lightning-wallet-mcp
npm:lightning-wallet-mcp · v1.14.1 · sha256:fe51f488eec1 · as of 2026-11-08
- Does it take your key? declared
- No private-key read found in what we read of its setup and published code — the limits say how much that was.
- The project says so — README, config, env list or tool description.
- Does your key leave? no evidence
- Not yet run — we have not run this version with planted test keys.
- No evidence line on file for this question yet.
- Can it move funds on its own? no evidence
- Unknown — we could not read what it exposes.
- No evidence line on file for this question yet.
- What changed? traced
- No change in key, host or fund behaviour since 1.14.0.
- Our static read of the published artifact found it.
Is this your project? Respond →Dispute this reading
Hosts contacted
| Host | When | Role | Evidence |
|---|---|---|---|
| chat.openai.com | code | other | traced |
| chatgpt.com | code | other | traced |
| claude.ai | code | other | traced |
| github.com | code | registry | traced |
| lightningfaucet.com | code | vendor | traced |
| your-ngrok-url.ngrok-free.app | code | other | traced |
Evidence (7 lines)
- tracedT-hosts2026-11-08
chat.openai.com appears in shipped code (other).
dist/http-server.js
- tracedT-hosts2026-11-08
chatgpt.com appears in shipped code (other).
dist/http-server.js
- tracedT-hosts2026-11-08
claude.ai appears in shipped code (other).
dist/http-server.js
- tracedT-hosts2026-11-08
github.com appears in shipped code (registry).
dist/cli.js
- tracedT-hosts2026-11-08
lightningfaucet.com appears in shipped code (vendor).
dist/cli.js
- tracedT-hosts2026-11-08
your-ngrok-url.ngrok-free.app appears in shipped code (other).
dist/cli.js
- declaredD-doc-custody2026-11-08
The project's own text describes its custody model: "Your agent can pay for L402 and X402 APIs, pay any Lightning invoice or Lightning address, receive payments, and hold sats, all through natural language tool calls. Custodial, so there is nothing to run: no node, no cha…"
lightning-wallet-mcp@1.14.1/README.md (line 9)
Limits
- The observed lane has not run on this version: not yet run on this version
- Traced analysis follows flows inside one module and one hop across a relative import; a longer chain is not followed.
- The observed lane has not run on this version.
- No tool inventory was available, so fund actions were not read.
A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".
sato.custody/v1 · custody-3
Maintain this project? Respond to this reading
Loading sign-in…