streamable-httpMITupdated 1mo ago
Read-only crypto safety + "what am I signing" verification for AI agents and wallets. Fronts the FabTally Safe HTTP API (https://safe.fabtally.com).
What can you do with FabTally Safe?
FabTally Safe — MCP server
Read-only crypto safety + "what am I signing" verification for AI agents and wallets. Fronts the FabTally Safe HTTP API (https://safe.fabtally.com).
- Read-only. Never holds, moves, signs for, or broadcasts funds. No private key. Outputs are descriptive facts from public sources — not financial advice.
- 8 tools: 4 free teasers + 4 paid (x402, USDC on Base).
Tools
| Tool | Tier | What it does |
|---|---|---|
token_safety |
paid $0.02 | Multi-chain token honeypot/rug check — aggregates GoPlus + honeypot.is into a 0-100 risk score with explainable reasons. |
decode_signature |
paid $0.01 | "What am I signing" — decode EIP-712 / Permit / Permit2 / Seaport typed-data into plain English + risk flags (unlimited approval, malicious spender, expiry, NFT-drain). |
approvals |
paid $0.01 | Wallet approval-risk scan ranked by exposure + address-poisoning "revoke bait" detection + the revoke calldata you execute yourself. |
simulate |
paid $0.02 | Keyless pre-sign transaction analysis: eth_call revert check + static delta prediction + risk flags. |
token_safety_free · decode_signature_free · approvals_free · simulate_free |
free | Real teaser results, no wallet. |
Chains: ethereum, base, bsc, polygon, arbitrum, optimism (honeypot.is signals on ethereum/base/bsc).
Payment
Paid tools use x402 (USDC on Base, eip155:8453). Call a paid tool with no
x_payment to receive the decoded 402 challenge (price, network, asset, payTo);
build an x402 authorization and call again with the token in x_payment. Humans
can instead prepay by card and use an X-FabTally-Key credit header on the HTTP API.
Transports
- stdio (default):
node index.js— for Claude Desktop and local MCP clients. - streamable-http:
MCP_HTTP_PORT=8113 node http.js— hosted athttps://safe.fabtally.com/mcp.
Config
FABTALLY_SAFE_BASE— API base (defaulthttps://safe.fabtally.com).
Operator: Sunstone Soft · https://fabtally.com · Not financial advice · read-only.
Install
Add FabTally Safe to your client. Pick the one you use.
claude mcp add --transport http fabtally-safe https://safe.fabtally.com/mcpcodex mcp add fabtally-safe --url https://safe.fabtally.com/mcp{
"mcpServers": {
"fabtally-safe": {
"url": "https://safe.fabtally.com/mcp"
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
{
"servers": {
"fabtally-safe": {
"type": "http",
"url": "https://safe.fabtally.com/mcp"
}
}
}Add to `.vscode/mcp.json` in your workspace.
{
"mcpServers": {
"fabtally-safe": {
"url": "https://safe.fabtally.com/mcp"
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"fabtally-safe": {
"serverUrl": "https://safe.fabtally.com/mcp"
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
2 tools
FabTally Safe exposes 2 tools to a connected agent.
- token_safety
- paid $0.02
- decode_signature
- paid $0.01
Score
61 / 100
Good
- Documentation16/25
- Maintenance16/25
- Trust13/20
- Capability4/15
- Install experience12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 31 days ago
- Has a release history
- Repository is not archived
- Licensed MIT
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 2 tool(s) documented
- Provides prompt templates
- Provides resources
- 6 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Version history
| Versions | Published |
|---|---|
| 1.0.0Latest | Aug 1, 2026 |