# com.cerberusindex/cerberus-index (remote · cerberusindex.com)

XRPL token rug-checks, issuer reputation & AMM data for AI agents. Pay-per-call USDC via x402.

- Trust score: 65/100 (medium)
- Change this week: +6
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `cerberusindex.com`: 65/100 (this document), [markdown](https://verifymcp.io/servers/com-cerberusindex-cerberus-index/cerberusindex.md), [page](https://verifymcp.io/servers/com-cerberusindex-cerberus-index/cerberusindex)

## Channel facts

- Endpoint: `https://cerberusindex.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 66/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 20 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC is configured correctly; the domain's records validate against the full chain to the root.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 3418 tokens (~170/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 67/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http com-cerberusindex-cerberus-index https://cerberusindex.com/mcp
```

### Codex

```toml
[mcp_servers.com-cerberusindex-cerberus-index]
url = "https://cerberusindex.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-cerberusindex-cerberus-index": {
      "type": "remote",
      "url": "https://cerberusindex.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-cerberusindex-cerberus-index --url https://cerberusindex.com/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-cerberusindex-cerberus-index:
    url: "https://cerberusindex.com/mcp"
```

### Other

```json
{
  "mcpServers": {
    "com-cerberusindex-cerberus-index": {
      "type": "http",
      "url": "https://cerberusindex.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 65, +1)

- [functional] New tool “explore_tokens”

### 2026-07-31 (score 64, +3)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 61, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 60, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 59, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 58)

First indexed and scored.

## MCP tools (20)

### `check_xrpl_token` (~199 tokens)

Live safety verdict for an XRPL token: clawback & global-freeze hard rejects, issuer blackhole status (can supply ever be re-minted?), NoFreeze, pool depth & trading fee, LP-burn fraction (is liquidity locked?), plus Cerberus's proprietary rug blocklist & detection history. Verdicts: unsafe | caution | likely_safe | unknown, with reasons. `currency` may be a 3-char or 40-char hex code. Price: $0.005 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Input parameters:

- `attest` (boolean)
- `currency` (string, required)
- `issuer` (string, required)

### `check_issuer_reputation` (~57 tokens)

Reputation for an XRPL issuer: blocklist status + historical detection outcomes. Price: $0.002 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `issuer` (string, required)

### `check_address` (~264 tokens)

Cross-chain address & counterparty risk — one call before you send to, approve, or trust an address. EVM chains (ethereum, base, bsc, polygon, arbitrum, optimism, avalanche, …): sanctions, mixer, phishing, drainer, money-laundering & cybercrime flags aggregated from GoPlus, told whether it's a contract or a wallet. XRP Ledger (r-addresses): Cerberus's own engine — the production rug blocklist, live clawback/global-freeze flags (can this address seize or freeze tokens it issues?), burn-address detection, and prior launch history — coverage no incumbent offers. Chain is auto-detected; pass `chain` to pick the EVM network (default ethereum). Verdict: high_risk | caution | safe | unknown, source named. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Input parameters:

- `address` (string, required)
- `attest` (boolean)
- `chain`

### `check_transaction` (~242 tokens)

Simulate an unsigned XRPL transaction and tell you what it will ACTUALLY do — before you sign it. Pass the transaction JSON; get back (1) its intent in plain language, (2) a live-ledger dry-run (`simulate`): would it succeed, and the exact balance changes per account — computed, never submitted, never signed — and (3) drain vectors flagged: handing over your signing key (SetRegularKey / SignerListSet), disabling your master key, enabling clawback, partial-payment tricks, trustlines to blocklisted issuers, sends to flagged addresses. Verdict: danger | caution | safe | unknown. A transaction that would fail on-chain is reported as such. Price: $0.010 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Input parameters:

- `account`
- `attest` (boolean)
- `transaction` (required)

### `check_endpoint` (~285 tokens)

Endpoint & tool trust — one call before an agent connects to a third-party MCP server or HTTP tool. Pass the endpoint `url` (and, to unlock the strongest check, its `tools`: the name/description/inputSchema the agent is about to trust). Returns three signals behind one verdict: (1) transport & TLS identity — encrypted, valid chain, not expired or self-signed; (2) domain age via RDAP — freshly-registered hosts are a scam tell; (3) a TOOL-POISONING scan of the tool definitions for the hidden directives that hijack agents — instruction overrides, 'don't tell the user', data exfiltration, secret harvesting, tool-shadowing, and invisible-unicode / homoglyph steganography that a human reviewer can't see. Nobody else screens tool descriptions for injection. Verdict: trusted | caution | untrusted | unknown, with per-finding evidence. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Input parameters:

- `attest` (boolean)
- `tools`
- `url` (string, required)

### `token_holders` (~104 tokens)

Holder distribution & concentration risk for an XRPL token: holder count, top-1 and top-10 share of circulating supply, AMM pool excluded from whale math. Flags single-wallet dump risk. Best for newer tokens (large tokens report 'unknown_large' honestly rather than guessing). Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `currency` (string, required)
- `issuer` (string, required)

### `verify_issuer_domain` (~97 tokens)

Bidirectional domain verification for an XRPL issuer: decodes the on-chain Domain field and checks the domain's /.well-known/xrp-ledger.toml actually claims the issuer back. verified true/false with reasons — a strong legitimacy signal (its absence is a yellow flag). Price: $0.003 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `issuer` (string, required)

### `resolve_asset` (~251 tokens)

Cross-chain identity for an XRPL token — 'what is this, everywhere it exists?' Resolves the token's real identity across chains and catches IMPOSTORS: a token using a famous symbol (USDC, WBTC, SOLO…) from an issuer that is NOT that asset's canonical deployment is flagged — a fake USDC is a fake USDC on every chain, and a single-chain check misses it. Combines XRPLMeta (the XRPL registry: name, issuer, trust_level), CoinGecko (the canonical multi-chain asset and every chain it lives on), and Cerberus's rug blocklist. Verdict: verified_crosschain | native_xrpl | impostor_suspected | unverified | unknown. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Input parameters:

- `attest` (boolean)
- `currency` (string, required)
- `issuer` (string, required)

### `verify_price` (~250 tokens)

Cross-chain value truth for an XRPL token — 'is the price real?' Reconstructs the token's USD price on XRPL (XRPLMeta price × live XRP/USD) and checks it two ways: for a stablecoin, whether the PEG still holds (is USDC actually ~$1 here?); for any cross-chain asset, whether the XRPL price has DIVERGED from its canonical price elsewhere (manipulation, stale liquidity, or arbitrage). Weighs it against real 24h volume — a price on a dead pool is a number, not a market. Verdict: price_consistent | price_divergent | depegged | thin_liquidity | native_no_reference | unknown. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it. Pass `attest=true` to also get an Ed25519-SIGNED attestation of this verdict — portable proof you can log, hand to a counterparty, or verify later with `verify_attestation` (free) or the published key.

Input parameters:

- `attest` (boolean)
- `currency` (string, required)
- `issuer` (string, required)

### `get_new_pools` (~77 tokens)

Recently detected XRPL AMM pools (newest first, max 100), enriched: readable name, age, initial liquidity and fee, plus an honest launch-time screening label. Price: $0.010 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `limit` (integer)

### `explore_tokens` (~192 tokens)

Discover XRPL tokens — a DexScreener-style feed over 160k+ tokens. Rank by `sort` (volume_24h | marketcap | holders | trustlines | price), `query` to search by name, `limit`/`offset` to page, `trust_only` for XRPLMeta-trusted only. Each row returns name, icon, USD price, 24h volume, market cap, holder count, XRPLMeta trust level, AND our rug-blocklist flag — discovery with a trust signal built in. Run check_xrpl_token on any row for the full verdict. Price: $0.004 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `limit` (integer)
- `offset` (integer)
- `query`
- `sort` (string)
- `trust_only` (boolean)

### `get_token_ohlc` (~187 tokens)

OHLC price-history candles for an XRPL token — open/high/low/close plus volume per interval, the series behind a candlestick chart. `interval` is 5 | 15 | 60 | 240 | D | W (minutes, or Day/Week); `bars` is how many candles (max 1000); prices are quoted in XRP, or pass `fx="USD"` for USD. Sourced from the XRPL DEX/AMM; returns ok:false with a reason when the pair is unknown or the source is unreachable — never invented prices. Price: $0.004 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `bars` (integer)
- `currency` (string, required)
- `fx`
- `interval` (string)
- `issuer` (string, required)

### `get_wallet_activity` (~176 tokens)

A readable, risk-annotated history of what an XRPL wallet did: recent transactions turned into plain language (sent/received amounts with token names, trustlines, DEX/AMM ops), with counterparties on the Cerberus rug blocklist flagged, new trustlines to blocklisted issuers flagged, and account-takeover transactions (SetRegularKey, SignerListSet, master-key disable) surfaced as notable — watching your OWN wallet is compromise detection. Returns XRP balance, a summary (in/out counts, distinct and flagged counterparties, notable events), and a `marker` to page further back. Read-only. Price: $0.008 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `address` (string, required)
- `limit` (integer)

### `analyze_token_trend` (~178 tokens)

A data-driven technical read on an XRPL token. Computes real indicators from OHLC — trend (9/21 EMA), RSI momentum, support/resistance, volatility, volume trend — with a plain-language assessment, and (when the server has an LLM configured) an AI-written outlook plus a genuine counter-argument. `interval` is 5|15|60|240|D|W, `bars` how many candles. Returns `ai_available` so you know whether the narrative is live. Always an informational signal, NEVER financial advice or a price target. Price: $0.020 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `bars` (integer)
- `currency` (string, required)
- `interval` (string)
- `issuer` (string, required)

### `quote_amm` (~83 tokens)

Quote an XRP->token swap against the live XLS-30 AMM pool: tokens out, spot vs effective price, price impact. Price: $0.001 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `currency` (string, required)
- `issuer` (string, required)
- `xrp_in` (number)

### `find_best_path` (~223 tokens)

Find the safest EXECUTABLE route to acquire an XRPL token and screen every hop. Unlike quote_amm (one direct AMM pool), this asks the ledger for real payment paths (order books + AMM + multi-hop) and runs the rug-safety engine over every issuer and gateway the route touches — a clean token reached through a hop that can freeze or claw back mid-route is a trap a destination-only check misses. Returns the cheapest route, its effective price, hop count, and a verdict: route_safe | route_caution | route_unsafe | no_route, with the risk on each hop. Pass your `account` for routes specific to your trustlines, or omit it for an indicative route. Price: $0.006 USDC. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `account`
- `from_currency` (string)
- `from_issuer`
- `to_amount` (number)
- `to_currency` (string, required)
- `to_issuer` (string, required)

### `watch_token` (~310 tokens)

Monitor an XRPL token you hold and get alerted when it turns dangerous. A one-time check can't catch a rug that happens later — this watches the chain continuously for: AMM pool destroyed (completed rug), liquidity drained past your threshold, clawback enabled, global freeze set, issuer un-blackholed (supply re-mintable), issuer blocklisted, LP lock weakened. Returns a `subscriber_key` — STORE IT — then poll `check_alerts` (free). Registration is refused (with the reason) for tokens that are ALREADY compromised — blocklisted, clawback-enabled, frozen, or a husk pool — since those need a verdict now, not monitoring later. Sold as packages by monitoring window (`duration_days`): 1d $0.005 · 3d $0.012 · 7d $0.020 · 14d $0.035 · 21d $0.048 · 30d $0.060 USDC (longer = cheaper per day). The x402 payment demand lists every tier; pay the one you want and the watch length is set by what you pay. Calling again renews (extends) the watch. Missing something? Call `submit_feedback` (free) to request it.

Input parameters:

- `currency` (string, required)
- `drain_threshold_pct` (number)
- `duration_days` (integer)
- `issuer` (string, required)
- `rebaseline` (boolean)
- `subscriber_key`

### `check_alerts` (~92 tokens)

Collect alerts raised by your `watch_token` watches: what changed, how severe (critical | warning | info), and the on-chain numbers behind it — plus the status of every watch you own. Requires the `subscriber_key` from watch_token. Each alert is delivered once. FREE — poll it as often as every couple of minutes.

Input parameters:

- `limit` (integer)
- `subscriber_key` (string, required)

### `verify_attestation` (~94 tokens)

Verify a signed Cerberus attestation (from any tool called with `attest=true`). Recomputes the canonical claim and checks the Ed25519 signature against this server's published key. Returns valid true/false with the claim. FREE — and you can verify independently with the public key at /api/attestation; this is a convenience, not a trust bottleneck.

Input parameters:

- `attestation` (object, required)

### `submit_feedback` (~57 tokens)

Request a tool/feature or report an issue. FREE. High-volume requests get built first — this is how you shape Cerberus's roadmap.

Input parameters:

- `message` (string, required)
- `requested_capability`
- `tool`

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-cerberusindex-cerberus-index/cerberusindex#diagnostics

## Score history

- 2026-08-03: 65
- 2026-08-02: 65
- 2026-08-01: 64
- 2026-07-31: 64
- 2026-07-30: 61
- 2026-07-29: 60
- 2026-07-28: 60
- 2026-07-27: 59
- 2026-07-26: 58

## Links

- Remote endpoint: https://cerberusindex.com/mcp
- Website: https://cerberusindex.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-cerberusindex-cerberus-index/cerberusindex/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-cerberusindex-cerberus-index/cerberusindex/changelog.json
- HTML version of this page: https://verifymcp.io/servers/com-cerberusindex-cerberus-index/cerberusindex