Atlas / MCP servers / armorwallet / Armor Crypto

Armor CryptoCAUTION

mcp/armorwallet/armor-crypto

The MCP server for interacting with Blockchain, Swaps, Strategic Planning and more.

Verdict
CAUTION
Grade
C
Trust score
79 /100
Exposed tools
37 26r · 10w · 1d
Transport
—
License
GPL-3.0
Stars
178
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Alpha Test version 0.1.24

A single source for integrating AI Agents with the Crypto ecosystem. This includes Wallet creation and management, swaps, transfers, event-based trades like DCA, stop loss and take profit, and much more. The Armor MCP supports Solana in Alpha and, when in beta, will support more than a dozen blockchains, including Ethereum. Base, Avalanche, Bitcoin, Sui, Berachain, megaETH, Optimism, Ton, BNB, and Arbitrum, among others. Using Armor's MCP you can bring all of crypto into your AI Agent with unified logic and a complete set of tools.

Features

🧠 AI Native

📙 Wallet Management

🔃 Swaps

🌈 Specialized trades (DCA, Stop Loss etc.)

⛓️ Multi-chain

↔️ Cross-chain transations

🥩 Staking

🤖 Fast intergration to Agentic frameworks

👫 Social Sentiment

🔮 Prediction

Requirements

1. Make sure you have python installed

2. Install uv

Linux / Windows

pip install uv

Mac

brew install uv

3. Claude Desktop or your AI Agent will run the MCP

See Usage & Configuration for details.

Alpha Testing

We are currently in pre-alpha, and we are testing the capabilities of various agents and agentic frameworks like Claude Desktop, Cline, Cursor, n8n, etc.

Current Features & Tools

  • Wallet Management
  • Grouping & Organization
  • Archiving
  • Swap & Trades
  • Normal swap
  • DCA (place / list / cancel)
  • Scheduled Orders
  • Limit Orders (place / list / cancel)
  • Staking and Unstaking
  • Token Search and Trending Tokens
  • Statistical Calculator for accurate Analysis
  • Supports Solana blockchain

Coming Soon

  • More Blockchain Support
Read from source at commit b525ec0928e6OBSERVED · 2026-10-06
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add armor-crypto-mcp --env ARMOR_ACCESS_TOKEN=${ARMOR_ACCESS_TOKEN} --env ARMOR_API_KEY=${ARMOR_API_KEY} -- uvx armor-crypto-mcp
claude-desktop
{
  "mcpServers": {
    "armor-crypto-mcp": {
      "command": "uvx",
      "args": [
        "armor-crypto-mcp"
      ],
      "env": {
        "ARMOR_ACCESS_TOKEN": "${ARMOR_ACCESS_TOKEN}",
        "ARMOR_API_KEY": "${ARMOR_API_KEY}"
      }
    }
  }
}
03

Exposed tools (37)

26 read · 10 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
add_wallets_to_groupwrite
archive_wallet_groupread
archive_walletsread
calculate_token_conversionread
calculatorread
cancel_dca_orderwrite
cancel_orderwrite
create_dca_orderwrite
create_groupswrite
create_orderwrite
create_walletwrite
get_all_ordersread
get_all_walletsread
get_armor_mcp_versionreadGet the current Armor Wallet version
get_current_timereadGets the current time and date
get_stake_balancesread
get_token_candle_dataread
get_top_trending_tokensread
get_wallet_token_balanceread
list_dca_ordersread
list_groupsread
list_single_groupread
remove_wallets_from_groupdestructive
rename_walletswrite
search_official_token_addressread
search_token_detailsread
send_key_to_telegramwrite
stake_quoteread
stake_transactionread
swap_quoteread
swap_transactionread
transfer_tokenswrite
unarchive_wallet_groupread
unarchive_walletsread
unstake_quoteread
unstake_transactionread
wait_a_momentreadWait for some short amount of time, no more than 10 seconds
04

Trust audit

CAUTIONgrade C · trust 79/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (3)

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
README.md:120
1. Must have Developer Mode enabled
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
remove_wallets_from_group
Why it matters. 1 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
requirements.txt
python-dotenv, requests, mcp, uvicorn, httpx
Why it matters. 5 requirement(s) not pinned with ==
Fix. pin exact versions

Gates applied: instruction_override, no_behavioural_pass.

Audited 2026-10-06 · audit v0.4.1 · source sha b525ec0928e6full audit observations/trust-audit/mcp-server/armorwallet__armor-crypto.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-06b525ec0928e6CAUTIONC79first audit
06

Questions

What is the Armor Crypto MCP server?

The MCP server for interacting with Blockchain, Swaps, Strategic Planning and more.

What tools does Armor Crypto expose?

37 in total: 26 read-only, 10 that write, and 1 that can delete or overwrite (remove_wallets_from_group). Every one is listed on this page with its risk.

Is Armor Crypto safe to connect to an agent?

With care. The audit graded it C (79/100) and found 3 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Armor Crypto need?

It reads ARMOR_ACCESS_TOKEN and ARMOR_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How current is this page?

The grade is for one exact copy of the source (b525ec0928e6), read on 2026-10-06. The repository is watched and re-audited when it changes.

Advertisement