Log inSubmit server
WalletTriage logo

WalletTriage

Checks EVM wallet exposure to exploited contracts and returns risk findings, with paid queries settled in USDC on Base.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install WalletTriage

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "wallettriage": {
      "command": "npx",
      "args": [
        "-y",
        "wallettriage-mcp"
      ],
      "env": {
        "EVM_PRIVATE_KEY": "YOUR_VALUE_HERE",
        "GATEWAY_URL": "YOUR_VALUE_HERE",
        "MAX_PAYMENT_ATOMIC": "YOUR_VALUE_HERE",
        "DEFAULT_SCAN_CHAIN": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

npx -y wallettriage-mcp

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 5d ago.

Overview

WalletTriage MCP server checks EVM addresses for dangerous ERC20 approvals linked to contracts in a live threat feed. Its paid risk queries use x402 payments in USDC on Base, signed locally by a session key, while pricing and service status are available for free. Use it before an agent interacts with an EVM wallet or contract. The server is stateless and does not persist user or query data.

Use cases

  • Check an EVM address before interacting with it
  • Review dangerous ERC20 approvals against active threats
  • Inspect current query pricing and service status
  • Set a payment cap for automated risk checks

Key features

  • Real-time EVM address risk checks
  • ERC20 approval and threat-feed correlation
  • Risk scores, levels, and actionable findings
  • x402 USDC payments on Base
  • Free pricing and service-status lookup
  • Configurable payment and chain defaults

Tools2

What WalletTriage lets your agent do. Expand a tool for its parameters.

Self-reported~7 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

7/7 checks healthy over the last 45d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 6d ago via OSV.dev · wallettriage-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

npm downloads136Package downloads in the last 30 days.
Last commit3mo agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Tools exposed2Callable tools this server registers over MCP.
Directory activity2 viewsConfig copies, upvotes, and views on AllMCPs.

How WalletTriage works

What WalletTriage MCP server does

WalletTriage MCP server exposes an EVM wallet exposure check through MCP. The check_address_risk tool examines an address for dangerous ERC20 approvals and compares those approvals with a live feed of contracts reported to be under attack. Its response includes a risk_score from 0 to 100, a risk_level, and actionable findings.

The separate get_pricing tool is free and reports the current price per query along with service status. This makes it suitable for checking connectivity and pricing before making a paid risk request.

How it works

Risk checks are paid through x402 using USDC on Base. A locally held session key signs the payment; the service does not hold or move the wallet’s funds. Payments use gasless EIP-3009 transfers, so the session wallet does not need ETH. The session wallet does need enough USDC on Base to cover requests.

The server is stateless. Payment protection includes a configurable maximum amount, so requests above the configured atomic-USDC limit are refused.

Setup and configuration

The WalletTriage MCP server requires Node 20 or newer. Install it through npx and add it to the MCP configuration for a supported client such as Claude Desktop, Claude Code, or Cursor. Set EVM_PRIVATE_KEY to a dedicated session wallet private key in 0x plus 64 hexadecimal characters. Use a low-balance wallet rather than a primary key.

GATEWAY_URL selects the WalletTriage API base URL and defaults to https://api.wallettriage.com. MAX_PAYMENT_ATOMIC defaults to 100000, representing US$0.10 in six-decimal atomic USDC units. DEFAULT_SCAN_CHAIN defaults to eth and accepts eth, base, polygon, arbitrum, optimism, or bsc. Test the free pricing tool before funding the session wallet.

For local development, run npm install, provide the key in .env, and start the stdio server with npm start. A local gateway can be selected with GATEWAY_URL=http://localhost:4021.

Tools and capabilities

  • check_address_risk: Performs the paid, real-time EVM address check and returns the score, level, and findings.
  • get_pricing: Provides free service-status information and the current per-query price.

Limitations and notes

The WalletTriage MCP server requires a funded USDC-on-Base session wallet for paid checks. The private key must be the key itself, not the wallet address. No ETH is required for the documented gasless payment flow.

On Windows or corporate networks, TLS interception can cause certificate errors. The documentation recommends adding Node’s system-CA option rather than disabling TLS verification. If the gateway is unreachable, verify the configured host; non-local gateway hosts are expected to use HTTPS.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about WalletTriage

WalletTriage is an MCP server that connects AI agents to WalletTriage for real-time exploit-exposure checks on EVM wallet addresses. Its main tools are check_address_risk, which returns a score, level, and findings, and get_pricing, which reports service status and the current per-query price.

Install it with Node 20 or newer by configuring `npx -y wallettriage-mcp` as an MCP server command. Add `EVM_PRIVATE_KEY` and, if needed, the gateway, payment-limit, and default-chain variables to the client configuration.

Yes, Cursor is named as a supported setup target. Add the WalletTriage MCP server command and its environment variables to Cursor’s MCP configuration, then test the free `get_pricing` tool.

Risk checks are paid with x402 in USDC on Base using a locally signed session-wallet payment. Fund a dedicated low-balance wallet with USDC; gasless EIP-3009 payments mean it does not need ETH.

Set `EVM_PRIVATE_KEY` to the session wallet’s private key, not its address. The value must contain `0x` followed by 64 hexadecimal characters, and the documentation recommends never using a main wallet key.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewWalletTriage AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/wallettriage?style=directory)](https://allmcps.com/mcp/wallettriage)
HTML Embed
<a href="https://allmcps.com/mcp/wallettriage"><img src="https://allmcps.com/api/badge/wallettriage?style=directory" alt="WalletTriage on AllMCPs" /></a>