/ 100

1 month ago

glama

aibtcdev/aibtc-mcp-server

Item: aibtcdev/aibtc-mcp-server
Rating: 58
Author: M8ven

Bitcoin-native MCP server for AI agents providing BTC/STX wallets, DeFi yield, sBTC peg, NFTs, and x402 payments.

→ aibtcdev/aibtc-mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama npm PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — arxiv_search (line 88: entryRegex.exec(xml))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 9 credentials: ARC_CREDS_PASSWORD, HIRO_API_KEY, JINGSWAP_API_KEY, MAGIC_EDEN_API_KEY, PILLAR_API_KEY, SPONSOR_API_KEY, TEST_WALLET_PASSWORD, UNISAT_API_KEY, WALLET_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAIBTC_CAMPAIGN_API_URL

configAPI_URL— Default x402 API base URL https://x402.biwas.xyz

configARC_CREDS_DIR

🔐 secretARC_CREDS_PASSWORD

configCLIENT_MNEMONIC— (Optional) Pre-configured mnemonic -

configCONTENT

configDEPLOY_SHA

configGITHUB_SHA

🔐 secretHIRO_API_KEY— (Optional) Hiro API key for higher rate limits -

🔐 secretJINGSWAP_API_KEY

configJINGSWAP_API_URL

🔐 secretMAGIC_EDEN_API_KEY

configNETWORK— "": "mainnet"

🔐 secretPILLAR_API_KEY

configPILLAR_API_URL

configPILLAR_DEFAULT_REFERRAL

configPILLAR_POLL_TIMEOUT_MS

configRECIPIENT_BTC

configRECIPIENT_STX

configSEND

configSIGNALS_URL

🔐 secretSPONSOR_API_KEY

configSPONSOR_FALLBACK_ENABLED

configTEST_ADDRESS

configTEST_INBOX_BASE

configTEST_RECIPIENT_BTC

configTEST_RECIPIENT_STX

configTEST_WALLET_NAME

🔐 secretTEST_WALLET_PASSWORD

🔐 secretUNISAT_API_KEY

🔐 secretWALLET_PASSWORD

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 10 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/aibtcdev-aibtc-mcp-server-1tzdge)](https://m8ven.ai/mcp/aibtcdev-aibtc-mcp-server-1tzdge)

commit: b6f8cc847598260427580936271314255383d4c6

code hash: 2e55ac0849473d20f1fd15f3c495b7edd645a97c0e86a99c2c270c7902c67d7d

verified: 6/12/2026, 10:28:05 AM

view raw JSON →