Back to MCP Trust Indexm8ven
43
/ 100
2 months ago
glama

agentfi-mcp-server

DeFi execution and agent-to-agent economy tools for AI agents — swaps, yield, transfers, policy enforcement, trust scoring, A2A jobs, and P\&L across Ethereum, Base, Arbitrum, and Polygon.

→ felippeyann/agentfi· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
2 flows detected: NEXT_PUBLIC_API_URL, TENDERLY_ACCESS_KEY. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 19 credentials: ADMIN_PASSWORD, ADMIN_SECRET, AGENTFI_API_KEY, AGENTFI_OPERATOR_SECRET, ALCHEMY_API_KEY, API_SECRET, ENS_CONTROLLER_PRIVATE_KEY, GITHUB_CLIENT_SECRET, GOOGLE_CLIENT_SECRET, INFURA_API_KEY, NEXTAUTH_SECRET, OPERATOR_TELEGRAM_BOT_TOKEN, REWARD_TOKEN, SAFE_DEPLOYER_PRIVATE_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, TENDERLY_ACCESS_KEY, TURNKEY_API_PRIVATE_KEY, TURNKEY_API_PUBLIC_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAAVE_POOL_ADDRESS
configADMIN_ALLOW_REMOTE
configADMIN_AUTH_LOCKOUT_MS
configADMIN_AUTH_MAX_ATTEMPTS
configADMIN_AUTH_WINDOW_MS
configADMIN_OAUTH_ALLOWLIST
🔐 secretADMIN_PASSWORD
🔐 secretADMIN_SECRET
configADMIN_URL
configADMIN_USERNAME
🔐 secretAGENTFI_API_KEY
configAGENTFI_API_URL
configAGENTFI_MCP_PACKAGE
🔐 secretAGENTFI_OPERATOR_SECRET
🔐 secretALCHEMY_API_KEY
configAPI_BASE_URL
configAPI_PORT
🔐 secretAPI_SECRET
configAPI_URL
configCORS_ORIGIN
configDATABASE_URL
configE2E_ANVIL_FORK_BLOCK_NUMBER
configE2E_ANVIL_FORK_REQUIRED
configE2E_ANVIL_FORK_URL
configE2E_ANVIL_MODE
configE2E_ANVIL_RPC
configE2E_DATABASE_URL
configE2E_DEPLOYER_ADDRESS
configE2E_TESTNET_EXECUTOR_ADDRESS
configE2E_TESTNET_POLICY_MODULE_ADDRESS
configE2E_TESTNET_RPC_URL
configENS_CHAIN_ID
🔐 secretENS_CONTROLLER_PRIVATE_KEY
configENS_PARENT_DOMAIN
configENS_PUBLIC_RESOLVER
configESCROW_MODULE_ADDRESS_1
configESCROW_MODULE_ADDRESS_137
configESCROW_MODULE_ADDRESS_42161
configESCROW_MODULE_ADDRESS_8453
configESCROW_MODULE_ADDRESS_84532
configEXECUTOR_ADDRESS_1
configEXECUTOR_ADDRESS_137
configEXECUTOR_ADDRESS_42161
configEXECUTOR_ADDRESS_8453
configEXECUTOR_ADDRESS_84532
configFEE_WALLET_ADDRESS
configGITHUB_CLIENT_ID
🔐 secretGITHUB_CLIENT_SECRET
configGOOGLE_CLIENT_ID
🔐 secretGOOGLE_CLIENT_SECRET
🔐 secretINFURA_API_KEY
configMCP_CORS_ORIGIN
configMCP_PORT
configMCP_SSE_URL
configMCP_TRANSPORT
🔐 secretNEXTAUTH_SECRET
configNEXT_PUBLIC_API_URL
configOPERATOR_ADDRESS
configOPERATOR_DISCORD_WEBHOOK
configOPERATOR_FEE_WALLET
configOPERATOR_NOTIFICATION_WEBHOOK
🔐 secretOPERATOR_TELEGRAM_BOT_TOKEN
configOPERATOR_TELEGRAM_CHAT_ID
configPAYMENT_RECOVERY_INTERVAL_SEC
configPAYMENT_RECOVERY_PER_TICK_LIMIT
configPAYMENT_RECOVERY_STALE_THRESHOLD_SEC
configPOLICY_MODULE_ADDRESS_1
configPOLICY_MODULE_ADDRESS_137
configPOLICY_MODULE_ADDRESS_42161
configPOLICY_MODULE_ADDRESS_8453
configPOLICY_MODULE_ADDRESS_84532
configPOLL_TIMEOUT_SEC
configPORT
configPREFLIGHT_CHAIN_IDS
configREDIS_URL
configREPUTATION_CRON_PATTERN
configREWARD_AMOUNT
configREWARD_CHAIN_ID
🔐 secretREWARD_TOKEN
🔐 secretSAFE_DEPLOYER_PRIVATE_KEY
configSTRIPE_PRO_PRICE_ID
🔐 secretSTRIPE_SECRET_KEY
🔐 secretSTRIPE_WEBHOOK_SECRET
🔐 secretTENDERLY_ACCESS_KEY
configTENDERLY_ACCOUNT
configTENDERLY_PROJECT
configTRANSACTION_WORKER_DRAIN_DELAY_SEC
configTRANSACTION_WORKER_ENABLED
configTRANSACTION_WORKER_STALLED_INTERVAL_MS
configTRANSACTION_WORKER_STOP_ON_REDIS_QUOTA
🔐 secretTURNKEY_API_PRIVATE_KEY
🔐 secretTURNKEY_API_PUBLIC_KEY
configTURNKEY_ORGANIZATION_ID
configX402_ENABLED
configX402_FEE_USDC
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/felippeyann-agentfi-15p7l6)](https://m8ven.ai/mcp/felippeyann-agentfi-15p7l6)
commit: 7585f5f1fdc477b8acd812c304b6eab82fa8d812
code hash: 73c6a92c2359244eb0ac781d8634e8767031cc559de903bc7e861facc7c42ef3
verified: 5/25/2026, 12:07:53 PM
view raw JSON →