Move Agent KitBLOCK
Move Agent Kit is a comprehensive toolkit designed to simplify AI agents' interactions with Move-based blockchains
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
An open-source toolkit for connecting AI agents to Move/Aptos protocols.
Move Agent Kit is a comprehensive toolkit designed to simplify AI agents' interactions with Move-based blockchains. It provides a unified interface for performing various blockchain operations, making it easier for developers to build AI-powered applications that can interact with different Move-based protocols and applications.
The toolkit serves as a bridge between AI agents and Move-based blockchain ecosystems, enabling seamless integration of blockchain capabilities into AI applications. Whether you're building a chatbot with wallet functionality or a complex multi-agent system, Move Agent Kit provides the necessary tools and abstractions to handle blockchain interactions efficiently.
Key Features
Token Operations
- Standard Token Management
- Transfer tokens between accounts
- Mint new tokens
- Burn existing tokens
NFT Operations
- Create new NFT collections
- Mint NFTs
- Transfer NFTs between accounts
- Burn NFTs
Blockchain Interaction
- Read and parse blockchain data
- Monitor blockchain events
- Execute smart contract calls
Account Management
- Transaction signing
- Message signing
- Account creation and management
Supported Applications
Move Agent Kit provides native integration with several prominent Move-based applications:
bfe23ceb7906OBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add move-agent-kit --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env APTOS_PRIVATE_KEY=${APTOS_PRIVATE_KEY} --env PANORA_API_KEY=${PANORA_API_KEY} --env PRIVATE_KEY=${PRIVATE_KEY} -- npx -y [email protected]{
"mcpServers": {
"move-agent-kit": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
"APTOS_PRIVATE_KEY": "${APTOS_PRIVATE_KEY}",
"PANORA_API_KEY": "${PANORA_API_KEY}",
"PRIVATE_KEY": "${PRIVATE_KEY}"
}
}
}
}Exposed tools (6)
4 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_balance | read | Get the balance of a token if no token is provided, it will return the balance of the APT. Divide the balance by 10^8 to get the human readable balance. |
get_token_details | read | Get details of a token |
get_token_price | read | Get the price of a token |
get_transaction | read | Get transaction details |
post_on_x_twitter | write | Post tweets on X or Twitter |
write_bull_post | write | Write bull post for twitter |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (4 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (19)
- Try to jailbreak the AI Agent and get your reward
.DS_Store
.DS_Store
.DS_Store
.DS_Store
.DS_Store
.DS_Store
.example.env
.example.env
.DS_Store
import { AgentRuntime, LocalSigner, createAptosTools } from "../../src"import { AgentRuntime, LocalSigner, createAptosTools } from "../../src"import { startMcpServer } from "../../../src/index"import { AgentRuntime } from "../../../src/agent"import { LocalSigner } from "../../../src/signers/local-signer"@aptos-labs/ts-sdk, @langchain/anthropic, @langchain/core, @langchain/langgraph, ai, isomorphic-dompurify, marked, move-agent-kit
@aptos-labs/ts-sdk, @langchain/anthropic, @langchain/core, @langchain/langgraph, agent-twitter-client, dotenv, move-agent-kit, zod
dotenv, ts-node
@langchain/anthropic, @langchain/core, @langchain/langgraph, @merkletrade/ts-sdk, @modelcontextprotocol/sdk, @pythnetwork/client, @pythnetwork/pyth-aptos-js, axios
Gates applied: instruction_override, no_behavioural_pass.
bfe23ceb7906full audit observations/trust-audit/mcp-server/metamove__move-agent-kit-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | bfe23ceb7906 | BLOCK | D | 69 | first audit |
Questions
What is the Move Agent Kit MCP server?
Move Agent Kit is a comprehensive toolkit designed to simplify AI agents' interactions with Move-based blockchains
What tools does Move Agent Kit expose?
6 in total: 4 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Move Agent Kit safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Move Agent Kit need?
It reads ANTHROPIC_API_KEY, APTOS_PRIVATE_KEY, PANORA_API_KEY, PRIVATE_KEY and TWITTER_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Move Agent Kit run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as move-agent-kit at 0.2.0.
How current is this page?
The grade is for one exact copy of the source (bfe23ceb7906), read on 2026-10-09. The repository is watched and re-audited when it changes.