Koskamo

Token Risk Checker MCP

An MCP server that provides tools to check token risk on Base, including rug-pull liquidity, honeypots, copycats, and other security metrics. It returns a risk score and level based on factors like creator wallet permissions, liquidity depth, and holder concentration.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

Token Risk Checker MCP logo, by Token Risk CheckerCommunity listingStreamable HTTPNo sign-inEndpoint checked 2026-11-01Published by Token Risk Checker
MCP endpoint (Streamable HTTP)
https://checker-production-40a5.up.railway.app/mcp
Vendor documentation

What you can do with it

  • Check if a token creator can pull pool liquidity
  • Detect honeypot and tax mechanisms
  • Identify copycat tickers and launch platforms
  • Verify mint/pause/blacklist powers and ownership

Source and maintenance

Community listingRegistry 1.0.0

Protocol and capabilities

Server
token-risk-checker 1.0.0
MCP protocol
2025-06-18
Tools
2 advertised
Resources
Not advertised
Resource templates
Not advertised
Prompts
Not advertised
Server-advertised capabilities
{
  "tools": {
    "listChanged": true
  }
}

Tools

2 advertised

check_token_risk — Token risk report
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

Full risk report for a Base token, with an AI-written plain-English summary: whether the creator or launch wallet can pull the pool liquidity (incl. Uniswap V4), copycat tickers, launch platform (Clanker/Doppler/B20), honeypot and taxes, mint/pause/blacklist powers, upgradeable proxy, ownership and holders. Returns a 0-100 score, LOW/MEDIUM/HIGH level and per-check reasons. Automated risk screen, not a security audit.

check_token_risk input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "address"
  ],
  "properties": {
    "chain": {
      "enum": [
        "base"
      ],
      "type": "string",
      "description": "Chain name; defaults to base"
    },
    "address": {
      "type": "string",
      "pattern": "^0x[0-9a-fA-F]{40}$",
      "description": "Token contract address"
    }
  }
}
check_token_risk annotations
{
  "readOnlyHint": true,
  "openWorldHint": true
}
quick_token_risk — Quick token risk check
Advertised by the server during the last successful anonymous check.
Advertised read-onlyOpen-world

Quick risk check for a Base token: the same checks as check_token_risk (creator-pullable liquidity, copycats, honeypot and taxes, owner powers, proxy, ownership, launch platform, holders) without the AI summary. Returns a 0-100 score, LOW/MEDIUM/HIGH level and per-check reasons. Automated risk screen, not a security audit.

quick_token_risk input schema
{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "address"
  ],
  "properties": {
    "chain": {
      "enum": [
        "base"
      ],
      "type": "string",
      "description": "Chain name; defaults to base"
    },
    "address": {
      "type": "string",
      "pattern": "^0x[0-9a-fA-F]{40}$",
      "description": "Token contract address"
    }
  }
}
quick_token_risk annotations
{
  "readOnlyHint": true,
  "openWorldHint": true
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks
1 of 1 (100%)
Average latency
980 ms
95th percentile latency
980 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

  • · probe · passed · 980 ms · metadata changed · 2 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.
Claude Code configuration
claude mcp add --transport http token-risk-checker-mcp https://checker-production-40a5.up.railway.app/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).
Codex configuration
codex mcp add token-risk-checker-mcp --url https://checker-production-40a5.up.railway.app/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable token-risk-checker-mcp in your MCP settings.
Cursor configuration
{
  "mcpServers": {
    "token-risk-checker-mcp": {
      "url": "https://checker-production-40a5.up.railway.app/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).
Cline configuration
{
  "mcpServers": {
    "token-risk-checker-mcp": {
      "type": "streamableHttp",
      "url": "https://checker-production-40a5.up.railway.app/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start token-risk-checker-mcp and inspect its tools.
VS Code configuration
{
  "servers": {
    "token-risk-checker-mcp": {
      "type": "http",
      "url": "https://checker-production-40a5.up.railway.app/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.
Gemini CLI configuration
gemini mcp add --transport http token-risk-checker-mcp https://checker-production-40a5.up.railway.app/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.
Claude Desktop configuration
{
  "mcpServers": {
    "token-risk-checker-mcp": {
      "url": "https://checker-production-40a5.up.railway.app/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.
Windsurf configuration
{
  "mcpServers": {
    "token-risk-checker-mcp": {
      "serverUrl": "https://checker-production-40a5.up.railway.app/mcp"
    }
  }
}

Let your agent find its tools

Find servers like Token Risk Checker MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.