AgentForge MCP server
Commit 9 Nov 2026Menyediakan tools keamanan DeFi untuk AI agent, termasuk simulasi transaksi, rug-check token, screening sanksi, dan pemindaian prompt-injection.
Juga dikenal sebagai acarchidi/agentforge
- Stars
- 0
- Tools
- —
- Unduhan, 30 hari
- —
- Versi terbaru
- 1.13.1
- Commit terakhir
- 9 Nov 2026
- Lisensi
- MIT
Apa itu AgentForge MCP?
AgentForge adalah MCP server. Menyediakan tools keamanan DeFi untuk AI agent, termasuk simulasi transaksi, rug-check token, screening sanksi, dan pemindaian prompt-injection.
Ringkasan dibuat dari README proyek
Tentang AgentForge MCP server
AgentForge menyediakan rangkaian tools keamanan yang dirancang khusus untuk AI agent yang beroperasi di lingkungan decentralized finance. Layanan ini memungkinkan agent untuk melakukan pengecekan keamanan krusial seperti simulasi transaksi, rug-check token, serta screening pihak lawan terhadap sanksi atau scam. Layanan ini juga mencakup kapabilitas khusus seperti pemindaian prompt-injection untuk melindungi LLM dari instruksi berbahaya dan monitoring risiko likuidasi untuk protokol lending.
Developer dapat mengintegrasikan tools ini melalui HTTP MCP server untuk digunakan pada client seperti Claude Desktop, Cursor, atau Windsurf. Untuk aplikasi kustom, tersedia npm SDK untuk framework termasuk LangChain dan Vercel AI SDK. Sistem ini beroperasi dengan model pay-per-call menggunakan USDC melalui protokol x402, sehingga tidak memerlukan API keys atau akun di awal. Meskipun beberapa endpoint tersedia gratis hingga batas harian tertentu, sebagian besar fungsi keamanan khusus akan dikenakan biaya kecil per request.
Apa yang bisa Anda lakukan dengannya
- 1Simulasi transaksi EVMAI agent dapat mensimulasikan urutan transaksi untuk memeriksa alasan revert dan perubahan aset sebelum melakukan signing.
- 2Melakukan token rug-checksDeveloper dapat menginstruksikan agent untuk mengevaluasi risiko sebuah token baru dengan memeriksa likuiditas dan konsentrasi holder.
- 3Pemindaian prompt injectionsLindungi LLM dengan memindai teks yang tidak terpercaya dari instruction overrides atau payload berbahaya.
- 4Monitor risiko likuidasiAgent dapat melacak health factor dari posisi Aave v3 di berbagai chain untuk mencegah likuidasi.
Ditulis berdasarkan README proyek. Setiap use case diperiksa terhadap kutipan dari README tersebut.
Cara menginstal AgentForge MCP
Format diverifikasi 10 Nov 2026Tambahkan ke CursorTambahkan ke GooseInstal AgentForge MCP di Claude Code
$ claude mcp add --transport http agentforge https://agentforge-taupe.vercel.app/mcpInstal AgentForge MCP di Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"agentforge": {
"url": "https://agentforge-taupe.vercel.app/mcp"
}
}
}Instal AgentForge MCP di VS Code
.vscode/mcp.json
{
"servers": {
"agentforge": {
"type": "http",
"url": "https://agentforge-taupe.vercel.app/mcp"
}
}
}Instal AgentForge MCP di VS Code CLI
$ code --add-mcp '{"name":"agentforge","type":"http","url":"https://agentforge-taupe.vercel.app/mcp"}'Instal AgentForge MCP di Codex
$ codex mcp add agentforge --url https://agentforge-taupe.vercel.app/mcpInstal AgentForge MCP di Codex config.toml
~/.codex/config.toml
[mcp_servers.agentforge] url = "https://agentforge-taupe.vercel.app/mcp"
Instal AgentForge MCP di Gemini CLI
$ gemini mcp add -s user --transport http agentforge https://agentforge-taupe.vercel.app/mcpInstal AgentForge MCP di Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"agentforge": {
"url": "https://agentforge-taupe.vercel.app/mcp",
"type": "http"
}
}
}Pengecekan otomatis
Berjalan 15 Nov 2026Laporan lengkap →Belum diverifikasi. Sebuah server memerlukan skor 80, tidak ada temuan serius, dan data yang cukup untuk kami periksa. Cara kerja checks · Yang perlu diperbaiki untuk menambah poin
- Source repository terhubung dan dapat dijangkauacarchidi/agentforge is public and reachablegithub.com/acarchidi/agentforge ↗Lolos
- Nama paket mencantumkan repositori ini sebagai sumbernyaTidak diperiksa
- Provenance build (atestasi Sigstore)Tidak diperiksa
- Lisensi open source (OSI)MITspdx.org/licenses/MIT.html ↗Lolos
- Ada commit atau release dalam satu tahun terakhirLast commit or release 2026-11-09github.com/acarchidi/agentforge ↗Lolos
- OpenSSF ScorecardTidak diperiksa
- Nama package tidak mirip dengan package populerTidak diperiksa
- Tidak ada advisory kritis pada paket atau dependensinyaTidak diperiksa
- Tidak ada instruksi tersembunyi untuk model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersLolos
- Tools yang bersifat destruktif telah diberi labelTidak diperiksa
- Endpoint remote merespons handshake MCPinitialize answered with protocol 2025-06-18 in 176 msLolos
README
Lihat di GitHubAgentForge
DeFi safety tools for AI agents. Simulate a transaction before signing it, screen counterparties for sanctions and scams, catch new token launches already risk-scored, rug-check tokens, and check liquidation risk — paid per call in USDC over x402. No API keys, no accounts.
- Live: https://agentforge-taupe.vercel.app
- MCP server:
https://agentforge-taupe.vercel.app/mcp(free up to a daily cap) — official MCP Registry:io.github.acarchidi/agentforge - SDK + framework tools:
agentforge-toolson npm (OpenAI, Vercel AI SDK, LangChain, ElizaOS) - Discovery: x402 manifest · OpenAPI · catalog · llms.txt · agent card
Use it in 30 seconds
MCP (no wallet):
claude mcp add --transport http agentforge https://agentforge-taupe.vercel.app/mcp
Cursor, Windsurf, Claude Desktop, ElizaOS: add an HTTP MCP server with the same URL.
From code, paying per call:
npm install agentforge-tools
import { AgentForge } from 'agentforge-tools';
const af = new AgentForge({ privateKey: process.env.AGENT_KEY as `0x${string}`, maxPaymentUsd: 0.1 });
const sim = await af.simulateTransaction({ chain: 'base', from: '0xYourWallet', transactions: [{ to, data }] });
if (sim.verdict === 'avoid') throw new Error('refusing to sign');
Any x402 client: send the request unpaid, get a 402 with the exact price, pay, retry. Failed calls (4xx/5xx) are never charged.
Coinbase AgentKit: an agentforge action provider is proposed upstream in coinbase/agentkit#1619.
Endpoints
| Endpoint | Price (USDC) | What it does |
|---|---|---|
POST /v1/token-intel |
$0.015 | Token metadata enrichment with market data and AI risk assessment. |
POST /v1/token-research |
$0.03 | Multi-source token intelligence: market data, DeFi metrics, contract verification, prediction markets, price history, holder distribution, and AI risk assessment. |
POST /v1/contract-docs |
$0.05 | Human-readable smart contract documentation with function descriptions, risk flags, interaction patterns, security posture, and admin capability analysis. |
POST /v1/contract-monitor |
$0.025 | Monitor recent contract admin activity. Detects ownership transfers, upgrades, pause state changes, and suspicious admin operations. |
POST /v1/token-compare |
$0.08 | Compare a primary token against up to 3 competitors with full research, abbreviated metrics, and AI comparative analysis. |
POST /v1/tx-decode |
$0.05 | Decode any EVM transaction: function call, parameters, token transfers, and plain-English explanation. |
POST /v1/approval-scan |
$0.015 | Scan a wallet for risky ERC-20 token approvals. Identifies unlimited approvals, unverified spender contracts, and generates risk assessment. |
POST /v1/wallet-safety |
$0.10 | Comprehensive wallet safety check: approval scanning, suspicious pattern detection, target contract assessment, and composite risk scoring (0-100). |
POST /v1/sentiment |
$0.003 | AI-powered sentiment analysis for crypto, finance, and social media text. Returns score, confidence, label, reasoning, and per-entity sentiment. |
POST /v1/summarize |
$0.008 | AI-powered text summarization with configurable length, format, and optional topic focus. Returns summary, key points, and compression ratio. |
POST /v1/translate |
$0.002 | AI-powered translation with tone control and automatic source language detection. Preserves formatting and cultural nuances. |
GET /v1/gas |
$0.003 | Current gas prices (slow/standard/fast) for any supported EVM chain with trend analysis. |
GET /v1/pool-snapshot |
$0.005 | Cached snapshot of top 500 DeFi liquidity pools. Filter by protocol, chain, or token. Returns TVL, APY, volume, IL risk, and registry enrichment. |
POST /v1/token-risk-metrics |
$0.05 | Quantitative token risk metrics: holder concentration, liquidity depth, contract permissions, deployer history, and composite risk score (0-100). |
POST /v1/trade-check |
$0.025 | Check a token before you buy it: rug-check metrics + AI risk assessment + current gas in one call, with a proceed/caution/avoid verdict. Cheaper than the three calls separately. |
POST /v1/watch |
$0.01–$0.02/day | Signed webhook alerts when a contract's admin/proxy/pause state changes, a token turns risky, or an Aave position nears liquidation. |
POST /v1/credits/buy |
$1 / $5 / $20 | Prepaid credits with up to 20% bonus: sign requests instead of paying per call. Referral: 10% of referred purchases. |
POST /v1/preflight |
$0.008 + $0.004/token | Is this action safe? One call before any on-chain action: transactions simulated, signatures checked for phishing, recipients screened, tokens rug-checked, one proceed/caution/avoid verdict. |
POST /v1/tx-simulate |
$0.005 | Simulate an EVM transaction (or approve-then-swap sequence) before signing: revert reason, asset changes, approvals, counterparty screening, proceed/caution/avoid verdict. |
GET /v1/lending/health |
$0.003 | Aave v3 liquidation risk for a wallet across nine chains: collateral, debt, health factor, status, collateral drop to liquidation. |
GET /v1/launches |
$0.005 | Feed of newly launched tokens (Base, Ethereum, Arbitrum, BNB Chain, HyperEVM), each already risk-scored. Poll with since= to get only new launches. |
POST /v1/address-check |
$0.003 for the first address + $0.001 per additional, up to 100 per call | Counterparty screening for 1-100 EVM or Solana addresses: OFAC sanctions, scam/phishing wallets, labeled protocols, brand-new addresses. |
POST /v1/content-scan |
$0.001 per 4 KB of text (max 64 KB, 16 items) | Prompt-injection scan for untrusted text before it reaches your LLM: instruction overrides, fund-movement directives, base64/Morse/zero-width/homoglyph payloads, leaked keys and seed phrases, sanctioned addresses, lookalike domains. Deterministic, no LLM. |
POST /v1/risk-batch |
$0.004 per token, 2-25 tokens per call | Rug-check 2-25 EVM tokens in one call: holder, permission, and liquidity risk scores per token. |
POST /v1/solana/tx-explain |
$0.05 | Decode a Solana transaction into plain English: labeled programs, token/SOL movements, and risk flags. Falls back to raw RPC decoding if enhanced parsing is unavailable. |
POST /v1/solana/tx-simulate |
$0.15 | Simulate a Solana transaction before signing it: balance changes, program labels, deterministic risk rules, and a proceed/caution/avoid recommendation. |
POST /v1/solana/token-risk-scan |
$0.35 | Solana token risk / rug check: mint authority, freeze authority, holder concentration, liquidity depth, and a composite 0-100 risk score. |
GET /v1/ping ($0.001) verifies your x402 setup and returns the service catalog. Free: GET /registry/lookup (contract labels), GET /v1/solana/program-lookup.
Roadmap
The 90-day plan is docs/growth-plan.md; the executor log is docs/growth-log.md.
Development
npm install
npm run dev # http://localhost:3402
npm test
Payments: x402 v2, USDC on Base (and Solana for the Solana endpoints), settled through the CDP facilitator. Every paid route returns 402 to an unpaid request; GET /health/paid checks all of them.
License
MIT. See LICENSE.
Contact
Feedback, problems, complaints or feature requests: agentforge.api@gmail.com, the form at https://agentforge-taupe.vercel.app/contact, POST /feedback, or the free send_feedback MCP tool.
Pertanyaan tentang AgentForge MCP
Bagaimana cara menambahkan AgentForge MCP ke Claude Code?
Jalankan claude mcp add --transport http agentforge https://agentforge-taupe.vercel.app/mcp di terminal Anda. Tambahkan --scope user agar tersedia di semua proyek.
Bagaimana cara menambahkan AgentForge MCP ke Cursor?
Buka ~/.cursor/mcp.json dan tambahkan server di bawah mcpServers, menggunakan config Cursor yang ditunjukkan di bagian instalasi di atas.
Apakah AgentForge memerlukan API key atau akun?
Tidak, layanan ini menggunakan protokol x402 untuk transaksi pay-per-call dalam USDC, sehingga tidak memerlukan API keys atau akun.
Jenis pemeriksaan keamanan apa yang bisa dilakukan pada teks?
Layanan ini dapat melakukan pemindaian prompt-injection untuk mendeteksi instruksi yang mencoba mengambil alih kontrol (instruction overrides), perintah pemindahan dana, dan kebocoran kunci sebelum teks mencapai LLM.
Bisakah saya mensimulasikan transaksi sebelum menandatanganinya?
Ya, tersedia fitur simulasi transaksi untuk chain EVM dan Solana guna memberikan keputusan apakah transaksi sebaiknya dilanjutkan (proceed), diwaspadai (caution), atau dihindari (avoid).