/ 100

11 days ago

glama

Sonic Blockchain MCP Server

Enables interaction with the Sonic blockchain including wallet management, token transfers, staking, and bridging between Ethereum and Sonic networks.

→ Tairon-ai/sonic-mcp · listed on glama

Operator pattern detected

This publisher (tairon-ai) operates 9 MCPs in our catalog. Median trust score: 54.

Computed 2026-06-22

· median trust 54 ≤ 60
· 100% of MCPs are D or F
· 78% of MCPs failed tool extraction
· wallet-grade env vars shared across MCPs: WALLET_PRIVATE_KEY (×6)

Operator-pattern signals come from machine analysis of every MCP under this publisher's GitHub org. They are factual aggregates — not accusations. Investigate the individual MCPs before drawing conclusions.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 16 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: WALLET_PRIVATE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configETHEREUM_EXPLORER_URL

configETHEREUM_RPC_URL— "": "https://eth-mainnet.g.alchemy.com/v2/YOUR_API_KEY"

configETH_STATE_ORACLE

configETH_TOKEN_DEPOSIT

configETH_TOKEN_PAIRS

configPORT

configPRICE_API_URL

configSONIC_BRIDGE

configSONIC_EXPLORER_API

configSONIC_EXPLORER_URL

configSONIC_MESSAGE_BUS

configSONIC_MULTICALL3

configSONIC_RPC_URL— "": "https://rpc.soniclabs.com",

configSONIC_RPC_URL_BACKUP

configSONIC_SFC

configSONIC_STATE_ORACLE

configSONIC_TOKEN_PAIRS

configSONIC_UPDATE_MANAGER

configSONIC_USDC

configSONIC_WETH

configSONIC_WRAPPED_S

configWALLET_ADDRESS— "": "your_wallet_address_here",

🔐 secretWALLET_PRIVATE_KEY— "": "your_private_key_here",

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/tairon-ai-sonic-mcp-peo643)](https://m8ven.ai/mcp/tairon-ai-sonic-mcp-peo643)

commit: 93fdc7f7ba3e72e5157ce1f80f627cf93bc612e6

code hash: fedc89ca45dc37212515c5deb162c09f69853a8e2d5800f3705fa0687c315d81

verified: 6/11/2026, 12:20:00 PM

view raw JSON →