Snapshot MCP

A Model Context Protocol server for Snapshot that lets AI assistants read governance data and act on the user's behalf through Snapshot's GraphQL API.

→ snapshot-labs/snapshot-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: SNAPSHOT_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 5 credentials: ALIAS_PRIVATE_KEY, CDP_API_KEY_SECRET, CDP_WALLET_SECRET, JWT_SECRET, SNAPSHOT_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretALIAS_PRIVATE_KEY— "": "0x..."

configBASE_URL— Public URL for OAuth metadata (e.g. https://mcp.snapshot.box)

configCDP_API_KEY_ID— Coinbase CDP API key ID — required for HTTP mode

🔐 secretCDP_API_KEY_SECRET— Coinbase CDP API key secret — required for HTTP mode

🔐 secretCDP_WALLET_SECRET— Coinbase CDP wallet secret — required for HTTP mode

🔐 secretJWT_SECRET— HS256 secret used to sign access tokens — required for HTTP mode (≥32 chars; openssl rand -hex 32)

configPORT— Listens on port 8080 by default (override with env var).

🔐 secretSNAPSHOT_API_KEY— [Snapshot API key](https://docs.snapshot.box/tools/api/api-keys) for higher rate limits (optional)

configSNAPSHOT_API_URL— GraphQL endpoint (default https://hub.snapshot.org/graphql)

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/snapshot-labs-snapshot-mcp-17v2bs)](https://m8ven.ai/mcp/snapshot-labs-snapshot-mcp-17v2bs)

commit: 8a151d7bf6bde7363cb7bdc2fccef0390b5ae2bd

code hash: cd8fd21620e86ebba207a78b55ad9b2dbf512b0d8b34fcfcee95a2ae527921d0

verified: 6/23/2026, 10:35:56 AM

view raw JSON →