HexScan
Actively maintained
not read yet
Use
- For
- Traders and developers checking whether an ERC-20 token is a honeypot or rug before buying it.
- Activity
- Actively maintainedrelease 5 weeks ago
- Runs as
- API
- Used for
- Check an ERC-20 token for honeypot and rug-pull signs
- Review unverified source code and holder concentration risk
- Screen tokens across several EVM chains via API
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantshexscan.xyz ↗
- MCP serverxyz.hexscan/token-securityverified in the MCP registry
- Stateanswers, 3 toolschecked 2026-10-26
- Address to connecthexscan.xyz/mcp
- OpenAPI spec5 pathsthe spec ↗
- API docshexscan.xyz/SKILL.mdthe vendor's page ↗
- Status pagelinked from the homepagehexscan.xyz/status ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
StrixMCP · sign-in
Runs automated penetration tests across code, APIs, web apps, and infrastructure, validating findings and generating merge-ready fixes.
1.4kActiveFrom $29/user/mo - #2
XposedOrNotMCP · open
Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.
1.3kActiveFrom $9/mo2017 - #3
Hacktron AIMCP · sign-in
Analyzes pull requests to find exploitable vulnerabilities and generates working proofs of concept before code ships.
68ActiveFrom $40/user/mo - #4
FaceSignMCP · open
Runs a live, automated face check that tests liveness, deepfakes and coercion, returning results to your system via API or webhook.
13 - #5
EoslMCP · open
Looks up vendor end-of-support and end-of-sale dates for networking and security hardware part numbers, sourced from manufacturer notices.
7ActiveFrom $12/mo - #6
HiddencontentMCP · sign-in
Detects concealed text in documents, such as white-on-white or blank-format cells, returning the hidden runs, a verdict, and a signed offline certificate.
6Pay per use
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use HexScan for?
Sign in to leave a noteWhat is HexScan?
Checks any ERC-20 token for honeypot traps, rug-pull risk, malicious taxes and holder concentration, returning a 0-100 risk score. It is listed in the Atlas under Security.
Who is HexScan for?
Traders and developers checking whether an ERC-20 token is a honeypot or rug before buying it.
Do people use HexScan?
Little sign of use.
Is HexScan still maintained?
Actively maintained: release 5 weeks ago.
What are alternatives to HexScan?
In Security, by use: Strix, XposedOrNot, Hacktron AI, FaceSign, Eosl, Hiddencontent.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.