MCP.Market

FabTally Safe MCP server

online · 100% uptime
by zvmzaretsky·io.github.zvmzaretsky/crypto-safety·v1.0.0

Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.

A87/100grade A
What users say
No reviews yet
Be the first
Safety scan
A87/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed FabTally Safe yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

FabTally Safe tools (8)

write = sends, deletes, buys or posts
  • approvalsFree

    PAID $0.01 (x402, USDC on Base). Scan a wallet's ERC-20/721 approvals ranked by exposure; flags unlimited amounts, unverified/known-malicious spenders, and address-poisoning 'fake-approval revoke bait'; returns the exact revoke calldata you execute YOURSELF (never executed/broadcast by us). Without payment returns the x402 challenge; pass x_payment. Free teaser: approvals_free.

  • approvals_freeFree

    FREE. Approval counts + top-3 riskiest spenders for {address, chain}. Real result, no wallet. Upgrade to approvals for EVERY approval ranked + revoke calldata.

  • decode_signatureFree

    PAID $0.01 (x402, USDC on Base). Decode an off-chain EIP-712 typed-data signature (Permit / Permit2 / Seaport / generic) into plain English with risk flags: unlimited approval, unknown/known-malicious spender, never-expiring or already-expired deadlines, zero-consideration NFT-drain orders. Off-chain signatures are the top wallet-drainer vector. Pure offline decode — never signs/broadcasts. Without payment returns the x402 challenge; pass x_payment. Free teaser: decode_signature_free.

  • decode_signature_freeFree

    FREE. Type + plain-English summary + risk level for an EIP-712 `typed_data`. Real result, no wallet. Upgrade to decode_signature for the full field-by-field decode + all risk flags + malicious-spender screening.

  • simulateFree

    PAID $0.02 (x402, USDC on Base). Keyless pre-sign analysis of {chain, from?, to, data, value?}: public-RPC eth_call revert check + static calldata decode predicting approval/transfer deltas + risk flags (unlimited approval, approval-for-all, reverts). Honest keyless limitation stated in the response (no full fork trace). Without payment returns the x402 challenge; pass x_payment. Free teaser: simulate_free.

  • simulate_freeFree

    FREE. Method + revert flag + risk level + predicted effect types for a transaction. Real result, no wallet. Upgrade to simulate for the full predicted deltas + all risk flags.

  • token_safetyFree

    PAID $0.02 (x402, USDC on Base). Multi-chain token honeypot/rug check aggregating GoPlus token-security + honeypot.is buy/sell-tax simulation into a normalized 0-100 risk score with explainable reasons: honeypot/can't-sell, buy/sell tax, mint/blacklist/pausable/ownership privileges, top-holder concentration, LP-lock, contract verified/bytecode. Descriptive facts only — NOT a buy/sell signal. Without payment returns the x402 challenge; pass x_payment to settle. Free teaser: token_safety_free.

  • token_safety_freeFree

    FREE. Score band + top-line honeypot/tax/privilege flags for a token {address, chain}. Real result, no wallet. Upgrade to token_safety for the full numeric breakdown.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 997ms20/20
  • Tool poisoning8 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 54 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 87/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How FabTally Safe compares

Against every graded Finance MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
87/100
higher than 83% of 1,761 Finance servers
Tools
8
the typical Finance server has 8
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote Finance server answers 100%
Response time
380 ms
faster than 39% of 1,133 Finance servers

What its tools let an agent do: 8 read

Install FabTally Safe in Claude Code, Cursor or VS Code

claude mcp add --transport http crypto-safety https://safe.fabtally.com/mcp
Add to Cursor

What the publisher says

From the FabTally Safe repository's README, as published. We do not edit it. Read it on GitHub

FabTally Safe — MCP server

Read-only crypto safety + "what am I signing" verification for AI agents and wallets. Fronts the FabTally Safe HTTP API (https://safe.fabtally.com).

key. Outputs are descriptive facts from public sources — not financial advice.

  • Read-only. Never holds, moves, signs for, or broadcasts funds. No private
  • 8 tools: 4 free teasers + 4 paid (x402, USDC on Base).

Tools

Chains: ethereum, base, bsc, polygon, arbitrum, optimism (honeypot.is signals on ethereum/base/bsc).

Payment

Paid tools use x402 (USDC on Base, eip155:8453). Call a paid tool with no xpayment to receive the decoded 402 challenge (price, network, asset, payTo); build an x402 authorization and call again with the token in xpayment. Humans can instead prepay by card and use an X-FabTally-Key credit header on the HTTP API.

Transports

https://safe.fabtally.com/mcp.

  • stdio (default): node index.js — for Claude Desktop and local MCP clients.
  • streamable-http: MCPHTTPPORT=8113 node http.js — hosted at

Config

  • FABTALLYSAFEBASE — API base (default https://safe.fabtally.com).

Operator: Sunstone Soft · https://fabtally.com · Not financial advice · read-only.

Nothing above is checked by us. What we check is on the safety report.

FabTally Safe: common questions

Is FabTally Safe MCP server safe?
Yes, by our scan: it is graded A (87/100). Read the FabTally Safe safety report
How do I install FabTally Safe?
It runs remotely at safe.fabtally.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does FabTally Safe need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is FabTally Safe maintained?
The last commit was 95 days ago (2026-08-01). The latest release is v1.0.0.
Is FabTally Safe up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of FabTally Safe?
Servers from other publishers that do the same job: Yolfi Payments MCP server, Crypto Trends MCP server and Quantum Readiness Scan MCP server.
How does FabTally Safe compare with other Finance MCP servers?
safety score 87/100 (higher than 83% of 1,761 Finance servers); tools 8 (the typical Finance server has 8); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to FabTally Safe

Same job from other publishers: the closest match first, then the best rated.

  • Yolfi Payments MCP
    Let AI agents add Yolfi crypto checkout, paylinks, webhooks, and status checks.
    A
  • Crypto Trends MCP
    Crypto token and narrative trend volume over time, with growth signals. Free key at trendsmcp.ai
    A
  • Quantum Readiness Scan
    Local crypto inventory for developers and AI agents; coverage and limits inside the CBOM.
    A
  • WebCrypt MCP Server
    Zero-dependency Web Crypto & AI Agent MCP Server (AES-256-GCM, RSA-4096, PQC, Signatures).
    A
  • Pulsefeed X402
    Verify x402 payment endpoints before an AI agent pays: scam scan, on-chain checks, trust scores.
    A

More from zvmzaretsky →