@goplausible/algorand-mcp
mcp:npm:@goplausible/algorand-mcp · v4.4.4 · sha256:4a9b10d3db96 · as of 2026-11-10
- Does it take your key? declared
- It asks for a private key or seed phrase in its setup.
- The project says so — README, config, env list or tool description.
- Does your key leave? no evidence
- Not yet run — we have not run this version with planted test keys.
- No evidence line on file for this question yet.
- Can it move funds on its own? declared
- Unknown — we could not read what it exposes.
- The project says so — README, config, env list or tool description.
- What changed? traced
- Since 4.4.0: adds a request to algorand.org; adds a request to mainnet.analytics.tinyman.org; adds a request to raw.githubusercontent.com; ….
- Our static read of the published artifact found it.
Is this your project? Respond →Dispute this reading
Hosts contacted
| Host | When | Role | Evidence |
|---|---|---|---|
| algorand.co | code | other | traced |
| algorand.org | code | other | traced |
| api.nf.domains | code | other | traced |
| example.x402.goplausible.xyz | code | vendor | traced |
| explorer.perawallet.app | code | other | traced |
| facilitator.goplausible.xyz | code | vendor | traced |
| github.com | code | registry | traced |
| goplausible.com | code | vendor | traced |
| mainnet-api.algonode.cloud | code | rpc | traced |
| mainnet-idx.algonode.cloud | code | rpc | traced |
| mainnet.analytics.tinyman.org | code | rpc | traced |
| mainnet.api.perawallet.app | code | rpc | traced |
| platform.alphaarcade.com | code | other | traced |
| qrclaw.goplausible.xyz | code | vendor | traced |
| raw.githubusercontent.com | code | registry | traced |
| testnet-api.algonode.cloud | code | rpc | traced |
| testnet-idx.algonode.cloud | code | rpc | traced |
| testnet.analytics.tinyman.org | code | rpc | traced |
| tinyman.org | code | other | traced |
Evidence (21 lines)
- tracedT-hosts2026-11-10
algorand.co appears in shipped code (other).
dist/tools/utilityManager.js
- tracedT-hosts2026-11-10
algorand.org appears in shipped code (other).
vendor/tinyman-js-sdk/dist/index.js
- tracedT-hosts2026-11-10
api.nf.domains appears in shipped code (other).
dist/tools/apiManager/nfd/index.js
- tracedT-hosts2026-11-10
example.x402.goplausible.xyz appears in shipped code (vendor).
dist/tools/x402Manager.js
- tracedT-hosts2026-11-10
explorer.perawallet.app appears in shipped code (other).
dist/tools/apiManager/pera/asset.js
- tracedT-hosts2026-11-10
facilitator.goplausible.xyz appears in shipped code (vendor).
dist/tools/x402Manager.js
- tracedT-hosts2026-11-10
github.com appears in shipped code (registry).
dist/tools/utilityManager.js
- tracedT-hosts2026-11-10
goplausible.com appears in shipped code (vendor).
dist/tools/utilityManager.js
- tracedT-hosts2026-11-10
mainnet-api.algonode.cloud appears in shipped code (rpc).
dist/networkConfig.js
- tracedT-hosts2026-11-10
mainnet-idx.algonode.cloud appears in shipped code (rpc).
dist/networkConfig.js
- tracedT-hosts2026-11-10
mainnet.analytics.tinyman.org appears in shipped code (rpc).
vendor/tinyman-js-sdk/dist/index.js
- tracedT-hosts2026-11-10
mainnet.api.perawallet.app appears in shipped code (rpc).
dist/tools/apiManager/pera/asset.js
- tracedT-hosts2026-11-10
platform.alphaarcade.com appears in shipped code (other).
dist/tools/apiManager/alpha/alphaClient.js
- tracedT-hosts2026-11-10
qrclaw.goplausible.xyz appears in shipped code (vendor).
dist/tools/arc90Manager.js
- tracedT-hosts2026-11-10
raw.githubusercontent.com appears in shipped code (registry).
vendor/tinyman-js-sdk/dist/index.js
- tracedT-hosts2026-11-10
testnet-api.algonode.cloud appears in shipped code (rpc).
dist/networkConfig.js
- tracedT-hosts2026-11-10
testnet-idx.algonode.cloud appears in shipped code (rpc).
dist/networkConfig.js
- tracedT-hosts2026-11-10
testnet.analytics.tinyman.org appears in shipped code (rpc).
vendor/tinyman-js-sdk/dist/index.js
- tracedT-hosts2026-11-10
tinyman.org appears in shipped code (other).
vendor/tinyman-js-sdk/dist/index.js
- declaredD-env-key2026-11-10
Setup names E2E_MNEMONIC as something to provide.
@goplausible/algorand-mcp@4.4.4/README.md
- declaredD-doc-funds2026-11-10
The project's own text says it carries out transactions: "5. Asset opt-in (wallet_optin_asset) — Creates, signs, and submits an opt-in transaction for the active account in one step."
@goplausible/algorand-mcp@4.4.4/README.md (line 322)
Limits
- The observed lane has not run on this version: not yet run on this version
- Traced analysis follows flows inside one module and one hop across a relative import; a longer chain is not followed.
- The observed lane has not run on this version.
- An earlier sandbox run (2026-10-19, version 4.4.0) saw no planted key leave during install and start-up, under our test conditions — code paths that only run later, or only on a trigger, are not covered. It does not count for this version, which has not been run.
- No tool inventory was available, so fund actions were not read.
A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".
sato.custody/v1 · custody-3
Maintain this project? Respond to this reading
Loading sign-in…