faucet-mcp

Enables a coding agent to request small dev funds (ETH/WETH/USDC/USDT) from a personal hot wallet with per-call and 24h caps, plus TOTP approval for amounts over soft caps.

→ Destiner/faucet-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: FAUCET_TOTP_SECRET, FUNDING_PRIVATE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configFAUCET_STATE_FILE— no ~/.faucet/state.json Path for the rolling 24h send log + OTP replay cache.

🔐 secretFAUCET_TOTP_SECRET— bun run setup # generates a + otpauth URI

🔐 secretFUNDING_PRIVATE_KEY— cp .env.example .env # then fill and FAUCET_TOTP_SECRET

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/destiner-faucet-mcp-fqc222)](https://m8ven.ai/mcp/destiner-faucet-mcp-fqc222)

commit: 9ab11461d2bf92069c731e5c9c234fd2d4319c62

code hash: 1c8463aa9b1c27d571e135f997b9909cd7943a1911afd3545d2a792319bd64c6

verified: 6/10/2026, 11:41:29 AM

view raw JSON →