English Français العربية

Automaton Token Safety

Official registry Finance and payments

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

Source code Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http automaton-token-safety 'https://api.automaton-sovereign.workers.dev/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "automaton-token-safety": {
            "type": "http",
            "url": "https://api.automaton-sovereign.workers.dev/mcp"
        }
    }
}
NPM package @celorodrigues/token-safety-mcp
Claude Code 
claude mcp add automaton-token-safety -e 'VALUE_API_BASE=https://api.automaton-sovereign.workers.dev' -e 'AUTOMATON_ORIGIN_BASE=<AUTOMATON_ORIGIN_BASE>' -e 'AUTOMATON_MCP_PAYER_KEY=<your automaton_mcp_payer_key>' -e 'ALLOW_OUTBOUND_SPEND=0' -e 'AUTOMATON_MCP_MAX_AMOUNT_UNITS=10000' -e 'AUTOMATON_MCP_TOTAL_CAP_UNITS=100000' -e 'MCP_HTTP_PORT=<MCP_HTTP_PORT>' -- npx -y @celorodrigues/token-safety-mcp@2.0.2
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "automaton-token-safety": {
            "command": "npx",
            "args": [
                "-y",
                "@celorodrigues/token-safety-mcp@2.0.2"
            ],
            "env": {
                "VALUE_API_BASE": "https://api.automaton-sovereign.workers.dev",
                "AUTOMATON_ORIGIN_BASE": "<AUTOMATON_ORIGIN_BASE>",
                "AUTOMATON_MCP_PAYER_KEY": "<your automaton_mcp_payer_key>",
                "ALLOW_OUTBOUND_SPEND": "0",
                "AUTOMATON_MCP_MAX_AMOUNT_UNITS": "10000",
                "AUTOMATON_MCP_TOTAL_CAP_UNITS": "100000",
                "MCP_HTTP_PORT": "<MCP_HTTP_PORT>"
            }
        }
    }
}

Environment variables

  • VALUE_API_BASE required Base URL of the Automaton Token Safety API the tools call.
  • AUTOMATON_ORIGIN_BASE Origin URL for routes the edge defers with a use_origin answer (for example the free conformance checker). Optional; without it such a tool reports which variable to set.
  • AUTOMATON_MCP_PAYER_KEY secret Private key of the wallet that pays for calls. The server only SIGNS an EIP-3009 authorisation; it never sends a transaction. Also required: ALLOW_OUTBOUND_SPEND=1, and this key is not loaded into the process without it. Never set this to the payee/treasury wallet: that is rejected.
  • ALLOW_OUTBOUND_SPEND Set to 1 to permit this server to sign paid calls. Any other value (including absent) leaves every paid tool answering with the price only.
  • AUTOMATON_MCP_MAX_AMOUNT_UNITS Per-call ceiling in USDC base units (6 decimals, so 10000 = 0.01 USDC). A requirement above it is refused before signing.
  • AUTOMATON_MCP_TOTAL_CAP_UNITS Ceiling for the whole process lifetime, in USDC base units. Stops a runaway loop, not just a single expensive call.
  • MCP_HTTP_PORT When set, serve Streamable HTTP on this port instead of stdio. Binds to 127.0.0.1 by default.

Frequently asked questions

What is Automaton Token Safety?

Base L2 token safety for AI agents: honeypot scans, swap simulation, approval and liquidity risk.

How do I install Automaton Token Safety?

It runs as a remote server. In Claude Code: claude mcp add --transport http automaton-token-safety 'https://api.automaton-sovereign.workers.dev/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Automaton Token Safety need an API key?

Yes. It expects VALUE_API_BASE, AUTOMATON_MCP_PAYER_KEY, which you set in its configuration.

Is Automaton Token Safety open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Automaton Token Safety?

It is published by baianomarceloeduardo-jpg. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.