Cryptoapis Mcp Address History — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cryptoapis Mcp Address History (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for Crypto APIs Address History product. Query full blockchain address transaction history for synced addresses.
API Version: Compatible with Crypto APIs version 2024-12-12
To use this MCP server, you need:
npm install @cryptoapis-io/mcp-address-historyOr install all Crypto APIs MCP servers: npm install @cryptoapis-io/mcp
# Run with API key
npx @cryptoapis-io/mcp-address-history --api-key YOUR_API_KEY
# Or use environment variable
export CRYPTOAPIS_API_KEY=YOUR_API_KEY
npx @cryptoapis-io/mcp-address-historyAdd to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):
{
"mcpServers": {
"cryptoapis-address-history": {
"command": "npx",
"args": ["-y", "@cryptoapis-io/mcp-address-history"],
"env": {
"CRYPTOAPIS_API_KEY": "your_api_key_here"
}
}
}
}Add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):
{
"mcpServers": {
"cryptoapis-address-history": {
"command": "npx",
"args": ["-y", "@cryptoapis-io/mcp-address-history"],
"env": {
"CRYPTOAPIS_API_KEY": "your_api_key_here"
}
}
}
}npx @modelcontextprotocol/inspector npx @cryptoapis-io/mcp-address-history --api-key YOUR_API_KEY npx @cryptoapis-io/mcp-address-history --transport http --port 3000 --api-key YOUR_API_KEYhttp://localhost:3000/mcpn8n in Docker:localhostinside the container is not your machine. Start the server with--host 0.0.0.0andMCP_AUTH_TOKENset (see Exposing the server beyond localhost), usehttp://host.docker.internal:3000/mcpas the URL, and add anAuthorization: Bearer <token>header to the MCP Client Tool credential.
All servers default to port 3000. Use --port to assign different ports when running multiple servers.manage_addressManage synced addresses for historical data access. Supports all EVM and UTXO blockchains.
Actions:
| Action | Description |
|---|---|
sync | Sync a new address for historical data |
activate | Activate a previously synced address |
delete | Delete a synced address |
list | List all synced addresses |
evm_address_historyQuery EVM address full history (requires synced address).
Actions:
| Action | Description |
|---|---|
get-statistics | Get address statistics |
list-transactions | List all transactions |
list-transactions-by-timestamp | List transactions from a timestamp |
list-token-transfers | List token transfers |
list-internal-transactions | List internal transactions |
list-tokens | List tokens held by address |
Supported Blockchains: ethereum, ethereum-classic, binance-smart-chain, polygon, tron
Note:get-statisticsandlist-transactions-by-timestamponly support Ethereum and Ethereum Classic. Other actions support all five blockchains.
utxo_address_historyQuery UTXO address full history (requires synced address).
Actions:
| Action | Description | Pagination |
|---|---|---|
get-statistics | Get address statistics | - |
list-transactions | List all transactions | cursor |
list-transactions-by-timestamp | List transactions from timestamp | cursor |
list-unspent-outputs | List unspent outputs (UTXOs) | offset |
Supported Blockchains: bitcoin, bitcoin-cash, litecoin, dogecoin, dash, zcash
Most endpoints use cursor-based pagination:
// Response
{
"items": [...],
"limit": 10,
"hasMore": true,
"nextStartingAfter": "abc123"
}Use nextStartingAfter value as startingAfter parameter in the next request.
Exception: list-unspent-outputs uses offset pagination:
// Response
{
"items": [...],
"limit": 10,
"offset": 0,
"total": 150
}For stdio transport, provide the API key at startup via CLI argument or environment variable. For HTTP transport, it can also be provided per-request via x-api-key header (see HTTP API Key Modes).
npx @cryptoapis-io/mcp-address-history --api-key {your_api_key} export CRYPTOAPIS_API_KEY={your_api_key}| Argument | Description |
|---|---|
--api-key | Crypto APIs API key |
--transport | Transport type: stdio (default) or http |
--host | HTTP host (default: 127.0.0.1; use 0.0.0.0 to accept remote connections — requires an auth token with --api-key) |
--auth-token | Bearer token callers must send (Authorization: Bearer <token>); prefer the MCP_AUTH_TOKEN env var |
--allowed-hosts | Comma-separated Host header allowlist for non-loopback binds |
--port | HTTP port (default: 3000) |
--path | HTTP path (default: /mcp) |
--stateless | Enable stateless mode for HTTP |
When using HTTP transport, the server supports two API key modes:
x-api-key request headers are ignored.x-api-key header with a valid Crypto APIs key. This enables hosting a public server where each user provides their own key.# Per-request key mode (multi-tenant)
npx @cryptoapis-io/mcp-address-history --transport http --port 3000
# Clients send x-api-key header with each requestHTTP mode listens on 127.0.0.1 by default, so only processes on the same machine can reach it. To accept connections from other machines or containers, bind explicitly and protect the port:
# Startup-key mode: callers must present the token (the server refuses to start without one)
export MCP_AUTH_TOKEN=$(openssl rand -hex 32)
npx @cryptoapis-io/mcp-address-history --transport http --host 0.0.0.0 --port 3000 --api-key YOUR_API_KEY \
--allowed-hosts mcp.internal.example
# Clients send: Authorization: Bearer $MCP_AUTH_TOKEN
# Per-request key mode: no startup key, every request must carry the caller's own x-api-key
npx @cryptoapis-io/mcp-address-history --transport http --host 0.0.0.0 --port 3000--allowed-hosts restricts the Host header (DNS rebinding protection) when not bound to loopback. Prefer MCP_AUTH_TOKEN over --auth-token: command-line arguments are visible in the process list.
Stdio transport always requires an API key at startup.
Warning: Making requests without a valid API key — or with an incorrect one — may result in your IP being banned from the Crypto APIs ecosystem. Always ensure a valid API key is configured before starting any server.
Crypto APIs provides an official remote MCP server with all tools available via HTTP Streamable transport at https://ai.cryptoapis.io/mcp. Pass your API key via the x-api-key header — no installation required.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.