Solana Token Trust Scanner

Paste a Solana token mint address. Get back a 0-100 trust score and a list of plain-language flags that tell you, with on-chain proof, whether the token has the classic rug and honeypot traps before you buy.

This is built for the way memecoins actually trade: someone drops a contract address in a Telegram group or you spot one trending on Dexscreener, and you have about ten seconds to decide. This scanner does the boring checks for you in that window, and it shows its work so you can verify every flag yourself on Solscan.

What it checks (and where the data comes from)

Check	What it tells you	Source
Mint authority renounced?	If active, the deployer can print unlimited new supply and dilute you to zero	Solana RPC (on-chain)
Freeze authority renounced?	If active, the deployer can freeze your wallet so you can never sell. This is the classic honeypot.	Solana RPC (on-chain)
Liquidity and volume	How deep the pools are and whether anyone is actually trading. Thin liquidity is trivially rug-able.	Dexscreener
Buy / sell balance	Lots of buys and almost no sells over 24h is the signature of a token you can buy but not sell	Dexscreener
Pump.fun status	Whether it is still on a bonding curve (pre-graduation, higher risk) or has graduated to a real DEX, plus the deployer wallet	pump.fun
Holder concentration	What share of supply the top 10 wallets hold. High concentration means a few wallets can dump on you.	Optional, needs a free Helius key

Every flag carries the evidence behind it. When the freeze authority is active, the flag includes the actual authority address so you can confirm it on Solscan. We do not hand you a black-box number and ask you to trust it.

Input

{
  "tokens": [
    "DezXAZ8z7PnrnRJjz3wXBoRgixCa6xjnB7YaB1pPB263",
    "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v"
  ]
}

• tokens (required): one or more Solana mint addresses. One per line in the editor, or an array via the API.
• maxTokens (optional): cap on how many to scan in a run. Default 5000.
• heliusApiKey (optional): a free key from helius.dev unlocks the holder-concentration check. Leave it blank and that one signal is reported as unknown instead of guessed.

Output

One record per token:

{
  "mint": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
  "symbol": "USDC",
  "verdict": "critical-risk",
  "trustScore": 14,
  "freezeAuthorityActive": true,
  "mintAuthorityActive": true,
  "liquidityUsd": 11275423.09,
  "volume24h": 9545593.77,
  "graduated": null,
  "top10HolderPct": null,
  "flags": [
    {"level": "critical", "msg": "Freeze authority is ACTIVE (7dGbd...rar). The deployer can freeze your tokens so you can never sell (honeypot vector)."},
    {"level": "high", "msg": "Mint authority is ACTIVE (BJE5M...ruG). Supply can be inflated at will."}
  ],
  "dexscreenerUrl": "https://dexscreener.com/solana/...",
  "checkedAt": "2026-06-14T20:30:00+00:00"
}

verdict is one of low-risk, medium-risk, high-risk, critical-risk, plus the housekeeping values invalid-address, not-found, unknown, and no-input.

How the trust score works

The score starts at a neutral 50 and moves up or down as each signal comes in. A renounced freeze and mint authority push it up. An active freeze authority is treated as an automatic critical risk, because it is the one trap that can lock your funds completely. Thin liquidity, a one-sided buy/sell ratio, and a token still sitting on the bonding curve push it down. Deep liquidity and a pool that has survived a long time push it up. The full breakdown lives in the flags list on every record, so you can see exactly which checks moved the number and why.

A high score is not a green light to ape. It means the obvious on-chain traps are not present. It cannot tell you the team will not soft-rug, that a large holder will not dump, or that the chart will go up. Treat it as a fast filter that removes the clearly dangerous tokens, not as a promise that the rest are safe.

What it cannot see (stated plainly)

• Holder concentration needs a Helius key. Without one, that signal is reported as unknown, never assumed to be fine.
• Top-holder accounts can include the liquidity pool itself, so a high concentration number is a prompt to look closer, not a verdict on its own.
• We do not detect every flavor of malicious code (transfer hooks, exotic Token-2022 extensions). When a token uses the Token-2022 program we flag it so you know to look.
• This is information, not financial advice. Memecoins are high risk by nature. You are responsible for your own trades.

Billing

You pay per token that gets a real verdict. If our data sources are unreachable and we cannot assess a token, that row comes back as unknown and you are not charged for it. We bill for answers, never for our own failures. An empty input run is also free.

Use it from an AI agent

The same scan logic is built to run as a tool an AI agent can call (Claude, Cursor, n8n and similar). An agent watching new launches can scan a contract and act on the structured score and flags without a human in the loop.