Hedera Toolbox

Built for agents that need toreasonabout Hedera, not just interact with it.

Claude Desktop— one business objective, no steps specified, agent decides everything:

Terminal agent— autonomous compliance workflow running headless:

git clone https://github.com/mountainmystic/hederatoolbox.git cd hederatoolbox # Send any HBAR to the platform wallet from your Hedera account. # Your account ID becomes your API key automatically within 10 seconds. # Platform wallet: 0.0.10309126

Windows users:set env vars before running:set HEDERA_ACCOUNT_ID=0.0.YOUR_ID && set TOKEN_ID=0.0.731861 && node examples/whale-alert-agent.mjsOr edit the config constants directly at the top of each file.

Built for platforms that accept agents as counterparties, DAOs monitoring delegate agents, and operators tracking a deployed agent fleet. Polling is free (fixatum_scorecosts nothing) — you only pay 0.1 HBAR when an alert actually fires.

Create awatched-agents.jsonfile next to the script:

ReturnsAPPROVED,REJECTED,PENDING_REVIEW, orPENDING_KYC.

Designed for token issuers, DEXes, DAOs, and treasury managers who want auditable counterparty screening with a reputation layer, not just a binary pass/fail.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC SUBJECT=0.0.999999 node examples/compliance-kya-onboarding-agent.mjs # With KYC check and tamper verification: HEDERA_ACCOUNT_ID=0.0.YOUR_ID HCS_TOPIC_ID=0.0.YOUR_TOPIC SUBJECT=0.0.999999 KYC_TOKEN_ID=0.0.731861 node examples/compliance-kya-onboarding-agent.mjs

Cost:~1.3 ℏbase ·~2.3 ℏwith verify ·~2.8 ℏwith verify + KYC

Note:identity_check_sanctionsis on-chain behavioural analysis of Hedera transaction patterns only. It is not a legal sanctions check against any government watchlist.

Monitors any Hedera token for unusual whale concentration on a schedule. When top-10 holders exceed your threshold, writes a tamper-proofwhale_alertrecord to HCS and prints the Hashscan proof URL.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/whale-alert-agent.mjs

Cost:0.2 ℏper check ·5 ℏonly when anomaly fires

Full investment and listing due diligence on any Hedera token in one run. Pulls price data, deep holder analysis, admin key risks, and treasury account identity — outputs a structured risk report with an overall verdict.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/token-due-diligence-agent.mjs

Cost:~1.0 ℏper report (token_price + token_analyze + identity_resolve on treasury)

Watches active governance proposals for a Hedera token on a schedule. Alerts when a proposal is closing within 24 hours. Pass--analyzewith aPROPOSAL_IDfor deep vote tally and outcome prediction.

# Monitor proposals HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/dao-monitor-agent.mjs # Deep-analyze a specific proposal (requires HCS topic) HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 TOPIC_ID=0.0.999 PROPOSAL_ID=42 node examples/dao-monitor-agent.mjs --analyze

Cost:0.2 ℏper check ·1.0 ℏfor deep analysis ·10 ℏcovers ~12 days at 4 checks/day

Claude.ai(web or mobile) Settings → Connectors → Add → paste the endpoint URL above.

Step 1 — install the package globally (required, do this once):

Step 2 — add toclaude_desktop_config.jsonundermcpServers:

Cursor / other MCP-compatible clientsUse the endpoint URL directly in your MCP server config.

HederaToolbox usesagent-native HBAR payments. No accounts, no OAuth, no email.

1. get_terms -> read the Terms of Service (free) 2. confirm_terms -> record consent (free) 3. account_info -> get platform wallet + pricing (free) 4. send HBAR -> your account ID becomes your key (auto-provisioned) 5. call any tool -> pass your Hedera account ID as api_key

Credits are persistent. Unused balance carries over indefinitely.

All safety controls runserver-sideand cannot be bypassed by modifying the npm package.

- Consent gate—confirm_termsrequired before any paid tool executes
- Atomic balance deduction— balance check and deduct are a single SQL operation, race-condition proof
- Loop guard— same tool called >20 times in 60s by the same key is blocked automatically
- No private keys— we never see your private key and never ask for it. You authenticate with your Hedera account ID — a public identifier, like a username. Your key stays in your wallet.

Accepts both Hedera native IDs (0.0.123456) and EVM addresses (0x...).

Callfixatum_registerwithouted25519_public_keyto get key generation instructions first — no charge until registration proceeds.

v3.5.3— Fixatum DID module added (fixatum_register, fixatum_score, fixatum_status) — 23 tools, 7 modules

v3.4.5— Agent examples improved, xagent persona rewrite

v3.4.2— X agent (Telegram-gated autonomous tweet drafting), agent examples added to repo

v3.4.0— Repriced all tools across all 6 modules

v3.3.1— Full security audit: SQLite-backed rate limiting, API key validation, 1MB body cap, separate BACKUP_SECRET, 90-day PII purge, HITL removed, legal pages deployed

- Mirror node balance endpoint occasionally returns empty for high-holder tokens. Metadata unaffected.

Note:The old package@hederaintel/platformis deprecated. Update your config to use@hederatoolbox/platform.

npm package— provided for integration use only.