Sato Hub
MCP server

celo-mcp

mcp:pypi:celo-mcp · v0.4.3 · sha256:0ab33e3d4691 · as of 2026-10-28

Does it take your key?
traced
No private-key read found in what we read of its setup and published code — the limits say how much that was.
Our static read of the published artifact found it.
Does your key leave?
no evidence
Not yet run — we have not run this version with planted test keys.
No evidence line on file for this question yet.
Can it move funds on its own?
no evidence
Unknown — we could not read what it exposes.
No evidence line on file for this question yet.
What changed?
traced
Since 0.4.1: adds a request to celo-sepolia.blockscout.com; adds a request to faucet.celo.org; adds a request to forno.celo-sepolia.celo-testnet.org; ….
Our static read of the published artifact found it.

Is this your project? Respond →Dispute this reading

Hosts contacted

HostWhenRoleEvidence
celo-sepolia.blockscout.comcodeothertraced
explorer.celo.orgcodevendortraced
faucet.celo.orgcodevendortraced
forno.celo-sepolia.celo-testnet.orgcodeothertraced
forno.celo.orgcodevendortraced
github.comcoderegistrytraced
ipfs.iocodeothertraced
raw.githubusercontent.comcoderegistrytraced
Evidence (13 lines)
  • tracedT-hosts2026-10-28

    celo-sepolia.blockscout.com appears in shipped code (other).

    src/celo_mcp/blockchain_data/client.py

  • tracedT-hosts2026-10-28

    explorer.celo.org appears in shipped code (vendor).

    src/celo_mcp/blockchain_data/client.py

  • tracedT-hosts2026-10-28

    faucet.celo.org appears in shipped code (vendor).

    src/celo_mcp/server.py

  • tracedT-hosts2026-10-28

    forno.celo-sepolia.celo-testnet.org appears in shipped code (other).

    src/celo_mcp/blockchain_data/client.py

  • tracedT-hosts2026-10-28

    forno.celo.org appears in shipped code (vendor).

    src/celo_mcp/blockchain_data/client.py

  • tracedT-hosts2026-10-28

    github.com appears in shipped code (registry).

    src/celo_mcp/governance/service.py

  • tracedT-hosts2026-10-28

    ipfs.io appears in shipped code (other).

    src/celo_mcp/nfts/service.py

  • tracedT-hosts2026-10-28

    raw.githubusercontent.com appears in shipped code (registry).

    src/celo_mcp/governance/service.py

  • tracedT-key-handling2026-10-28

    Turns key material it is GIVEN into an account or signer (Account.from_key()); no read of a key from the environment or a key file was found. A signing library does this.

    src/celo_mcp/transactions/service.py:454

  • declaredD-doc-custody2026-10-28

    The project's own text describes its custody model: "MiniPay is a non-custodial lightweight mobile wallet that allows users to send and receive stablecoins with transaction below 1 cent. It was first launched within the Opera Mini browser to assist people in sending and r…"

    https://docs.celo.org/learn/wallets.md (line 27)

  • declaredD-doc-custody2026-10-28

    The project's own text describes its custody model: "Valora is a non-custodial multichain mobile wallet focused on helping users save, earn, and send their crypto. It supports Celo's ability to pay for transactions with stablecoins, supports Wallet Connect, and has a buil…"

    https://docs.celo.org/learn/wallets.md (line 40)

  • declaredD-doc-custody2026-10-28

    The project's own text describes its custody model: "Account access and reward details for self-custodying holder of CELO on the Celo Mainnet."

    https://docs.celo.org/learn/manage/self-custody.md (line 7)

  • declaredD-doc-custody2026-10-28

    The project's own text describes its custody model: "You are self-custodying (you hold the private key to your address), and that you have provided that address directly to cLabs. If you are using a custody provider ([Anchorage](https://anchorage.com), [CoinList](https://…"

    https://docs.celo.org/learn/manage/self-custody.md (line 13)

Limits

  • The observed lane has not run on this version: not yet run on this version
  • Traced analysis follows flows inside one module and one hop across a relative import; a longer chain is not followed.
  • The observed lane has not run on this version.
  • No tool inventory was available, so fund actions were not read.
  • Traced: Python read line by line, not parsed.

A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".

sato.custody/v1 · custody-3

Maintain this project? Respond to this reading

Loading sign-in…