Uranium Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Uranium Mcp (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 3 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 3 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- BADGES:START -->
<img src="https://img.shields.io/badge/VS_Code-0098FF?style=flat-square&logo=visual-studio-code&logoColor=white" alt="Install in VS Code"> <img src="https://img.shields.io/badge/VS_Code_Insiders-24bfa5?style=flat-square&logo=visual-studio-code&logoColor=white" alt="Install in VS Code Insiders"> <img src="https://img.shields.io/badge/Cursor-000000?style=flat-square&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTggMEMzLjU4IDAgMCAzLjU4IDAgOFMzLjU4IDE2IDggMTZTMTYgMTIuNDIgMTYgOFMxMi40MiAwIDggMFpNOCAxNEM0LjY5IDE0IDIgMTEuMzEgMiA4UzQuNjkgMiA4IDJDOC41NSAyIDkuMDggMi4wOSA5LjU4IDIuMjRMOCA0TDEyIDhMOCAxMlY5TDUgMTJWNEw4IDdWNEw5LjU4IDIuMjRDMTIuODQgMy4yNCAxNSA1LjQgMTUgOEMxNSAxMS4zMSAxMS4zMSAxNCA4IDE0WiIgZmlsbD0id2hpdGUiLz4KPC9zdmc+" alt="Install in Cursor"> <img src="https://img.shields.io/badge/Goose-FFA500?style=flat-square&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTggMEMzLjU4IDAgMCAzLjU4IDAgOFMzLjU4IDE2IDggMTZTMTYgMTIuNDIgMTYgOFMxMi40MiAwIDggMFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPg==" alt="Install in Goose"> <img src="https://img.shields.io/badge/LM_Studio-7B68EE?style=flat-square&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTggMEwxNiA0VjEyTDggMTZMMCAxMlY0TDggMFoiIGZpbGw9IndoaXRlIi8+Cjwvc3ZnPg==" alt="Install in LM Studio"> <!-- BADGES:END -->
A Model Context Protocol (MCP) server for working with portal.uranium.pro - creating and managing NFT collections and assets. This server enables LLMs to interact with blockchain NFTs through a simple, structured interface.
<!-- // Generate using: node utils/generate-readme.js -->
First, install the Uranium MCP server with your client.
Standard config works in most of the tools:
{
"mcpServers": {
"uranium": {
"command": "npx",
"args": ["uranium-tools-mcp@latest"],
"env": {
"URANIUM_API_KEY": "your_api_key_here"
}
}
}
}<details> <summary>Claude Code</summary>
Use the Claude Code CLI to add the Uranium MCP server:
claude mcp add uranium npx uranium-tools-mcp@latestThen set your URANIUM_API_KEY when prompted. </details>
<details> <summary>Claude Desktop</summary>
Add to your Claude Desktop configuration file:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json~/.config/Claude/claude_desktop_config.json{
"mcpServers": {
"uranium": {
"command": "npx",
"args": ["uranium-tools-mcp@latest"],
"env": {
"URANIUM_API_KEY": "your_api_key_here"
}
}
}
}</details>
<details> <summary>Codex</summary>
Create or edit the configuration file ~/.codex/config.toml and add:
[mcp_servers.uranium]
command = "npx"
args = ["uranium-tools-mcp@latest"]
env = { URANIUM_API_KEY = "your_api_key_here" }For more information, see the Codex MCP documentation. </details>
<details> <summary>Cursor</summary>
#### Click the button to install:
<img src="https://cursor.com/deeplink/mcp-install-dark.svg" alt="Install in Cursor">
#### Or install manually:
Go to Cursor Settings -> MCP -> Add new MCP Server. Name it "uranium", use command type with the command npx uranium-tools-mcp@latest. Add environment variable URANIUM_API_KEY with your API key.
</details>
<details> <summary>Gemini CLI</summary>
Follow the MCP install guide, use the standard config above with your API key.
</details>
<details> <summary>Goose</summary>
#### Click the button to install:
#### Or install manually:
Go to Advanced settings -> Extensions -> Add custom extension. Name it "uranium", use type STDIO, and set the command to npx uranium-tools-mcp@latest. Add environment variable URANIUM_API_KEY with your API key. Click "Add Extension". </details>
<details> <summary>LM Studio</summary>
#### Click the button to install:
#### Or install manually:
Go to Program in the right sidebar -> Install -> Edit mcp.json. Use the standard config above with your API key. </details>
<details> <summary>opencode</summary>
Follow the MCP Servers documentation. For example in ~/.config/opencode/opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"uranium": {
"type": "local",
"command": [
"npx",
"uranium-tools-mcp@latest"
],
"env": {
"URANIUM_API_KEY": "your_api_key_here"
},
"enabled": true
}
}
}</details>
<details> <summary>Qodo Gen</summary>
Open Qodo Gen chat panel in VSCode or IntelliJ → Connect more tools → + Add new MCP → Paste the standard config above with your API key.
Click Save. </details>
<details> <summary>VS Code</summary>
#### Click the button to install:
<img src="https://img.shields.io/badge/VS_Code-VS_Code?style=flat-square&label=Install%20Server&color=0098FF" alt="Install in VS Code"> <img alt="Install in VS Code Insiders" src="https://img.shields.io/badge/VS_Code_Insiders-VS_Code_Insiders?style=flat-square&label=Install%20Server&color=24bfa5">
#### Or install manually:
Follow the MCP install guide, use the standard config above. You can also install the Uranium MCP server using the VS Code CLI:
# For VS Code
code --add-mcp '{"name":"uranium","command":"npx","args":["uranium-tools-mcp@latest"],"env":{"URANIUM_API_KEY":"your_api_key_here"}}'After installation, the Uranium MCP server will be available for use with your GitHub Copilot agent in VS Code. </details>
<details> <summary>Windsurf</summary>
Follow Windsurf MCP documentation. Use the standard config above with your API key.
</details>
#### Environment Variables
https://gw.urnm.pro#### Example Configuration
{
"mcpServers": {
"uranium": {
"command": "npx",
"args": ["uranium-tools-mcp@latest"],
"env": {
"URANIUM_API_KEY": "your_api_key_here"
// URANIUM_BASE_URL is optional, defaults to https://gw.urnm.pro
}
}
}
}#### Local Installation
If you prefer to install locally:
npm install -g uranium-tools-mcp
# or
pnpm add -g uranium-tools-mcp
# or
yarn global add uranium-tools-mcpThen use uranium-tools-mcp instead of npx uranium-tools-mcp@latest in the configuration.
<!--- Tools generated by utils/generate-tools-docs.js -->
This MCP server provides 4 main tools for NFT management:
<details> <summary><b>Collection Management</b></summary>
#### list_collections
#### create_collection
name (string, required): Collection name (3-30 characters, letters, numbers, and [_.-] symbols) [min length: 3, max length: 30]symbol (string, required): Collection symbol (3-30 characters, letters, numbers, and underscores) [min length: 3, max length: 30]type (string, enum: ERC721, ERC1155, required): Collection type: ERC721 (single NFTs) or ERC1155 (multi-token)</details>
<details> <summary><b>Asset Management</b></summary>
#### list_assets
contractId (string, optional): Filter assets by collection IDpage (number, optional): Page number (default: 1) [min: 1, default: 1]pageSize (number, optional): Number of assets per page (default: 20, max: 100) [min: 1, max: 100, default: 20]sortBy (string, optional): Sort field (default: createdAt) [default: "createdAt"]order (string, enum: asc, desc, optional): Sort order (default: asc) [default: "asc"]quickFilter (string, optional): Search text to filter assets by title#### create_asset
filePath (string, optional): Absolute path to the media file (for local files)fileData (string, optional): Base64 encoded file data (for Claude Desktop)fileName (string, optional): Original filename (required when using fileData)mimeType (string, optional): MIME type of the file (required when using fileData, e.g., 'image/png')contractId (string, required): ID of the collection to mint the asset intitle (string, required): Asset title (3-120 characters) [min length: 3, max length: 120]description (string, optional): Asset description (optional, max 255 characters) [max length: 255]location (string, optional): Location where the asset was created (optional, max 100 characters) [max length: 100]editions (number, optional): Number of editions (for ERC1155 collections only, 1-1000) [min: 1, max: 1000]shareWithCommunity (boolean, optional): Make the asset discoverable by the community (optional, default: false) [default: false]</details>
<!--- End of tools generated section -->
#### Building from Source
git clone https://github.com/xkelxmc/uranium-mcp.git
cd uranium-mcpnpm installnpm run build#### Development Commands
# Compile in watch mode
npm run dev
# Build for production
npm run build
# Start server locally
npm start
# Clean build directory
npm run clean#### Using MCP Inspector
Test your MCP server with the MCP Inspector:
# For installed version
npx @modelcontextprotocol/inspector uranium-tools-mcp
# For local development
npm run build:dev
npx @modelcontextprotocol/inspector node build/index.js#### Development Testing
# Test with stdio transport
npm run dev:stdio
# Test with HTTP transport
npm run dev:http
# Inspect with HTTP transport
npm run mcp:inspect#### Common Issues
https://gw.urnm.pro)src/
├── api/ # Complete copy of Uranium API from Raycast
├── utils/ # Utilities for validation, formatting, etc.
├── models/ # Upload primitives for working with files
├── tools/ # MCP tools
├── server.ts # MCP server configuration
├── index.ts # Entry point
└── config.ts # API and MCP configurationtodo
For issues and questions:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.