"name": "approvals_free", "arguments": {"chain": "texte", "address": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - decode_signature≈ 322 tokens
PAID $0.01 (x402, USDC on Base). Decode an off-chain EIP-712 typed-data signature (Permit / Permit2 / Seaport / generic) into plain English with risk flags: unlimited approval, unknown/known-malicious spender, never-expiring or already-expired deadlines, zero-consideration NFT-drain orders. Off-chain signatures are the top wallet-drainer vector. Pure offline decode — never signs/broadcasts. Without payment returns the x402 challenge; pass x_payment. Free teaser: decode_signature_free.
Paramètres, retour & exemple (3)
Paramètreschain· string · optionnel
Optional chain override (else read from domain.chainId).x_payment· string · optionnel
x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.typed_data· object · requis
EIP-712 typed data object: {domain, types, primaryType, message}.
Exemple d'appel{"name": "decode_signature", "arguments": {"typed_data": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - decode_signature_free≈ 186 tokens
FREE. Type + plain-English summary + risk level for an EIP-712 `typed_data`. Real result, no wallet. Upgrade to decode_signature for the full field-by-field decode + all risk flags + malicious-spender screening.
Paramètres, retour & exemple (2)
Paramètreschain· string · optionnel
Optional chain override (else read from domain.chainId).typed_data· object · requis
EIP-712 typed data object: {domain, types, primaryType, message}.
Exemple d'appel{"name": "decode_signature_free", "arguments": {"typed_data": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - simulate≈ 346 tokens
PAID $0.02 (x402, USDC on Base). Keyless pre-sign analysis of {chain, from?, to, data, value?}: public-RPC eth_call revert check + static calldata decode predicting approval/transfer deltas + risk flags (unlimited approval, approval-for-all, reverts). Honest keyless limitation stated in the response (no full fork trace). Without payment returns the x402 challenge; pass x_payment. Free teaser: simulate_free.
Paramètres, retour & exemple (6)
Paramètresto· string · requis
0x target contract/recipient.data· string · optionnel
0x calldata (omit for a plain value transfer).from· string · optionnel
0x sender (optional but improves accuracy).chain· string · requis
Chain: ethereum | base | bsc | polygon | arbitrum | optimism.value· string · optionnel
Value in wei (optional).x_payment· string · optionnel
x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.
Exemple d'appel{"name": "simulate", "arguments": {"to": "texte", "chain": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - simulate_free≈ 220 tokens
FREE. Method + revert flag + risk level + predicted effect types for a transaction. Real result, no wallet. Upgrade to simulate for the full predicted deltas + all risk flags.
Paramètres, retour & exemple (5)
Paramètresto· string · requis
0x target contract/recipient.data· string · optionnel
0x calldata (omit for a plain value transfer).from· string · optionnel
0x sender (optional but improves accuracy).chain· string · requis
Chain: ethereum | base | bsc | polygon | arbitrum | optimism.value· string · optionnel
Value in wei (optional).
Exemple d'appel{"name": "simulate_free", "arguments": {"to": "texte", "chain": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - token_safety≈ 305 tokens
PAID $0.02 (x402, USDC on Base). Multi-chain token honeypot/rug check aggregating GoPlus token-security + honeypot.is buy/sell-tax simulation into a normalized 0-100 risk score with explainable reasons: honeypot/can't-sell, buy/sell tax, mint/blacklist/pausable/ownership privileges, top-holder concentration, LP-lock, contract verified/bytecode. Descriptive facts only — NOT a buy/sell signal. Without payment returns the x402 challenge; pass x_payment to settle. Free teaser: token_safety_free.
Paramètres, retour & exemple (3)
Paramètreschain· string · requis
Chain: ethereum | base | bsc | polygon | arbitrum | optimism.address· string · requis
0x token contract address.x_payment· string · optionnel
x402 payment payload (base64) for this PAID tool. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.
Exemple d'appel{"name": "token_safety", "arguments": {"chain": "texte", "address": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - token_safety_free≈ 158 tokens
FREE. Score band + top-line honeypot/tax/privilege flags for a token {address, chain}. Real result, no wallet. Upgrade to token_safety for the full numeric breakdown.
Paramètres, retour & exemple (2)
Paramètreschain· string · requis
Chain: ethereum | base | bsc | polygon | arbitrum | optimism.address· string · requis
0x token contract address.
Exemple d'appel{"name": "token_safety_free", "arguments": {"chain": "texte", "address": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».