Production MCP server giving AI agents metered access to live Hedera blockchain data. Query token prices, screen identities, monitor governance, write tamper-evident HCS compliance records, and analyze smart contracts — all paid in HBAR micropayments per call.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
process.env. You'll be asked to provide them before it can run.ADMIN_SECRETALERT_COOLDOWN_MSANTHROPIC_API_KEYBACKUP_SECRET— v3.3.1 — Full security audit: SQLite-backed rate limiting, API key validation, 1MB body cap, separate , 90-day PII purge, HITL removed, legal pages deployedCHECK_INTERVAL_H— 6 Hours between checksCHECK_INTERVAL_MS— 3600000 Check every hourDB_PATHDEADLINE_ALERT_HDROP_THRESHOLD— 10 Point drop that triggers alert regardless of gradeFIXATUM_ADMIN_SECRETFIXATUM_API_URLFIXATUM_WALLETGITHUB_BACKUP_REPOGITHUB_BACKUP_TOKENHCS_COMPLIANCE_TOPIC_IDHCS_TOPIC_ID— HEDERA_ACCOUNT_ID=0.0.YOUR_ID =0.0.YOUR_TOPIC node examples/agent-reputation-monitor.mjsHEDERAINTEL_ENDPOINTHEDERATOOLBOX_ENDPOINTHEDERA_ACCOUNT_ID— set =0.0.YOUR_ID && set TOKEN_ID=0.0.731861 && node examples/whale-alert-agent.mjsHEDERA_NETWORKHEDERA_PRIVATE_KEYKYC_TOKEN_ID— HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC SUBJECT=0.0.999999 =0.0.731861 node examples/compliance-kya-onboarding-agent.mjsMAIN_SERVICE_PRIVATE_DOMAINNARRATOR_URLPORTPROPOSAL_ID— Watches active governance proposals for a Hedera token on a schedule. Alerts when a proposal is closing within 24 hours. Pass --analyze with a for deep vote tally and outcome prediction.PUBLIC_URLSAUCERSWAP_API_KEYSKIP_VERIFY— false Set true to skip tamper verificationSUBJECT— HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC =0.0.999999 node examples/compliance-kya-onboarding-agent.mjsTELEGRAM_BOT_TOKENTELEGRAM_OWNER_IDTHRESHOLD_PCT— 80 Alert if top-10 holders exceed this %TOKEN_ID— set HEDERA_ACCOUNT_ID=0.0.YOUR_ID && set =0.0.731861 && node examples/whale-alert-agent.mjsTOPIC_ID— HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 =0.0.999 PROPOSAL_ID=42 node examples/dao-monitor-agent.mjs --analyzeWATCH_DID— HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC =did:hedera:mainnet:z... node examples/agent-reputation-monitor.mjsWATCH_FILE— watched-agents.json Path to your watch listWATCH_LABELXAGENT_API_KEY[](https://m8ven.ai/mcp/mountainmystic-hederatoolbox-1levzb)