Skills/npm/mcp

mcp@0.2.244

VERIFIED

Publisher claims: "Model Context Protocol server for the XRPL-Utilities portfolio: Sentinel (wallet classifier), Pulse (signal feed), Telemetry (supply + utility floor), Trust (XLS-70/80/81 directory), Vault (RWA tracker), Flows (ETF AUM vs XRPL flow correlation), and Ledge" Observed in sandbox: calls sentinel.xrpl-utilities.io, pulse.xrpl-utilities.io, telemetry.xrpl-utilities.io, trust.xrpl-utilities.io, vault.xrpl-utilities.io, flows.xrpl-utilities.io, ledger.xrpl-utilities.io only, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher xrpl-utilities · publishing for 194 daysInstalls 9,397Last detonated 12 h ago
$claude mcp add mcp -- npx -y @xrpl-utilities/mcp
WatchReport an issue

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
no credential variables read in the code
Where it talks to
xrpl-utilities.io, xrpl-utilities.com (its own)
What the honeypot saw
no credential files read · reached only sentinel.xrpl-utilities.io, pulse.xrpl-utilities.io, telemetry.xrpl-utilities.io, trust.xrpl-utilities.io, vault.xrpl-utilities.io, flows.xrpl-utilities.io, ledger.xrpl-utilities.io (its own)
What we could not test
what the tools do when called with real credentials

Reasonable to connect. No credential asked for, no third-party host named, Server started and answered tools/list.

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-14 and scored it 93/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: calls sentinel.xrpl-utilities.io, pulse.xrpl-utilities.io, telemetry.xrpl-utilities.io, trust.xrpl-utilities.io, vault.xrpl-utilities.io, flows.xrpl-utilities.io, ledger.xrpl-utilities.io only, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 28 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
7.7sprocessdependency install exit 0
28snetworkCONNECT tcp://sentinel.xrpl-utilities.io:443
28snetworkCONNECT tcp://pulse.xrpl-utilities.io:443
28snetworkCONNECT tcp://telemetry.xrpl-utilities.io:443
28snetworkCONNECT tcp://trust.xrpl-utilities.io:443
28snetworkCONNECT tcp://vault.xrpl-utilities.io:443
28snetworkCONNECT tcp://flows.xrpl-utilities.io:443
28snetworkCONNECT tcp://ledger.xrpl-utilities.io:443
28sclaimed64 tools: xrpl_sentinel_scan, xrpl_sentinel_scan_history, xrpl_sentinel_verify_origin, xrpl_pulse_recent_events, xrpl_pulse_events_by_address, xrpl_pulse_stream_purchase, xrpl_pulse_ripple_counterparties, xrpl_pulse_ripple_topology, xrpl_pulse_cex_attribution, xrpl_pulse_network_stats, xrpl_pulse_xrpl_primitives, xrpl_pulse_whale_flow_24h, xrpl_pulse_exchange_flow_delta, xrpl_pulse_rwa_summary, xrpl_pulse_exchange_net_flow, xrpl_pulse_escrow_calendar, xrpl_pulse_entity_positioning, xrpl_pulse_rlusd_distribution, xrpl_desk_briefing, xrpl_wallet_check, xrpl_xrp_market_briefing, xrpl_rwa_token_report, xrpl_fund_flow_report, xrpl_permissioned_venue_report, xrpl_network_snapshot
28stools7b840989245340a8
28stoolsfa79876863fa7d81
28stools9cff377b0fee2f88
28stoolsc1ccc4b8eb1a1ab5
28stools6daa2d652759194d
28stoolsaad1c058e8fdc217
28stoolsac9c25d9f7104875
28stoolsf81e52af435e9905
28stoolsa8c3f85e9e7a31e9
28stools3f480fe71e2806de
28stoolsdcd82593054dd447
28stools5615ea34a23d30c3
28stools1be36a9fcd0f2c88
28stoolsa801649ce9b1def1
28stools68bbf2f2b26dc39a
28stoolsdcac6276381b91ef
28stoolsa3417fc3a142dc8e
28stools6b3bcaac2178c940
28stools01bfc485ad844fbf
28stools15127a85e280e59f
28stools2b91628a0e3de1da
28stoolsb61d368c2f72b83a
28stools2910d1e8aa3e66c7
28stools31554084478536ba
28stools6af5050929812065
28stools4db46c02b9e51165
28stools5f67e1b3e5f476a6
28stools7df2589616952624
28stoolsd3c87c20ed5fe05b
28stools9072a42036b97453
28stools141167abfbf13b26
28stools933bfa29553911a8
28stoolsc13b3a73ff3a1ec7
28stoolse159daa1df2c7c74
28stoolsb0105ab816b4f93b
28stools08c735e1e3e34f6d
28stools91961815060e99a1
28stoolsc4a115783b6beb7e
28stools092e14cc48c7e545
28stoolsc6f61375984b5e5f
28stools9d96b46f8c12436f
28stools88af0d090be80b2a
28stools3a53f8befa428cab
28stools2b07f6ee6fe5530d
28stools58dc0693046ec9a1
28stools13714c73197fc064
28stoolsfb9225e0fdad1626
28stoolsba033ec127875c56
28stoolsff0810bac3444f20
28stoolsb49b45c19880b47c
28stoolsdc87a2431310c213
28stools5290fb3e14e066b8
28stoolsa3dcf64e4cca9814
28stools80897d70ea8547df
28stoolsf3c5f08fa70736dc
28stools5b33c340ce53cb43
28stoolsc7a87bff4e614867
28stools1cfd03cc58a09928
28stoolsa70d601bfb50b47e
28stools8c8ccd4ad060b95f
28stools35f1aaf20c35bb4a
28stools22d89a2709f218af
28stoolsc7e6a5a3f993472c
28stools7510d0597172fadb
28sprocessscript backend runs setup only
28sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packagedist/transport/http.js:436 · npx invocation of non-well-known package — may execute untrusted code" npx @xrpl-utilities/mcp --transport stdio",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

No other findings across 4,577 lines in 44 files.

Cost to the agent

Instructions loaded
≈100 tok
1 file · 44 in bundle
Tool list per prompt
≈9,602 tok
64 tools · 150 per tool
Handshake
2045 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 232

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for @xrpl-utilities/mcp@0.2.244 as of 4 h ago. This is the package itself, not its dependencies.

mcp@0.2.244 safety verdict: Verified — KillerSkills