What does an MCP server do with my wallet key?
Of 87 MCP servers with a published Sato Check reading, 16 read private-key material in code (signing locally is what a wallet does), 14 ask for a key in setup and 57 show no key read found, as of 2026-10-22.
- Answered from live data2026-10-22
Also asked as Does an MCP server send my wallet private key anywhere?
One row per MCP server with a published Sato Check reading, ordered by Sato Score; no winner is declared. The readings are dated 2026-09-26 to 2026-10-22. 87 of the 220 MCP servers in the directory have one. A server with no published reading is unknown, not clear. Each reading describes one version on one date, each is counted once, and "no private-key read found" is not "not there". 7 of these readings were reviewed by a person at that version; the rest are automated. 76 of these versions have not yet been run with a planted test key. A reading where a planted test key was seen leaving is not listed here (the maintainer is told privately first), so these counts cover the rows on this list, not every MCP server. Showing 25 of 87.
| Server | Version read | Takes a key? | Key leaves? | Moves funds? | Looked at by |
|---|---|---|---|---|---|
| Hermes Agent | v0.19.0 · read 2026-09-29 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| BlockRun MCP | v0.54.7 · read 2026-10-21 | reads it | not run yet | tool list not read; its docs describe transactions | automated reading, not reviewed by a person |
| Skim | v0.2.5 · read 2026-10-02 | reads it | not seen leaving in a sandbox run | none found | automated reading, not reviewed by a person |
| OpenAI Codex | v0.162.1 · read 2026-10-10 | no read found | this version not run yet; an earlier one was | tool list not read | automated reading, not reviewed by a person |
| DexPaprika MCP Server | v2.9.2 · read 2026-10-22 | no read found | this version not run yet; an earlier one was | none found | automated reading, not reviewed by a person |
| Universal Contract AI Interface (UCAI) | v0.1.0 · read 2026-09-29 | reads it | not run yet | tool list not read | automated reading, not reviewed by a person |
| AlgoVault Quant Signal MCP | v1.31.1 · read 2026-10-05 | reads it | not run yet | none found | automated reading, not reviewed by a person |
| Zerion | v1.11.0 · read 2026-10-07 | asks for it in setup | not run yet | tool list not read; its docs describe transactions | automated reading, not reviewed by a person |
| Claude Code | v2.1.308 · read 2026-10-22 | no read found | this version not run yet; an earlier one was | tool list not read | automated reading, not reviewed by a person |
| BNB Chain MCP | v1.0.4 · read 2026-09-27 | reads it | not run yet | tool list not read | automated reading, not reviewed by a person |
| Lightning Wallet MCP | v1.9.0 · read 2026-10-11 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| Bitcoin MCP (Bortlesboat) | v0.5.2 · read 2026-09-29 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| Bybit Trading MCP | v2.1.25 · read 2026-10-22 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| AIBTC MCP Server | v1.76.0 · read 2026-10-15 | reads it | not run yet | tool list not read | automated reading, not reviewed by a person |
| Insumer MCP Server | v1.23.0 · read 2026-10-22 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| CoW MCP | v0.1.0 · read 2026-09-29 | no read found | not run yet | 3 actions can sign or send funds | automated reading, not reviewed by a person |
| Hedera MCP | v0.5.0 · read 2026-09-28 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| Daydreams | v4.0.99 · read 2026-10-21 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| Coinbase x402 Bazaar (Discovery API + MCP) | v1.59.0 · read 2026-10-17 | reads it | this version not run yet; an earlier one was | none found | automated reading, not reviewed by a person |
| Agent Skills Hub | v2.0.1 · read 2026-09-26 | no read found | not seen leaving in a sandbox run | tool list not read | a person, 2026-09-26 |
| VeChain MCP Server | v2.0.3 · read 2026-09-28 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| Jupiter Trading MCP + CLI | v0.10.1 · read 2026-10-02 | no read found | not seen leaving in a sandbox run | 27 actions can sign or send funds | automated reading, not reviewed by a person |
| Nodit MCP Server | v1.3.0 · read 2026-10-20 | no read found | not run yet | tool list not read | automated reading, not reviewed by a person |
| Arcadia MCP | v0.6.0 · read 2026-10-22 | asks for it in setup | this version not run yet; an earlier one was | 1 action can sign or send funds | automated reading, not reviewed by a person |
| PMXT | v2.54.0 · read 2026-09-26 | no read found | not seen leaving in a sandbox run | tool list not read | a person, 2026-09-26 |
How this was answeredShowHide
The rule "what-mcp-servers-do-with-your-keys" in lib/listicles.ts (an MCP listing with a Sato Score and a published Sato Check reading), read through publicCustodyReading() in lib/custodyListing.ts: the reading already public on the listing's own page, of one concrete version, never one that recorded a planted key leaving. Counted per reading by keyReadingCounts(), keyReadingProvenance() and keyReadingFunds() in lib/listicles.ts, the same folds the list's own opening uses. Describes what was read and run, with dates; not a rating, an audit or an endorsement.
Every answer on this page is produced by one named function over Sato Hub's live records on the date shown. Nothing is typed by hand, no figure is carried over from a previous day, and an answer with nothing behind it says unknown rather than zero. The Sato Score measures how open, active and verifiable a project is — it is not a safety, quality or returns grade.
Go deeper
More questions
- How can I check what an MCP server or npm package can do with my keys before I install it?
- Should you give an MCP server your wallet private key?
- Which crypto MCP servers have had their installation independently verified?
- What should I check before installing @raydium-io/raydium-sdk-v2?
- What should I check before installing @blockrun/mcp?
- What should I check before installing @goat-sdk/core?
Reference
QuestionsWhat people ask about this pageShowHide
SourcesWhere the data comes fromShowHide
Cite this pagePlain text, APA or BibTeXShowHide
Cite this page
Sato Hub. "What does an MCP server do with my wallet key?." Sato Hub, updated 2026-10-22, accessed 2026-10-22. https://satohub.ai/answers/what-does-an-mcp-server-do-with-my-wallet-keyData last refreshed 2026-10-22; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0 and the machine-readable copy is linked in the page's Dataset metadata.