Findings & checks · 1 flagged
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · src/adapter/okx-dex/okx-dex-offline-data.json
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
- Decode the base64 string and confirm it is not an instruction directed at the agent.
- Move any legitimate binary or signature data into a dedicated file (
*.sig,SIGNATURES) outside the documentation.
Trace & refs
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Crypto Exchange SDK Documentation MCP
A Model Context Protocol (MCP) service designed to help developers easily access documentation when integrating with cryptocurrency exchange APIs. This tool provides comprehensive offline documentation for multiple cryptocurrency exchanges, making it convenient to query API methods and usage information without requiring an internet connection.
Features
- Query available methods from cryptocurrency exchange SDKs
- Retrieve detailed documentation for specific methods
- Offline documentation - all documentation is available offline, no internet connection required
<img width="400" height="200" alt="Image" src="https://github.com/user-attachments/assets/78bdddc3-ff50-404e-99f7-123d37df411c" />
<img width="400" height="200" alt="Image" src="https://github.com/user-attachments/assets/f2b47d73-c788-4db6-8883-761a41a0cad9" />
Currently Supported Exchanges
| Exchange SDK | Status |
|---|---|
| Gate.io SDK Docs | ✅ |
| Bybit SDK Docs | ✅ |
| Binance SDK Docs WIP | ✅ |
| Bitget SDK Docs WIP | ✅ |
| OKX SDK Docs | ✅ |
| OKX DEX | ✅ |
Configuration
{
"mcpServers": {
"crypto-exchange-mcp": {
"command": "npx",
"args": ["-y", "crypto-exchange-mcp@latest"]
}
}
}Usage
This MCP service provides the following tools for each exchange:
Gate.io
gate_methods- Get all API method lists and related documentation supported by Gate Exchange SDKgate_method_detail- Query detailed usage information for specific API methods in Gate Exchange SDK
OKX
okx_methods- Get all API method lists and related documentation supported by OKX Exchange SDKokx_method_detail- Query detailed usage information for specific API methods in OKX Exchange SDK
OKX DEX
okx_dex_api_methods- Get all API method lists and related documentation supported by OKX DEX APIokx_dex_api_method_detail- Query detailed usage information for specific API methods in OKX DEX API
Bybit
bybit_methods- Get all API method lists and related documentation supported by Bybit Exchange SDKbybit_method_detail- Query detailed usage information for specific API methods in Bybit Exchange SDK
Binance
binance_methods- Get all API method lists and related documentation supported by Binance Exchange SDKbinance_method_detail- Query detailed usage information for specific API methods in Binance Exchange SDK
Bitget
bitget_methods- Get all API method lists and related documentation supported by Bitget Exchange SDKbitget_method_detail- Query detailed usage information for specific API methods in Bitget Exchange SDK
Architecture
The service is designed with extensibility in mind, making it easy to add support for new exchanges in the future. Each exchange is implemented as an adapter following a common interface, making it simple to add support for new exchanges.
Requirements
- Node.js >= 22
Development
# Install dependencies
pnpm installBuild the project
pnpm run buildDevelopment mode (watch for changes)
pnpm run devTest with MCP inspector
pnpm run inspectGenerate offline data for exchanges
pnpm run generateOfflineData
Contributing
Contributions are welcome! If you'd like to add support for a new exchange, please follow the adapter pattern established in the codebase.
License
MIT