Should you give an MCP server your wallet private key?
Of 87 MCP servers with a published Sato Check reading, 30 take a key (16 read it, 14 ask in setup); 11 have a planted-key run with none seen leaving; 4 list an action that can sign or send funds, as of 2026-10-22.
- Answered from live data2026-10-22
Also asked as Is it okay to give an MCP server my wallet private key?
Readings counted per MCP server within each question. The same server appears under all three questions, so the counts are never added across them. A reading describes what the code does with a key on one version and date; it is not a rating of the server, and a key that stays on your machine and a key sent to another host are different cases. 87 of the 220 MCP servers in the directory have a published reading. A server with no published reading is unknown, not clear. Each reading describes one version on one date, each is counted once, and "no private-key read found" is not "not there". 7 of these readings were reviewed by a person at that version; the rest are automated. 76 of these versions have not yet been run with a planted test key. A reading where a planted test key was seen leaving is not listed here (the maintainer is told privately first), so these counts cover the rows on this list, not every MCP server.
| Question | What the published readings show | MCP servers |
|---|---|---|
| Does it take your key? | Read private-key material in their code | 16 |
| Does it take your key? | Ask for a key or seed phrase in setup; no read of it traced in the code | 14 |
| Does it take your key? | No private-key read found in what Sato Check read | 57 |
| Does your key leave? | A planted test key was run in a sandbox and not seen leaving | 11 |
| Does your key leave? | No planted-key run yet for this version | 76 |
| Can it move funds on its own? | List at least one action that can sign or send funds when called | 4 |
| Can it move funds on its own? | Tool list read; no such action found | 6 |
| Can it move funds on its own? | Tool list not read: unknown, not none | 77 |
How this was answeredShowHide
The rule "what-mcp-servers-do-with-your-keys" in lib/listicles.ts (an MCP listing with a Sato Score and a published Sato Check reading), read through publicCustodyReading() in lib/custodyListing.ts: the reading already public on the listing's own page, of one concrete version, never one that recorded a planted key leaving. Counted per reading by keyReadingCounts(), keyReadingProvenance() and keyReadingFunds() in lib/listicles.ts, the same folds the list's own opening uses. Describes what was read and run, with dates; not a rating, an audit or an endorsement. The question is asked in the words people use; the page makes no claim about it and counts what the readings show: servers that take a key, servers with a planted-key sandbox run, servers that list an action which can sign or send funds.
Every answer on this page is produced by one named function over Sato Hub's live records on the date shown. Nothing is typed by hand, no figure is carried over from a previous day, and an answer with nothing behind it says unknown rather than zero. The Sato Score measures how open, active and verifiable a project is — it is not a safety, quality or returns grade.
Go deeper
More questions
- How can I check what an MCP server or npm package can do with my keys before I install it?
- What does an MCP server do with my wallet key?
- Which crypto MCP servers have had their installation independently verified?
- What should I check before installing @raydium-io/raydium-sdk-v2?
- What should I check before installing @blockrun/mcp?
- What should I check before installing @goat-sdk/core?
Reference
QuestionsWhat people ask about this pageShowHide
SourcesWhere the data comes fromShowHide
Cite this pagePlain text, APA or BibTeXShowHide
Cite this page
Sato Hub. "Should you give an MCP server your wallet private key?." Sato Hub, updated 2026-10-22, accessed 2026-10-22. https://satohub.ai/answers/should-you-give-an-mcp-server-your-wallet-private-keyData last refreshed 2026-10-22; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0 and the machine-readable copy is linked in the page's Dataset metadata.