Connections & Capabilities
Connects To
Capabilities
Quickstart
Install
npx @mcpdotdirect/evm-mcp-serverConfig
{
"mcpServers": {
"evm-mcp-server": {
"command": "npx",
"args": ["-y", "@mcpdotdirect/evm-mcp-server"]
},
"evm-mcp-http": {
"command": "npx",
"args": ["-y", "@mcpdotdirect/evm-mcp-server", "--http"]
}
}
}Exposed MCP Tools (7)
get_chain_idRetrieves the chain ID of the configured EVM network.
Read-only operation, no side effects.
get_block_numberFetches the latest block number of the EVM network.
Read-only operation, no side effects.
get_balanceRetrieves the native token balance of an Ethereum address.
Read-only operation, no side effects.
transfer_nativeTransfers native tokens between Ethereum addresses.
Requires private key and can result in loss of funds if used incorrectly.
read_contractReads data from a smart contract using a specified function and ABI.
Read-only operation, but incorrect ABI or function can lead to unexpected results.
write_contractWrites data to a smart contract by executing a state-changing function.
Requires private key and can result in irreversible state changes or loss of funds.
get_contract_abiFetches the ABI of a smart contract from a block explorer.
Read-only operation, but relies on external API.
Safety Assessment
The EVM MCP Server offers a range of blockchain services, but its safety depends on how it's configured and used. Read-only operations are generally safe. Write operations, especially those involving private keys or smart contract interactions, require careful management and monitoring to mitigate risks.
- Supports read-only operations for blockchain data access.
- Offers AI-guided prompts for safer interaction with complex workflows.
- Provides gas estimation for transaction planning.
- Includes contract verification to distinguish contracts from EOAs.
- Supports message signing capabilities for authentication.
- Requires private key or mnemonic for write operations, posing a security risk if mishandled.
- Automatic ABI fetching relies on external APIs (Etherscan), which could introduce vulnerabilities.
- Server configuration is hardcoded, limiting flexibility and potentially exposing default settings.
- Lack of sandboxing for smart contract interactions could lead to unintended consequences.
- Potential for misuse if AI agents are not properly constrained when executing write operations.
