Pion

Item: Pion
Rating: 74
Author: M8ven

MCP server for Pi Network that enables AI agents to query Pi chain data (balances, transactions) and verify user tokens, with optional payment sending that is off by default.

→ jleeblack/pion-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

3 flows detected: PI_SERVER_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 3 credentials: PI_SERVER_API_KEY, PI_VALIDATION_KEY, PI_WALLET_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configPION_ENABLE_PAYMENTS— 1 # explicit switch, deliberately separate from credentials

configPION_HORIZON_URL

configPION_MAX_PAYMENT_PI— 10 # required per-payment ceiling, in Pi

configPION_PLATFORM_URL

configPION_SIGNIN_PORT

configPION_SIGNIN_SCOPES

configPI_OAUTH_CLIENT_ID

🔐 secretPI_SERVER_API_KEY— ... # from the Pi Developer Portal

🔐 secretPI_VALIDATION_KEY

🔐 secretPI_WALLET_SECRET— S... # app wallet secret seed

configPORT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/jleeblack-pion-mcp-gx2l00)](https://m8ven.ai/mcp/jleeblack-pion-mcp-gx2l00)

commit: 87116267d38e421edebd2988b93c4102886731b8

code hash: b7c9d0e03039c4ee61e494359126dc3eb881f17e492cc19710828210d430d00f

verified: 7/31/2026, 9:05:46 AM

view raw JSON →