sentinel-mcp
MCP (Model Context Protocol) server for SENTINEL — a pre-execution transaction safety oracle for autonomous AI agents. Lets any MCP-compatible client (Claude Desktop, Cursor, Windsurf, or any other agent that speaks MCP) check whether a transaction is safe to sign, before signing it, and pays for the check autonomously via x402 — no human in the loop, no API key, no subscription.
Independent, standalone package. Distributed via PyPI and the official MCP Registry (plus downstream aggregators: mcp.so, glama.ai, smithery.ai) — not tied to any single agent framework or requiring anyone's approval to use.
What it checks
- Contract security (honeypots, hidden owner/mint functions, active blacklist functions, proxy patterns, etc.) — via GoPlus
- A real buy/sell simulation against the token's live DEX pair — via honeypot.is
- Transaction simulation (does the call actually succeed) — via Alchemy
- Prior history: has this exact contract been flagged before, by any other agent?
- Deployer wallet track record (transaction count as a freshness signal)
- For ambiguous cases: a second opinion from an LLM council (Claude + GPT-4o-mini)
Returns a SAFE / UNSAFE / UNKNOWN verdict, a 0–100 risk score, and a
cryptographically signed (ed25519) receipt.
Install
pip install sentinel-mcp
Configure
Set an environment variable with a Base wallet's private key (holding USDC on Base):
export AGENT_WALLET_PRIVATE_KEY="0x..."
Use with Claude Desktop
Add to your Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"sentinel": {
"command": "sentinel-mcp",
"env": {
"AGENT_WALLET_PRIVATE_KEY": "0x..."
}
}
}
}
Use with any other MCP client
sentinel-mcp
Runs over stdio, the standard MCP transport for local server processes.
Cost
$0.005 USDC per check, on Base mainnet, paid automatically via x402 from the configured wallet. No trial, no free tier — the price itself is the friction, by design.
Links
- Live methodology — exactly how a verdict is computed, published and machine-readable.
- Aggregate stats — track record across all callers, updated live.
- Report an outcome — free endpoint to report back what actually happened after acting on a verdict.
Related
sentinel-agentkit-provider— the same safety check as a Coinbase AgentKit action provider.
License
MIT
Metadata
Release files for sentinel-mcp 1.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| sentinel_mcp-1.0.1.tar.gz | 5.2 kB | Without provenance | Details for sentinel_mcp-1.0.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| sentinel_mcp-1.0.1-py3-none-any.whl | Python 3 | none | any | Details for sentinel_mcp-1.0.1-py3-none-any.whl |
Total release size: 11.2 kB
Release files / sentinel_mcp-1.0.1.tar.gz
| Download URL | sentinel_mcp-1.0.1.tar.gz |
|---|---|
| Size | 5.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
789e811058fd08b3eb25523d04a7d53feeef5ee6987267eefe26da5b919f83c1
|
|
BLAKE2b-256 checksum How to use checksums |
511a043a773ed408b560dda288bc0c35c5e5798de6cd48fab8f4228de9c292a9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.3
|
Release files / sentinel_mcp-1.0.1-py3-none-any.whl
| Download URL | sentinel_mcp-1.0.1-py3-none-any.whl |
|---|---|
| Size | 6.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f7bc0cfd409086e1e1542461f8c4777f52e3227777bd5a758ff6599c321feff6
|
|
BLAKE2b-256 checksum How to use checksums |
914849fc67914a5efbdc0cd584b9666f3a2eb3454d5079e1daf30c7a0feffe34
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.14.3
|
Security for sentinel-mcp 1.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.