58
grade D
10 days ago
glama

Frontier-Compute/zcash-mcp

Zcash MCP server for AI agents. 12 tools for shielded operations, memo decoding, ZAP1 attestation. Works with Claude, ChatGPT, OpenClaw.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: ZAP1_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configZAP1_AGENT_IDtest:live drives the MCP server over stdio and exercises the live tool surface, not just the underlying HTTP endpoints. Set if you want the get_agent_status check to target a specific deployed agent.
🔐 secretZAP1_API_KEYnone API key for attest_event
configZAP1_API_URL
configZEBRA_RPC_URL"": "http://127.0.0.1:8232",
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/frontier-compute-zcash-mcp-19zua9)](https://m8ven.ai/mcp/frontier-compute-zcash-mcp-19zua9)
commit: 15853d1a493cca636ce572d087b9b11e3027869c
code hash: 2eb5e78b802a1a07be19b43089e6f521653524c0f6883a0bb48d741ed2821926
verified: 4/11/2026, 2:20:40 PM
view raw JSON →