Back to MCP Trust Indexm8ven
45
/ 100
1 month ago
glama

Boosty MCP DeFi Platform

An enterprise-grade MCP server platform for executing real DeFi operations on Solana and EVM chains using natural language. It enables users to perform live trading, volume generation, and wallet management directly within Claude Desktop.

→ nirholas/boosty· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: BIRDEYE_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🚨
Known vulnerabilities in dependencies: 2 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 10 credentials: BIRDEYE_API_KEY, CDP_CLIENT_KEY, COINGECKO_API_KEY, COINGECKO_PRO_API_KEY, DATABASE_PASSWORD, ENCRYPTION_KEY, HELIUS_API_KEY, MASTER_PASSWORD, REDIS_PASSWORD, X402_WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 critical1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@1.0.0GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

criticalvitest@1.0.0GHSA-9crc-q9x8-hgqq

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

lowtsup@8.0.0GHSA-3mv9-4h5g-vhg3

tsup DOM Clobbering vulnerability

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAPI_KEYS
configAPI_KEY_HEADER
configARBITRUM_RPC_URL— rpcUrl: process.env.,
configAVALANCHE_RPC_URL
configBASE_RPC_URL
🔐 secretBIRDEYE_API_KEY
🔐 secretCDP_CLIENT_KEY
🔐 secretCOINGECKO_API_KEY— "": "your-key-here",
🔐 secretCOINGECKO_PRO_API_KEY
configDATABASE_HOST
configDATABASE_NAME
🔐 secretDATABASE_PASSWORD
configDATABASE_PORT
configDATABASE_SSL
configDATABASE_USER
configENCRYPTION_ALGORITHM
🔐 secretENCRYPTION_KEY
configETHEREUM_RPC_URL— rpcUrl: process.env.,
configFUNDING_WALLET_ID
🔐 secretHELIUS_API_KEY— your-helius-key
configHELIUS_RPC_URL
configLOG_LEVEL— info # debug, info, warn, error
configLOG_PRETTY
🔐 secretMASTER_PASSWORD
configMASTER_WALLET_ID
configMAX_BATCH_SIZE
configMAX_BOTS
configMAX_BOTS_PER_CAMPAIGN
configMAX_CONCURRENT_CAMPAIGNS
configMAX_WALLETS
configOPTIMISM_RPC_URL
configPGDATABASE
configPGHOST
configPGPASSWORD
configPGPORT
configPGUSER
configPOLYGON_RPC_URL
configQUICKNODE_ENDPOINT
configRATE_LIMIT_CAMPAIGNS_MAX
configRATE_LIMIT_CAMPAIGNS_WINDOW
configRATE_LIMIT_QUERIES_MAX
configRATE_LIMIT_QUERIES_WINDOW
configRATE_LIMIT_SWAPS_MAX
configRATE_LIMIT_SWAPS_WINDOW
configRATE_LIMIT_WALLET_MAX
configRATE_LIMIT_WALLET_WINDOW
configREDIS_DB
configREDIS_HOST
🔐 secretREDIS_PASSWORD
configREDIS_PORT
configREDIS_URL— "": "redis://localhost:6379"
configREQUIRE_AUTH
configSOLANA_CLUSTER
configSOLANA_COMMITMENT
configSOLANA_MAX_RETRIES
configSOLANA_NETWORK
configSOLANA_RPC_URL— "": "https://api.mainnet-beta.solana.com",
configSOLANA_RPC_URLS
configX402_APP_LOGO
configX402_APP_NAME
configX402_DEFAULT_PRICE
configX402_FACILITATOR_URL
configX402_NETWORK— base-mainnet
configX402_PAY_TO_ADDRESS— 0xYourBaseAddress
🔐 secretX402_WEBHOOK_SECRET
configX402_WEBHOOK_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/nirholas-boosty-1kdltu)](https://m8ven.ai/mcp/nirholas-boosty-1kdltu)
commit: 8869f1093cb28b456d5ba3616728a17ef87fd9af
code hash: 29d065d25ea44b8256fa6f68609ebd72228bd327e1519723247e93fb0b4f601a
verified: 6/13/2026, 10:36:07 AM
view raw JSON →