Model Context Protocol moderate risk

Crypto Whitepapers

An MCP server providing access to cryptocurrency whitepapers, enabling AI agents to search, load, and query information for analysis and learning.

Connections & Capabilities

Connects To

GitHubDiscord

Capabilities

readwrite

Quickstart

Config

{
    "mcpServers": {
        "crypto-whitepapers": {
            "command": "uv",
            "args": [
                "--directory",
                "/absolute/path/to/crypto-whitepapers-mcp"   
                "run",
                "crypto-whitepapers-mcp"
            ]
        }
    }
}

Exposed MCP Tools (4)

safe

list_available_projects()

Lists all cryptocurrency projects available in the knowledge base.

Read-only operation, no side effects.

safe

search_whitepaper(project_name: str)

Searches for a project's whitepaper PDF using DuckDuckGo.

Read-only operation, retrieves search results.

moderate

load_whitepaper(project_name: str, url: str)

Downloads a whitepaper PDF from a URL and adds it to the knowledge base.

Downloads content from the internet and adds it to the knowledge base. Requires careful URL validation.

safe

ask_whitepapers(query: str, project_name: str = None)

Searches the knowledge base for a query, optionally filtered by project.

Read-only operation, queries the indexed content.

Safety Assessment

The server is relatively safe for querying and analyzing existing whitepapers. The primary risk lies in the `load_whitepaper` tool, which could introduce malicious content if not carefully monitored. It's crucial to validate URLs and project names to mitigate potential risks.

Read-only access to indexed whitepaper content for querying.
Limited write operations (loading whitepapers) are controlled.
No direct execution of system commands.
No direct access to sensitive secrets within the described functionality.

Loading whitepapers from arbitrary URLs poses a risk of malicious content.
Potential for denial-of-service if the server is flooded with requests.
Lack of input validation on project names and URLs could lead to vulnerabilities.
The server relies on external services (DuckDuckGo) which introduces dependency risks.