MCP EVM Signer

MCP server for managing EVM keys and deploying smart contracts via Infura

→ zhangzhongnan928/mcp-evm-signer · listed on mcp_so

Install from

mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 2 credentials: INFURA_API_KEY, KEY_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configDEFAULT_NETWORK— "": "sepolia",

configENCRYPT_KEYS— "": "true",

🔐 secretINFURA_API_KEY— "": "your_infura_api_key_here",

configKEYS_PATH

🔐 secretKEY_PASSWORD— "": "your_secure_password_here"

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/zhangzhongnan928-mcp-evm-signer-m9403b)](https://m8ven.ai/mcp/zhangzhongnan928-mcp-evm-signer-m9403b)

commit: 768d7ed1c7d76874badb10d532f83af2baf6e06b

code hash: bf53d2ffe18d16efa9478f94aaa282ebab2459b0a9e7f82187c60b4059374f26

verified: 4/11/2026, 2:14:31 PM

view raw JSON →