Back to MCP Directory
Base
Model Context Protocol high risk

Base

Base MCP server provides onchain tools for AI apps to interact with the Base Network and Coinbase API, enabling wallet management, contract deployment, and more.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwriteexecadmin

Quickstart

Install

npm install -g

Config

{
  "mcpServers": {
    "base-mcp": {
      "command": "npx",
      "args": ["-y", "base-mcp@latest"],
      "env": {
        "COINBASE_API_KEY_NAME": "your_api_key_name",
        "COINBASE_API_PRIVATE_KEY": "your_private_key",
        "SEED_PHRASE": "your seed phrase here",
        "COINBASE_PROJECT_ID": "your_project_id",
        "ALCHEMY_API_KEY": "your_alchemy_api_key",
        "PINATA_JWT": "your_pinata_jwt",
        "OPENROUTER_API_KEY": "your_openrouter_api_key",
        "CHAIN_ID": "optional_for_base_sepolia_testnet"
      },
      "disabled": false,
      "autoApprove": []
    }
  }
}

Exposed MCP Tools (14)

safe
get-address

Retrieves the Ethereum address associated with the configured wallet.

Read-only operation, no side effects.

safe
list-balances

Lists the balances of various assets held in the configured wallet.

Read-only operation, no side effects.

critical
transfer-funds

Transfers funds from the configured wallet to a specified destination address.

Irreversible write operation that can result in loss of funds.

critical
deploy-contract

Deploys a smart contract to the blockchain using provided Solidity code.

Irreversible write operation that can deploy malicious code.

safe
check-address-reputation

Checks the reputation of a given Ethereum address using external services.

Read-only operation, no side effects.

safe
get_morpho_vaults

Gets the available vaults for a given asset on the Morpho protocol.

Read-only operation, no side effects.

high
call_contract

Calls a function on a deployed smart contract.

Can modify contract state depending on the function called.

safe
get_onramp_assets

Gets the assets available for onramping via Coinbase in a given region.

Read-only operation, no side effects.

moderate
onramp

Generates a URL for onramping funds via Coinbase.

Initiates a transaction that requires user confirmation.

safe
erc20_balance

Gets the balance of a specified ERC20 token for the configured wallet.

Read-only operation, no side effects.

critical
erc20_transfer

Transfers a specified amount of an ERC20 token to a given address.

Irreversible write operation that can result in loss of tokens.

safe
list_nfts

Lists the NFTs owned by a specified address.

Read-only operation, no side effects.

critical
transfer_nft

Transfers an NFT to another address.

Irreversible write operation that can result in loss of NFTs.

moderate
buy_openrouter_credits

Buys OpenRouter credits with USDC.

Transfers USDC to purchase credits.

Safety Assessment

The Base MCP server offers powerful on-chain tools but carries significant risk due to its ability to manage funds and deploy contracts. It is safe when used with extreme caution, secure configuration practices, and a thorough understanding of the underlying blockchain operations. It's risky if secrets are exposed or if untrusted contract code is deployed.

  • Requires explicit configuration with API keys and seed phrases.
  • Provides tools for interacting with blockchain, which inherently has audit trails.
  • Includes tools for checking address reputation, adding a layer of security.
  • Supports onramp functionality via Coinbase, a reputable exchange.
  • Manages sensitive information like API keys and seed phrases in a configuration file.
  • Allows fund transfers and contract deployments, which are irreversible and potentially risky.
  • Provides access to wallet addresses and balances, increasing the risk of unauthorized access if compromised.
  • Lacks built-in sandboxing, meaning tools have direct access to the configured wallet.
  • Relies on user-provided contract code for deployment, opening potential for malicious contracts.