Loading…
Fuse Network's MCP server gives AI agents on-chain access to the Fuse blockchain.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The fuse-mcp-server MCP server exposes 50 tools, focused primarily on communication, database, and developer capabilities. Its published description reads: "Fuse Network's MCP server gives AI agents on-chain access to the Fuse blockchain". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates fuse-mcp-server F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check fuse-mcp-server's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add fuse-mcp-server to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.fuse.io/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Returns the native FUSE balance for an address, or an ERC-20 token balance when `tokenAddress` is supplied.
Fetches a transaction by hash. Returns null if the transaction is not found.
Fetches the receipt for a mined transaction (status, gasUsed, logs). Returns null if the transaction is pending or unknown.
Calls a view/pure function on a Fuse contract. ABI is auto-fetched from the verified Fuse explorer when not supplied.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: fuse_read_contract
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: fuse_notification_create_webhook
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
quires `FUSEBOX_SECRET_API_KEY` (Notification API endpoints authenticaRecommendationRemove side-channel parameters; constrain tool inputs.
tool: fuse_smart_wallet_authenticate
A tool description tries to alter the model’s use of another tool.
PI calls (e.g. `fuse_smart_wallet_get_actions`). Signing happens client-side; this tool onlyRecommendationDescriptions must describe only their own tool.
tool: fuse_smart_wallet_get_actions
A tool description tries to alter the model’s use of another tool.
JWT comes from `fuse_smart_wallet_authenticate`.RecommendationDescriptions must describe only their own tool.
tool: fuse_trade_indicative_price
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
address of the token to sell."},"buyToken":{"type":"string","descripRecommendationRemove side-channel parameters; constrain tool inputs.
tool: fuse_trade_indicative_price
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: fuse_explorer_query
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ogs`, `stats`, `token`, `transaction`."},"action":{"type":"string","dRecommendationRemove side-channel parameters; constrain tool inputs.
tool: fuse_get_signer_address
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
onfigured `FUSE_PRIVATE_KEY`. Use this before any write tool to confirm whiRecommendationRemove side-channel parameters; constrain tool inputs.
tool: fuse_get_signer_address
The text tells the model WHEN to call this tool relative to others ("always call first", "before any other tool", "chain to X tool") — a toxic-flow injection that hijacks the agent’s orchestration rather than describing the tool.
_KEY`. Use this before any write tool to confirm which account will pay gas and sendRecommendationTool metadata must describe only the tool, never sequence the agent’s calls.
tool: fuse_send_native
A tool description tries to alter the model’s use of another tool.
tion hash; use `fuse_get_receipt` to confirm inclusion.RecommendationDescriptions must describe only their own tool.
tool: fuse_send_erc20
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
etched from the token; use `unit: "base"` to skip scaling. {"type":"oRecommendationRemove side-channel parameters; constrain tool inputs.
tool: fuse_write_contract
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: fuse_smart_swap_tokens
A tool description tries to alter the model’s use of another tool.
wap first with `fuse_get_trade_quote` to preview the route.RecommendationDescriptions must describe only their own tool.
tool: fuse_smart_stake_token
A tool description tries to alter the model’s use of another tool.
ons first with `fuse_get_staking_options`.RecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: fuse_notification_create_webhook
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "fuse_notification_create_webhook"RecommendationScope tools to the minimum needed.
tool: fuse_notification_update_webhook
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "fuse_notification_update_webhook"RecommendationScope tools to the minimum needed.
tool: fuse_notification_delete_webhook
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "fuse_notification_delete_webhook"RecommendationScope tools to the minimum needed.
tool: fuse_notification_remove_addresses
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "fuse_notification_remove_addresses"RecommendationScope tools to the minimum needed.
tool: fuse_explorer_query
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "fuse_explorer_query"RecommendationScope tools to the minimum needed.
tool: fuse_get_signer_address
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "fuse_get_signer_address"RecommendationScope tools to the minimum needed.
tool: fuse_smart_execute_batch
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "fuse_smart_execute_batch"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Reads name, symbol, decimals, and totalSupply for an ERC-20 token deployed on Fuse.
Returns the current Fuse network gas price (in wei and gwei) along with EIP-1559 fee suggestions when available.
Resolves an ENS name to its EVM address. ENS is not deployed on Fuse — resolution requires `ENS_RPC_URL` to be configured (typically pointing at Ethereum mainnet). Plain hex addresses are passed throu
Reads ERC-4337 state for a smart account on Fuse: deployment status, EntryPoint nonce, and the account's deposit balance at the EntryPoint. Paymaster eligibility is not evaluated in v0.1.
Lists all ERC-20 tokens held by a wallet on Fuse, enriched with Fusebox metadata (symbol, decimals, USD value). Powered by the Fusebox SDK BalancesModule.
Lists all NFTs (ERC-721 / ERC-1155 collectibles) owned by a wallet on Fuse. Powered by the Fusebox SDK BalancesModule.
Lists every staking option supported by Fuse — token, APR, TVL, expiry, and the matching unstake token. Powered by the Fusebox SDK StakingModule.
Returns the active staking positions for a wallet — staked amount, USD value, earned rewards, and APR per position. Powered by the Fusebox SDK StakingModule.
Returns the current USD price for an ERC-20 token tracked by Fusebox. Powered by the Fusebox SDK TradeModule.
Returns the 24-hour percentage price change for an ERC-20 token tracked by Fusebox. Powered by the Fusebox SDK TradeModule.
Returns OHLC / interval price stats for an ERC-20 token over a week, month, or year. Powered by the Fusebox SDK TradeModule.
Returns the catalogue of ERC-20 tokens tracked by Fusebox (tradable, indexed, priced). Powered by the Fusebox SDK TradeModule.
Quotes a token swap on Fuse — expected output amount, route, and price impact. Read-only: returns the quote without submitting a trade. Powered by the Fusebox SDK TradeModule.
Returns the ERC-4337 UserOperation history for a smart account on Fuse, indexed via the Fusebox GraphQL service. Powered by the Fusebox SDK GraphQLModule.
Create a Fusebox Notification webhook for a project. Requires `FUSEBOX_SECRET_API_KEY` (Notification API endpoints authenticate with both apiKey and API-SECRET).
Retrieve details of a single Fusebox Notification webhook. Requires `FUSEBOX_SECRET_API_KEY`.
List every Fusebox Notification webhook configured for a given project. Requires `FUSEBOX_SECRET_API_KEY`.
Update a Fusebox Notification webhook's URL or event type. Requires `FUSEBOX_SECRET_API_KEY`.
Permanently delete a Fusebox Notification webhook. Destructive — the webhook stops receiving events. Requires `FUSEBOX_SECRET_API_KEY`.
Add one or more EVM addresses to a webhook's listening scope. Requires `FUSEBOX_SECRET_API_KEY`.
Remove EVM addresses from a webhook's listening scope. Requires `FUSEBOX_SECRET_API_KEY`.
List every EVM address monitored by a given webhook. Requires `FUSEBOX_SECRET_API_KEY`.
Exchange an EIP-191 signature for a JWT used as Bearer auth on Smart Wallet API calls (e.g. `fuse_smart_wallet_get_actions`). Signing happens client-side; this tool only submits the signed payload.
List the paginated action history (transfers, contract calls) of an authenticated smart wallet. The JWT comes from `fuse_smart_wallet_authenticate`.
Returns an indicative price + route for a swap on Fuse (0x-style response). One of `sellAmount` / `buyAmount` must be provided.
Returns the liquidity sources currently enabled for Fuse-chain trades (e.g. voltage.finance, sub-pools).
Returns a token's price change over a custom day-count window (`{ priceChange, currentPrice, previousPrice }`).
Generic dispatcher for the Fusebox Explorer API (`/api/v0/explorer/`). Pass `module` + `action` + any additional query params. Covers all 40+ etherscan-compatible endpoints including balances, logs, t
Returns the EOA address controlled by the server's configured `FUSE_PRIVATE_KEY`. Use this before any write tool to confirm which account will pay gas and send transactions.
Submits a signed transaction transferring native FUSE from the server's signer to a recipient. Returns the transaction hash; use `fuse_get_receipt` to confirm inclusion.
Submits a signed `ERC20.transfer(to, amount)` from the server's signer. Decimals are auto-fetched from the token; use `unit: "base"` to skip scaling.
Signs and submits a state-mutating contract call from the server's signer. ABI is auto-fetched from the Fuse explorer when not supplied. Returns the transaction hash.
Signs and submits a contract-deployment transaction using the server's signer. Returns the transaction hash, and the deployed contract address when `waitForReceipt: true`.
Signs a message with the server's signer using EIP-191 (`personal_sign`). Returns the 65-byte signature as hex. No on-chain transaction is submitted.
Signs a structured EIP-712 payload with the server's signer. Returns the 65-byte signature as hex. No on-chain transaction is submitted.
Returns the ERC-4337 smart-wallet address derived from the configured signer, plus whether the Fuse paymaster (gasless mode) is enabled.
Submits an ERC-4337 UserOperation transferring a token (native FUSE or ERC-20) from the configured smart wallet. Gasless when `FUSE_USE_PAYMASTER=true`.
Submits an ERC-4337 UserOperation transferring an NFT (ERC-721 / ERC-1155) from the configured smart wallet to a recipient.
Submits an ERC-4337 UserOperation calling `ERC20.approve(spender, amount)` from the configured smart wallet.
Submits an ERC-4337 UserOperation calling `approve(spender, tokenId)` on an NFT contract from the configured smart wallet.
Atomically approves a token and invokes a follow-up call on the spender from the configured smart wallet. Common DeFi pattern.
Submits an ERC-4337 UserOperation invoking arbitrary calldata on a contract from the configured smart wallet. Use when you need full control over the encoded call.
Submits a single ERC-4337 UserOperation that executes a sequence of contract calls atomically. Failed sub-calls revert the whole batch.
Submits an ERC-4337 UserOperation executing a swap on Fuse via the Fusebox trade engine. Quote a swap first with `fuse_get_trade_quote` to preview the route.
Submits an ERC-4337 UserOperation that stakes a token using Fuse's staking module. List options first with `fuse_get_staking_options`.
Submits an ERC-4337 UserOperation that unstakes a token via Fuse's staking module.