Hive Mcp Wallet — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hive Mcp Wallet (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The first wallet where the agent IS the account holder.
Public MCP server for HiveWallet — the agent-native wallet primitive in the Hive Civilization stack. Tools provision DID-as-holder wallets, transfer USDC, mint HiveDNA 3-proof receipts (SHOD + spectral-ZK + CTEF, Ed25519-signed), and verify receipts or whole chains offline. Real rails — USDC on Base — no mocks.
https://hive-mcp-wallet.onrender.com/mcphive-wallet.onrender.com → hivebank.onrender.com0x15184Bf50B3d3F52b60434f8942b7D52F2eB436E| Tool | Description |
|---|---|
wallet_info | Verifier public key, supported proofs, backend versions. Free. |
wallet_provision | Create a fresh agent-DID wallet. The DID is the account holder. |
wallet_transfer | Move USDC between DIDs, mint a HiveDNA 3-proof receipt. |
wallet_verify | Public verify of a receipt — Ed25519 sig + body hash + CTEF recompute. |
wallet_chain | Walk a DID's full receipt chain, return signed integrity statement. |
The receipt is a separate, signed artifact (not just a transaction log entry):
verify_url published in the responsePublic key travels with the receipt. A regulator with the receipt and the published key can verify offline without trusting the operator.
| Tool | Backend route |
|---|---|
wallet_info | GET /info (https://hive-wallet.onrender.com) |
wallet_provision | POST /provision |
wallet_transfer | POST /transfer |
wallet_verify | GET /verify/:receipt_id (no auth, public) |
wallet_chain | GET /chain/:did (no auth, public) |
{
"mcpServers": {
"hive-wallet": {
"transport": "streamable-http",
"url": "https://hive-mcp-wallet.onrender.com/mcp"
}
}
}curl -s -X POST https://hive-mcp-wallet.onrender.com/mcp \
-H 'content-type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'npm install
PORT=3000 node server.js| Env | Default |
|---|---|
PORT | 3000 |
HIVE_WALLET_URL | https://hive-wallet.onrender.com |
HIVEBANK_URL | https://hivebank.onrender.com |
MIT
This MCP server is fully agent-callable — no accounts, no API keys, no human approval required.
| Property | Value |
|---|---|
| Discovery URL | https://hivemorph.onrender.com/.well-known/agent-card.json |
| MCP endpoint | https://hive-mcp-gateway.onrender.com/mcp (JSON-RPC 2.0 / MCP 2024-11-05) |
| x402 pricing | https://hivemorph.onrender.com/v1/x402/pricing |
| Payment | USDC on Base 8453 via x402 |
| Treasury | 0x15184Bf50B3d3F52b60434f8942b7D52F2eB436E |
| DID | did:hivemorph:w2loren:0x6b11b1bcaf253c |
| Hive site | thehiveryiq.com |
# 1. Get x402 quote (free)
curl -X POST https://hivemorph.onrender.com/v1/x402/quote \
-H 'Content-Type: application/json' \
-d '{"agent_did":"did:example:agent","profile":"standard"}'
# 2. Settle USDC on Base 8453 (ERC-681 URI in quote response)
# 3. Call with access token
curl -X POST https://hive-mcp-gateway.onrender.com/mcp \
-H 'Content-Type: application/json' \
-H 'X-Hive-Access: <token_from_step_1>' \
-d '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}'~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.