Mmcp.market

Token Operations MCP server

by xroot.dev·dev.xroot/token-operations·v1.1.0

Read-only Solana and Robinhood Chain tools: wallet recovery, token safety, unlocks, upgrades, fees.

C56/100grade C
What users say
No reviews yet
Be the first
Safety scan
C56/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed Token Operations yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Token Operations tools (18, 1 write)

write = sends, deletes, buys or posts
  • audit_tokenwrite actionFree

    Run the free risk report on a token: who can still mint or freeze, transfer taxes and hooks, permanent delegates, liquidity status, holder concentration, and a verdict with a score. On Solana pass the mint address; on Robinhood Chain pass the token contract address. Use it when a user asks whether a token is safe, a rug, or a honeypot. Reads only.

  • check_approvalsFree

    List the standing token approvals on a Robinhood Chain wallet — contracts still allowed to move its tokens — ranked by risk, with unlimited allowances, expired permits and flagged spenders called out. A risk read, not money: revoking returns nothing. Nothing is revoked.

  • check_closable_programsFree

    Read the upgradeable programs a Solana wallet holds the upgrade authority for, and the gross rent their bytecode accounts hold. Closing a program is permanent, so this reads only.

  • check_dlmm_positionsFree

    Read a Solana wallet's Meteora DLMM and DAMM v2 positions by status, and the gross SOL deposit held by their position accounts — what closing a dead position returns before fees. Nothing is closed.

  • check_failed_deploysFree

    Read the program buffer accounts left behind by a Solana wallet's failed or interrupted program deploys, and the SOL recovering them returns net of fees. Nothing is recovered.

  • check_frozen_tokensFree

    Read the permissioned (Token ACL) tokens a Solana wallet holds, and which of them the holder can unlock itself under the token's published rules. Nothing is unlocked.

  • check_lookup_tablesFree

    Read the address lookup tables a Solana wallet owns: how many are ready to close, cooling down, or still active, and the gross rent each group holds. Nothing is deactivated or closed.

  • check_lp_feesFree

    Count a Solana wallet's liquidity positions with trading fees waiting to be claimed, per venue: Orca Whirlpools, Meteora, and locked Raydium liquidity. Fees are owed in many different tokens, so the answer is a count of positions, never a summed figure. Nothing is claimed.

  • check_reclaimable_rentFree

    Read how much SOL a Solana wallet can reclaim from rent: the deposits parked in its empty token accounts, and the surplus the rent cut left in accounts it still uses. Returns counts and net figures in SOL. Nothing is closed or moved.

  • check_subscriptionsFree

    Read the on-chain subscriptions and recurring allowances a Solana wallet has granted, by state, plus the rent their accounts hold. Nothing is cancelled.

  • check_token_delegatesFree

    List the standing token delegates and approvals on a Solana wallet — programs still allowed to move its tokens. A risk read, not money: revoking returns no SOL. Nothing is revoked.

  • check_token_taxFree

    List the transfer-tax tokens a Solana wallet launched through the platform, with each tax rate — the tokens whose withheld tax that wallet can collect. Nothing is collected.

  • check_token_unlocksFree

    Read a Solana token's on-chain locks: supply vesting and locked liquidity, per locker, with the cliff, start, period and released amounts each lock reports. Use it when a user asks when a token unlocks or whether its liquidity is locked. Reads public lock accounts only.

  • check_walletFree

    Read everything a wallet can get back, in one call: on Solana, the rent in empty token accounts, the surplus the rent cut left, wrapped SOL, failed-deploy buffers, closable programs, lookup tables, dead Meteora positions, subscriptions, LP fees waiting on Orca, Meteora and locked Raydium positions, standing token delegates (a risk, not money), transfer-tax tokens it launched, and permissioned tokens it can unlock; on Robinhood Chain, LP fees, creator fees, bridge withdrawals and wrapped ETH. Every venue is read independently and reports ok, failed or unavailable, so a failed read is never mistaken for nothing there. Use it for "what can this wallet recover"; use the per-venue tools for one venue in detail.

  • check_wrapped_solFree

    Read the wrapped SOL (wSOL) sitting in a Solana wallet's token accounts, and what unwrapping it back to SOL returns net of fees. Nothing is unwrapped.

  • get_fee_estimateFree

    Quote the exact cost of a token operation before anything is built: the platform fee for that service on that chain plus the estimated network fee (rent, base and priority), as decimal strings in the chain's currency. Use it when a user asks what a token deploy, authority revoke, airdrop or metadata update would cost. Reads only; nothing is prepared or sent.

  • list_upgradesFree

    List Solana's protocol upgrades (feature gates) with their state on mainnet, testnet and devnet — pending with an activation estimate, active with its activation epoch, or not yet queued — as read from the chain. Use it when a user asks whether a SIMD or feature has activated, or what is coming next. Optionally filter by mainnet state.

  • search_tokensFree

    Find a token on Robinhood Chain by name, symbol or address in the xroot.dev token directory — the trending and newest tokens the platform has indexed — with each token's pool, price and cached audit verdict where one exists. Use it to resolve which of several same-named tokens a user means before auditing it.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high1 low
  • Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 2487ms17/20
  • Tool poisoning18 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (2)

  • highWrite-action tools reachable without authenticationauth.open-write
  • lowNo source repository listedmaint.no-repo
Overall 56/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http token-operations https://api.xroot.dev/mcp
Add to Cursor

Token Operations: common questions

Is Token Operations MCP server safe?
With care: it is graded C, so read the findings first (56/100). Read the Token Operations safety report
How do I install Token Operations?
It runs remotely at api.xroot.dev. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Token Operations need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Token Operations maintained?
The latest release is v1.1.0.
Is Token Operations up?
100% of our last 6 checks got an answer. We check remote servers about four times a day.

More from xroot.dev