AgentForge MCP server
Commit Nov 9, 2026Provides DeFi safety tools for AI agents, including transaction simulation, token rug-checks, sanction screening, and prompt-injection scanning.
Also known as acarchidi/agentforge
- Stars
- 0
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- 1.13.1
- Last commit
- Nov 9, 2026
- License
- MIT
What is AgentForge MCP?
AgentForge provides DeFi safety tools for AI agents, including transaction simulation, token rug-checks, sanction screening, and prompt-injection scanning.
Summary generated from the project's README
About AgentForge MCP server
AgentForge provides a suite of security tools designed specifically for AI agents operating in decentralized finance environments. It enables agents to perform critical safety checks such as simulating transactions, rug-checking tokens, and screening counterparties for sanctions or scams. The service also includes specialized capabilities like prompt-injection scanning to protect LLMs from malicious instructions and liquidation risk monitoring for lending protocols.
Developers can integrate these tools via an HTTP MCP server for use in clients like Claude Desktop, Cursor, or Windsurf. For custom applications, an npm SDK is available for frameworks including LangChain and the Vercel AI SDK. The system operates on a pay-per-call model using USDC via the x402 protocol, requiring no upfront API keys or accounts. While some endpoints are free up to a daily cap, most specialized security functions incur small fees per request.
What you can do with it
- 1Simulate EVM transactionsAn AI agent can simulate a transaction sequence to check for revert reasons and asset changes before signing.
- 2Perform token rug-checksA developer can instruct an agent to evaluate the risk of a new token by checking liquidity and holder concentration.
- 3Scan for prompt injectionsProtect an LLM by scanning untrusted text for instruction overrides or malicious payloads.
- 4Monitor liquidation riskAn agent can track the health factor of an Aave v3 position across multiple chains to prevent liquidation.
Written from the project's README. Every use case is checked against a quote from it.
How to install AgentForge MCP
Formats verified 10 Nov 2026Add to CursorAdd to GooseInstall AgentForge MCP in Claude Code
$ claude mcp add --transport http agentforge https://agentforge-taupe.vercel.app/mcpInstall AgentForge MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"agentforge": {
"url": "https://agentforge-taupe.vercel.app/mcp"
}
}
}Install AgentForge MCP in VS Code
.vscode/mcp.json
{
"servers": {
"agentforge": {
"type": "http",
"url": "https://agentforge-taupe.vercel.app/mcp"
}
}
}Install AgentForge MCP in VS Code CLI
$ code --add-mcp '{"name":"agentforge","type":"http","url":"https://agentforge-taupe.vercel.app/mcp"}'Install AgentForge MCP in Codex
$ codex mcp add agentforge --url https://agentforge-taupe.vercel.app/mcpInstall AgentForge MCP in Codex config.toml
~/.codex/config.toml
[mcp_servers.agentforge] url = "https://agentforge-taupe.vercel.app/mcp"
Install AgentForge MCP in Gemini CLI
$ gemini mcp add -s user --transport http agentforge https://agentforge-taupe.vercel.app/mcpInstall AgentForge MCP in Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"agentforge": {
"url": "https://agentforge-taupe.vercel.app/mcp",
"type": "http"
}
}
}Automated checks
Ran Nov 15, 2026Full report →Not verified yet. A server needs a score of 80, no serious finding, and enough data for us to check. How checks work · What to fix for more points
- Source repository linked and reachableacarchidi/agentforge is public and reachablegithub.com/acarchidi/agentforge ↗Pass
- Package names this repository as its sourceNot checked
- Build provenance (Sigstore attestation)Not checked
- Open source license (OSI)MITspdx.org/licenses/MIT.html ↗Pass
- Commit or release in the last yearLast commit or release 2026-11-09github.com/acarchidi/agentforge ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNot checked
- No critical advisory in the package or its dependenciesNot checked
- No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeinitialize answered with protocol 2025-06-18 in 176 msPass
README
View on GitHubAgentForge
DeFi safety tools for AI agents. Simulate a transaction before signing it, screen counterparties for sanctions and scams, catch new token launches already risk-scored, rug-check tokens, and check liquidation risk — paid per call in USDC over x402. No API keys, no accounts.
- Live: https://agentforge-taupe.vercel.app
- MCP server:
https://agentforge-taupe.vercel.app/mcp(free up to a daily cap) — official MCP Registry:io.github.acarchidi/agentforge - SDK + framework tools:
agentforge-toolson npm (OpenAI, Vercel AI SDK, LangChain, ElizaOS) - Discovery: x402 manifest · OpenAPI · catalog · llms.txt · agent card
Use it in 30 seconds
MCP (no wallet):
claude mcp add --transport http agentforge https://agentforge-taupe.vercel.app/mcp
Cursor, Windsurf, Claude Desktop, ElizaOS: add an HTTP MCP server with the same URL.
From code, paying per call:
npm install agentforge-tools
import { AgentForge } from 'agentforge-tools';
const af = new AgentForge({ privateKey: process.env.AGENT_KEY as `0x${string}`, maxPaymentUsd: 0.1 });
const sim = await af.simulateTransaction({ chain: 'base', from: '0xYourWallet', transactions: [{ to, data }] });
if (sim.verdict === 'avoid') throw new Error('refusing to sign');
Any x402 client: send the request unpaid, get a 402 with the exact price, pay, retry. Failed calls (4xx/5xx) are never charged.
Coinbase AgentKit: an agentforge action provider is proposed upstream in coinbase/agentkit#1619.
Endpoints
| Endpoint | Price (USDC) | What it does |
|---|---|---|
POST /v1/token-intel |
$0.015 | Token metadata enrichment with market data and AI risk assessment. |
POST /v1/token-research |
$0.03 | Multi-source token intelligence: market data, DeFi metrics, contract verification, prediction markets, price history, holder distribution, and AI risk assessment. |
POST /v1/contract-docs |
$0.05 | Human-readable smart contract documentation with function descriptions, risk flags, interaction patterns, security posture, and admin capability analysis. |
POST /v1/contract-monitor |
$0.025 | Monitor recent contract admin activity. Detects ownership transfers, upgrades, pause state changes, and suspicious admin operations. |
POST /v1/token-compare |
$0.08 | Compare a primary token against up to 3 competitors with full research, abbreviated metrics, and AI comparative analysis. |
POST /v1/tx-decode |
$0.05 | Decode any EVM transaction: function call, parameters, token transfers, and plain-English explanation. |
POST /v1/approval-scan |
$0.015 | Scan a wallet for risky ERC-20 token approvals. Identifies unlimited approvals, unverified spender contracts, and generates risk assessment. |
POST /v1/wallet-safety |
$0.10 | Comprehensive wallet safety check: approval scanning, suspicious pattern detection, target contract assessment, and composite risk scoring (0-100). |
POST /v1/sentiment |
$0.003 | AI-powered sentiment analysis for crypto, finance, and social media text. Returns score, confidence, label, reasoning, and per-entity sentiment. |
POST /v1/summarize |
$0.008 | AI-powered text summarization with configurable length, format, and optional topic focus. Returns summary, key points, and compression ratio. |
POST /v1/translate |
$0.002 | AI-powered translation with tone control and automatic source language detection. Preserves formatting and cultural nuances. |
GET /v1/gas |
$0.003 | Current gas prices (slow/standard/fast) for any supported EVM chain with trend analysis. |
GET /v1/pool-snapshot |
$0.005 | Cached snapshot of top 500 DeFi liquidity pools. Filter by protocol, chain, or token. Returns TVL, APY, volume, IL risk, and registry enrichment. |
POST /v1/token-risk-metrics |
$0.05 | Quantitative token risk metrics: holder concentration, liquidity depth, contract permissions, deployer history, and composite risk score (0-100). |
POST /v1/trade-check |
$0.025 | Check a token before you buy it: rug-check metrics + AI risk assessment + current gas in one call, with a proceed/caution/avoid verdict. Cheaper than the three calls separately. |
POST /v1/watch |
$0.01–$0.02/day | Signed webhook alerts when a contract's admin/proxy/pause state changes, a token turns risky, or an Aave position nears liquidation. |
POST /v1/credits/buy |
$1 / $5 / $20 | Prepaid credits with up to 20% bonus: sign requests instead of paying per call. Referral: 10% of referred purchases. |
POST /v1/preflight |
$0.008 + $0.004/token | Is this action safe? One call before any on-chain action: transactions simulated, signatures checked for phishing, recipients screened, tokens rug-checked, one proceed/caution/avoid verdict. |
POST /v1/tx-simulate |
$0.005 | Simulate an EVM transaction (or approve-then-swap sequence) before signing: revert reason, asset changes, approvals, counterparty screening, proceed/caution/avoid verdict. |
GET /v1/lending/health |
$0.003 | Aave v3 liquidation risk for a wallet across nine chains: collateral, debt, health factor, status, collateral drop to liquidation. |
GET /v1/launches |
$0.005 | Feed of newly launched tokens (Base, Ethereum, Arbitrum, BNB Chain, HyperEVM), each already risk-scored. Poll with since= to get only new launches. |
POST /v1/address-check |
$0.003 for the first address + $0.001 per additional, up to 100 per call | Counterparty screening for 1-100 EVM or Solana addresses: OFAC sanctions, scam/phishing wallets, labeled protocols, brand-new addresses. |
POST /v1/content-scan |
$0.001 per 4 KB of text (max 64 KB, 16 items) | Prompt-injection scan for untrusted text before it reaches your LLM: instruction overrides, fund-movement directives, base64/Morse/zero-width/homoglyph payloads, leaked keys and seed phrases, sanctioned addresses, lookalike domains. Deterministic, no LLM. |
POST /v1/risk-batch |
$0.004 per token, 2-25 tokens per call | Rug-check 2-25 EVM tokens in one call: holder, permission, and liquidity risk scores per token. |
POST /v1/solana/tx-explain |
$0.05 | Decode a Solana transaction into plain English: labeled programs, token/SOL movements, and risk flags. Falls back to raw RPC decoding if enhanced parsing is unavailable. |
POST /v1/solana/tx-simulate |
$0.15 | Simulate a Solana transaction before signing it: balance changes, program labels, deterministic risk rules, and a proceed/caution/avoid recommendation. |
POST /v1/solana/token-risk-scan |
$0.35 | Solana token risk / rug check: mint authority, freeze authority, holder concentration, liquidity depth, and a composite 0-100 risk score. |
GET /v1/ping ($0.001) verifies your x402 setup and returns the service catalog. Free: GET /registry/lookup (contract labels), GET /v1/solana/program-lookup.
Roadmap
The 90-day plan is docs/growth-plan.md; the executor log is docs/growth-log.md.
Development
npm install
npm run dev # http://localhost:3402
npm test
Payments: x402 v2, USDC on Base (and Solana for the Solana endpoints), settled through the CDP facilitator. Every paid route returns 402 to an unpaid request; GET /health/paid checks all of them.
License
MIT. See LICENSE.
Contact
Feedback, problems, complaints or feature requests: agentforge.api@gmail.com, the form at https://agentforge-taupe.vercel.app/contact, POST /feedback, or the free send_feedback MCP tool.
AgentForge MCP questions
How do I add AgentForge MCP to Claude Code?
Run claude mcp add --transport http agentforge https://agentforge-taupe.vercel.app/mcp in your terminal. Add --scope user to make it available in every project.
How do I add AgentForge MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
Does AgentForge require an API key or account?
No, it uses the x402 protocol for pay-per-call transactions in USDC, requiring no API keys or accounts.
What kind of security checks can it perform on text?
It can perform prompt-injection scans to detect instruction overrides, fund-movement directives, and leaked keys before text reaches an LLM.
Can I simulate transactions before signing them?
Yes, it offers transaction simulation for both EVM and Solana chains to provide a proceed, caution, or avoid verdict.