Categories › Security › Code & dependency scanning
Crypto scam checks (tokens, sites, wallets), chain reads, web page to Markdown, email checks.
Remote server: your requests and data go to scam-check.safe-or-scam.workers.dev. Claude Code: claude mcp add --transport http safe-or-scam https://scam-check.safe-or-scam.workers.dev/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
check_token — Is this crypto token a scam? Honeypot buy/sell simulation, hidden taxes, mint/freeze authority, hidden owner, blacklist, whale concentrationcheck_website — Is this website a crypto scam or phishing page? Phishing databases, domain age, look-alikes of 45+ crypto brands (MetaMask, Phantom, Binancecheck_wallet — Is it safe to send crypto to this address, and is this wallet exposed? Checks scam, phishing, theft, sanctions and mixer links; risky or malget_wallet_balances — Get a wallet's balances: native coin (ETH, BNB, POL, AVAX, SOL) and tokens. Solana: every SPL token held. EVM: popular tokens on the chain pget_transaction — Look up a transaction by hash: success/failed/pending, confirmations, time, sender, receiver, value, fee, method, decoded token and NFT tranget_token_info — Read a token's on-chain details: name, symbol, decimals, total supply. Solana: supply, decimals, mint authority and freeze authority.read_webpage — Fetch any public web page and return clean Markdown of its main content (headings, lists, links, code), plus title and description. Strips mcheck_email — Check an email address before sending or signing someone up: valid format, domain exists and accepts mail (MX), throwaway/disposable domain,Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.