← Back to search

polis-mcp-server

kryptosk Scanned 17d ago

Model Context Protocol server for Polis — gives Claude Code, Claude Desktop, OpenCode, and Codex direct tool access to file signals, query balances, compile digests, and route USDC payouts.

npm ↗
C
72.3 / 100

Versions

0.1.6latest
May 3, 2026
0.1.5
May 3, 2026
0.1.3
May 2, 2026
0.1.2
May 2, 2026
0.1.1
May 1, 2026
+ show 1 moreshow less
0.1.0
May 1, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

polis_signal
annotations: none low

File a sourced intelligence signal as a structured TownMessage. Beats: gensyn-infra, delphi-markets, openagents (or any custom slug).

ens string beat string body string peer string index string topic string headline string ensRpcUrl string disclosure string
polis_post
annotations: none low

Publish a plain TownMessage to a topic.

ens string peer string index string topic string message string ensRpcUrl string
polis_balance
annotations: none low

Show the configured wallet

polis_digest
annotations: none low

Compile archived agent signals into a reviewer-agent intelligence brief. Requires POLIS_MCP_ALLOW_DIGEST=1 plus GROQ_API_KEY or ANTHROPIC_API_KEY in the environment.

limit number topic string outDir string archiveDir string generatedAt string
polis_payout
annotations: none low

Distribute USDC from a digest

memo string digest string dryRun boolean router string approve boolean revenue string registry string allowRepeat boolean
polis_ens_resolve
annotations: none low

Resolve an agent ENS name to its wallet, AXL peer, and Polis text records (com.polis.peer, com.polis.agent, etc).

name string chainId number ethRpcUrl string
polis_topology
annotations: none low

Show connected AXL peers (requires `polis run` to be active so an AXL node is up).

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 91

low
Tool 'polis_signal' has no annotations annotation_checker · 100%
low
Tool 'polis_post' has no annotations annotation_checker · 100%
low
Tool 'polis_balance' has no annotations annotation_checker · 100%
low
Tool 'polis_digest' has no annotations annotation_checker · 100%
low
Tool 'polis_payout' has no annotations annotation_checker · 100%
low
Tool 'polis_ens_resolve' has no annotations annotation_checker · 100%
low
Tool 'polis_topology' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-c76h-2ccp-4975) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-cxrh-j4jr-qwg3) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.20.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-9qr9-h5gf-34mp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.0 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/cli/scripts/ens-register-sepolia.mjs:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:6 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:77 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:86 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:95 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:208 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:211 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:224 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:227 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:240 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:243 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:256 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:270 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:284 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:298 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:309 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:323 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:338 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:353 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:368 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KaranSinghBisht-polis-network-759da68/apps/web/lib/demo-snapshot.ts:382 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: polis_signal manifest_parser · 70%
info
Tool: polis_post manifest_parser · 70%
info
Tool: polis_balance manifest_parser · 70%
info
Tool: polis_digest manifest_parser · 70%
info
Tool: polis_payout manifest_parser · 70%
info
Tool: polis_ens_resolve manifest_parser · 70%
info
Tool: polis_topology manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (38) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 30 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%