← Back to search

io.github.vdappdev2/address

vdappdev2 Scanned 11d ago

MCP server for defining Verus currencies — tokens, fractional baskets, centralized, ERC-20 mapped

D
53 / 100

Versions

0.1.7latest
May 10, 2026
0.1.6
May 10, 2026
0.1.5
Mar 25, 2026
0.1.4
Mar 24, 2026
0.1.3
Mar 24, 2026
+ show 3 moreshow less
0.1.2
Mar 16, 2026
0.1.1
Mar 16, 2026
0.1.0
Mar 16, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 49

status
annotations: none low

Check registry freshness and daemon reachability. Use this to verify chain health before starting a workflow, or to debug why calls to other MCPs are failing. Without a chain parameter, returns an overview of all registered chains. With a chain parameter, returns detailed status for that specific chain.

chain string
getinfo
annotations: none low

Get blockchain and node information for a running chain. Returns version, block height, connections, difficulty, sync status, and fee configuration. Use this to check whether a daemon is running and synced before performing operations on that chain.

chain string
getwalletinfo
annotations: none low

Get wallet state for a running chain. Returns balances (confirmed, unconfirmed, immature, staking-eligible), reserve currency balances, transaction count, and key pool status. Use this for a quick overview of wallet health and native + reserve currency holdings. Note: reserve_balance is an object keyed by currency name, showing all non-native currencies held in the wallet.

chain string
help
annotations: none low

Get daemon documentation for any RPC command. With no command argument, returns a list of all available RPCs grouped by category. With a command name, returns detailed usage including parameters, types, and examples. Use this when an agent needs to understand an RPC that isn\

chain string command string
getblockcount
annotations: none low

Get the current block count (height of the longest chain). Returns a single number — the most lightweight way to check the current block height. Use this for polling block progress, such as waiting for a name commitment to confirm before calling registeridentity.

chain string
getcurrency
annotations: none low

Get the full definition and current state of a currency. Returns the currency\

chain string currencyname string
refresh_chains
annotations: none low

Re-run chain discovery and rewrite the chain registry file. Call this after starting a new daemon, stopping a daemon, or when the registry appears stale. Discovery scans OS-appropriate data directories for .conf files, parses them, and calls getinfo on each discovered chain to confirm it\

stop
annotations: none low

Stop a running daemon. This shuts down the daemon process for the specified chain entirely — ALL connected clients, MCP servers, CLI users, and applications connected to this daemon will lose connectivity. This is not a per-session disconnect; it terminates the daemon. After stopping, the chain will no longer be reachable. Consider calling refresh_chains after stopping so other MCPs see the updated state.

chain string reason string
verusd
annotations: none low

Start a Verus daemon instance. This is a system command that spawns a new process — it is NOT an RPC call to an existing daemon. The daemon runs independently of this MCP server (detached process). After starting, the tool waits briefly and verifies the daemon launched successfully via getinfo. Call refresh_chains after a successful start so other MCPs can discover the new daemon.

chain string bootstrap boolean
sendrawtransaction
annotations: none low

Broadcast a signed raw transaction to the network. Takes a hex-encoded signed transaction and submits it to the local node, which relays it to the network. Returns the transaction hash (txid) on success. This is the companion to definecurrency — definecurrency returns a signed hex that must be broadcast here. Also used for any pre-signed transaction hex.

chain string hexstring string allowhighfees boolean
signrawtransaction
annotations: none low

Sign inputs of a raw transaction. Takes a hex-encoded transaction and signs it with keys available in the wallet (or with explicitly provided private keys). Returns the signed hex and whether all inputs are fully signed. Use this for multisig workflows where multiple parties need to sign. For definecurrency in the normal single-signer case, the hex is returned already signed — signrawtransaction is not needed.

txid string vout number chain string amount number hexstring string sighashtype string redeemScript string scriptPubKey string
getcurrencybalance
annotations: none low

Get multi-currency balances for a specific address. Returns all currency balances held at the address, including the native chain currency and any reserve/token currencies. Supports transparent addresses, private (z) addresses, VerusIDs, and wildcard patterns. Use this for detailed per-address multi-currency holdings. For a quick overview of the wallet\

chain string address string minconf number currency string friendlynames boolean includeshared boolean
getcurrencyconverters
annotations: none low

Find fractional basket currencies that can convert between specified currencies. Returns all baskets that hold the listed currencies as reserves, along with their current state (reserves, prices, conversion volumes). Use this to discover conversion paths before calling estimateconversion or sendcurrency with convertto. Two input modes: simple (pass currency names) or advanced (pass a query object with target conversion details).

chain string
estimateconversion
annotations: none low

Estimate the output of converting one currency to another, accounting for pending conversions, fees, and slippage. Does not broadcast a transaction — this is a read-only estimate. Use this before sendcurrency with convertto to preview the expected output. Can estimate a single conversion or an array of conversions using the same basket. IMPORTANT: when both source and destination currencies are reserves of a fractional basket (neither is the basket itself), you MUST specify

via string chain string amount number currency string convertto string preconvert boolean
listcurrencies
annotations: none low

List and search currencies registered on the blockchain. Returns an array of currency definitions with their current state. Supports filtering by launch state, system type, source system, and converter reserves. Without a query object, returns all currencies on the local chain. Use filters when possible — unfiltered queries on mainnet can return very large result sets.

chain string endblock number startblock number
z_getoperationstatus
annotations: none low

Check the status of async operations. Returns status, result, and timing for one or more operations. Operations remain in memory after completion — call this to retrieve results. This is the companion tool to sendcurrency, which returns an operation ID that must be polled here to get the transaction ID. Without operationids, returns all operations known to the node.

chain string
gettransaction
annotations: none low

Get detailed information about a wallet transaction by transaction ID. Returns amounts, confirmations, block info, and detailed input/output breakdowns including reserve transfers and multi-currency details. The transaction must be in the node\

txid string chain string includewatchonly boolean
z_getnewaddress
annotations: none low

Generate a new shielded Sapling address (zs-address) for private transactions. Use this to create addresses for identity privateaddress fields or private sends. Each call generates a unique shielded address.

chain string
listtransactions
annotations: none low

List recent wallet transactions with pagination. Returns an array of transactions including sends, receives, and multi-currency operations. Each entry includes amounts, confirmations, block info, and — for multi-currency transactions — token amounts and reserve output details. Results are returned most-recent-last.

from number chain string count number includewatchonly boolean
sendcurrency
annotations: none low

Send, convert, or cross-chain transfer currency. This is the primary tool for moving value on Verus. Supports simple sends, currency conversions through fractional baskets, cross-chain transfers, currency/ID exports, minting, burning, and data storage. Returns an operation ID (opid) — poll z_getoperationstatus with the opid to check for completion and get the resulting transaction ID. If returntxtemplate is true, returns the raw transaction template instead of broadcasting. IMPORTANT: when converting between two reserve currencies (neither is the basket itself), you MUST include

via string burn boolean memo string chain string amount number address string minconf number mintnew boolean currency string exportid boolean exportto string refundto string convertto string feeamount number preconvert boolean feecurrency string fromaddress string exportcurrency boolean returntxtemplate boolean addconversionfees boolean
definecurrency
annotations: none low

Define a new currency on the blockchain. Creates a signed transaction that defines the currency — the transaction is NOT broadcast automatically. The returned `hex` field must be passed as the `hexstring` parameter to sendrawtransaction (in chain-mcp) to actually launch the currency. Supports simple tokens (options: 32), fractional basket currencies (options: 33), centralized tokens (proofprotocol: 2), ID control tokens (options: 2080), and Ethereum ERC-20 mapped tokens (proofprotocol: 3). A VerusID with the same name must exist, be controlled by the wallet, and have sufficient funds to pay the definition fee. Only root IDs can define currencies (except ID control tokens, which subIDs can also define). After broadcasting, wait for the preconversion timeframe (minimum 20 blocks), then verify with getcurrency (chain-mcp). FEE DISCOVERY: Call getcurrency (chain-mcp) on the chain\

chain string
getidentity
annotations: none low

Look up a VerusID by name or i-address. Returns the identity\

chain string height number txproof boolean identity string txproofheight number
getidentitycontent
annotations: none low

Get identity content/data with optional VDXF key filter and height range. Returns the cumulative content state — all content across all updates within the specified range. Unlike getidentityhistory, this does not return per-revision snapshots. Use this to read structured data stored on an identity (profiles, timestamps, application data) without needing to process the full revision history.

chain string vdxfkey string identity string txproofs boolean heightend number heightstart number keepdeleted boolean txproofheight number
getidentityhistory
annotations: none low

Get the full revision history of a VerusID. Returns an array of identity snapshots, one per update transaction. Each entry shows the identity state as it was set in that specific transaction, along with the block hash, height, and transaction details. Use this to audit changes to an identity over time — primary address changes (transfers), content updates, authority changes, etc. Note: each history entry\

chain string identity string txproofs boolean heightend number heightstart number txproofheight number
getvdxfid
annotations: none low

Get the VDXF key ID from a URI string. Converts a human-readable VDXF URI (e.g.,

chain string uint256 string vdxfkey string vdxfuri string indexnum number
listidentities
annotations: none low

List VerusIDs in the local wallet. Returns all identities that this wallet can spend for, sign for, or watch. Use this to discover which identities are available before performing identity operations. By default includes identities we can spend for and sign for, but not watch-only.

chain string includecansign boolean includecanspend boolean includewatchonly boolean
registernamecommitment
annotations: none low

Step 1 of identity registration. Creates a name commitment transaction that reserves a name without revealing it. The commitment hides the name itself while ensuring miners cannot front-run the registration. After this tool succeeds, wait 1 block before calling registeridentity (step 2). The commitment data is saved to disk so it persists across conversations — if a session ends before registration, the next session can pick up the commitment. Names must not have leading, trailing, or multiple consecutive spaces and must not include: \\ / : * ?

name string chain string sourceoffunds string controladdress string parentnameorid string referralidentity string
registeridentity
annotations: none low

Step 2 of identity registration. Uses a confirmed name commitment to register the identity on-chain. The commitment must have been mined (wait 1 block after registernamecommitment). The tool checks for saved commitment data from a previous registernamecommitment call — if available, the agent does not need to pass the commitment details manually. On successful registration, the saved commitment file is cleaned up. IDENTITY DEFINITION: Keep it minimal — only include fields you are explicitly setting to non-default values. Omit revocationauthority/recoveryauthority to default to self. TIMELOCK: Do NOT include timelock in the identity JSON unless you deliberately intend to set an absolute block height lock. Omitting timelock defaults to 0 (unlocked). To configure timelocks safely after registration, use setidentitytimelock which provides setunlockdelay and unlockatblock controls. Setting a timelock value here creates an absolute block height lock that CANNOT be removed by updateidentity — only by revoke+recover. Omit privateaddress unless explicitly assigning one. SAFETY: NEVER set revocationauthority to another identity while leaving recoveryauthority as self — if the identity is revoked by the external authority, it cannot recover itself (recovery requires the recovery authority to act, and a revoked identity cannot authorize its own recovery). This bricks the identity. If delegating revocation, always also delegate recovery to a different identity. POSITIONAL PARAMS: The daemon RPC is positional: registeridentity jsonidregistration (returntx) (feeoffer) (sourceoffunds). If passing sourceoffunds, you must also fill returntx and feeoffer. FEE DISCOVERY: Call getcurrency (chain-mcp) on the parent currency to find idregistrationfees. For basket currencies, if idimportfees is a satoshi-scale value it encodes a reserve currency index: 0.00000000 = first reserve (index 0), 0.00000001 = second reserve (index 1), etc. The idregistrationfees amount is then denominated in that reserve currency — calculate how much of the basket currency equals that amount at current conversion prices. Example: idregistrationfees=15 + idimportfees=0.00000001 (index 1=USD) means 15 USD worth of the basket currency. Default idimportfees (e.g., 0.02) means the fee is in the basket currency itself, but defaults may differ per chain — check getcurrency to verify. FEE SHORTCUT: If unsure of the exact fee (especially with reserve-denominated fees and referral discounts), pass feeoffer=0.00000001 — the daemon will reject and return the minimum required fee in the error message, then retry with that amount.

chain string
updateidentity
annotations: none low

Update an identity\

chain string feeoffer number returntx boolean tokenupdate boolean sourceoffunds string
revokeidentity
annotations: none low

Revoke an identity, making it unable to spend funds or sign transactions. Only the revocation authority (or token revocation authority) can perform this action. A revoked identity can only be restored by the recovery authority using recoveridentity. This is a safety mechanism — use it if the identity\

chain string feeoffer number identity string returntx boolean tokenrevoke boolean sourceoffunds string
recoveridentity
annotations: none low

Recover a revoked or compromised identity. Only the recovery authority (or token recovery authority) can perform this. Typically used to set new primary addresses after a key compromise, effectively transferring control to new keys. Pass the full identity definition with the desired recovery state (new primary addresses, etc.). Always include

chain string feeoffer number returntx boolean tokenrecover boolean sourceoffunds string
setidentitytimelock
annotations: none low

Set or modify a timelock on a VerusID. Timelocking restricts when an identity can spend funds on this chain. This only affects the identity on the current chain. Two modes:\n\n- setunlockdelay: Set a delay (in blocks) that must pass after an unlock request. Sets flags=2 (delay lock active), timelock=N (the delay in blocks). The identity cannot spend until an unlock is triggered and the delay passes.\n\n- unlockatblock: Set an absolute block height at which the identity unlocks. When used with unlockatblock=0 on a delay-locked identity (flags=2), it TRIGGERS the unlock countdown — the daemon converts the delay into an absolute block height (approximately current_block + delay) and clears the delay flag. This is the standard way to initiate unlocking a delay-locked identity. unlockatblock=0 does NOT work on absolute block height locks (flags=0, timelock > 0) — those can only be removed by revoke+recover.\n\nExactly one of unlockatblock or setunlockdelay must be specified.\n\nTIMELOCK WORKFLOW: 1) Set delay: setunlockdelay=N → identity locked with N-block delay. 2) Trigger unlock: unlockatblock=0 → countdown starts, identity unlocks at ~current_block+N. 3) Wait for block to pass. 4) Identity can spend again. To cancel a countdown (e.g., attacker triggered unlock), the revocation authority can revoke — revocation destroys the countdown entirely. Then recover to restore the identity with no timelock.\n\nREMOVING TIMELOCKS: Delay locks (flags=2) can be cleared by revoke+recover (omit timelock in recovery JSON). Absolute locks (flags=0, timelock > 0) can ONLY be cleared by revoke+recover. updateidentity CANNOT modify or remove any timelock once set.

chain string feeoffer number identity string returntx boolean sourceoffunds string unlockatblock number setunlockdelay number
validateaddress
annotations: none low

Validate an address and return detailed information about it. Returns whether the address is valid, whether it belongs to this wallet (ismine), the address type, and associated metadata. Use this to verify addresses before sending funds, or to check if a given address is controlled by the local wallet.

chain string address string
z_validateaddress
annotations: none low

Validate a shielded (Sapling) z-address and return detailed information. Returns whether the address is valid, whether it belongs to this wallet (ismine), the address type, and key components (payingkey, transmissionkey, diversifier). Use this to verify z-addresses before sending funds or data, or to check if a z-address is controlled by the local wallet. Complements validateaddress, which only works for transparent (R/i) addresses.

chain string address string
getaddressesbyaccount
annotations: none low

List all transparent addresses for an account. In Verus, the default account is

chain string account string
z_listaddresses
annotations: none low

List all shielded (Sapling) addresses in the wallet. Returns an array of zs-addresses. Use this to see all shielded addresses available for private transactions, or to find an existing shielded address for use as an identity privateaddress.

chain string includeWatchonly boolean
getnewaddress
annotations: none low

Generate a new transparent (R-address) for receiving payments. Use this to create fresh addresses for identity primaryaddresses, change addresses, or destination addresses. Each call generates a unique address from the wallet\

chain string
getoffers
annotations: none low

Get all open offers for a specific currency or identity. Returns both buy and sell offers — offers of the asset and offers for the asset. Use iscurrency to switch between currency offers and identity offers. Response keys are dynamic and generated by the daemon based on the queried asset — parse them dynamically. Use this to discover what\

chain string withtx boolean iscurrency boolean currencyorid string
listopenoffers
annotations: none low

List open offers from the current wallet. Shows what this wallet has offered on-chain. Can filter by expired/unexpired status. Use this to check the status of offers the agent has created, or to find offers that need to be closed.

chain string expired boolean unexpired boolean
makeoffer
annotations: none low

Create a new on-chain atomic swap offer. Offers are fully decentralized — no intermediary, no escrow. The offer transaction locks the offered asset on-chain until the offer is taken, expires, or is closed. Supports currency-for-currency, currency-for-identity, identity-for-currency, and identity-for-identity swaps. For currency offers, use {

chain string returntx boolean feeamount number fromaddress string expiryheight number changeaddress string
takeoffer
annotations: none low

Accept an existing on-chain offer. Creates and posts a transaction that atomically executes the exchange — both sides swap in a single transaction, or neither does. The offer transaction must have at least 1 confirmation before it can be taken. Before taking, verify the offer hasn\

closeoffers
annotations: none low

Close (cancel) open offers and reclaim the locked funds. Returns null on success. Always closes expired offers automatically, even if no parameters are given. When specific offer txids are provided, closes only those offers. Use this to cancel offers that are no longer wanted, or as periodic cleanup to reclaim funds from expired offers.

chain string destination string privatefundsdestination string
z_listreceivedbyaddress
annotations: none low

List transactions and data received at a shielded (z) address. Data transactions appear with amount: 0 and a memo containing the data descriptor (a JSON object keyed by the VDXF datadescriptor address). Use this as step 1 of the data retrieval pipeline: list received data, then pass the descriptor to decryptdata. Value transactions appear with their amount and standard memo.

chain string address string minconf number
decryptdata
annotations: none low

Decrypt data stored on-chain. Accepts a data descriptor (from z_listreceivedbyaddress memo), viewing key (EVK or IVK), and optional txid. With retrieve: true, the daemon fetches and decrypts the referenced data. Always pass the EVK (from z_exportviewingkey) — without it the daemon returns still-encrypted data even if the wallet holds the spending key. For encrypted identity content, pass the original encrypted DataDescriptor from signdata (not the on-chain version, which may have modified flags). Alternatively, use iddata to query and decrypt identity content by identityid and vdxfkey.

evk string ivk string txid string chain string getlast boolean vdxfkey string retrieve boolean endheight number identityid string startheight number
z_exportviewingkey
annotations: none low

Export the extended viewing key (EVK) for a shielded address. The viewing key allows decryption of all data encrypted to this z-address without granting spending authority. Share it to grant read-only access. Pass the returned key as the evk parameter to decryptdata.

chain string address string
z_viewtransaction
annotations: none low

View detailed shielded transaction information including spends and outputs for a z-transaction in the wallet. Shows addresses, amounts, memos, and output indices. Useful for inspecting data-carrying transactions to understand their structure before decryption.

txid string chain string
signdata
annotations: none low

Sign data with a VerusID or transparent address. Generates a hash of the provided data and signs it. Supports multiple input modes (message, file, hex, base64, pre-computed hash, vdxfdata) and hash algorithms (sha256, sha256D, blake2b, keccak256). Can sign a single piece of data or build a Merkle Mountain Range (MMR) over multiple items. For multi-sig identities, pass an existing partial signature to accumulate signatures. Can also encrypt data to a z-address via encrypttoaddress — returns both plaintext and encrypted versions with an SSK for selective disclosure. Supports vdxfdata input — as a string (equivalent to message) or as a JSON object (VDXF binary serialization, producing a different hash). Use the object form to sign data in the same canonical format as on-chain identity contentmultimap entries. Available in read-only mode — signing does not spend funds or change blockchain/wallet state.

chain string address string message string datahash string filename string hashtype string createmmr boolean signature string messagehex string mmrhashtype string prefixstring string messagebase64 string encrypttoaddress string
verifysignature
annotations: none low

Verify a signature produced by signdata. Checks that the signature is valid for the given data and identity/address. Returns signaturestatus:

chain string address string message string datahash string filename string hashtype string signature string messagehex string checklatest boolean prefixstring string messagebase64 string
z_importviewingkey
annotations: none low

Import a viewing key to enable decryption of data encrypted to another z-address. Grants read-only access without spending authority. The key can be obtained from z_exportviewingkey. After import, decryptdata can decrypt data encrypted to that address without passing the key explicitly. Note: rescan can take minutes if scanning a large block range.

vkey string chain string startHeight number

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 116

low
Tool 'getinfo' has no annotations annotation_checker · 100%
low
Tool 'getwalletinfo' has no annotations annotation_checker · 100%
low
Tool 'help' has no annotations annotation_checker · 100%
low
Tool 'getblockcount' has no annotations annotation_checker · 100%
low
Tool 'getcurrency' has no annotations annotation_checker · 100%
low
Tool 'status' has no annotations annotation_checker · 100%
low
Tool 'refresh_chains' has no annotations annotation_checker · 100%
low
Tool 'stop' has no annotations annotation_checker · 100%
low
Tool 'verusd' has no annotations annotation_checker · 100%
low
Tool 'sendrawtransaction' has no annotations annotation_checker · 100%
low
Tool 'signrawtransaction' has no annotations annotation_checker · 100%
low
Tool 'getcurrencybalance' has no annotations annotation_checker · 100%
low
Tool 'getcurrencyconverters' has no annotations annotation_checker · 100%
low
Tool 'estimateconversion' has no annotations annotation_checker · 100%
low
Tool 'listcurrencies' has no annotations annotation_checker · 100%
low
Tool 'z_getoperationstatus' has no annotations annotation_checker · 100%
low
Tool 'gettransaction' has no annotations annotation_checker · 100%
low
Tool 'listtransactions' has no annotations annotation_checker · 100%
low
Tool 'sendcurrency' has no annotations annotation_checker · 100%
low
Tool 'definecurrency' has no annotations annotation_checker · 100%
low
Tool 'getidentity' has no annotations annotation_checker · 100%
low
Tool 'getidentitycontent' has no annotations annotation_checker · 100%
low
Tool 'getidentityhistory' has no annotations annotation_checker · 100%
low
Tool 'getvdxfid' has no annotations annotation_checker · 100%
low
Tool 'listidentities' has no annotations annotation_checker · 100%
low
Tool 'registernamecommitment' has no annotations annotation_checker · 100%
low
Tool 'registeridentity' has no annotations annotation_checker · 100%
low
Tool 'updateidentity' has no annotations annotation_checker · 100%
low
Tool 'revokeidentity' has no annotations annotation_checker · 100%
low
Tool 'recoveridentity' has no annotations annotation_checker · 100%
low
Tool 'setidentitytimelock' has no annotations annotation_checker · 100%
low
Tool 'validateaddress' has no annotations annotation_checker · 100%
low
Tool 'z_validateaddress' has no annotations annotation_checker · 100%
low
Tool 'getaddressesbyaccount' has no annotations annotation_checker · 100%
low
Tool 'z_listaddresses' has no annotations annotation_checker · 100%
low
Tool 'getnewaddress' has no annotations annotation_checker · 100%
low
Tool 'z_getnewaddress' has no annotations annotation_checker · 100%
low
Tool 'getoffers' has no annotations annotation_checker · 100%
low
Tool 'listopenoffers' has no annotations annotation_checker · 100%
low
Tool 'makeoffer' has no annotations annotation_checker · 100%
low
Tool 'takeoffer' has no annotations annotation_checker · 100%
low
Tool 'closeoffers' has no annotations annotation_checker · 100%
low
Tool 'z_listreceivedbyaddress' has no annotations annotation_checker · 100%
low
Tool 'decryptdata' has no annotations annotation_checker · 100%
low
Tool 'z_exportviewingkey' has no annotations annotation_checker · 100%
low
Tool 'z_viewtransaction' has no annotations annotation_checker · 100%
low
Tool 'signdata' has no annotations annotation_checker · 100%
low
Tool 'verifysignature' has no annotations annotation_checker · 100%
low
Tool 'z_importviewingkey' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: getinfo manifest_parser · 70%
info
Tool: z_getnewaddress manifest_parser · 70%
info
Tool: getwalletinfo manifest_parser · 70%
info
Tool: help manifest_parser · 70%
info
Tool: getblockcount manifest_parser · 70%
info
Tool: getcurrency manifest_parser · 70%
info
Tool: status manifest_parser · 70%
info
Tool: refresh_chains manifest_parser · 70%
info
Tool: stop manifest_parser · 70%
info
Tool: verusd manifest_parser · 70%
info
Tool: sendrawtransaction manifest_parser · 70%
info
Tool: signrawtransaction manifest_parser · 70%
info
Tool: getcurrencybalance manifest_parser · 70%
info
Tool: getcurrencyconverters manifest_parser · 70%
info
Tool: estimateconversion manifest_parser · 70%
info
Tool: listcurrencies manifest_parser · 70%
info
Tool: z_getoperationstatus manifest_parser · 70%
info
Tool: gettransaction manifest_parser · 70%
info
Tool: listtransactions manifest_parser · 70%
info
Tool: sendcurrency manifest_parser · 70%
info
Tool: definecurrency manifest_parser · 70%
info
Tool: getidentity manifest_parser · 70%
info
Tool: getidentitycontent manifest_parser · 70%
info
Tool: getidentityhistory manifest_parser · 70%
info
Tool: getvdxfid manifest_parser · 70%
info
Tool: listidentities manifest_parser · 70%
info
Tool: registernamecommitment manifest_parser · 70%
info
Tool: z_listaddresses manifest_parser · 70%
info
Tool: getnewaddress manifest_parser · 70%
info
Tool: registeridentity manifest_parser · 70%
info
Tool: updateidentity manifest_parser · 70%
info
Tool: revokeidentity manifest_parser · 70%
info
Tool: recoveridentity manifest_parser · 70%
info
Tool: setidentitytimelock manifest_parser · 70%
info
Tool: validateaddress manifest_parser · 70%
info
Tool: z_validateaddress manifest_parser · 70%
info
Tool: getaddressesbyaccount manifest_parser · 70%
info
Tool: getoffers manifest_parser · 70%
info
Tool: listopenoffers manifest_parser · 70%
info
Tool: makeoffer manifest_parser · 70%
info
Tool: takeoffer manifest_parser · 70%
info
Tool: closeoffers manifest_parser · 70%
info
Tool: z_listreceivedbyaddress manifest_parser · 70%
info
Tool: decryptdata manifest_parser · 70%
info
Tool: z_exportviewingkey manifest_parser · 70%
info
Tool: z_viewtransaction manifest_parser · 70%
critical
Tool poisoning in 'sendcurrency': Directive language: 'you must' poisoning · 85%
info
Tool: signdata manifest_parser · 70%
info
Tool: verifysignature manifest_parser · 70%
info
Tool: z_importviewingkey manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (9) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'refresh_chains': Cross-tool sequencing directive poisoning · 85%
critical
Tool poisoning in 'verusd': Cross-tool sequencing directive poisoning · 85%
critical
Tool poisoning in 'estimateconversion': Directive language: 'you must' poisoning · 85%
critical
Tool poisoning in 'registeridentity': Directive language: 'you must' poisoning · 85%
info
SBOM generated: 6 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%