# FabTally Safe MCP server

Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.

## Links
- Registry page: https://www.getdrio.com/mcp/io-github-zvmzaretsky-crypto-safety
- Repository: https://github.com/zvmzaretsky/crypto-safety-mcp
- Website: https://safe.fabtally.com

## Install
- Endpoint: https://safe.fabtally.com/mcp
- Auth: Not captured

## Setup notes
- Remote endpoint: https://safe.fabtally.com/mcp

## Tools
- token_safety (Token honeypot / rug safety check (paid $0.02)) - PAID $0.02 (x402, USDC on Base). Multi-chain token honeypot/rug check aggregating GoPlus token-security + honeypot.is buy/sell-tax simulation into a normalized 0-100 risk score with explainable reasons: honeypot/can't-sell, buy/sell tax, mint/blacklist/pausable/ownership privileges, top-holder concentration, LP-lock, contract verified/bytecode. Descriptive facts only — NOT a buy/sell signal. Without payment returns the x402 challenge; pass x_payment to settle. Free teaser: token_safety_free. Endpoint: https://safe.fabtally.com/mcp
- token_safety_free (Token safety — score band + top-line flags (FREE)) - FREE. Score band + top-line honeypot/tax/privilege flags for a token {address, chain}. Real result, no wallet. Upgrade to token_safety for the full numeric breakdown. Endpoint: https://safe.fabtally.com/mcp
- decode_signature (Decode 'what am I signing' EIP-712 signature (paid $0.01)) - PAID $0.01 (x402, USDC on Base). Decode an off-chain EIP-712 typed-data signature (Permit / Permit2 / Seaport / generic) into plain English with risk flags: unlimited approval, unknown/known-malicious spender, never-expiring or already-expired deadlines, zero-consideration NFT-drain orders. Off-chain signatures are the top wallet-drainer vector. Pure offline decode — never signs/broadcasts. Without payment returns the x402 challenge; pass x_payment. Free teaser: decode_signature_free. Endpoint: https://safe.fabtally.com/mcp
- decode_signature_free (Signature decode — type + summary + risk level (FREE)) - FREE. Type + plain-English summary + risk level for an EIP-712 `typed_data`. Real result, no wallet. Upgrade to decode_signature for the full field-by-field decode + all risk flags + malicious-spender screening. Endpoint: https://safe.fabtally.com/mcp
- approvals (Wallet approval-risk scan + revoke calldata (paid $0.01)) - PAID $0.01 (x402, USDC on Base). Scan a wallet's ERC-20/721 approvals ranked by exposure; flags unlimited amounts, unverified/known-malicious spenders, and address-poisoning 'fake-approval revoke bait'; returns the exact revoke calldata you execute YOURSELF (never executed/broadcast by us). Without payment returns the x402 challenge; pass x_payment. Free teaser: approvals_free. Endpoint: https://safe.fabtally.com/mcp
- approvals_free (Approvals — counts + top-3 risks (FREE)) - FREE. Approval counts + top-3 riskiest spenders for {address, chain}. Real result, no wallet. Upgrade to approvals for EVERY approval ranked + revoke calldata. Endpoint: https://safe.fabtally.com/mcp
- simulate (Keyless pre-sign transaction simulation (paid $0.02)) - PAID $0.02 (x402, USDC on Base). Keyless pre-sign analysis of {chain, from?, to, data, value?}: public-RPC eth_call revert check + static calldata decode predicting approval/transfer deltas + risk flags (unlimited approval, approval-for-all, reverts). Honest keyless limitation stated in the response (no full fork trace). Without payment returns the x402 challenge; pass x_payment. Free teaser: simulate_free. Endpoint: https://safe.fabtally.com/mcp
- simulate_free (Simulate — method + revert + risk level (FREE)) - FREE. Method + revert flag + risk level + predicted effect types for a transaction. Real result, no wallet. Upgrade to simulate for the full predicted deltas + all risk flags. Endpoint: https://safe.fabtally.com/mcp

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: io.github.zvmzaretsky
- Version: 1.0.0
- Runtime: Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Aug 1, 2026
- Source: https://registry.modelcontextprotocol.io