A comprehensive Model Context Protocol (MCP) server for the Starknet blockchain. This server provides AI agents with the ability to interact with Starknet networks, query blockchain data, manage wallets, and interact with smart contracts.
Source not yet analyzed — this grade rests on attested signals (CVEs, supply-chain) only. It is a floor: reading the code could raise it, not lower it.
- capability exposureinferred+35
- tool safetyinferred+25
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 14m ago · see ecosystem CVEs →
No known CVEs for this server.
- highexfiltration comboget_starknet_token_balance
single tool reads + sends: net, secrets
- highexfiltration comboget_starknet_strk_balance
single tool reads + sends: net, secrets
- highexfiltration comboget_starknet_native_balances
single tool reads + sends: net, secrets
- highexfiltration comboget_starknet_token_info
single tool reads + sends: net, secrets
- highexfiltration combocheck_starknet_nft_ownership
single tool reads + sends: net, secrets
- highexfiltration comboget_starknet_nft_balance
single tool reads + sends: net, secrets, db
- highexfiltration comboget_starknet_token_supply
single tool reads + sends: net, secrets
- highexfiltration combotransfer_starknet_token
single tool reads + sends: net, secrets
- mediumpurpose mismatchget_starknet_token_balance
benign-looking name carries secrets
- mediumpurpose mismatchget_starknet_strk_balance
benign-looking name carries secrets
- mediumpurpose mismatchget_starknet_native_balances
benign-looking name carries secrets
- mediumpurpose mismatchget_starknet_token_info
benign-looking name carries secrets
- mediumpurpose mismatchget_starknet_nft_balance
benign-looking name carries secrets
- mediumpurpose mismatchget_starknet_token_supply
benign-looking name carries secrets
[](https://mcpobservatory.com/servers/smithery:mcpdotdirect/starknet-mcp-server/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of mcpdotdirect.