Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.acarchidi/agentforge

REMOTE · AGENTFORGE-TAUPE.VERCEL.APP

Safety checks for AI agents: preflight before signing, prompt-injection scan, sanctions, rug checks.

+3 this week 84 Trust /100

Last scanned (12 minutes ago)

Scores higher than 89% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Crypto and Web3

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security80
Transport & Reachability100
Schema Quality & AI Usability69
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 3619 tokens (~124/item across 29 items; 29 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management95
  • Stability check failed: schema churn in the 30 days we've observed: 1 tool removals, 0 breaking changes, 0 auth/transport breaks, 10 additions. See how to fix → Fail
Tool Coverage96
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 89% of tool parameters carry a description.Partial
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "send_feedback" implies "send" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Fail
  • An AI judge read all 30 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 −2
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “lending_health” rewrote its description, which is the text the model reads security
    • Tool “tx_simulate” rewrote its description, which is the text the model reads security
    • Schema quality: 108 → 124 ▼ functional
    • Schema quality: 2812 → 3239 ▼ functional
    • Schema quality: 2812 → 3135 ▼ functional
    • Destructive annotations: pass → 0 functional
    • Server version: 1.11.0 → 1.13.0 functional
    • Server version: 1.10.0 → 1.11.0 functional
    • Server version: 1.9.0 → 1.10.0 functional
    • New tool “content_scan” functional
    • New tool “send_feedback” functional
    • New tool “preflight” functional
  • 3 Nov 26 +5
    • Stability: pass → fail ▼ security
    • Tool “code_review” was removed ▼ security
    • Authorization: unverified → partial ▲ security
    • Tool “approval_scan” rewrote its description, which is the text the model reads security
    • Tool “contract_docs” rewrote its description, which is the text the model reads security
    • Tool “contract_monitor” rewrote its description, which is the text the model reads security
    • Tool “sentiment” rewrote its description, which is the text the model reads security
    • Tool “solana_token_risk_scan” rewrote its description, which is the text the model reads security
    • Tool “solana_tx_explain” rewrote its description, which is the text the model reads security
    • Tool “solana_tx_simulate” rewrote its description, which is the text the model reads security
    • Tool “summarize” rewrote its description, which is the text the model reads security
    • Tool “token_compare” rewrote its description, which is the text the model reads security
    • Tool “token_intel” rewrote its description, which is the text the model reads security
    • Tool “token_research” rewrote its description, which is the text the model reads security
    • Tool “token_risk_metrics” rewrote its description, which is the text the model reads security
    • Tool “translate” rewrote its description, which is the text the model reads security
    • Tool “tx_decode” rewrote its description, which is the text the model reads security
    • Tool “wallet_safety” rewrote its description, which is the text the model reads security
    • Tool coverage: 100% → 90% ▼ functional
    • Tool coverage: 100% → 91% ▼ functional
    • Schema quality: pass → fail ▼ functional
    • Server version: 1.8.0 → 1.9.0 functional
    • Server version: 1.5.0 → 1.8.0 functional
    • New tool “signature_check” functional
    • New tool “address_check” functional
    • New tool “launch_feed” functional
    • New tool “lending_health” functional
    • New tool “risk_batch” functional
    • New tool “trade_check” functional
    • New tool “tx_simulate” functional
  • 21 Oct 26 +1
    • Stability: 0.97 → pass security
    • Server version: 1.1.0 → 1.5.0 functional
  • 19 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 63 to 70. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.

  • 10 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://agentforge-taupe.vercel.app/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.vercel.app CN=WR1,O=Google Trust Services,C=US 31 Oct 2026 29 Jan 2027 RSA 2048 SHA256-RSA 9c5f0e6a35c955e113044c86848e4cd5
SANs: *.vercel.app
CN=WR1,O=Google Trust Services,C=US (CA) CN=GTS Root R1,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 RSA 2048 SHA256-RSA 7fd9e2c2d2048a0474b627a26d0868a7
CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 19 Jun 2020 28 Jan 2028 RSA 4096 SHA256-RSA 77bd0d6cdb36f91aea210fc4f058d30d

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of agentforge-taupe.vercel.app. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
app. present 23684 8 Verified
vercel.app. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000; includeSubDomains; preload

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://agentforge-taupe.vercel.app/mcp Verified 200
http (plaintext) http://agentforge-taupe.vercel.app/mcp HTTPS enforced 308 https://agentforge-taupe.vercel.app/mcp
MCP tools · 29 exposed · ~3,406 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
address_check ~110

Screen counterparty addresses before sending, approving, or interacting: OFAC sanctions, known scam/phishing wallets, labeled protocol contracts, and brand-new-address detection. 1-100 EVM or Solana addresses per call; returns block / caution / no_known_issues per address. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressesarrayyesAddresses to screen
chainstring–Default chain

No output schema declared.

No examples provided.

approval_scan ~112

Scan a wallet for risky token approvals. On EVM chains: identifies unlimited ERC-20 approvals and unverified spenders. On Solana: scans SPL token delegate authorities. Returns risk assessment. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressstringyesWallet address to scan (0x-prefixed for EVM, base58 for Solana)
chainstring–Blockchain network (includes Solana support)

No output schema declared.

No examples provided.

content_scan ~167

Scan untrusted text (tool results, web pages, emails, token metadata) for prompt injection before feeding it to your LLM: instruction overrides, fund-movement directives, payloads hidden in base64, Morse, zero-width or tag characters and homoglyphs, leaked private keys and seed phrases, embedded addresses screened against sanctions and scam lists, lookalike domains. Deterministic, no LLM. Returns clean / suspicious / malicious with findings. Up to 64 KB per call. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
itemsarray–Several strings scanned in one call (findings carry the item index)
textstring–One untrusted string to scan

No output schema declared.

No examples provided.

contract_docs ~88

Generate documentation for any verified EVM smart contract. Returns function descriptions, risk flags, interaction patterns, and security posture. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressstringyesContract address
chainstring–Blockchain network
focusFunctionsarray–Specific functions to document

No output schema declared.

No examples provided.

contract_monitor ~88

Monitor recent contract activity for suspicious admin operations, proxy upgrades, ownership changes, and pause events. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressstringyesContract address
chainstring–Blockchain network
lookbackHoursnumber–Hours to look back (max 168)

No output schema declared.

No examples provided.

gas_oracle ~38

Current gas prices (slow/standard/fast) for any supported EVM chain with trend analysis.

NameTypeReqDescription
chainstring–Blockchain network

No output schema declared.

No examples provided.

launch_feed ~145

Newly launched tokens on Base, Ethereum, or Arbitrum, each already risk-scored (verification, owner powers, proxy, supply held off-pool, thin liquidity, honeypot trading pattern). Poll it: pass the previous nextSince as since to get only new launches. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring––
limitinteger––
maxRiskScoreinteger–Only launches scoring at or below this
minLiquidityUsdnumber––
sincestring–ISO timestamp; only pools created after it

No output schema declared.

No examples provided.

lending_health ~109

How close a wallet is to liquidation on Aave v3 (Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Linea, and Sonic in one call): collateral, debt, health factor, status, and how far collateral can fall before liquidation. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressstringyesWallet address
chainstring––

No output schema declared.

No examples provided.

pool_snapshot ~210

Get a cached snapshot of top DeFi liquidity pools. Filter by protocol (e.g. "uniswap-v3"), chain (e.g. "ethereum"), or token symbol (e.g. "ETH"). Returns TVL, APY, 24h volume, IL risk, and registry enrichment. Data refreshed every 15 minutes.

NameTypeReqDescription
chainstring–Filter by chain, e.g. "ethereum", "base", "arbitrum"
limitinteger–Max results (1-100)
offsetinteger–Pagination offset
orderstring–Sort order
poolstring–Filter by specific pool address or DeFi Llama pool ID
protocolstring–Filter by protocol name, e.g. "uniswap-v3", "curve", "aave"
sortBystring–Sort field
tokenstring–Filter pools containing this token symbol, e.g. "ETH", "USDC"

No output schema declared.

No examples provided.

preflight ~298

Is this action safe? Call once before any on-chain action: send the transactions, signature request, x402 payment request, recipients, and/or tokens the agent is about to act on, and get back one proceed/caution/avoid verdict. Transactions are simulated (reverts, assets out, approvals, counterparty screening), signatures decoded and checked for permit phishing, recipients screened against sanctions and scam lists, and tokens rug-checked, including tokens the simulation shows the wallet receiving. Returns one proceed / caution / avoid verdict with reasons. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Linea, Unichain, Sonic and HyperEVM. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring–Chain of the action (defaults to the typed data chainId, else base)
expectedMaxUsdnumber––
fromstring–Wallet taking the action; required with transactions
paymentRequiredobject–x402 PaymentRequired about to be paid
recipientsarray–Addresses about to receive funds or permissions
tokensarray–Tokens about to be bought; each is rug-checked
transactionsarray–Transactions about to be signed, in order
typedData––EIP-712 typed data about to be signed

No output schema declared.

No examples provided.

registry_lookup ~68

Look up a contract address in the Known Contract Label Registry. Returns protocol name, category, risk level, and tags. Free — no payment required.

NameTypeReqDescription
addressstringyesContract address (0x-prefixed)
chainstring–Blockchain network (e.g., ethereum, base)

No output schema declared.

No examples provided.

risk_batch ~104

Batch rug-check: risk scores (holder concentration, mint/blacklist/pause/upgrade permissions, liquidity depth) for 2-25 EVM tokens in one call. Use it to screen a watchlist or a list of candidate trades at once. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring–Default chain
tokensarrayyesTokens to score

No output schema declared.

No examples provided.

send_feedback ~104

Send AgentForge feedback: a bug or wrong result, a complaint, a feature or new-check request, or an idea. Free. Include a contact (email, wallet, or URL) if you want a reply.

NameTypeReqDescription
contactstring–How to reach you, if you want a reply
endpointstring–Tool or endpoint it concerns, if any
messagestringyesWhat happened or what you need
typestringyes–

No output schema declared.

No examples provided.

sentiment ~102

Analyze sentiment of text in crypto, finance, social media, or general context. Returns score (-1 to 1), confidence, label (very_bearish to very_bullish), reasoning, and per-entity sentiment. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
contextstring–Context for sentiment analysis
textstringyesText to analyze for sentiment

No output schema declared.

No examples provided.

signature_check ~193

Check a signature request BEFORE signing it: decodes EIP-712 typed data (ERC-20 permit, Permit2, Seaport order, transfer authorization) or an x402 payment request, explains in one sentence what signing would allow, screens spenders and payees for sanctions and scams, and catches signature-drainer patterns. Returns proceed / caution / avoid. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring––
expectedMaxUsdnumber–x402 only: refuse payment options above this many USD
paymentRequiredobject–x402 PaymentRequired object with accepts[] the agent is about to pay
signerstring–Wallet that would sign
typedData––EIP-712 typed data { domain, types, primaryType, message }, or its JSON string

No output schema declared.

No examples provided.

solana_program_lookup ~52

Look up a Solana program ID in the program label registry. Returns protocol name, category, risk level. Free — no payment required.

NameTypeReqDescription
programIdstringyesBase58 Solana program ID

No output schema declared.

No examples provided.

solana_token_risk_scan ~79

Solana token rug check: mint/freeze authority, holder concentration, liquidity depth, and a composite 0-100 risk score. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
mintstringyesBase58 Solana token mint address

No output schema declared.

No examples provided.

solana_tx_explain ~74

Explain a Solana transaction in plain English: labeled programs, token/SOL movements, success status, and risk flags. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
signaturestringyesBase58 Solana transaction signature

No output schema declared.

No examples provided.

solana_tx_simulate ~85

Simulate a Solana transaction before signing it: balance changes, labeled programs, deterministic risk rules, and a proceed/caution/avoid recommendation. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
transactionstringyesBase64-encoded unsigned (or signed) Solana transaction

No output schema declared.

No examples provided.

summarize ~115

Summarize text with configurable length (brief/standard/detailed), format (prose/bullet_points/structured), and optional topic focus. Returns summary, key points, and compression ratio. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
focusstring–Optional topic to focus the summary on
formatstring–Output format
maxLengthstring–Summary length
textstringyesText to summarize

No output schema declared.

No examples provided.

token_compare ~96

Compare a primary token against up to 3 others. Returns full research on primary, abbreviated metrics on comparisons, plus AI comparative analysis. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring–Blockchain network
comparearrayyesTokens to compare against (1-3)
primarystringyesPrimary token to research

No output schema declared.

No examples provided.

token_intel ~80

Lightweight token lookup: price, market cap, volume, and basic risk assessment for any EVM or Solana token. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressstringyesToken contract address or name
chainstring–Blockchain network

No output schema declared.

No examples provided.

token_research ~134

Multi-source token intelligence: market data, DeFi metrics, contract verification, prediction markets, holder analysis, price history, and AI risk assessment. Aggregates CoinGecko, DeFiLlama, Etherscan, and Polymarket. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring–Blockchain network
includearray–Data modules to include (default: market_data, defi_metrics, contract_info, risk_assessment)
querystringyesToken name, symbol, or contract address

No output schema declared.

No examples provided.

token_risk_metrics ~126

Quantitative risk metrics for any ERC-20 token: holder concentration (top 10 holder %), contract permissions (can mint/burn/pause/blacklist), liquidity depth vs market cap, deployer history, and weighted composite risk score (0-100). Pre-computed for top tokens, live-computed for others. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressstringyesToken contract address (0x-prefixed)
chainstring–Blockchain network

No output schema declared.

No examples provided.

trade_check ~114

Check a token before you buy it: one call bundling quantitative rug-check metrics (holder concentration, permissions, liquidity), AI risk assessment with market data, and current gas — rolled into a proceed/caution/avoid verdict with reasons. Cheaper than calling the three services separately. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
addressstringyesToken contract address (0x-prefixed)
chainstring–Blockchain network

No output schema declared.

No examples provided.

translate ~117

Translate text to any language with tone control (formal/casual/technical). Auto-detects source language. Preserves formatting and cultural nuances. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
sourceLanguagestring–Source language (auto-detected if omitted)
targetLanguagestringyesTarget language (e.g., Spanish, French, Japanese)
textstringyesText to translate
tonestring–Translation tone

No output schema declared.

No examples provided.

tx_decode ~82

Decode any EVM transaction: function call, parameters, token transfers, and plain-English explanation. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring–Blockchain network
txHashstringyesTransaction hash (0x-prefixed, 64 hex chars)

No output schema declared.

No examples provided.

tx_simulate ~145

Simulate an EVM transaction (or a sequence of up to 5, e.g. approve then swap) before signing: revert check with reason, every asset leaving or entering the wallet, approvals granted, sanctions/scam screening of counterparties, and a proceed/caution/avoid verdict. Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Linea, Unichain, Sonic. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring––
fromstringyesWallet that will sign
transactionsarrayyes–

No output schema declared.

No examples provided.

wallet_safety ~171

Comprehensive wallet safety check: scans approvals, analyzes recent transaction activity for suspicious patterns, and assesses target contract risk. Returns composite risk score (0-100), risk level, action items, and related service suggestions. Supports EVM chains and Solana. Free over MCP for 10 calls per day; beyond that the tool returns the pay-per-call x402 endpoint and its price.

NameTypeReqDescription
chainstring–Blockchain network (includes Solana support)
depthstring–Analysis depth: quick (approvals only), standard (approvals + activity), deep (extended history + all patterns)
targetContractstring–Optional target contract address to assess before interaction
walletAddressstringyesWallet address to check (0x-prefixed for EVM, base58 for Solana)

No output schema declared.

No examples provided.

Install

How do I install the io.github.acarchidi/agentforge MCP server?

io.github.acarchidi/agentforge is a hosted endpoint at https://agentforge-taupe.vercel.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · agentforge-taupe.vercel.app

# add to Claude Code
claude mcp add --transport http acarchidi-agentforge 'https://agentforge-taupe.vercel.app/mcp'
Common questions

What is the io.github.acarchidi/agentforge MCP server?

io.github.acarchidi/agentforge is an MCP server listed in the public MCP registry as io.github.acarchidi/agentforge. Safety checks for AI agents: preflight before signing, prompt-injection scan, sanctions, rug checks. This page covers its hosted endpoint (https://agentforge-taupe.vercel.app/mcp).

Is the io.github.acarchidi/agentforge MCP server safe to use?

io.github.acarchidi/agentforge scores 84 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.acarchidi/agentforge MCP server expose?

io.github.acarchidi/agentforge exposes 29 tools: token_intel, token_research, contract_docs, contract_monitor, token_compare, and 24 more. Their descriptions and schemas cost roughly 3,406 tokens of context every time the server is loaded.

Does the io.github.acarchidi/agentforge MCP server require authentication?

No. We connected to io.github.acarchidi/agentforge without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the io.github.acarchidi/agentforge MCP server still maintained?

io.github.acarchidi/agentforge is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.