Back to search
C
70 /100

io.github.fyllepo/qubic-mcp

Author fyllepo
Scanned 48d ago

MCP server for Qubic — balances, prices, transfers, wallets, and more.

Versions

0.2.0scored
first seen May 19, 2026

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 23

get_version
annotations: none low

Get the current qubic-mcp server version

save_wallet
annotations: none low

Save a Qubic wallet address with a friendly name for quick access. Only saves the public address — never stores seeds or private keys. Stored locally in ~/.qubic-mcp/wallets.json.

address string
list_wallets
annotations: none low

List all saved Qubic wallet addresses. These are public addresses only — no private keys are ever stored.

remove_wallet
annotations: none low

Remove a saved wallet by name. This only removes the local reference — it does not affect the actual blockchain address in any way.

name string
convert_qu_usd
annotations: none low

Convert between QU (Qubic Units) and USD using the current live price. Specify either a QU amount to get USD value, or a USD amount to get the equivalent in QU.

qu number usd number
get_transfer_history
annotations: none low

Get the transfer history for a Qubic address or saved wallet within a tick range. Returns incoming and outgoing transfers with details. Use get_tick_info first to find the current tick number.

page number endTick number startTick number
get_balance
annotations: none low

Get the current balance of a Qubic address or saved wallet. Accepts a 60-character Qubic address OR a saved wallet name (e.g.,

add_network
annotations: none low

Save a custom Qubic network (e.g., a local lite node). Stored in ~/.qubic-mcp/networks.json. Use switch_network to activate it.

rpcUrl string
switch_network
annotations: none low

Switch the active Qubic network. All subsequent tool calls will use the new endpoint. Built-in networks:

name string
list_networks
annotations: none low

List all available Qubic networks (built-in and custom) and show which is currently active.

remove_network
annotations: none low

Remove a saved custom network. Cannot remove built-in networks (mainnet, testnet). If the removed network was active, switches back to mainnet.

name string
get_tick_info
annotations: none low

Get the current Qubic network tick information. Returns the current tick number, epoch, and tick duration. Qubic processes transactions in ticks (~5 seconds each) organized into epochs (~1 week each).

get_network_status
annotations: none low

Get comprehensive Qubic network status including current tick, epoch progress, circulating supply, burned QUs, active addresses, price, and market cap.

get_token_list
annotations: none low

Get a list of all registered Qubic tokens with their name, issuer address, and website. Useful for finding token issuers needed for QX orderbook queries.

get_rich_list
annotations: none low

Get the Qubic rich list — top addresses ranked by balance for the current epoch. Supports pagination.

page number
get_token_price
annotations: none low

Get the current QUBIC token price compared across multiple sources (CoinGecko, Qubic Official API, CryptoCompare). Shows price, 24h change, market cap, and volume with source-by-source comparison.

get_epoch_computors
annotations: none low

List the computor identities for a given epoch. Computors are the 676 nodes that validate transactions on the Qubic network. Defaults to the current epoch if none is specified.

get_explorer_links
annotations: none low

Get links to Qubic block explorers for an address or transaction ID. Accepts saved wallet names.

txId string
validate_address
annotations: none low

Validate a Qubic address format and check if it exists on-chain with balance or transfer activity.

address string
get_transaction
annotations: none low

Look up a Qubic transaction by its transaction ID. Returns source, destination, amount, tick, and execution status. Transaction IDs are 60 lowercase letters.

transactionId string
list_contracts
annotations: none low

List all registered custom smart contract definitions with their functions and field schemas.

remove_contract
annotations: none low

Remove a registered smart contract definition by name.

name string
get_mining_phase
annotations: none low

Get the current Qubic mining phase (MINING or IDLE) and whether it

Permissions 2

network Server uses network capabilities via: fetch()
medium
env_vars Server uses env_vars capabilities via: process.env
low

Scan Findings 65

low
Tool 'get_version' has no annotations annotation_checker · 100%
low
Tool 'save_wallet' has no annotations annotation_checker · 100%
low
Tool 'list_wallets' has no annotations annotation_checker · 100%
low
Tool 'remove_wallet' has no annotations annotation_checker · 100%
low
Tool 'convert_qu_usd' has no annotations annotation_checker · 100%
low
Tool 'get_transfer_history' has no annotations annotation_checker · 100%
low
Tool 'get_balance' has no annotations annotation_checker · 100%
low
Tool 'add_network' has no annotations annotation_checker · 100%
low
Tool 'switch_network' has no annotations annotation_checker · 100%
low
Tool 'list_networks' has no annotations annotation_checker · 100%
low
Tool 'remove_network' has no annotations annotation_checker · 100%
low
Tool 'get_tick_info' has no annotations annotation_checker · 100%
low
Tool 'get_network_status' has no annotations annotation_checker · 100%
low
Tool 'get_token_list' has no annotations annotation_checker · 100%
low
Tool 'get_rich_list' has no annotations annotation_checker · 100%
low
Tool 'get_token_price' has no annotations annotation_checker · 100%
low
Tool 'get_epoch_computors' has no annotations annotation_checker · 100%
low
Tool 'get_explorer_links' has no annotations annotation_checker · 100%
low
Tool 'validate_address' has no annotations annotation_checker · 100%
low
Tool 'get_transaction' has no annotations annotation_checker · 100%
low
Tool 'list_contracts' has no annotations annotation_checker · 100%
low
Tool 'remove_contract' has no annotations annotation_checker · 100%
low
Tool 'get_mining_phase' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Buffer.from base64 in fyllepo-qubic-mcp-7ddb749/tests/tools/get-qx-orderbook.test.ts:34 entropy_analyzer · 75%
medium
Buffer.from base64 in fyllepo-qubic-mcp-7ddb749/tests/tools/get-qx-orderbook.test.ts:42 entropy_analyzer · 75%
medium
Buffer.from base64 in fyllepo-qubic-mcp-7ddb749/tests/tools/get-qx-orderbook.test.ts:69 entropy_analyzer · 75%
medium
Buffer.from base64 in fyllepo-qubic-mcp-7ddb749/src/tools/query-contract.ts:11 entropy_analyzer · 75%
medium
Buffer.from base64 in fyllepo-qubic-mcp-7ddb749/src/utils/qx.ts:125 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: get_version manifest_parser · 70%
info
Tool: save_wallet manifest_parser · 70%
info
Tool: list_wallets manifest_parser · 70%
info
Tool: remove_wallet manifest_parser · 70%
info
Tool: convert_qu_usd manifest_parser · 70%
info
Tool: get_transfer_history manifest_parser · 70%
info
Tool: get_balance manifest_parser · 70%
info
Tool: add_network manifest_parser · 70%
info
Tool: switch_network manifest_parser · 70%
info
Tool: list_networks manifest_parser · 70%
info
Tool: remove_network manifest_parser · 70%
info
Tool: get_tick_info manifest_parser · 70%
info
Tool: get_network_status manifest_parser · 70%
info
Tool: get_token_list manifest_parser · 70%
info
Tool: get_rich_list manifest_parser · 70%
info
Tool: get_token_price manifest_parser · 70%
info
Tool: get_epoch_computors manifest_parser · 70%
info
Tool: get_explorer_links manifest_parser · 70%
info
Tool: validate_address manifest_parser · 70%
info
Tool: get_transaction manifest_parser · 70%
info
Tool: list_contracts manifest_parser · 70%
info
Tool: remove_contract manifest_parser · 70%
info
Tool: get_mining_phase manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 257 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%