elizaos-plugin-cabal-hunter

Solana rug & cabal detection for ElizaOS trading agents. One action — CHECK_CABAL_RISK — scans any Solana mint before your agent buys: funding-trace cabal detection, same-block Jito bundles, live coordinated dumps, serial-rug deployer history ("launched 14, 13 dead"), a Solana-native honeypot check (freeze authority + Token-2022 traps) and an exit-liquidity verdict. Every flag links to its on-chain evidence transaction.

Powered by Cabal-Hunter — 100 free scans/month per IP, no signup, no API key. Then $0.01 USDC per scan via x402 on Solana (priced at cost — it covers the Helius RPC calls behind each live trace).

ElizaOS quick start

npm install elizaos-plugin-cabal-hunter

import { cabalHunterPlugin } from "elizaos-plugin-cabal-hunter";

// character / runtime config
export const character = {
  name: "TraderAgent",
  plugins: [cabalHunterPlugin],
  // ...
};

Your agent now answers "is <mint> safe?" with a full forensic verdict — and your strategy code can gate buys directly:

import { checkCabalRisk, isRisky } from "elizaos-plugin-cabal-hunter";

if (await isRisky(mint)) return; // AVOID / cabal score >= 65 / honeypot — skip the buy

const report = await checkCabalRisk(mint);
console.log(report.recommendation, report.cabal_score, report.top_reasons);

What a scan returns

{
  "recommendation": "AVOID",        // SAFE | REVIEW | AVOID
  "cabal_score": 100,               // 0-100
  "honeypot_risk": "LOW",           // freeze authority + Token-2022 traps
  "exit_liquidity_risk": true,      // can the pool absorb your exit?
  "deployer": { "verdict": "SERIAL_RUGGER", "tokens_launched": 14, "dead": 13 },
  "clusters": [{ "wallets": 5, "combined_pct": 23.1, "evidence_tx": "https://solscan.io/tx/…" }],
  "scan_complete": true,            // how much did we even look at —
  "wallets_checked": 15             // apply YOUR risk tolerance, not ours
}

scan_complete / wallets_checked exist so your bot can apply its own risk tolerance instead of inheriting ours — the score is a starting point you can verify (every cluster carries evidence_txs[]), not a verdict you take on faith.

Not using ElizaOS?

• MCP (Claude Code / Claude Desktop / Cursor / VS Code): {"mcpServers": {"cabal-hunter": {"url": "https://api.cabal-hunter.com/mcp"}}} — or the one-click buttons above.
• REST: curl "https://api.cabal-hunter.com/api/scan-cabal?mintAddress=<MINT>" — OpenAPI spec
• Human? Free interactive bubble map: api.cabal-hunter.com/map — wallet addresses, Solscan receipts, live chart + trade links (Axiom · GMGN · DexScreener) on one screen.

License

MIT. The plugin is a thin open client; the detection engine runs at api.cabal-hunter.com.