veriql-mcp

veriql-mcp

Crypto wallet and token risk checks as MCP tools, so an agent can ask "is this token safe to buy?" and get an answer with the math attached.

Read-only. It never asks for a private key, a seed phrase or a wallet connection, and it never signs or moves anything. Every signal comes from public on-chain data.

Install

Claude Desktop (claude_desktop_config.json), Claude Code, Cursor, or any MCP client:

{
  "mcpServers": {
    "veriql": {
      "command": "npx",
      "args": ["-y", "veriql-mcp"],
      "env": { "VERIQL_API_KEY": "vq_live_your_key" }
    }
  }
}

Get a free key at veriql.app/api. No account, no card.

env	default
VERIQL_API_KEY	(required)	Free or prepaid key
VERIQL_BASE_URL	https://veriql.app	Point at another deployment

Tools

veriql_scan (address) Risky token approvals for a public wallet across Ethereum, BNB Chain, Polygon, Arbitrum and Base. Returns a 0-100 Security Score with itemised drivers, every risky approval, and a best-effort USD value-at-risk.

veriql_token (address, chainId?) Honeypot, punishing taxes, mintable supply, hidden owner and proxy risks, each as a plain-English flag. EVM chains plus Tron.

veriql_launch (address, chainId?) A 0-100 launch-safety score with every penalty driver and the full metrics behind it. EVM chains plus Tron plus Solana.

Why the output is shaped like this

Agents are the worst possible audience for a bare number, because they cannot tell a measurement from a fallback. So:

• Every score ships its drivers. You get the penalties and what each one is for, not just the total. The complete scoring methodology, every weight, is published at veriql.app/llms-full.txt.
• An incomplete check says so. When a dimension could not be read, the result is marked incomplete and a clean verdict is withdrawn rather than reported at a capped number. A partial check that did find danger keeps the finding: incompleteness withdraws a clean verdict and never softens a dirty one.
• Absence is never zero. A value nobody could establish comes back null. It is never substituted from another instrument, because borrowing a number across providers is how a tool reports a collapse that never happened.
• Much of it is read from chain, not resold. Pool reserves (PumpSwap, Orca, Meteora), SPL mint authorities, transfer fees, permanent delegate, LP lock and holder concentration are our own reads, so a vendor outage degrades the answer honestly instead of silently.

Pay per call, with no account

The same endpoints speak x402: call with no key, get a 402 describing exactly what to pay, retry with the payment attached. USDC on Base or Solana, no signup and no human in the loop. Useful when an agent has a wallet but cannot complete a checkout.

Limits, stated plainly

A verdict is a structural risk assessment, not financial advice and not a prediction. It cannot tell you whether a price will go up. Holder concentration is an upper bound, because the largest token accounts can include AMM pool vaults and exchange wallets. A clean result means no known risks were found, which is not the same as safe.

MIT licensed. Built by the team behind Veriql.