DeBridgeSAFE
MCP server that gives AI agents the ability to execute cross-chain cryptocurrency swaps and transfers via the deBridge protocol
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://agents.debridge.com/mcp) [](https://agents.debridge.com/llms.txt) [](https://github.com/debridge-finance/debridge-skills) [](https://www.npmjs.com/package/@debridge-finance/debridge-mcp) [](https://registry.modelcontextprotocol.io/?q=io.github.debridge-finance%2Fdebridge-mcp) [](https://opensource.org/licenses/MIT) [
3 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_supported_chains | read | List supported chains |
ping | read | Returns pong |
search_tokens | read | Search tokens |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (6)
readFileSync(resolve(__dirname, "../../package.json"), "utf-8"),
proxyApp = createProxyApp(`http://127.0.0.1:${mcpdPort}/mcp`);const brokenProxy = createProxyApp("http://127.0.0.1:1/mcp");[. Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does DeBridge need?
No credential environment variables were found in its source, so it appears to need none.
How does DeBridge run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @debridge-finance/debridge-mcp at 0.1.5.
How current is this page?
The grade is for one exact copy of the source (37c990fc5c27), read on 2026-10-08. The repository is watched and re-audited when it changes.