Koskamo

Automaton Token Safety MCP

An MCP server providing Base L2 token safety analysis for AI agents. It performs honeypot scans, swap simulations, approval checks, and liquidity risk assessments using x402 gasless USDC settlement. The server exposes tools for bytecode security analysis, sentiment checks, and signed oracle data, enabling agents to safely interact with DeFi protocols on Base.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

Automaton Token Safety MCP logo, by baiano-marcelo-eduardoCommunity listingLocal stdioSource reviewed; not executedPublished by baiano-marcelo-eduardo
Vendor documentation

What you can do with it

  • Scan Base tokens for honeypots and mint traps
  • Simulate swap execution to measure slippage and taxes
  • Check ERC-20 approval risks and unlimited spenders
  • Analyze DEX liquidity depth and price impact

Source and maintenance

Community listingRegistry 2.0.2
Maintenance checked

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

@celorodrigues/token-safety-mcp 2.0.2

npm
@celorodrigues/token-safety-mcp package definition
{
  "version": "2.0.2",
  "transport": "stdio",
  "identifier": "@celorodrigues/token-safety-mcp",
  "registryType": "npm",
  "registryBaseUrl": "https://registry.npmjs.org",
  "environmentVariables": [
    {
      "name": "VALUE_API_BASE",
      "format": "string",
      "default": "https://api.automaton-sovereign.workers.dev",
      "isRequired": true,
      "description": "Base URL of the Automaton Token Safety API the tools call."
    },
    {
      "name": "AUTOMATON_ORIGIN_BASE",
      "format": "string",
      "description": "Origin URL for routes the edge defers with a use_origin answer (for example the free conformance checker). Optional; without it such a tool reports which variable to set."
    },
    {
      "name": "AUTOMATON_MCP_PAYER_KEY",
      "format": "string",
      "description": "Private key of the wallet that pays for calls. The server only SIGNS an EIP-3009 authorisation; it never sends a transaction. Also required: ALLOW_OUTBOUND_SPEND=1, and this key is not loaded into the process without it. Never set this to the payee/treasury wallet: that is rejected."
    },
    {
      "name": "ALLOW_OUTBOUND_SPEND",
      "format": "string",
      "default": "0",
      "description": "Set to 1 to permit this server to sign paid calls. Any other value (including absent) leaves every paid tool answering with the price only."
    },
    {
      "name": "AUTOMATON_MCP_MAX_AMOUNT_UNITS",
      "format": "number",
      "default": "10000",
      "description": "Per-call ceiling in USDC base units (6 decimals, so 10000 = 0.01 USDC). A requirement above it is refused before signing."
    },
    {
      "name": "AUTOMATON_MCP_TOTAL_CAP_UNITS",
      "format": "number",
      "default": "100000",
      "description": "Ceiling for the whole process lifetime, in USDC base units. Stops a runaway loop, not just a single expensive call."
    },
    {
      "name": "MCP_HTTP_PORT",
      "format": "number",
      "description": "When set, serve Streamable HTTP on this port instead of stdio. Binds to 127.0.0.1 by default."
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.
Cursor configuration
{
  "mcpServers": {
    "automaton-token-safety-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@celorodrigues/token-safety-mcp@2.0.2"
      ],
      "env": {
        "VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
        "AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
        "AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
        "ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
        "AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
        "AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
        "MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
      }
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.
Cline configuration
{
  "mcpServers": {
    "automaton-token-safety-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@celorodrigues/token-safety-mcp@2.0.2"
      ],
      "env": {
        "VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
        "AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
        "AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
        "ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
        "AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
        "AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
        "MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
      }
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.
VS Code configuration
{
  "servers": {
    "automaton-token-safety-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@celorodrigues/token-safety-mcp@2.0.2"
      ],
      "env": {
        "VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
        "AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
        "AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
        "ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
        "AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
        "AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
        "MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
      }
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.
Claude Desktop configuration
{
  "mcpServers": {
    "automaton-token-safety-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@celorodrigues/token-safety-mcp@2.0.2"
      ],
      "env": {
        "VALUE_API_BASE": "<YOUR_VALUE_API_BASE>",
        "AUTOMATON_ORIGIN_BASE": "<YOUR_AUTOMATON_ORIGIN_BASE>",
        "AUTOMATON_MCP_PAYER_KEY": "<YOUR_AUTOMATON_MCP_PAYER_KEY>",
        "ALLOW_OUTBOUND_SPEND": "<YOUR_ALLOW_OUTBOUND_SPEND>",
        "AUTOMATON_MCP_MAX_AMOUNT_UNITS": "<YOUR_AUTOMATON_MCP_MAX_AMOUNT_UNITS>",
        "AUTOMATON_MCP_TOTAL_CAP_UNITS": "<YOUR_AUTOMATON_MCP_TOTAL_CAP_UNITS>",
        "MCP_HTTP_PORT": "<YOUR_MCP_HTTP_PORT>"
      }
    }
  }
}

Let your agent find its tools

Find servers like Automaton Token Safety MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.