Aptos MCP (tamago-labs/aptos-mcp) is an MCP server listed on the M8ven Trust Index. It scores 51 out of 100, grade D. It declares 47 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
D
Caution
51/100

Aptos MCP

Aptos MCP is a comprehensive Model Context Protocol (MCP) server implementation for the Aptos blockchain, compatible with MCP clients like Claude Desktop or Cursor.ai. It provides a complete DeFi toolkit covering major Aptos protocols including pool discovery, lending, DEX operations, perpetual trading, liquid staking, and cross-protocol portfolio management.

→ tamago-labs/aptos-mcp· listed on glama

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

tamago-labs

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored here

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 16 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: APTOS_PRIVATE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes47 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

aptos_burn_token

Burn tokens from your account

aptos_create_token

Create a new token on Aptos

aptos_get_address

Get the wallet address

aptos_get_balance

Get the balance of APT or a specific token

aptos_get_token_price

Get the price of a token

aptos_get_transaction

Get transaction details by hash

aptos_mint_token

Mint tokens to an address

aptos_transfer_token

Transfer APT or tokens to another address

list_echelon_markets

List all available lending markets on Echelon Finance with supply/borrow APY data

get_echelon_market_info

Get detailed information for a specific Echelon Finance market

get_echelon_user_position

Get user position details for a specific market on Echelon Finance

aptos_joule_lend

Lend tokens to Joule Finance to earn interest

aptos_joule_borrow

Borrow tokens from Joule Finance against collateral

aptos_joule_repay

Repay borrowed tokens to Joule Finance

aptos_joule_withdraw

Withdraw lent tokens from Joule Finance

aptos_joule_get_position

Get details about a specific Joule Finance position

aptos_joule_get_all_positions

Get all Joule Finance positions for the current user

aptos_joule_claim_reward

Claim lending rewards from Joule Finance

aptos_joule_list_pools

List all available lending pools on Joule Finance with APY and liquidity information

aptos_add_liquidity

Add liquidity to a Liquidswap pool

aptos_remove_liquidity

Remove liquidity from a Liquidswap pool

aptos_create_pool

Create a new liquidity pool on Liquidswap

list_liquidswap_pools

List all available liquidity pools on Liquidswap DEX

get_liquidswap_pool_info

Get specific pool information for a token pair on Liquidswap

list_thala_pools

List all available pools on Thala (both DEX and staking pools)

aptos_swap_tokens

Swap tokens using Liquidswap DEX

place_merkle_market_order

Place a market order on MerkleTrade perpetual exchange

place_merkle_limit_order

Place a limit order on MerkleTrade perpetual exchange

close_merkle_position

Close a position on MerkleTrade perpetual exchange

get_merkle_positions

Get all open positions for a user on MerkleTrade

swap_with_panora

Swap tokens using Panora DEX aggregator for best rates

get_panora_quote

Get a swap quote from Panora DEX aggregator

aptos_stake_apt

Stake APT with a validator

aptos_unstake_apt

Unstake APT from a validator

aptos_thala_stake

Stake APT with Thala to receive thAPT (liquid staking)

aptos_thala_unstake

Unstake thAPT to receive APT back

aptos_thala_mint_mod

Mint MOD stablecoin by depositing collateral

aptos_thala_redeem_mod

Redeem MOD stablecoin for underlying collateral

aptos_list_validators

List all validators in the Aptos network with their current status and information

aptos_get_validator_info

Get detailed information about a specific validator including stake, rewards, and performance

aptos_get_top_validators

Get top validators ranked by various criteria (voting power, APY, success rate, etc.)

aptos_get_validators_for_staking

Get the best validators optimized for delegated staking with operator names and commission rates

aptos_get_validator_display_name_direct

Get validator display name in one step - automatically fetches operator address and resolves to .apt name

aptos_get_delegation_pool_info

Get information about a delegation pool including commission rates and total stake

aptos_check_delegation_pool

Check if an address has a delegation pool available for staking

aptos_get_staking_overview

Get an overview of the Aptos staking ecosystem including total staked, number of validators, and average APY

aptos_get_aptos_name

Convert an Aptos address to its registered .apt name

// known CVEs in dependencies16 high5 medium9 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.12.3GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.12.3GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.12.3GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highaxios@1.7.4GHSA-35jp-ww65-95wh

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

highaxios@1.7.4GHSA-3g43-6gmg-66jw

axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configAPTOS_NETWORK
🔐 secretAPTOS_PRIVATE_KEY
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

47/47 tools missing one or more hints — aptos_burn_token (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); aptos_create_token (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); aptos_get_address (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +44 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

Production dependencies are patched

0 critical, 16 high severity in production deps — @modelcontextprotocol/sdk@1.12.3 (high), @modelcontextprotocol/sdk@1.12.3 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/tamago-labs/aptos-mcp?variant=verified)](https://m8ven.ai/mcp/tamago-labs/aptos-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: c594f9b87a9a227c99fac7a4035ead2a1920716a
code hash: ec8f207903e33bd4e793079940ff739b433f3bd183bcbfcb1adfde65dae5b966
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client