Automaton Token Safety MCP
An MCP server providing Base L2 token safety analysis for AI agents. It performs honeypot scans, swap simulations, approval checks, and liquidity risk assessments using x402 gasless USDC settlement. The server exposes tools for bytecode security analysis, sentiment checks, and signed oracle data, enabling agents to safely interact with DeFi protocols on Base.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Scan Base tokens for honeypots and mint traps
- Simulate swap execution to measure slippage and taxes
- Check ERC-20 approval risks and unlimited spenders
- Analyze DEX liquidity depth and price impact
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@celorodrigues/token-safety-mcp 2.0.2
{
"version": "2.0.2",
"transport": "stdio",
"identifier": "@celorodrigues/token-safety-mcp",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"environmentVariables": [
{
"name": "VALUE_API_BASE",
"format": "string",
"default": "https://api.automaton-sovereign.workers.dev",
"isRequired": true,
"description": "Base URL of the Automaton Token Safety API the tools call."
},
{
"name": "AUTOMATON_ORIGIN_BASE",
"format": "string",
"description": "Origin URL for routes the edge defers with a use_origin answer (for example the free conformance checker). Optional; without it such a tool reports which variable to set."
},
{
"name": "AUTOMATON_MCP_PAYER_KEY",
"format": "string",
"description": "Private key of the wallet that pays for calls. The server only SIGNS an EIP-3009 authorisation; it never sends a transaction. Also required: ALLOW_OUTBOUND_SPEND=1, and this key is not loaded into the process without it. Never set this to the payee/treasury wallet: that is rejected."
},
{
"name": "ALLOW_OUTBOUND_SPEND",
"format": "string",
"default": "0",
"description": "Set to 1 to permit this server to sign paid calls. Any other value (including absent) leaves every paid tool answering with the price only."
},
{
"name": "AUTOMATON_MCP_MAX_AMOUNT_UNITS",
"format": "number",
"default": "10000",
"description": "Per-call ceiling in USDC base units (6 decimals, so 10000 = 0.01 USDC). A requirement above it is refused before signing."
},
{
"name": "AUTOMATON_MCP_TOTAL_CAP_UNITS",
"format": "number",
"default": "100000",
"description": "Ceiling for the whole process lifetime, in USDC base units. Stops a runaway loop, not just a single expensive call."
},
{
"name": "MCP_HTTP_PORT",
"format": "number",
"description": "When set, serve Streamable HTTP on this port instead of stdio. Binds to 127.0.0.1 by default."
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"automaton-token-safety-mcp": {
"command": "npx",
"args": [
"-y",
"@celorodrigues/token-safety-mcp@2.0.2"
],
"env": {
"VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
"AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
"AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
"ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
"AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
"AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
"MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
}
}
}
}Cline
{
"mcpServers": {
"automaton-token-safety-mcp": {
"command": "npx",
"args": [
"-y",
"@celorodrigues/token-safety-mcp@2.0.2"
],
"env": {
"VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
"AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
"AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
"ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
"AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
"AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
"MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
}
}
}
}VS Code
{
"servers": {
"automaton-token-safety-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@celorodrigues/token-safety-mcp@2.0.2"
],
"env": {
"VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
"AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
"AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
"ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
"AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
"AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
"MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"automaton-token-safety-mcp": {
"command": "npx",
"args": [
"-y",
"@celorodrigues/token-safety-mcp@2.0.2"
],
"env": {
"VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
"AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
"AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
"ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
"AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
"AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
"MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
}
}
}
}Let your agent find its tools
Find servers like Automaton Token Safety MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.