VIGIL MCP Server

Onchain security scanner for DeFi traders on Base. Protect against rugpulls, honeypots, and dangerous token approvals.

Live MCP endpoint: https://mcp.vigil.codes Site: https://vigil.codes

Quick test (no install, no API key)

Verify VIGIL is live and returns a real verdict in one call:

curl -s https://mcp.vigil.codes/health
# -> {"status":"ok","service":"vigil-mcp","tools":12}

curl -s -X POST https://mcp.vigil.codes/tools/call \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
       "params":{"name":"vigil_safety_score",
                 "arguments":{"contract":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","chain":"base"}}}'
# -> {"jsonrpc":"2.0","id":1,"result":{"score":92,"risk_level":"safe",...}}

Read-only scans need no API key. Calls go to POST /tools/call (JSON-RPC 2.0); GET /tools/list enumerates all tools. There is no REST API — use these.

Network

VIGIL ships Base-first. The scanners (approvals, token, honeypot, safety score) target Base mainnet (chainid=8453); a small set of Ethereum stablecoins are kept in the verified registry so multichain wallets get correct labels when they show up.

Chain	Approvals	Token Scan	Honeypot	Revoke
Base	Yes	Yes	Yes	Yes
Ethereum	Read-only registry lookup only	—	—	—

Features

• Approval Scanner — list all ERC-20/ERC-721 approvals, flag unlimited approvals, identify risky spenders
• Token Scanner — analyze contracts for rugpull indicators: hidden mint, proxy patterns, tax manipulation, blacklist functions
• Honeypot Detector — simulate buy/sell to detect tokens that block selling
• Safety Score — 0-100 rating based on bytecode analysis, ownership, registry match, complexity
• Wallet Report — full security posture assessment
• Wallet Monitor — alerts for new approvals, risky interactions, and balance changes
• Token Market — price, liquidity, 24h volume, and pool age via DexScreener (no API key)
• Deployer Check — contract verification, name, and deployer reputation via Basescan
• Batch Scan — score multiple tokens in one call, ranked by risk
• Consensus — multi-source verdict: 5 independent signals vote; risk only escalates to high/critical when multiple sources agree (false-positive guard)
• Approval Revoker (separate, BANKR_API_KEY required) — revoke dangerous approvals via Bankr transaction signing

Install

pip install -e .

# With dev dependencies
pip install -e ".[dev]"

Run

# Stdio transport (default)
make run

# SSE transport on port 3100
make run-sse

Configuration

Set environment variables:

export BANKR_API_KEY=bk_your_key_here   # Optional — only for revoke (write) actions
export BASE_RPC=https://mainnet.base.org       # Custom RPC (optional)

MCP Client Config

Claude Desktop

{
  "mcpServers": {
    "vigil": {
      "command": "python3",
      "args": ["-m", "vigil_mcp.server"],
      "cwd": "/path/to/vigil/src",
      "env": {
        "BANKR_API_KEY": "bk_YOUR_KEY_HERE"
      }
    }
  }
}

Cursor

Same format — see config/cursor.json.

CLI Scripts

# Scan approvals
./scripts/vigil-approvals.sh <wallet> [chain]

# Scan token safety
./scripts/vigil-token.sh <token> [chain]

# Detect honeypot
./scripts/vigil-honeypot.sh <token> [chain]

# Get safety score
./scripts/vigil-score.sh <contract> [chain]

# Revoke approval (requires BANKR_API_KEY)
./scripts/vigil-revoke.sh <token> <spender> [chain]

# Full wallet report
./scripts/vigil-report.sh <wallet> [chain]

# Batch revoke
./scripts/vigil-batch-revoke.sh <wallet> [chain] [--risk-level critical|high|all]

# Report scam
./scripts/vigil-report-scam.sh <token> <type> <description> [chain]

Development

make test    # Run tests
make lint    # Check code style
make format  # Auto-format code

License

MIT