Token Operations MCP server
Read-only Solana and Robinhood Chain tools: wallet recovery, token safety, unlocks, upgrades, fees.
Little public usage data yet
Reviews
Write oneNobody has reviewed Token Operations yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Token Operations tools (18, 1 write)
write = sends, deletes, buys or postsaudit_tokenwrite actionFreeRun the free risk report on a token: who can still mint or freeze, transfer taxes and hooks, permanent delegates, liquidity status, holder concentration, and a verdict with a score. On Solana pass the mint address; on Robinhood Chain pass the token contract address. Use it when a user asks whether a token is safe, a rug, or a honeypot. Reads only.
check_approvalsFreeList the standing token approvals on a Robinhood Chain wallet — contracts still allowed to move its tokens — ranked by risk, with unlimited allowances, expired permits and flagged spenders called out. A risk read, not money: revoking returns nothing. Nothing is revoked.
check_closable_programsFreeRead the upgradeable programs a Solana wallet holds the upgrade authority for, and the gross rent their bytecode accounts hold. Closing a program is permanent, so this reads only.
check_dlmm_positionsFreeRead a Solana wallet's Meteora DLMM and DAMM v2 positions by status, and the gross SOL deposit held by their position accounts — what closing a dead position returns before fees. Nothing is closed.
check_failed_deploysFreeRead the program buffer accounts left behind by a Solana wallet's failed or interrupted program deploys, and the SOL recovering them returns net of fees. Nothing is recovered.
check_frozen_tokensFreeRead the permissioned (Token ACL) tokens a Solana wallet holds, and which of them the holder can unlock itself under the token's published rules. Nothing is unlocked.
check_lookup_tablesFreeRead the address lookup tables a Solana wallet owns: how many are ready to close, cooling down, or still active, and the gross rent each group holds. Nothing is deactivated or closed.
check_lp_feesFreeCount a Solana wallet's liquidity positions with trading fees waiting to be claimed, per venue: Orca Whirlpools, Meteora, and locked Raydium liquidity. Fees are owed in many different tokens, so the answer is a count of positions, never a summed figure. Nothing is claimed.
check_reclaimable_rentFreeRead how much SOL a Solana wallet can reclaim from rent: the deposits parked in its empty token accounts, and the surplus the rent cut left in accounts it still uses. Returns counts and net figures in SOL. Nothing is closed or moved.
check_subscriptionsFreeRead the on-chain subscriptions and recurring allowances a Solana wallet has granted, by state, plus the rent their accounts hold. Nothing is cancelled.
check_token_delegatesFreeList the standing token delegates and approvals on a Solana wallet — programs still allowed to move its tokens. A risk read, not money: revoking returns no SOL. Nothing is revoked.
check_token_taxFreeList the transfer-tax tokens a Solana wallet launched through the platform, with each tax rate — the tokens whose withheld tax that wallet can collect. Nothing is collected.
check_token_unlocksFreeRead a Solana token's on-chain locks: supply vesting and locked liquidity, per locker, with the cliff, start, period and released amounts each lock reports. Use it when a user asks when a token unlocks or whether its liquidity is locked. Reads public lock accounts only.
check_walletFreeRead everything a wallet can get back, in one call: on Solana, the rent in empty token accounts, the surplus the rent cut left, wrapped SOL, failed-deploy buffers, closable programs, lookup tables, dead Meteora positions, subscriptions, LP fees waiting on Orca, Meteora and locked Raydium positions, standing token delegates (a risk, not money), transfer-tax tokens it launched, and permissioned tokens it can unlock; on Robinhood Chain, LP fees, creator fees, bridge withdrawals and wrapped ETH. Every venue is read independently and reports ok, failed or unavailable, so a failed read is never mistaken for nothing there. Use it for "what can this wallet recover"; use the per-venue tools for one venue in detail.
check_wrapped_solFreeRead the wrapped SOL (wSOL) sitting in a Solana wallet's token accounts, and what unwrapping it back to SOL returns net of fees. Nothing is unwrapped.
get_fee_estimateFreeQuote the exact cost of a token operation before anything is built: the platform fee for that service on that chain plus the estimated network fee (rent, base and priority), as decimal strings in the chain's currency. Use it when a user asks what a token deploy, authority revoke, airdrop or metadata update would cost. Reads only; nothing is prepared or sent.
list_upgradesFreeList Solana's protocol upgrades (feature gates) with their state on mainnet, testnet and devnet — pending with an activation estimate, active with its activation epoch, or not yet queued — as read from the chain. Use it when a user asks whether a SIMD or feature has activated, or what is coming next. Optionally filter by mainnet state.
search_tokensFreeFind a token on Robinhood Chain by name, symbol or address in the xroot.dev token directory — the trending and newest tokens the platform has indexed — with each token's pool, price and cached audit verdict where one exists. Use it to resolve which of several same-named tokens a user means before auditing it.
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 2487ms17/20
- Tool poisoning18 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
- Maintenanceno repository listed3/15
- Maintainer identityverified namespace with website, no repo4/10
Findings (2)
- highWrite-action tools reachable without authentication
auth.open-write - lowNo source repository listed
maint.no-repo
Install directly
claude mcp add --transport http token-operations https://api.xroot.dev/mcp
Token Operations: common questions
- Is Token Operations MCP server safe?
- With care: it is graded C, so read the findings first (56/100). Read the Token Operations safety report
- How do I install Token Operations?
- It runs remotely at api.xroot.dev. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Token Operations need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Token Operations maintained?
- The latest release is v1.1.0.
- Is Token Operations up?
- 100% of our last 6 checks got an answer. We check remote servers about four times a day.