DUAL MCP Server (ro-ro-b/dual-mcp-server) is an MCP server listed on the M8ven Trust Index. It scores 50 out of 100, grade D. It declares 115 tools. No publisher has claimed this listing.
Enables AI agents to interact directly with the DUAL Web3 Operating System for minting tokens, managing templates, and executing blockchain actions. It provides over 60 tools for handling wallets, organizations, and ZK-rollup infrastructure natively via the Model Context Protocol.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
ro-ro-b
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
dual_execute_actionExecute an action on a tokenized object via the Event Bus. Actions are the primary way to change object state. Examples: mint tokens, transfer ownership, redeem rewards, update status. The action_type must match a registered action type, and the object must belong to a template that allows it.
dual_batch_actionsExecute multiple actions atomically in a single batch. All actions succeed or all fail. Useful for complex operations like: mint + transfer + configure in one transaction.
dual_list_actionsList executed actions. Filter by action ID or template.
dual_get_actionGet full details of a specific executed action.
dual_list_action_typesList all registered action types. Action types define what operations can be performed on objects.
dual_create_action_typeRegister a new action type with an optional JSON schema for payload validation.
dual_update_action_typeUpdate an action type's name, description, or payload schema.
dual_list_api_keysList all API keys for the authenticated wallet.
dual_create_api_keyCreate a new API key for server-to-server integration. The key value is only shown once — save it immediately.
dual_delete_api_keyPermanently revoke and delete an API key.
dual_creative_design_generateGenerate a complete token template design from a natural language description.
dual_creative_design_listList all generated token designs with optional use case filter.
dual_creative_design_getGet a specific token design by ID with full template specification.
dual_creative_design_refineRefine an existing token design — add/remove fields, adjust properties.
dual_creative_design_deleteDelete a token design by ID.
dual_creative_face_createCreate a face template with SVG base and data bindings for dynamic token rendering.
dual_creative_face_listList all face templates.
dual_creative_face_renderRender a face template with token data, producing HTML output.
dual_list_facesList face definitions. Faces are visual representations (images, 3D models, web views) attached to templates.
dual_create_faceCreate a visual face for a template. Types: image, image_progress, image_policy, image_layered, 3d, web.
dual_get_faceGet details of a specific face.
dual_update_faceUpdate a face's display URL or type.
dual_delete_faceDelete a face definition.
dual_get_template_facesGet all faces associated with a specific template.
dual_compliance_evaluateEvaluate a token action against all enabled compliance rules. Returns pass/fail with violation details.
dual_compliance_rule_createCreate a new compliance rule (AML threshold, transfer limit, restricted wallet, or geographic).
dual_compliance_rule_listList all compliance rules with optional filters.
dual_compliance_rule_updateUpdate a compliance rule by ID.
dual_compliance_rule_deleteDelete a compliance rule by ID.
dual_compliance_auditRetrieve compliance audit log entries.
dual_compliance_statsGet compliance statistics: evaluations, pass rate, violations by type.
dual_policy_parseParse a natural language policy description into structured compliance rules.
dual_policy_getGet a parsed policy document by ID.
dual_policy_validateValidate a parsed policy for internal consistency.
dual_provenance_createRecord the provenance of AI-generated content with SHA-256 hashing.
dual_provenance_getRetrieve a provenance record by ID.
dual_provenance_verifyVerify AI-generated content by re-hashing and comparing to the stored provenance record.
dual_provenance_badgeGenerate a verification badge (certificate, seal, or QR) for a provenance record.
dual_ai_agent_createCreate a new autonomous agent with condition/action rules for the DUAL Intelligence Service.
dual_ai_agent_listList all autonomous agents in the DUAL Intelligence Service.
dual_ai_agent_getGet details of a specific autonomous agent by ID.
dual_ai_agent_executeExecute an agent, evaluating its rules against the provided context. Supports dry-run mode.
dual_ai_history_ingestBulk ingest action history records for lifecycle prediction analysis.
dual_ai_predictGet transfer likelihood, abandonment risk, and spike probability predictions for a specific object.
dual_ai_trendingList objects ranked by recent activity score.
dual_ai_anomaliesDetect anomalous activity patterns across all tracked objects.
dual_ai_graph_ingestIngest template or token metadata into the knowledge graph.
dual_ai_graph_similarFind nodes similar to a given node using metadata overlap, Jaccard, or cosine similarity.
dual_ai_graph_connectedFind all nodes connected to a given node within N hops using BFS.
dual_ai_graph_analyticsGet ecosystem-wide analytics: topology, concentration, velocity, top hubs.
dual_list_messagesList notification messages sent through the platform.
dual_send_notificationSend a notification message to one or more wallets using a message template.
dual_list_message_templatesList all notification message templates.
dual_create_message_templateCreate a notification template with subject, body (with placeholders), and delivery channels.
dual_delete_message_templateDelete a message template.
dual_list_objectsList tokenized objects (asset instances). Objects are created from templates and owned by wallets. Filter by template, owner, FQDN, or geographic hash. Supports pagination.
dual_get_objectGet full details of a tokenized object — its properties, ownership, faces, actions, and metadata.
dual_update_objectUpdate the properties of a tokenized object. Only mutable properties can be changed.
dual_get_object_childrenGet child objects in a hierarchical object tree.
dual_get_object_parentsGet parent objects in a hierarchical object tree.
dual_get_object_activityGet the full activity/audit log for an object — all state changes, transfers, and action executions.
dual_search_objectsSearch tokenized objects with filter criteria. Supports complex queries across all object properties. Example filters: { "template_id": "abc123", "properties.status": "active" }
dual_count_objectsCount objects matching filter criteria without returning the full objects.
dual_list_organizationsList all organizations the authenticated wallet belongs to. Supports pagination and role filtering.
dual_create_organizationCreate a new organization (multi-tenant workspace). Returns the org with its ID and FQDN.
dual_get_organizationGet organization details including members, roles, and account info.
dual_update_organizationUpdate an organization's name, description, or image.
dual_get_org_balanceGet the current balance and currency for an organization.
dual_list_org_membersList all members of an organization with their roles.
dual_add_org_memberAdd a wallet as a member to an organization with a specific role.
dual_remove_org_memberRemove a member from an organization.
dual_list_org_rolesList all roles defined for an organization.
dual_create_org_roleCreate a new role with specific permissions for an organization.
dual_get_payment_configGet the platform's payment configuration — deposit addresses, supported tokens, and fee structure.
dual_list_depositsList deposit transactions. Filter by transaction hash, token, or token address.
dual_public_list_templatesList publicly accessible templates. No authentication required.
dual_public_get_templateGet a public template's details. No authentication required.
dual_public_get_objectGet a public object's details. No authentication required.
dual_public_search_objectsSearch publicly accessible objects. No authentication required.
dual_public_get_statsGet public platform statistics — total objects, templates, and wallets. No authentication required.
dual_list_batchesList sequencer batches. Batches group multiple transactions for efficient on-chain anchoring via ZK-rollup.
dual_get_batchGet details of a sequencer batch including all contained transactions.
dual_list_checkpointsList ZK-rollup checkpoints. Each checkpoint contains a state root and proof that anchors batches to L1.
dual_get_checkpointGet a specific ZK-rollup checkpoint with its proof data and state roots.
dual_upload_fileUpload a file to DUAL storage. Returns a public URL. Useful for template assets, face images, and attachments.
dual_get_fileGet a file's URL or content by its storage ID.
dual_delete_fileDelete a file from DUAL storage.
dual_get_template_assetsList all storage assets associated with a template.
dual_request_accessRequest access to a gated platform feature.
dual_list_support_messagesList support messages.
dual_send_support_messageSend a support message to the DUAL team.
dual_list_templatesList token templates. Templates define the structure, properties, and actions of tokenized objects. Filter by prefix or FQDN.
dual_create_templateCreate a new token template that defines the structure of tokenized objects. Specify the property schema, allowed actions, and access rules. Example: Create a "Reward Token" template with properties like points, expiry_date, and redeemable status.
dual_get_templateGet full details of a template including its property schema, actions, and factory config.
dual_update_templateUpdate a template's name, property schema, or access rules.
dual_delete_templatePermanently delete a template. This cannot be undone.
dual_list_template_variationsList all variations of a template. Variations are alternative configurations of the same template.
dual_create_template_variationCreate a variation of an existing template with overridden properties.
dual_loginAuthenticate with email/phone and password. Returns JWT tokens for subsequent API calls. Sets auth automatically for this session.
dual_login_guestCreate a guest session with limited permissions. No credentials required.
15 further tools are not listed here. The complete surface is in the source.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
Axios is vulnerable to DoS attack through lack of data size check
Axios: Header Injection via Prototype Pollution
CORS_ORIGINComma-separated allowed origins (e.g. https://app.example.com) NoCREATIVE_URLDUAL_ACCESS_TOKENexport =your-jwt-tokenDUAL_API_KEYexport =your-api-keyDUAL_API_URLAPI base URL (default: https://api.blockv-labs.io/v3) NoDUAL_REFRESH_TOKENJWT refresh token NoGOVERNANCE_URLHOSTHTTP bind address (default: 127.0.0.1) NoINTELLIGENCE_URLMCP_SERVER_API_KEYis REQUIRED for HTTP modeRATE_LIMIT_MAXMax requests per minute per IP (default: 100) NoTRANSPORTMCP_SERVER_API_KEY=your-secret =http PORT=3100 node dist/index.jsPORTTool inputs are validated
72/115 tool handlers declare input schemas (63%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool handlers catch errors
114/115 tool handlers wrap calls in try/catch (99%)
Wrap each tool handler body in try/catch and return a structured error response.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Secrets not logged
2 secret values sent to console.log
Redact or omit secret values from log output.
Production dependencies are patched
0 critical, 14 high severity in production deps — axios@1.7.9 (high), axios@1.7.9 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/ro-ro-b/dual-mcp-server)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check