Atlas / MCP servers / settlemint / Sdk

SdkSAFE

Name: Sdk
Author: settlemint

mcp/settlemint/sdk

MCP server by settlemint · blockchain transformation · hasura · mcp · Audited 2026-10-12

⚑ Report / re-scan Source ↗

Integrate SettleMint into your application with ease.

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

56 37r · 19w · 0d

Transport

stdio

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

SettleMint SDK

✨ https://settlemint.com ✨

Integrate SettleMint into your application with ease.

Documentation • Issues

About

The SettleMint SDK provides a comprehensive set of tools and libraries for integrating blockchain functionality into your applications. It enables seamless interaction with the SettleMint platform's features and services.

Packages

Read from source at commit c6bf5b6ecb5cOBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add test-app --env SETTLEMINT_ACCESS_TOKEN=${SETTLEMINT_ACCESS_TOKEN} --env SETTLEMINT_ACCESS_TOKEN_E2E_TESTS=${SETTLEMINT_ACCESS_TOKEN_E2E_TESTS} --env SETTLEMINT_BLOCKCHAIN_ACCESS_TOKEN=${SETTLEMINT_BLOCKCHAIN_ACCESS_TOKEN} --env SETTLEMINT_HASURA_ADMIN_SECRET=${SETTLEMINT_HASURA_ADMIN_SECRET} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "test-app": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SETTLEMINT_ACCESS_TOKEN": "${SETTLEMINT_ACCESS_TOKEN}",
        "SETTLEMINT_ACCESS_TOKEN_E2E_TESTS": "${SETTLEMINT_ACCESS_TOKEN_E2E_TESTS}",
        "SETTLEMINT_BLOCKCHAIN_ACCESS_TOKEN": "${SETTLEMINT_BLOCKCHAIN_ACCESS_TOKEN}",
        "SETTLEMINT_HASURA_ADMIN_SECRET": "${SETTLEMINT_HASURA_ADMIN_SECRET}"
      }
    }
  }
}

Exposed tools (56)

37 read · 19 write · 0 destructive.

Tool	Risk	Description
`Error`	read	Error getting prompt
`hasura-mutation`	read
`hasura-mutations`	read
`hasura-queries`	read
`hasura-query`	read
`platform-application-list`	read
`platform-application-read`	read
`platform-blockchain-network-create`	write
`platform-blockchain-network-list`	read
`platform-blockchain-network-read`	read
`platform-blockchain-network-restart`	write
`platform-blockchain-node-create`	write
`platform-blockchain-node-list`	read
`platform-blockchain-node-read`	read
`platform-blockchain-node-restart`	write
`platform-custom-deployment-create`	write
`platform-custom-deployment-edit`	write
`platform-custom-deployment-list`	read
`platform-custom-deployment-read`	read
`platform-custom-deployment-restart`	write
`platform-insights-create`	write
`platform-insights-list`	read
`platform-insights-read`	read
`platform-insights-restart`	write
`platform-integration-tool-create`	write
`platform-integration-tool-list`	read
`platform-integration-tool-read`	read
`platform-integration-tool-restart`	write
`platform-load-balancer-create`	write
`platform-load-balancer-list`	read
`platform-load-balancer-read`	read
`platform-load-balancer-restart`	write
`platform-middleware-create`	write
`platform-middleware-list`	read
`platform-middleware-read`	read
`platform-middleware-restart`	write
`platform-private-key-create`	write
`platform-private-key-list`	read
`platform-private-key-read`	read
`platform-private-key-restart`	write
`platform-storage-create`	write
`platform-storage-list`	read
`platform-storage-read`	read
`platform-storage-restart`	write
`platform-workspace-list`	read
`platform-workspace-read`	read
`portal-mutation`	read
`portal-mutations`	read
`portal-queries`	read
`portal-query`	read
`prompts-get`	read
`prompts-list`	read
`resources-get`	read
`resources-list`	read
`thegraph-queries`	read
`thegraph-query`	read

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (4 observation(s))
Network: declared (5 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (25)

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

sdk/mcp/src/mcp.ts:76

* console.log(args.pat); // Personal Access Token

LOWInventory / provenance · inv.hidden_file · CWE-1104

.bun-version

.bun-version

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.node-version

.node-version

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInformation disclosure · disclose.log_secret · CWE-209, CWE-532

sdk/utils/src/logging/logger.test.ts:47

logger.info("test message with token: sm_pat_1234567890", { token: "sm_pat_1234567890" });

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

sdk/blockscout/tsdown.config.ts:3

import { createNodePackage, withPerformanceMonitoring } from "../../shared/tsdown-factory.ts";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

sdk/cli/src/commands/index.ts:6

import pkg from "../../package.json";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

sdk/cli/src/prompts/cluster-service/blockchain-node.prompt.ts:4

import { isRunning } from "../../utils/cluster-service";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

sdk/cli/src/utils/sdk-version.test.ts:5

import pkg from "../../package.json";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

sdk/cli/src/utils/sdk-version.ts:8

import pkg from "../../package.json";

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

tsdown

Why it matters. 1 dependency range(s) float