PALISADE MCP Server

Onchain security scanner for DeFi traders on Robinhood Chain. Protect against rugpulls, honeypots, and dangerous token approvals. Read-only by design — no keys, no signing, no custody.

Live MCP endpoint: https://mcp.palisadescan.com Site: https://palisadescan.com

Quick test (no install, no API key)

Verify PALISADE is live and returns a real verdict in one call:

curl -s https://mcp.palisadescan.com/health
# -> {"status":"ok","service":"palisade-mcp","tools":18}

curl -s -X POST https://mcp.palisadescan.com/tools/call \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call",
       "params":{"name":"palisade_safety_score",
                 "arguments":{"contract":"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","chain":"ethereum"}}}'
# -> {"jsonrpc":"2.0","id":1,"result":{"score":92,"risk_level":"safe",...}}

All scans are read-only and need no API key. Calls go to POST /tools/call (JSON-RPC 2.0); GET /tools/list enumerates all tools. There is no REST API — use these.

Network

PALISADE ships Robinhood-Chain-first. The scanners (approvals, token, honeypot, safety score) target Robinhood Chain (chainid=4663) over its native Blockscout RPC. EVM majors and Solana are supported for cross-chain scanning; a small set of Ethereum stablecoins are kept in the verified registry so multichain wallets get correct labels.

Chain	Approvals	Token Scan	Honeypot
Robinhood Chain	Yes	Yes	Yes
Ethereum	Yes	Yes	Yes (GoPlus)
Polygon	Yes	Yes	Yes (GoPlus)
Arbitrum	Yes	Yes	Yes (GoPlus)
Solana	—	Yes (GoPlus)	Yes (GoPlus)

Features

• Approval Scanner — list all ERC-20/ERC-721 approvals, flag unlimited approvals, identify risky spenders
• Token Scanner — analyze contracts for rugpull indicators: hidden mint, proxy patterns, tax manipulation, blacklist functions
• Honeypot Detector — simulate buy/sell to detect tokens that block selling
• Safety Score — 0-100 rating based on bytecode analysis, ownership, registry match, complexity
• Wallet Report — full security posture assessment
• Wallet Monitor — alerts for new approvals, risky interactions, and balance changes
• Token Market — price, liquidity, 24h volume, and pool age via DexScreener (no API key)
• Deployer Check — contract verification, name, and deployer reputation via Blockscout
• Batch Scan — score multiple tokens in one call, ranked by risk
• Consensus — multi-source verdict: 6 independent signals vote; risk only escalates to high/critical when multiple sources agree (false-positive guard)
• Liquidity Lock — detect whether DEX liquidity is locked, burned, or freely withdrawable (rug-pull vector); missing data returns unknown, never safe
• Approval Simulator — risk-assess a spender before you sign: contract vs EOA, known-safe, scam-flagged, unlimited amount
• Clone Detector — bytecode fingerprinting flags copy-paste scam clones, cross-checked against the scam DB
• Tax Scanner — flags punishing or owner-modifiable buy/sell/transfer tax (the "0% now, 99% later" trap); missing data returns unknown, never safe
• Ownership Scanner — who controls the contract and what they can do: mint, pause, blacklist, reclaim ownership, modify balances, selfdestruct; a renounced owner neutralizes these powers
• Holder Concentration — whale-dump risk: top-holder concentration over the sellable float, excluding LP pools, burns, and locked holders; one wallet over half the float is flagged even with a clean contract

Every tool is read-only. PALISADE reads the chain and reports — it never requests a signature, holds keys, or moves funds.

Install

pip install -e .

# With dev dependencies
pip install -e ".[dev]"

Run

# Stdio transport (default)
make run

# SSE transport on port 3100
make run-sse

Configuration

Set environment variables:

export ROBINHOOD_RPC=https://rpc.mainnet.chain.robinhood.com   # Custom RPC (optional)
export ETHERSCAN_API_KEY=your_key_here                         # Optional — deployer checks on EVM majors

MCP Client Config

Claude Desktop

{
  "mcpServers": {
    "palisade": {
      "command": "python3",
      "args": ["-m", "palisade_mcp.server"],
      "cwd": "/path/to/palisade/src",
      "env": {
        "ROBINHOOD_RPC": "https://rpc.mainnet.chain.robinhood.com"
      }
    }
  }
}

Cursor

Same format — see config/cursor.json.

CLI Scripts

# Scan approvals
./scripts/palisade-approvals.sh <wallet> [chain]

# Scan token safety
./scripts/palisade-token.sh <token> [chain]

# Detect honeypot
./scripts/palisade-honeypot.sh <token> [chain]

# Get safety score
./scripts/palisade-score.sh <contract> [chain]

# Full wallet report
./scripts/palisade-report.sh <wallet> [chain]

# Check a token against the community scam DB
./scripts/palisade-check-scam.sh <token> [chain]

# Report a scam
./scripts/palisade-report-scam.sh <token> <type> <description> [chain]

Development

make test    # Run tests
make lint    # Check code style
make format  # Auto-format code

License

MIT