Usenami Signer MCP
MCP server that signs CEX/DEX orders inside an attested AWS Nitro Enclave so keys never touch the agent process.
- Sato Score69
Usenami Signer MCP is an open-source security tool, with last code activity on 2026-10-01 (Active). Latest release on 2026-06-09. Sato Score 69/100 (how open, active and verifiable it is, not a safety grade), as of 2026-10-21. How the score works →
See how to install Usenami Signer MCP →Last commit Oct 1, 2026 · Last release Jun 9, 2026 · ★ 2
Listed from github.com/namixai/signer-mcp on 2026-07-19. Install: reproduced by Sato Hub on 2026-10-19. Evidence →
Next step
Watch Usenami Signer MCP
One email if what we observe changes — its repo goes quiet or disappears, or the listing is retired. Nothing else.
Check it from your agent
Add Sato Hub’s MCP server (no key), then ask:
https://satohub.ai/api/mcpRun Sato Hub Preflight on namixai/signer-mcp before I use it.Your project?
Prove you control the domain and correct this page — description, links, tags, chains. A claim proves control, not verification: it never changes the Sato Score.
Claim this listing →Overview
Signer MCP exposes order-signing for exchanges like Binance, OKX, and Asterdex as MCP tools, but the private key lives inside an AWS Nitro Enclave with attested PCR0 rather than in the agent's runtime memory. Trading-agent builders use it to reduce the blast radius of prompt injection or a compromised agent process, since the LLM never sees or can exfiltrate the signing key — it can only request signatures for specific orders.
Sato Score
69/100· MediumHow open, active & verifiable — not a safety or returns grade.
- Maintenance & liveness
- 35/35
- Code transparency
- 17/20
- Interface verifiability
- 8/10
- Docs & demo
- 0/10
- Listing transparency & provenance
- 6/15
- Independent verification
- 3/10
Deploy path reproduced — install verified in an isolated container (proves installability, not runtime safety).
Sato Check
v0.8.0 · as of 2026-09-29- Does it take your key?
- Reads a key
- Does your key leave?
- Not yet run
- Can it move funds on its own?
- Unknown
A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".
Evidence — listed vs checked · what the words mean
Listed from github.com/namixai/signer-mcp on 2026-07-19. Install: reproduced by Sato Hub on 2026-10-19.
| Claim | Value | Evidence | Source | Checked |
|---|---|---|---|---|
| Chains supported | not stated | self-reported | github.com/namixai/signer-mcp | as of 2026-10-21 |
| Verification status | Unverified — not independently reviewed | self-reported | github.com/namixai/signer-mcp | as of 2026-10-21 |
| Recent activity | last release 2026-06-09 · last commit 2026-10-01 | observed | github.com/namixai/signer-mcp | 2026-10-21 |
| Install works | reproduced — install and entry both completedshows the install path works as written; not a statement about runtime behaviour | ✓ reproduced | raw.githubusercontent.com | 2026-10-19 |
| Website answers | answered (HTTP 200) | observed | github.com/namixai/signer-mcp | 2026-10-21 |
| Daily check record | 90 of 90 daily checks since 2026-07-23 succeededa success rate of our checks, not uptime; the source is this listing's own history | observed | — | 2026-10-20 |
| Takes your key | reads private-key material | traced | satohub.ai | 2026-09-29 |
| Key leaves the machine | not yet run with planted test keysthe sandbox lane has not run on this version | observed | satohub.ai | not dated |
| Moves funds on its own | unknown — could not read what it exposes | traced | satohub.ai | 2026-09-29 |
| Sato Score | 69/100 (Medium)how open, active and verifiable — not a safety or quality grade | computed | satohub.ai | 2026-10-21 |
Self-reported rows are the project’s own words, dated when we recorded them — not a check. Only reproduced and reviewed rows carry a mark. None of these rows is a safety or quality rating.
Install — reproduced in a container Oct 19, 2026
Runtime: Node.js (npm package, MCP server; also an ElizaOS plugin)
npm install @usenami/signer-mcp
{"mcpServers": {"signer": {"command": "npx", "args": ["-y", "@usenami/signer-mcp"], "env": {"SIGNER_GATEWAY_URL": "https://signer.usenami.io", "SIGNER_API_TOKEN": "sk_live_..."}}}}You supply: SIGNER_API_TOKEN — bearer token issued by usenami.io, required for paid tools; high-risk if exposed since it authorizes order signing (docs state the private key itself stays in an AWS Nitro Enclave, never loaded locally), SIGNER_GATEWAY_URL — optional, defaults to https://signer.usenami.io
claude mcp add satohub-namixai-signer-mcp -- npx -y @usenami/signer-mcp
A local server: your client runs this command on your machine. Installing runs third-party software under your own credentials. Sato Hub publishes the documented invocation and, where the harness reproduced it, the date it did — neither is a safety review.
Read from the project’s own docs as of 2026-10-19. What a deploy spec is →
Observed record — 91 daily checks since 2026-07-23
- Succeeded
- 91
- Failed
- 0
- Their error
- 0
- Unattributed
- 0
This is the share of our daily checks that succeeded — not an availability guarantee. A check can fail because the host was down, because our runner timed out, or because the network in between dropped it, and only the first of those is a fact about this project. Failures are split by what we can attribute; anything we cannot attribute is counted, not hidden. 40 of these checks predate 2026-09-01, when the probe counted a bot-block (HTTP 403) as a failure and recorded no reason for any failure. Every one of them passed, so the rate covers them too.
Last 30 days — to 2026-10-21, one point per UTC day
A gap is a day we have no attributable observation — never a zero. Thirty points is the whole shape the free layer carries; the daily rows behind it stay in the snapshot series.
Details
- Chains
- Unknown
- Agent types
- MCP server
- Open source
- Yes
- Last checked
- 2026-10-21
Marketplace Signals
No marketplace signals recorded for this resource yet.
Verification status reflects evidence reviewed by Sato Hub. Self-reported claims are never presented as verified.
Where Usenami Signer MCP fits
Related concepts: How Agents Interact With Smart Contracts, How Agents Use Wallets, What Are Onchain Agents?
Listing History
Recorded changes to Usenami Signer MCP's listing — status, verification, Sato Score, and recent releases. Full history is kept in the listing record.
- Oct 19, 2026Verified: deploy spec
- Sep 26, 2026Edited: entity class, resource type
- Jul 24, 2026Sato Hub began tracking this listing
- Jul 19, 2026Listed on Sato Hub
Compared with
Appears in
Related Resources
Coinbase AgentKit
ActiveCoinbase's toolkit for giving AI agents wallets and the ability to take onchain actions.
Hyperliquid
ActiveOnchain perpetual futures and spot DEX running on its own L1 with an HyperEVM smart-contract layer.
Model Context Protocol (MCP)
ActiveAnthropic's open standard for connecting AI systems to external tools and data sources.
Reference
QuestionsWhat people ask about this pageShowHide
Questions people ask about Usenami Signer MCP
- Is Usenami Signer MCP open source?
- Yes. Usenami Signer MCP is open source under the MIT license; the repository is https://github.com/namixai/signer-mcp. Checked as of 2026-10-21.
- Which chains does Usenami Signer MCP support?
- Sato Hub has no confirmed chain list for Usenami Signer MCP as of 2026-10-21; treat chain support as unknown.
- Is Usenami Signer MCP still maintained?
- The most recent code activity Sato Hub observed was on 2026-10-01 (last commit 2026-10-01, last release 2026-06-09), which Sato Hub labels "Active". Posts on X are not counted as maintenance. Activity is a recency signal, not a quality judgment.
- How do I install or run Usenami Signer MCP?
- Node.js (npm package, MCP server; also an ElizaOS plugin). Install: npm install @usenami/signer-mcp. Entry: {"mcpServers": {"signer": {"command": "npx", "args": ["-y", "@usenami/signer-mcp"], "env": {"SIGNER_GATEWAY_URL": "https://signer.usenami.io", "SIGNER_API_TOKEN": "sk_live_..."}}}}. Sato Hub reproduced this install in a container on 2026-10-19. It runs as an MCP server (npx -y @usenami/signer-mcp (stdio)).
- Is Usenami Signer MCP verified on Sato Hub?
- Sato Hub holds one earned check for Usenami Signer MCP: Deploy path reproduced — install verified in an isolated container (proves installability, not runtime safety). Its Sato Score is 69 of 100, a measure of how open, active and verifiable the project is, not a safety, quality or returns grade.
Cite this pagePlain text, APA or BibTeXShowHide
Cite this page
Sato Hub. "Usenami Signer MCP — Sato Hub." Sato Hub, updated 2026-10-21, accessed 2026-10-21. https://satohub.ai/resources/namixai-signer-mcpData last refreshed 2026-10-21; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.
Join the Sato Hub Briefing
Sign up for the Briefing: the agents, tools, and infrastructure that actually shipped, and why they matter.