Skip to main content

sentinel-mcp

MCP (Model Context Protocol) server for SENTINEL — a pre-execution transaction safety oracle for autonomous AI agents. Lets any MCP-compatible client (Claude Desktop, Cursor, Windsurf, or any other agent that speaks MCP) check whether a transaction is safe to sign, before signing it, and pays for the check autonomously via x402 — no human in the loop, no API key, no subscription.

Independent, standalone package. Distributed via PyPI and the official MCP Registry (plus downstream aggregators: mcp.so, glama.ai, smithery.ai) — not tied to any single agent framework or requiring anyone's approval to use.

What it checks

  • Contract security (honeypots, hidden owner/mint functions, active blacklist functions, proxy patterns, etc.) — via GoPlus
  • A real buy/sell simulation against the token's live DEX pair — via honeypot.is
  • Transaction simulation (does the call actually succeed) — via Alchemy
  • Prior history: has this exact contract been flagged before, by any other agent?
  • Deployer wallet track record (transaction count as a freshness signal)
  • For ambiguous cases: a second opinion from an LLM council (Claude + GPT-4o-mini)

Returns a SAFE / UNSAFE / UNKNOWN verdict, a 0–100 risk score, and a cryptographically signed (ed25519) receipt.

Install

pip install sentinel-mcp

Configure

Set an environment variable with a Base wallet's private key (holding USDC on Base):

export AGENT_WALLET_PRIVATE_KEY="0x..."

Use with Claude Desktop

Add to your Claude Desktop config (claude_desktop_config.json):

{
  "mcpServers": {
    "sentinel": {
      "command": "sentinel-mcp",
      "env": {
        "AGENT_WALLET_PRIVATE_KEY": "0x..."
      }
    }
  }
}

Use with any other MCP client

sentinel-mcp

Runs over stdio, the standard MCP transport for local server processes.

Cost

$0.005 USDC per check, on Base mainnet, paid automatically via x402 from the configured wallet. No trial, no free tier — the price itself is the friction, by design.

  • Live methodology — exactly how a verdict is computed, published and machine-readable.
  • Aggregate stats — track record across all callers, updated live.
  • Report an outcome — free endpoint to report back what actually happened after acting on a verdict.

License

MIT

Metadata

Release files for sentinel-mcp 1.0.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sentinel-mcp 1.0.1
File Size Uploaded Provenance Actions
sentinel_mcp-1.0.1.tar.gz 5.2 kB Without provenance Details for sentinel_mcp-1.0.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for sentinel-mcp 1.0.1
File Interpreter ABI Platform Actions
sentinel_mcp-1.0.1-py3-none-any.whl Python 3 none any Details for sentinel_mcp-1.0.1-py3-none-any.whl

Total release size: 11.2 kB

Release files / sentinel_mcp-1.0.1.tar.gz

Download URL sentinel_mcp-1.0.1.tar.gz
Size 5.2 kB
Tags Source
SHA-256 checksum
How to use checksums
789e811058fd08b3eb25523d04a7d53feeef5ee6987267eefe26da5b919f83c1
BLAKE2b-256 checksum
How to use checksums
511a043a773ed408b560dda288bc0c35c5e5798de6cd48fab8f4228de9c292a9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.14.3

Release files / sentinel_mcp-1.0.1-py3-none-any.whl

Download URL sentinel_mcp-1.0.1-py3-none-any.whl
Size 6.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
f7bc0cfd409086e1e1542461f8c4777f52e3227777bd5a758ff6599c321feff6
BLAKE2b-256 checksum
How to use checksums
914849fc67914a5efbdc0cd584b9666f3a2eb3454d5079e1daf30c7a0feffe34
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.14.3

Security for sentinel-mcp 1.0.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

1.0.1 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page