MCP.Market

Defi Guard MCP server

by iinniitt·io.github.iinniitt/defi-guard-mcp·v0.2.0
No reviews yet

DeFi safety checks on Base before you sign: honeypot, owner-power scan, approval risk, Aave health.

A85/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
New

0 stars44 downloads/wk

Reviews

Write one

Nobody has reviewed Defi Guard yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Defi Guard tools (6)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • aave_position_health

    Check the live health of an Aave V3 position on Base: health factor, total collateral/debt (USD), LTV and liquidation threshold. A health factor below 1.0 means the position is liquidatable.

  • approval_risk

    Assess the risk of an existing ERC-20 approval on Base BEFORE it can be abused: reads the live allowance an owner has granted a spender, flags UNLIMITED approvals (the allowance-drain vector — a compromised or malicious spender can pull up to the allowance), and reports whether the spender is a contract. Unlimited allowance to an EOA is a classic scam setup. Use before signing an approval, or to a

  • quote_swap

    Real exact-input swap quote on Base via Uniswap V3 QuoterV2. Tries all fee tiers (0.01%, 0.05%, 0.3%, 1%) and returns the best executable output. Amounts are human units (e.g. '0.5').

  • scan_dangerous_capabilities

    Scan a token/contract's DEPLOYED BYTECODE on Base for owner-only powers that can harm holders — mint, pause, blacklist, adjustable fees/taxes, max-tx limits, trading toggles, and proxy upgradeability. Flags the PRESENCE of each capability (a selector match in the code), i.e. what the operator COULD do, independent of the token's claims. No explorer API key needed. Heuristic: matches 4-byte selecto

  • token_risk_snapshot

    Liquidity risk snapshot of an ERC-20 on Base: metadata plus REAL market depth measured by round-trip quotes (WETH -> token -> WETH) at two trade sizes. High round-trip loss = thin/illiquid or high-fee market; a token you cannot exit is a risk regardless of its chart.

  • token_safety_screen

    Pre-trade safety screen for an ERC-20 on Base — the 'is this safe to buy/approve BEFORE I sign' check. Verifies you can actually SELL it back (honeypot detection), measures the real round-trip cost (buy+sell fees/tax), and reports whether ownership is renounced (a live owner can often change taxes, pause, or mint). Returns a single risk verdict. On-chain only; no oracle, no trust in the token's ow

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 80 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Defi Guard compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 70% of 915 Security servers
Tools
6
the typical Security server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
44
more than 37% of 248 Security servers with a package

What its tools let an agent do: 6 read

Install Defi Guard in Claude Code, Cursor or VS Code

Runs npx -y @iniit/defi-guard-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add defi-guard-mcp -- npx -y @iniit/defi-guard-mcp
Add to Cursor

What the publisher says

From the Defi Guard repository's README, as published. We do not edit it. Read it on GitHub

DeFi Guard MCP

<!-- mcp-name: io.github.iinniitt/defi-guard-mcp -->

The safety layer that checks a DeFi transaction or token before your agent (or you) signs — on Base L2. Sits in front of execution MCPs (it pairs with them, it doesn't compete): honeypot detection, owner-power scans, approval-drain checks, position health, and executable prices — all from live on-chain state.

No API keys required — works out of the box against public Base RPCs (bring your own RPC for speed via BASERPCURL). Read-only: it never holds keys, signs, or submits.

Guard-before-signing tools

Data tools

Why round-trip depth instead of "liquidity" numbers

TVL and pool-size numbers are easy to fake and easy to misread. A round-trip quote against live state measures the only thing that matters: what you lose entering and exiting right now (fees + price impact, both ways). If a token can be bought but not sold, this tool says so (UNTRADABLE).

Install

npx @iniit/defi-guard-mcp        # or from source: npm install && npm run build

Claude Code

claude mcp add defi-guard -- npx -y @iniit/defi-guard-mcp

Any MCP client (Cursor, Windsurf, etc.)

{
  "mcpServers": {
    "defi-guard": {
      "command": "npx",
      "args": ["-y", "@iniit/defi-guard-mcp"],
      "env": { "BASE_RPC_URL": "https://your-rpc-if-you-have-one" }
    }
  }
}

BASERPCURL is optional; without it the server rotates across public Base endpoints with automatic fallback and retries.

Example

"Before I approve TOKEN X to this router, is any of it risky?"

The agent calls tokensafetyscreen (can I sell it back? is ownership renounced?), scandangerouscapabilities (can the owner mint/blacklist/pause?), and approval_risk (is this an unlimited allowance to an EOA?) — and answers with live on-chain facts instead of vibes, before you sign.

Honesty notes (read this)

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Defi Guard: common questions

Is Defi Guard MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the Defi Guard safety report
How do I install Defi Guard?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Defi Guard need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is Defi Guard maintained?
The last commit was 119 days ago (2026-07-08). The latest release is v0.2.0.
What can I use instead of Defi Guard?
Servers from other publishers that do the same job: crosscheck MCP server, Calllint MCP server and Jikida MCP server.
How does Defi Guard compare with other Security MCP servers?
safety score 85/100 (higher than 70% of 915 Security servers); tools 6 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Defi Guard

Same job from other publishers: the closest match first, then the best rated.

  • crosscheck
    Checks for AI agents over x402: review drafts, accept-check handoffs, scan skills before install.
    A
  • Calllint
    Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.
    A
  • Jikida
    Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
    A
  • DNS Doctor
    Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
    A
  • MCP Safety Warden
    MCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.
    A