crypto-safety-mcp

# FabTally Safe — MCP server

Read-only crypto **safety + "what am I signing"** verification for AI agents and
wallets. Fronts the FabTally Safe HTTP API (https://safe.fabtally.com).

- **Read-only.** Never holds, moves, signs for, or broadcasts funds. No private
  key. Outputs are descriptive facts from public sources — **not financial advice**.
- **8 tools**: 4 free teasers + 4 paid (x402, USDC on Base).

## Tools

| Tool | Tier | What it does |
|------|------|--------------|
| `token_safety` | paid $0.02 | Multi-chain token honeypot/rug check — aggregates GoPlus + honeypot.is into a 0-100 risk score with explainable reasons. |
| `decode_signature` | paid $0.01 | "What am I signing" — decode EIP-712 / Permit / Permit2 / Seaport typed-data into plain English + risk flags (unlimited approval, malicious spender, expiry, NFT-drain). |
| `approvals` | paid $0.01 | Wallet approval-risk scan ranked by exposure + address-poisoning "revoke bait" detection + the revoke calldata you execute yourself. |
| `simulate` | paid $0.02 | Keyless pre-sign transaction analysis: eth_call revert check + static delta prediction + risk flags. |
| `token_safety_free` · `decode_signature_free` · `approvals_free` · `simulate_free` | free | Real teaser results, no wallet. |

Chains: ethereum, base, bsc, polygon, arbitrum, optimism (honeypot.is signals on
ethereum/base/bsc).

## Payment

Paid tools use **x402** (USDC on Base, `eip155:8453`). Call a paid tool with no
`x_payment` to receive the decoded 402 challenge (price, network, asset, payTo);
build an x402 authorization and call again with the token in `x_payment`. Humans
can instead prepay by card and use an `X-FabTally-Key` credit header on the HTTP API.

## Transports

- **stdio** (default): `node index.js` — for Claude Desktop and local MCP clients.
- **streamable-http**: `MCP_HTTP_PORT=8113 node http.js` — hosted at
  `https://safe.fabtally.com/mcp`.

## Config

- `FABTALLY_SAFE_BASE` — API base (default `https://safe.fabtally.com`).

Operator: Sunstone Soft · https://fabtally.com · Not financial advice · read-only.