ModelsAtlas
Explore
Atlas / MCP servers / kukapay / Whale Tracker

Whale TrackerSAFE

mcp/kukapay/whale-tracker
MCP server by kukapay · Audited 2026-10-07
⚑ Report / re-scanSource ↗

A mcp server for tracking cryptocurrency whale transactions.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
2 2r · 0w · 0d
Transport
—
License
MIT
Stars
56
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

A Model Context Protocol (MCP) server for tracking cryptocurrency whale transactions using the Whale Alert API

[](https://opensource.org/license/mit/) [](https://www.python.org/downloads/) [](https://smithery.ai/server/@kukapay/whale-tracker-mcp)

Table of Contents

  • Overview
  • Features
  • Prerequisites
  • Installation
  • Usage
  • Running in Development Mode
  • Integrating with Claude Desktop
  • Direct Execution
  • Examples
  • API Key Configuration
  • License
  • Acknowledgements

Overview

The whale-tracker-mcp server is a Python-based implementation of the Model Context Protocol (MCP) that integrates with the Whale Alert API. It enables real-time tracking and analysis of large cryptocurrency transactions ("whale" movements) by exposing tools, resources, and prompts to MCP-compatible clients like Claude Desktop.

This server is designed for cryptocurrency enthusiasts, developers, and analysts who want to monitor whale activity directly within their LLM-powered workflows.

Features

  • Tools:
  • get_recent_transactions: Fetch recent whale transactions with optional filters for blockchain, minimum value, and limit.
  • get_transaction_details: Retrieve detailed information about a specific transaction by its ID.
  • Resources:
  • whale://transactions/{blockchain}: Expose recent transactions for a specified blockchain as contextual data.
  • Prompts:
  • query_whale_activity: A reusable template
Read from source at commit 9169b70f3ad0OBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add whale-tracker-mcp --env WHALE_ALERT_API_KEY=${WHALE_ALERT_API_KEY} -- uvx whale-tracker-mcp
claude-desktop
{
  "mcpServers": {
    "whale-tracker-mcp": {
      "command": "uvx",
      "args": [
        "whale-tracker-mcp"
      ],
      "env": {
        "WHALE_ALERT_API_KEY": "${WHALE_ALERT_API_KEY}"
      }
    }
  }
}
03

Exposed tools (2)

2 read · 0 write · 0 destructive.

ToolRiskDescription
get_recent_transactionsreadFetch recent whale transactions, optionally filtered by blockchain and minimum value (USD).
get_transaction_detailsreadFetch details of a specific whale transaction by its ID.
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 9169b70f3ad0full audit observations/trust-audit/mcp-server/kukapay__whale-tracker.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-079169b70f3ad0SAFEB89first audit
06

Questions

What is the Whale Tracker MCP server?

A mcp server for tracking cryptocurrency whale transactions.

What tools does Whale Tracker expose?

2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Whale Tracker safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Whale Tracker need?

It reads WHALE_ALERT_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How current is this page?

The grade is for one exact copy of the source (9169b70f3ad0), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement