Wren Pre-sign Check
io.github.claudeisgod/wren-presign-checkVersion 1.4.0Check a tx, EIP-712 payload, text or Base token before your agent signs. Paid per call over x402.
Status
Responds165 msAnswered our handshake without sign-in.- Last checked
- Nov 14, 2026, 14:47 UTC
- Latency
- 165 ms
- Remotes responding
- 1 of 1
- Sign-in
- No sign-in
- Hosting
- Hosted outside the EU (detected)
- Registry data as of
- Nov 14, 2026, 22:14 UTC
Data from the official MCP Registry, checked by run.zero. How we check
Connect
Streamable HTTP
https://wren-presign-check.wrenonbase.workers.dev/mcpResponds165 msNo sign-in
Claude Code
claude mcp add --transport http wren-presign-check https://wren-presign-check.wrenonbase.workers.dev/mcpClaude Desktop and claude.ai
Settings > Connectors > Add custom connector
Name: wren-presign-check
Remote MCP server URL: https://wren-presign-check.wrenonbase.workers.dev/mcpCursor
{
"mcpServers": {
"wren-presign-check": {
"url": "https://wren-presign-check.wrenonbase.workers.dev/mcp"
}
}
}VS Code
code --add-mcp '{"name":"wren-presign-check","type":"http","url":"https://wren-presign-check.wrenonbase.workers.dev/mcp"}'Built your own server? run.zero hosts MCP servers on European infrastructure.
Tools
4 tools
Read-only | Idempotent | Open world | ||
|---|---|---|---|---|
presign_checkCall before your agent signs anything. Send tx fields (to, data, value, chainId), or typedData (an eth_signTypedData_v4 payload), or untrusted text, with an optional wren-guard policy. Returns block, review or allow, the decoded call and every finding: unlimited approvals, permits, Permit2, setApprovalForAll, EIP-7702 delegation, deployments, injected instructions and, with a policy, unknown recipients, caps and lookalike addresses. Static check, not a simulation. Costs $0.01 USDC on Base per call, paid over x402 (MCP transport): an unpaid call returns a PaymentRequired result, and an x402 MCP client retries with the payment in _meta["x402/payment"]. You sign one USDC authorisation for exactly that price to Wren's wallet: no approvals. Bad input is rejected before anything is charged. | No | Yes | Yes | No |
presign_demoFree. Runs one fixed example (an unlimited approval, setApprovalForAll, a never-expiring permit, an EIP-7702 delegation, an injected memo or a normal x402 payment) through the same checker, so you can see the report shape before paying for presign_check. | No | Yes | Yes | No |
screen_textCall before your agent acts on untrusted text (a reply, DM, web page, tool output or memory). Returns safe, suspicious or malicious with the matched patterns, after decoding base64, hex, Morse, leetspeak, ROT13, reversed and hidden Unicode. Optional known: your own addresses, to flag poisoned lookalikes. Deterministic rules, no LLM. Costs $0.003 USDC on Base per call, paid over x402 (MCP transport): an unpaid call returns a PaymentRequired result, and an x402 MCP client retries with the payment in _meta["x402/payment"]. You sign one USDC authorisation for exactly that price to Wren's wallet: no approvals. Bad input is rejected before anything is charged. | No | Yes | Yes | No |
token_factsCall before your agent approves, receives or sends a Base ERC-20. Returns code size, EIP-7702 delegation, name, symbol, decimals, supply, proxy and upgrade admin, owner or renounced, and which privileged functions the bytecode has (mint, pause, blocklist, fees, limits, trading switch, upgrade). Facts only: no grades, not investment advice. If Base can't be read, nothing is charged. Costs $0.01 USDC on Base per call, paid over x402 (MCP transport): an unpaid call returns a PaymentRequired result, and an x402 MCP client retries with the payment in _meta["x402/payment"]. You sign one USDC authorisation for exactly that price to Wren's wallet: no approvals. Bad input is rejected before anything is charged. | No | Yes | Yes | Yes |
Details
- Registry status
- Active
- Published
- Oct 28, 2026
- Updated
- Oct 28, 2026
- Repository
- Not given
- Categories
- Uncategorized
- GDPR
- Not declared