XRPL Token Guard MCP server

XRPL Token Guard

Ask your AI agent, or your voice assistant, "is this token safe?" and get an honest answer with reasons.

XRPL Token Guard is an open-source MCP server. It checks XRP Ledger tokens and wallets using live, read-only mainnet data, and returns three things:

• a verdict: High risk / Caution / No red flags found / Not enough data
• the reasons behind it, each naming the exact ledger fact
• a one-sentence spoken summary, ready for text-to-speech on Alexa+ or any other voice assistant

It never signs, never sends a transaction and never asks for keys.

Need more than a quick check?

Try the free hosted demo or browse the free token evidence pages. Launch Lab offers a Token Report for 5 XRP, a Wallet Checkup for 3 XRP, and a Token Launch Kit for 10 XRP. Preview the findings before choosing a paid report. These are factual ledger checks, not buy/sell advice or a guarantee of safety; Token Guard stays free.

Hosted MCP: https://cocoeatsai.com/area4/guard/mcp (Streamable HTTP). The hosted demo supports typed questions and example buttons; microphone input is currently disabled by the hosting policy. It is a voice-assistant simulator, not an actual Alexa integration.

For Claude Desktop (claudedesktopconfig.json) or Cursor (.cursor/mcp.json), build a local clone using the commands below, then replace the absolute path in this configuration:

{"mcpServers": {
  "xrpl-token-guard": {"command": "node", "args": ["/absolute/path/to/xrpl-token-guard/dist/stdio.js"]}
}}

Example risk interpretation (not a trading recommendation):

You:    "Is this RLUSD real?"
Guard:  "Warning, high risk. This token calls itself RLUSD, but it is not the real Ripple USD.
         The real one comes from a different issuer. A matching name does not establish authenticity."

Why it exists

Scammers on the XRP Ledger copy famous names. On mainnet today there are several tokens called RLUSD that aren't Ripple's. Many of them have a black-holed issuer, which naive checkers score as "safe" because nobody can mint more. Token Guard knows the official issuers and flags the copy first. It explains that a locked supply doesn't make an imitation genuine.

Answers have to be short enough to speak and specific enough to trust. Every finding carries both a precise message (for screens and agents) and a spoken line (for voice).

Tools

There's also a prompt, voicetokencheck, that tells a voice assistant how to answer: two sentences, the verdict and the main reason, no buy/sell advice.

Every tool has:

• readOnlyHint: true
• an outputSchema, with typed structuredContent in each response
• a human-readable text block

Tickers are resolved case-insensitively against the issuer's real obligations, so asking for "bigds" finds $BIGDS.

Run it

Shortened. The full README is on GitHub.