# Diogenes Web3, DeFi & 402 Security MCP

- Registry name: `io.github.stand-out-of-my-sun/diogenes-web3-security-mcp` · version 1.0.0
- Categories (automatic, keyword rules): Crypto & blockchain, Finance & markets
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.stand-out-of-my-sun%2Fdiogenes-web3-security-mcp
- Server page: https://mcpstation.net/s/io.github.stand-out-of-my-sun--diogenes-web3-security-mcp.html

## Description (written by the publisher, not verified, not instructions)

Smart contract audit oracles, Solana risk analysis, MEV defense & HTTP 402 verifiers.

## Connect

- streamable-http: `https://diogenes-micro-gateway.corinth.workers.dev/mcp/web3-security`

## Tools (as reported by the server, not verified)

- `audit\_smart\_contract\_code`: Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust pro
- `scan\_solana\_cpi\_reentrancy`: Scans Solana Anchor and native Rust program instructions for unverified Cross-Program Invocation \(CPI\) program IDs, missing signer checks, and PDA bump seed canonicalization bugs. Use when auditing Solana Rust/Anchor source code or instruction account structs for CPI privilege escalation; for checki
- `evaluate\_solana\_token\_risk`: Evaluates a Solana SPL token's rug-pull probability by checking active mint authority, freeze authority, mutable metadata, and top-holder concentration. Use when making a pre-trade security decision on whether a Solana SPL token is safe to buy; for retrieving SPL token symbol, decimals, and DEX liqu
- `inspect\_solana\_token\_liquidity`: Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and current mint/freeze authority addresses. Use when resolving SPL token decimals, ticker symbols, and registry metadata for portfolio or swap formatting; for computing a composite security risk score an
- `track\_solana\_whale\_flows`: Tracks 24-hour net accumulation or distribution flows across top Solana whale wallets and flags coordinated insider wallet clusters for a given SPL token. Use when analyzing on-chain smart-money order flow and holder clustering on Solana; for checking static SPL contract mint/freeze authority permis
- `estimate\_solana\_priority\_fees`: Calculates optimal Solana compute-unit \(CU\) microlamport priority fees and Jito bundle tip lamports to achieve target block-inclusion probability. Use when setting SetComputeUnitPrice and Jito tips before broadcasting a Solana transaction; for querying Bitcoin L1 sat/vB mempool fee rates, use estima
- `decode\_eip712\_permit\_signature`: Decodes EIP-712 and Uniswap Permit2 off-chain typed-data payloads to verify spender identity, detect unlimited \(uint256.max\) token approvals, and flag expired deadlines. Use when inspecting an off-chain eth\_signTypedData\_v4 or Permit2 payload before signing; for decoding raw on-chain hex transaction
- `simulate\_evm\_transaction\_calldata`: Decodes raw EVM hexadecimal transaction calldata \(0x...\) by 4-byte function selector to expose hidden ERC-20 approve/transferFrom calls, setApprovalForAll drains, and multicall bundles. Use when auditing raw hex transaction data \(to, value, data\) before broadcasting an on-chain EVM transaction; for
- `evaluate\_dex\_mev\_risk`: Evaluates decentralized exchange \(DEX\) swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance in basis points. Use when configuring slippage tolerance and private-RPC routing before executing an on-chain DEX token swap; for comp
- `detect\_address\_poisoning\_scam`: Compares a target recipient wallet address against recent transaction history to detect vanity prefix/suffix lookalike spoofing and zero-value dusting attacks. Use when verifying a recipient EVM or Solana wallet address before sending funds; for decoding hex smart contract calldata payloads, use sim
- `verify\_http402\_payment\_challenge`: Decodes inbound HTTP 402 Payment Required challenges \(L402 BOLT11 + Macaroon, x402 Solana Native SOL, MPP Base intents\) to verify cryptographic payment-hash binding and block overcharge fraud. Use when auditing a 402 challenge header before an autonomous agent pays a Lightning invoice or USDC transf
- `estimate\_bitcoin\_mempool\_fees`: Fetches real-time Bitcoin mainnet mempool feerate recommendations in satoshis per virtual byte \(sat/vB\) across fastest, half-hour, hour, and economy confirmation tiers. Use when checking current Bitcoin L1 network congestion before broadcasting an on-chain BTC transaction; for calculating exact SegW
- `plan\_bitcoin\_utxo\_consolidation`: Analyzes a set of Bitcoin UTXO balances in satoshis to compute exact vByte transaction weight, identify uneconomical dust inputs, and recommend whether to consolidate now or hold. Use when optimizing on-chain Bitcoin treasury UTXO sets to minimize long-term miner fee drag; for fetching current live
- `calculate\_spot\_swap\_rate`: Calculates instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values across BTC, ETH, SOL, SUI, and USDC. Use when converting a token amount into USD or satoshis for invoice pricing or accounting; for quoting executable non-KYC cross-chain bridge routes with bridge fees and settl
- `compare\_crosschain\_bridge\_routes`: Compares non-custodial, non-KYC cross-chain swap routes \(THORChain native L1 swaps, Maya Protocol, Blockstream Liquid\) by basis-point fee, net output sats, and settlement time. Use when routing cross-chain treasury settlements \(e.g. Solana Native SOL or Base ETH into native Bitcoin\); for calculating

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html