Is this XRPL token safe? One call answers it.

One call composes every on-chain fact that predicts an XRPL rug: can the issuer claw tokens back out of the AMM? Is the token globally frozen? Is the issuer blackholed (master key disabled, RegularKey burned — supply fixed forever)? Is the LP supply burned so liquidity can never be pulled? Plus a blocklist built from rugs we caught in production.

MCP tool: check_xrpl_token Price: $0.005 / call

Parameters

ParamDescription
issuerXRPL issuer address (r...)
currency3-char code or 40-char hex

Example

Call (MCP tools/call arguments):

{
  "issuer": "rsoLo2S1kiGeCcn6hCUXVrCpGMWLrRrLZz",
  "currency": "534F4C4F00000000000000000000000000000000"
}

Result:

{
  "verdict": "likely_safe",
  "confidence": "medium",
  "reasons": [
    "issuer blackholed \u2014 supply is fixed forever (no re-mint, no flag changes)",
    "issuer has permanently waived freeze rights (NoFreeze)",
    "live XRP AMM pool: 39,116.73 XRP, fee 0.766%"
  ],
  "issuer_flags": {
    "blackholed": true,
    "no_freeze": true,
    "clawback_enabled": false,
    "global_freeze": false
  },
  "pool_xrp": 39116.73
}

FAQ

How do I check if an XRPL token can rug?

Query the issuer's AccountRoot flags. If lsfAllowTrustLineClawback is set, the issuer can force-remove tokens from the AMM — a total-loss risk. If the issuer is not blackholed (master key still active), it can mint more supply at any time. This tool checks both, live.

What does 'issuer blackholed' mean on the XRP Ledger?

The issuer disabled its master key and pointed its RegularKey at a burn address (like rrrrrrrrrrrrrrrrrrrrrhoLvTp). Such an account can never sign a transaction again — no re-minting, no flag changes, no clawback. It is the strongest anti-rug signal on XRPL.

Do GoPlus or Webacy cover XRPL tokens?

No — the major token-security APIs focus on EVM chains and Solana. This tool exists specifically to give agents the same class of safety screening on the XRP Ledger.

Related tools

check_issuer_reputationReputation for any XRP Ledger issuer: proprietary rug blocklist status plus historical detection outcomes from a production sniper check_addressOne call, any chain: EVM address risk (sanctions, mixer, phishing, drainer, money-laundering) aggregated from GoPlus, plus native get_wallet_activityTurn raw XRPL account_tx into readable activity: sent/received amounts with token names, trustlines, DEX/AMM ops — with rug-blockl check_transactionSimulate an unsigned XRPL transaction against the live ledger: its exact balance changes, whether it would succeed, and a scan for check_endpointOne call before an agent connects to a third-party MCP server or HTTP tool: TLS identity, domain age, and a tool-poisoning scan of

Browse the full tool suite →

Connect via MCP at https://cerberusindex.com/mcp — see the quickstart. Payment is automatic for x402-aware clients. Verdicts are informational risk signals, not financial advice.