π‘οΈ SicariusGuard
Solana Token & NFT Safety Oracle for AI Agents & Trading Bots


Real-time token and NFT safety analysis combining byte-level on-chain inspection, LP lock verification, deployer reputation scoring, market intelligence, and NFT fraud detection. Built for autonomous AI agents, MCP-enabled LLMs, and trading infrastructure.
"Don't trade blind. Query SicariusGuard before every swap."
π Live API: https://sicarius-guard-640545264957.us-east4.run.app
# Try it now β no auth required (100 free calls/day)
curl https://sicarius-guard-640545264957.us-east4.run.app/v1/scan/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263
π Table of Contents
π What It Does
SicariusGuard performs 12 layers of safety analysis on any Solana SPL token or NFT:
On-Chain Safety (Layers 1-5)
| Layer | Source | Detection |
|---|
| π Mint Authority | Raw SPL mint bytes | Can deployer print infinite tokens? |
| π§ Freeze Authority | SPL layout offset 46 | Can deployer freeze any wallet? |
| β οΈ Token-2022 Extensions | Extension type scan | PermanentDelegate, TransferHook, ConfidentialTransfers |
| π― Honeypot Detection | Jupiter sell simulation | Can you actually sell this token? |
| π Holder Concentration | getTokenLargestAccounts | Top 5 wallets controlling >50% supply? |
LP & Token Maturity (Layers 6-8)
| Layer | Source | Detection |
|---|
| π LP Lock/Burn | Raydium V4 byte decode + GeckoTerminal | Is liquidity locked, burned, or unlocked? |
| β° Token Age | Helius enhanced RPC | Newborn (<24h)? Young (<7d)? Mature? |
| βοΈ Unified Scoring | 5-axis weighted engine | Combined risk across all layers |
Intelligence & Reputation (Layers 9-12)
| Layer | Source | Detection |
|---|
| π Market Intel | Birdeye API | Liquidity, volume, wash trading, manipulation |
| π Wallet Reputation | Helius Identity + Funded-By | Is the deployer a known scammer? |
| π΅οΈ Deployer Recon | DAS + Enhanced TX | Serial rugger? Burner wallet? Dead token history? |
| πΌοΈ NFT Intelligence | Helius DAS + Magic Eden | Counterfeit collection? Unverified creators? Pricing anomaly? |
5-Axis Weighted Risk Scoring
finalScore = (onChain Γ 0.45) + (lpLock Γ 0.15) + (age Γ 0.05) + (market Γ 0.22) + (reputation Γ 0.13)
0 β SAFE
1-15 β CAUTION
16-50 β HIGH_RISK
51-100 β CRITICAL
| Weight | Source | What It Catches |
|---|
| 45% | On-chain safety | Mint/freeze authority, honeypots, extensions, supply |
| 15% | LP lock analysis | Unlocked liquidity, unburned LP tokens, lock duration |
| 5% | Token age | Newborn tokens (<24h), recently deployed |
| 22% | Birdeye market data | Low liquidity, wash trading, price manipulation |
| 13% | Helius wallet intel | Scammer wallets, suspicious funding chains, burner deployers |
π Quick Start
# Clone
git clone https://github.com/Chronolapse411/sicarius-guard.git
cd sicarius-guard
# Install
npm install
# Configure
cp .env.example .env
# Add your HELIUS_RPC_URL and optionally BIRDEYE_API_KEY
# Build & Run
npm run build
npm start
π‘ API Endpoints
REST API (Port 3400)
| Method | Endpoint | Description |
|---|
POST | /v1/check | Full on-chain safety analysis |
GET | /v1/check/:mint | Convenience GET for safety check |
POST | /v1/scan | Full 12-layer analysis + Birdeye + Helius + deployer recon |
GET | /v1/scan/:mint | Convenience GET for enriched scan |
POST | /v1/honeypot | Honeypot-only check (Jupiter sell sim) |
POST | /v1/holders | Holder concentration analysis |
GET | /v1/lp-lock/:mint | LP lock/burn status for a token |
GET | /v1/token-age/:mint | Token creation date and age category |
GET | /v1/deployer/:address | Deployer reconnaissance dossier |
GET | /v1/nft-check/:mint | NFT safety analysis (Magic Eden + Helius DAS) |
GET | /v1/pricing | x402 payment pricing table |
GET | /health | Service health check with cache stats |
Example Request
# Basic safety check (BONK)
curl https://sicarius-guard-640545264957.us-east4.run.app/v1/check/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263
# Full 12-layer scan
curl https://sicarius-guard-640545264957.us-east4.run.app/v1/scan/DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263
# LP lock check (POPCAT β 99.2% burned, 20,865 SOL liquidity)
curl https://sicarius-guard-640545264957.us-east4.run.app/v1/lp-lock/7GCihgDB8fe6LNjn2MYtkzZcRjQy3t9GHdC8uHYmW2hr
# NFT safety check (Mad Lads #7541)
curl https://sicarius-guard-640545264957.us-east4.run.app/v1/nft-check/7zuR45WCsAsWsrqvYPyvLXFiCRKuvjh7HrMcNJ6F36Kd
# Deployer recon (checks if a wallet is a serial scammer)
curl https://sicarius-guard-640545264957.us-east4.run.app/v1/deployer/BGkkEeg4Gj8VcoerFb2RephZNkTEfHmzJBZMv4S7qVTQ
Example Response (/v1/scan)
{
"safety": {
"safe": true,
"riskScore": 0,
"verdict": "SAFE",
"checks": {
"mintAuthority": { "status": "REVOKED", "safe": true },
"freezeAuthority": { "status": "REVOKED", "safe": true },
"token2022Extensions": { "status": "CLEAN", "safe": true },
"supplyConcentration": { "status": "OK", "safe": true }
}
},
"honeypot": { "isHoneypot": false, "sellable": true },
"holders": { "concentrated": false, "stats": { "top10Pct": 8.2 } },
"lpLock": {
"status": "burned",
"burnPct": 99.2,
"liquiditySOL": 20865,
"poolCreatedAt": "2023-12-12T..."
},
"tokenAge": {
"ageCategory": "mature",
"createdAt": "2022-12-08T...",
"ageDays": 1259
},
"deployerRecon": {
"verdict": "CLEAN",
"recidivismScore": 0,
"portfolioSize": 1
},
"combined": {
"safe": true,
"finalScore": 0,
"verdict": "SAFE",
"summary": "All checks passed β token appears safe"
}
}
π€ MCP Server (for AI Agents)
SicariusGuard exposes tools via the Model Context Protocol (MCP), enabling LLMs and agent frameworks to call safety checks natively.
Available MCP Tools (11)
| Tool | Description | Read-Only |
|---|
check_token_safety | 5-layer on-chain rug pull, honeypot, and holder analysis | β
|
check_honeypot | Jupiter DEX sell simulation β zero cost, quote-only | β
|
check_holder_concentration | Top holder distribution analysis with concentration flags | β
|
check_lp_lock | LP lock/burn status β Raydium V4 byte decode + burn detection | β
|
check_token_age | Token creation date and age category via Helius RPC | β
|
full_token_scan | 12-layer scan: on-chain + LP + age + market + reputation + deployer | β
|
get_wallet_reputation | Helius DAS identity, funding chain, deployer age analysis | β
|
get_market_intel | Birdeye market data: price, volume, liquidity, risk flags | β
|
recon_deployer | Deployer reconnaissance β portfolio health, serial scammer detection | β
|
check_nft | NFT safety analysis β collection verification, floor price, risk scoring | β
|
batch_scan | Parallel 12-layer scan of up to 10 tokens per call | β
|
Install via npx (Recommended)
# Run directly β no cloning required
npx sicarius-guard
Install in Claude Code
claude mcp add sicarius-guard -- npx -y sicarius-guard
Install in Cursor

Or manually add to your Cursor MCP config:
{
"mcpServers": {
"sicarius-guard": {
"command": "npx",
"args": ["-y", "sicarius-guard"],
"env": {
"HELIUS_RPC_URL": "https://mainnet.helius-rpc.com/?api-key=YOUR_KEY",
"BIRDEYE_API_KEY": "your-birdeye-key"
}
}
}
}
Install in VS Code

Or via CLI:
code --add-mcp '{"name":"sicarius-guard","command":"npx","args":["-y","sicarius-guard"]}'
Install from Source (Claude Desktop / Cursor)