Honeypot detection & token risk scan for ERC-20s. Risk score 0-100, tax, source verification.
HexScan Token Security is a remote MCP server published at hexscan.xyz. It has been probed 6 times since 9/12/2026. It answered in 6 of them (100.0%), a near-uninterrupted record. Median response time is 1,662 ms, a delay an agent will notice. It offers a narrow, focused set of 2 tools. On the protocol side it still runs 2025-11-25 and has not moved to the newer spec.
Can an LLM agent pick the right tool here — names, descriptions and parameter clarity are assessed.
Risk: low
| Run | Era | Modern | ms | Legacy | ms | Versions |
|---|---|---|---|---|---|---|
| 2026-09-13 01:33:33 | Legacy | 200 | 1090 | 200 | 1023 | 2025-03-26 |
| 2026-09-12 23:31:36 | Legacy | 200 | 1587 | 200 | 1573 | 2025-03-26 |
| 2026-09-12 21:29:15 | Legacy | 200 | 1651 | 200 | 1715 | 2025-03-26 |
| 2026-09-12 19:27:29 | Legacy | 200 | 1662 | 200 | 1573 | 2025-03-26 |
| 2026-09-12 17:24:09 | Legacy | 200 | 1711 | 200 | 1747 | 2025-03-26 |
| 2026-09-12 15:21:42 | Legacy | 200 | 1753 | 200 | 1841 | 2025-03-26 |
tools/list structure, inputSchema validity, and a functional smoke test — the components of the 0-100 score.
Tools the server advertised in the latest measurement — measured, not catalog-claimed.
scan_tokenFull token security scan. Args: address (0x...), chain (ethereum|base|arbitrum|optimism|polygon|bsc|avalanche). Returns risk score 0-100, honeypot, tax, source verification.
addressstringrequiredchainstringrequiredhoneypot_checkFast honeypot check. Args: address (0x...), chain. Returns: honeypot boolean, canBuy, canSell, buyTax, sellTax, riskScore.
addressstringrequiredchainstringrequiredEach block is one measurement round. Green: working response. Amber: responded but the server was returning errors (5xx). Red: no response at all.
Each cell is one probe run. Faded cells are incomplete probes — one leg did not answer, so the era is inconclusive.
The two probe legs separately: modern server/discover and legacy initialize.
Derived by comparing consecutive probes — changes in era, protocol version, build and reachability.
Add this badge to your README — it updates automatically as measurements change.
[](https://mcpmetrics.io/servers/xyz-hexscan-token-security)<a href="https://mcpmetrics.io/servers/xyz-hexscan-token-security"><img src="https://mcpmetrics.io/badge/xyz.hexscan/token-security/era.svg" alt="mcpmetrics"></a>You are seeing the last 7 days. Sign up for the full history. Which check failed and why is in the dashboard.
Sign up free to seeThe catalog entries whose name and description are closest to this one, found with the same index the search box uses.
Token safety check — honeypot, tax, proxy, blacklist, risk score. GoPlus-powered. x402.
Premium agentic endpoint for clause-risk-score-evaluator-mcp.
Pre-trade token safety checks for AI agents on Solana and Base. x402 USDC per call, no key.
378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.
Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.
Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.
Comments
Sign in to write a comment
No comments yet. Be the first.