Hive Intelligence - Crypto MCP Server

Security & Risk Tools

19 tools for token security analysis, honeypot detection, transaction simulation, and risk assessment.

MCP Endpoint: POST /hive_security_risk/mcp

Data Source: GoPlus Security


Token Security

get_token_security

Comprehensive token security analysis.

ParameterTypeRequiredDescription
contract_addressesstringYesToken contract address
chain_idstringYesChain ID (1=ETH, 56=BSC, etc.)

Example:

curl -X POST https://api.hiveintelligence.xyz/api/execute \
  -H "Content-Type: application/json" \
  -d '{
    "toolName": "get_token_security",
    "arguments": {
      "contract_addresses": "0x...",
      "chain_id": "1"
    }
  }'

Response:

{
  "is_honeypot": false,
  "is_open_source": true,
  "is_proxy": false,
  "is_mintable": false,
  "can_take_back_ownership": false,
  "owner_change_balance": false,
  "hidden_owner": false,
  "selfdestruct": false,
  "external_call": false,
  "buy_tax": "0",
  "sell_tax": "0",
  "is_blacklisted": false,
  "is_whitelisted": false,
  "is_anti_whale": false,
  "trading_cooldown": false,
  "transfer_pausable": false,
  "holder_count": 15000,
  "total_supply": "1000000000",
  "creator_address": "0x...",
  "creator_balance": "0",
  "creator_percent": "0"
}

Security Risk Indicators

Risk FactorDescriptionSeverity
is_honeypotCannot sell tokensCritical
is_mintableOwner can mint new tokensHigh
hidden_ownerOwnership is hiddenHigh
can_take_back_ownershipOwner can reclaim ownershipHigh
selfdestructContract can be destroyedCritical
transfer_pausableTransfers can be pausedMedium
is_blacklistedBlacklist functionalityMedium
trading_cooldownCooldown between tradesLow
is_anti_whaleAnti-whale mechanismsLow

NFT Security

get_nft_security

Security analysis for NFT contracts.

ParameterTypeRequiredDescription
contract_addressstringYesNFT contract address
chain_idstringYesChain ID

Checks include:

  • Contract verification
  • Ownership structure
  • Minting controls
  • Transfer restrictions
  • Royalty enforcement

Address Analysis

check_malicious_address

Check if an address is associated with known risks.

ParameterTypeRequiredDescription
addressstringYesAddress to check
chain_idstringYesChain ID

Checks for:

  • Known scam addresses
  • Mixer/tumbler usage
  • Sanctioned addresses
  • Phishing addresses
  • Contract risks

Approval Security

check_approval_security

Check token approval risks for an address.

ParameterTypeRequiredDescription
addressstringYesWallet address to check
chain_idstringYesChain ID

Response:

{
  "risky_approvals": [
    {
      "token": "0x...",
      "spender": "0x...",
      "allowance": "unlimited",
      "risk_level": "high",
      "risk_reason": "Unknown contract"
    }
  ]
}

get_wallet_approvals

Get all token approvals for a wallet.

ParameterTypeRequiredDescription
addressstringYesWallet address
chain_idstringYesChain ID

dApp & Site Security

check_dapp_security

Check security of a decentralized application.

ParameterTypeRequiredDescription
urlstringYesdApp URL

check_phishing_site

Check if a site is a known phishing site.

ParameterTypeRequiredDescription
urlstringYesURL to check

ABI Decoding

decode_abi

Decode contract ABI data.

ParameterTypeRequiredDescription
datastringYesEncoded ABI data
chain_idstringYesChain ID

Supported Chains

ChainIDCoverage
Ethereum1Full
BNB Chain56Full
Polygon137Full
Arbitrum42161Full
Optimism10Full
Avalanche43114Full
Base8453Full
Fantom250Full

Security Best Practices

Always Check Before Trading

  • Run security checks before buying any new token
  • Check both buy and sell taxes
  • Verify the contract is open source
  • Look for red flags like hidden owners or pausable transfers
  • Check holder distribution for concentration risks

Quick Reference

ToolDescription
get_token_securityComprehensive token analysis
get_nft_securityNFT contract security
check_malicious_addressAddress risk check
check_approval_securityToken approval risks
get_wallet_approvalsAll wallet approvals
check_dapp_securitydApp security check
check_phishing_sitePhishing site detection
decode_abiABI data decoding

Frequently Asked Questions

Q: How accurate is honeypot detection? A: GoPlus uses simulation-based detection with 95%+ accuracy by actually testing buy/sell transactions. However, some sophisticated honeypots may use time-delayed or conditional logic that can evade detection.

Q: What if the contract isn't verified (is_open_source: false)? A: Unverified contracts are a moderate risk flag since you can't inspect the code. Many legitimate projects verify their contracts, so unverified status warrants extra caution.

Q: Are high taxes always a red flag? A: Not necessarily. Some legitimate projects use taxes for treasury, burns, or reflections. However, taxes above 10% warrant extra scrutiny. Always check if taxes match what's advertised by the project.

Q: How often is the security database updated? A: GoPlus maintains real-time updates for their security database, including new scam addresses, phishing sites, and vulnerability patterns.

Q: Can I check multiple tokens at once? A: Yes, pass comma-separated contract addresses to get_token_security. This is useful for portfolio-wide security scans.

Q: What chains are supported for security checks? A: Ethereum, BSC, Polygon, Arbitrum, Optimism, Avalanche, Base, Fantom, and Solana are fully supported with comprehensive security analysis.