🛡️ RugCheck AI — On-chain Token Safety for Solana AI Agents
A lightweight MCP server that reads a Solana token's mint directly from the chain to screen for the common rug & honeypot traps before your agent trades — active mint/freeze authority and dangerous Token-2022 extensions (permanent delegate, transfer hooks, non-transferable, pausable) — then, for tokens that pass, builds the buy as an unsigned Jupiter transaction carrying a small Jito tip for faster inclusion. You sign it; the server never holds keys.
Tools
Screening
scan_token— full safety report in one call: authority, Token-2022 traps, honeypot, liquidity & holder concentration → SAFE/CAUTION/DANGER + a 0–100 scoreis_safe— quick yes/no gate: one boolean before you tradeverify_token_safety— on-chain audit: mint/freeze authority + Token-2022 traps + live marketcheck_authorities— mint / freeze authority and extension detectionsimulate_sell— can the token actually be sold? (honeypot check)simulate_trade— full round-trip (buy then sell back): real entry/exit cost & round-trip loss %check_liquidity— DEX liquidity, 24h volume, age, buys/sellsholders_breakdown— top-holder concentration (dump risk)token_age— freshness + real trading activityrug_forecast— heuristic rug ETA: probability + urgency window + factorsscammer_dna— intent score (0–100): how much the token's structure looks like a deliberate scamcheck_deployer— the wallets that hold power over the tokencompare_tokens— rank a basket of tokens safest-firstbatch_scan— scan up to 10 tokens at once, one report each
Execution
execute_safe_swap— re-screens the mint, then builds a Jito-tipped Jupiter swap (unsigned); refuses tokens that scan DANGER
Connect
Remote (Streamable HTTP) — no install, point your agent at:
https://web-production-58d585.up.railway.app/mcp
Listed on the official MCP Registry as
io.github.MrWizardlyLoaf/rugcheck-ai.
Self-host:
pip install -r requirements.txt
SOLANA_RPC=<your-rpc-url> python server.py
Why
Most agents trade Solana tokens blind. RugCheck AI calls getAccountInfo on the mint and reads the
authorities and Token-2022 extensions itself, so you get a real verdict on a fresh launch instead of
unknown — and a live mint or freeze authority is flagged before you buy, not after.
Use it when
Your agent needs to answer, before it spends a cent:
- Is this Solana token safe to buy — or is it a rug pull?
- Is this a honeypot — will I actually be able to sell after I buy?
- Does the mint have an active freeze / mint authority that can trap or dilute me?
- Is there a hidden Token-2022 trap (permanent delegate, transfer hook) that can drain me?
- Pre-trade screening / token due-diligence for an autonomous trading agent.
Built for AI trading agents, snipers and bots that buy SPL / Token-2022 tokens and need a fast on-chain rug check before entering — then a screened Jupiter route once a token clears.
FAQ
How do I check if a Solana token is safe to buy?
Call scan_token(mint) — one call returns a SAFE / CAUTION / DANGER verdict covering mint/freeze
authority, Token-2022 traps, honeypot (sellability), liquidity and holder concentration, plus a
0–100 safety score.
How do I detect a honeypot before buying?
simulate_sell(mint) checks whether a live sell route exists — a token with no route is effectively
a honeypot even when nothing on-chain formally blocks selling.
How do I check holder concentration / whale dump risk?
holders_breakdown(mint) reports the largest wallets and what share of supply they control — high
concentration means one holder can crash the price on you.
How do I know if a token is a rug pull?
rug_forecast(mint) gives a heuristic rug probability and urgency window from real signals
(authority, Token-2022 traps, concentration, sell pressure, age). check_authorities and
check_deployer show exactly who holds power over the token.
Does it work on fresh / newly launched tokens?
Yes — it reads the mint directly on-chain (getAccountInfo), so you get a real verdict on a token
too new to be indexed elsewhere. token_age shows freshness and real trading activity.
Does it touch my wallet or sign anything?
No. Screening is read-only; execute_safe_swap only builds an UNSIGNED transaction for you to sign —
the server never holds keys, never signs, never sends.
Is it free? Do I need an API key? Remote server, no install, no API key. Point your agent at the endpoint and call the tools.
Status
v1.2.0 — working, actively developed, CI-tested. Open source, auditable — the screening tools are
read-only (getAccountInfo); execute_safe_swap only builds an unsigned transaction for you to sign.
MIT licensed. Self-hostable. Built for Solana trading agents.