oneinch-aggregator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited oneinch-aggregator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
DEX aggregation across 400+ liquidity sources on 12+ chains. Supports instant swaps, limit orders, and Fusion+ cross-chain swaps with MEV protection.
1inch provides an official MCP server via the 1inch Developer Portal:
| Service | URL | Description |
|---|---|---|
| 1inch MCP | Via 1inch Business Portal | Official 1inch MCP (requires API key) |
| 1inch API | https://api.1inch.dev | REST API (15 endpoints, 1 rps public) |
Setup: Obtain an API key from the 1inch Developer Portal and configure it in the Tenzro node settings.
| Chain | Chain ID |
|---|---|
| Ethereum | 1 |
| BSC | 56 |
| Polygon | 137 |
| Optimism | 10 |
| Arbitrum | 42161 |
| Avalanche | 43114 |
| Base | 8453 |
| zkSync Era | 324 |
| Gnosis | 100 |
| Fantom | 250 |
#### swap_tokens Get optimal swap route and transaction data across 400+ DEXes.
Parameters:
chain_id (number, required) — Chain IDsrc (string, required) — Source token address (0xEeee... for native)dst (string, required) — Destination token addressamount (string, required) — Amount in smallest unitfrom (string, required) — Sender addressslippage (number, required) — Slippage tolerance (0.1-50)Returns: Optimal route, output amount, gas estimate, transaction data.
#### get_quote Get swap quote without transaction data (read-only).
Parameters:
chain_id (number, required) — Chain IDsrc (string, required) — Source token addressdst (string, required) — Destination token addressamount (string, required) — AmountReturns: Estimated output, route, gas estimate.
#### check_allowance Check ERC-20 token approval for 1inch router.
Parameters:
chain_id (number, required) — Chain IDtoken_address (string, required) — Token contract addresswallet_address (string, required) — Wallet addressReturns: Current allowance amount.
#### get_approve_tx Get approval transaction data for 1inch router.
Parameters:
chain_id (number, required) — Chain IDtoken_address (string, required) — Token to approveamount (string, optional) — Amount to approve (default: unlimited)Returns: Transaction data for approval.
#### fusion_quote Get a Fusion+ cross-chain swap quote (gasless, MEV-protected).
Parameters:
src_chain_id (number, required) — Source chain IDdst_chain_id (number, required) — Destination chain IDsrc_token (string, required) — Source token addressdst_token (string, required) — Destination token addressamount (string, required) — Amountwallet_address (string, required) — Wallet addressReturns: Quote with expected output, auction parameters, resolver list.
#### fusion_create_order Create a Fusion+ gasless limit order.
Parameters:
receiver (string, optional) — Destination address (default: sender)Returns: Order data to sign (EIP-712).
#### get_portfolio Get token portfolio for a wallet across chains.
Parameters:
addresses (string, required) — Comma-separated wallet addresseschain_id (number, optional) — Filter by chainReturns: Token balances with USD values.
#### get_token_info Get token details (name, symbol, decimals, logo).
Parameters:
chain_id (number, required) — Chain IDaddress (string, required) — Token addressReturns: Token metadata.
#### search_tokens Search for tokens by name or symbol.
Parameters:
chain_id (number, required) — Chain IDquery (string, required) — Search queryReturns: Matching tokens.
get_quote(chain_id=1, src="0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE", dst="0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48", amount="1000000000000000000") — Quote 1 ETH → USDCswap_tokens(chain_id=1, src="...", dst="...", amount="...", from="0xwallet", slippage=1) — Get swap txfusion_quote(src_chain_id=1, dst_chain_id=8453, src_token="0xEeee...", dst_token="0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", amount="1000000000000000000", wallet_address="0x...") — Quote ETH→USDC cross-chainfusion_create_order(...) — Create gasless orderget_portfolio(addresses="0xwallet1,0xwallet2") — Multi-wallet portfolioThe 1inch MCP is registered as an external tool in the Tenzro tools registry (CF_TOOLS). Agents discover it via tenzro_useTool with provider "1inch". API key is configured at node level and injected into requests.
Rate Limits: Public tier: 1 request/second. For production use, obtain a premium API key from the 1inch Developer Portal.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.