Sato Check · Package
cow-mcp
npm:cow-mcp · v0.1.0 · sha256:ae36e74f3779 · as of 2026-09-29
- Does it take your key? no evidence
- No private-key read found in what we read of its setup and published code — the limits say how much that was.
- No evidence line on file for this question yet.
- Does your key leave? no evidence
- Not yet run — we have not run this version with planted test keys.
- No evidence line on file for this question yet.
- Can it move funds on its own? declared
- Yes — 3 actions can sign or send funds when called: cow_get_order (trade, limit unknown); cow_build_order (trade, limit unknown); cow_submit_order (trade, limit unknown).
- The project says so — README, config, env list or tool description.
- What changed? no evidence
- First profile of this subject — nothing to compare yet.
- No evidence line on file for this question yet.
Is this your project? Respond →Dispute this reading
Hosts contacted
| Host | When | Role | Evidence |
|---|---|---|---|
| arbitrum-one-rpc.publicnode.com | code | rpc | traced |
| avalanche-c-chain-rpc.publicnode.com | code | rpc | traced |
| base-rpc.publicnode.com | code | rpc | traced |
| bsc-rpc.publicnode.com | code | rpc | traced |
| ethereum-rpc.publicnode.com | code | rpc | traced |
| ethereum-sepolia-rpc.publicnode.com | code | rpc | traced |
| files.cow.fi | code | other | traced |
| gnosis-rpc.publicnode.com | code | rpc | traced |
| linea-rpc.publicnode.com | code | rpc | traced |
| polygon-bor-rpc.publicnode.com | code | rpc | traced |
Evidence (13 lines)
- tracedT-hosts2026-09-29
arbitrum-one-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
avalanche-c-chain-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
base-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
bsc-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
ethereum-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
ethereum-sepolia-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
files.cow.fi appears in shipped code (other).
dist/cow/token_lists.js
- tracedT-hosts2026-09-29
gnosis-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
linea-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- tracedT-hosts2026-09-29
polygon-bor-rpc.publicnode.com appears in shipped code (rpc).
dist/cow/rpc.js
- declaredD-fund-tool2026-09-29
Tool cow_get_order is described as a trade action.
tools/list
- declaredD-fund-tool2026-09-29
Tool cow_build_order is described as a trade action.
tools/list
- declaredD-fund-tool2026-09-29
Tool cow_submit_order is described as a trade action.
tools/list
Limits
- The observed lane has not run on this version: not yet run on this version
- Traced analysis follows flows inside one module only; a key handed from one module to another is not followed.
- The observed lane has not run on this version.
A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".
sato.custody/v1 · custody-1
Maintain this project? Respond to this reading
Loading sign-in…