recon-crypto-mcp

Install VaultPilot MCP from https://github.com/szhygulin/vaultpilot-mcp following AGENTS.md.

- Portfolio— cross-chain balances, DeFi position aggregation, USD totals, NFT collections (EVM + Solana via Helius DAS), wallet-level PnL (mtd/ytd/30d/7d/1d), daily briefing
- Positions— Aave, Compound, Morpho, Uniswap V3 LP, Curve, MarginFi, Kamino, Safe (Gnosis) multisig; multi-protocol health-factor alerts; liquidation-risk simulation
- Staking— Lido (stake / unstake / stETH↔wstETH wrap) + EigenLayer + Rocket Pool (EVM); TRON Stake 2.0 (freeze / unfreeze / vote / claim); Solana (Marinade, Jito, native delegate/deactivate/withdraw)
- Swaps + bridges— LiFi (EVM + EVM↔Solana + TRON + BTC routes, optional 1inch cross-check), Jupiter v6 (Solana), direct Uniswap V3, Curve, SunSwap (TRON)
- Execution— prepare/sign for every supported protocol + native/token sends, ERC-20 approvals + revoke, WETH wrap/unwrap,prepare_custom_callescape hatch for arbitrary verified-contract calls. Solana sends use a per-wallet durable-nonce account so Ledger review doesn't race the ~60s blockhash window; every Solana prepare runs asimulateTransactiongate so program-level reverts fail at prepare time, not on broadcast.
- Bitcoin + Litecoin— native segwit + taproot sends, BIP-125 RBF fee-bumps, PSBT multisig (combine / sign / finalize), BIP-137 message signing, mempool.space fee estimation, optional Bitcoin Core / Litecoin Core RPC for forensic chain reads (forks, mempool census, fee percentiles)
- Security— contract verification, upgradeability checks, privileged-role enumeration, DefiLlama-backed risk score, on-device Ledger attestation + firmware version pin,verify_tx_decodefor second-LLM bytes-vs-intent cross-check, signed on-disk contacts/address-book
- Utilities— ENS resolution, symbol→contractresolve_tokenregistry, token balances, allowance enumeration, tx status,explain_txpost-hoc decode,compare_yieldsacross lending + LST adapters
- Demo mode— curated personas (whale/defi-degen/stable-saver/staking-maxi) for first contact with no RPC keys / Ledger / config file

Compromise model: the AI agent, MCP server, and host computer can all be attacker-controlled. Only the Ledger is trusted. Every transaction is cryptographically bound across each layer so tampering — a swapped recipient, a rewritten swap route, a smuggled approval — is tamper-evident on the device screen before signing.

user-intent ──► agent ──► MCP server ──► WalletConnect / USB-HID ──► Ledger Live / host ──► Ledger device

Agent-side hardening (strongly recommended)

git clone https://github.com/szhygulin/vaultpilot-security-skill.git \ ~/.claude/skills/vaultpilot-preflight

Restart Claude Code. The skill file's SHA-256 is pinned in the server source; on-disk tamper or plugin collision surfaces asintegrity check FAILED.

git clone https://github.com/szhygulin/vaultpilot-setup-skill.git \ ~/.claude/skills/vaultpilot-setup

EVM— Ethereum, Arbitrum, Polygon, Base, Optimism. Lido reads on Ethereum + Arbitrum, Lido writes Ethereum-only. EigenLayer + Morpho Blue + Rocket Pool Ethereum-only. Compound V3 + Aave V3 + Uniswap V3 + LiFi + Safe multisig span all five chains; per-protocol address coverage varies — readers short-circuit cleanly where a protocol isn't deployed.

TRON— TRX + canonical TRC-20 stablecoins (USDT, USDC, USDD, TUSD); Stake 2.0 freeze/unfreeze/withdraw-expire-unfreeze + voting-reward claims; SunSwap (same-chain TRX↔TRC-20 swaps); LiFi-routed TRON↔EVM bridging. No lending/LP (Aave/Compound/Morpho/Uniswap aren't deployed). Pair once per session viapair_ledger_tron.

Solana— SOL + SPL balances, MarginFi + Kamino lending, Marinade / Jito / native stake-account reads with SOL-equivalent valuation, Jupiter v6 quotes, Helius DAS NFT portfolio. Writes cover SOL/SPL transfers, MarginFi + Kamino supply/withdraw/borrow/repay, Jupiter swaps, Marinade stake + immediate-unstake, Jito stake-pool deposit, native SOL delegate/deactivate/withdraw, and LiFi-routed EVM↔Solana bridging. Per-wallet durable-nonce account (~0.00144 SOL rent, reclaimable) protects sends from blockhash expiry during Ledger review (prepare_solana_nonce_init/_close). SPL / MarginFi / Kamino / Jupiter / Jito blind-sign against a Message Hash — enableAllow blind signingin the Solana app's Settings; SOL native transfers clear-sign. Pair once per session viapair_ledger_solana.

Ledger Live's WalletConnect bridge does not honor thetron:namespace (verified 2026-04-14) or expose Solana accounts (verified 2026-04-23) or expose BTC/LTC namespaces, which is why those paths use USB HID. Readers short-circuit cleanly on chains where a protocol isn't deployed.

~190 tools across read / pair-Ledger / prepare / sign+send / verify / diagnostic categories. Highlights below; each tool has a Zod input schema and verbose description — query the MCP server'stools/listfor the canonical surface.

- get_portfolio_summary,get_portfolio_diff,get_pnl_summary,get_daily_briefing— cross-chain USD aggregation; optionaltronAddress/solanaAddressfold those chains in
- get_lending_positions(Aave),get_compound_positions,get_morpho_positions,get_marginfi_positions,get_kamino_positions,get_curve_positions,get_safe_positions— per-protocol positions + health factors
- get_lp_positions— Uniswap V3 LP + IL estimate
- get_staking_positions,get_staking_rewards,estimate_staking_yield— Lido + EigenLayer + Rocket Pool
- get_solana_staking_positions— Marinade + Jito + native stake-account enumeration with activation status and SOL-equivalent valuation
- get_tron_staking,list_tron_witnesses— TRON Stake 2.0 state + SR list
- get_nft_portfolio(EVM + Solana DAS),get_nft_collection,get_nft_history,get_nft_listings(EVM)
- get_btc_balance/_balances/_account_balance/_multisig_balance/_multisig_utxos/_tx_history/_fee_estimates,get_ltc_balance— BTC + LTC reads via Esplora
- get_compound_market_info— wallet-less Comet snapshot
- get_health_alerts,simulate_position_change— multi-protocol liquidation-risk tooling
- compare_yields— rank lending APRs across Aave / Compound / Morpho / Marinade / Jito / Kamino-lend / MarginFi
- get_marginfi_diagnostics— banks the bundled SDK skipped, with root cause

- get_token_balance,get_token_price,get_token_metadata,get_token_allowances,get_coin_price— balances + DefiLlama prices on EVM/TRON/Solana;get_token_metadatadetects EIP-1967 proxies
- get_transaction_history— merged tx reader (external / ERC-20 / internal / Solana program_interaction) with 4byte-decoded methods + historical USD
- get_transaction_status— poll inclusion by hash
- explain_tx— post-hoc decode of a historical tx
- resolve_token,resolve_ens_name,reverse_resolve_ens

Forensic chain reads (require Bitcoin/Litecoin Core RPC):

- get_btc_block_tip/_block_stats/_blocks_recent/_chain_tips/_mempool_summary,get_ltc_equivalents
- build_incident_report,get_market_incident_status— Compound/Aave pause + utilization scan and BTC/LTC chain-tip / mempool-anomaly bundle

- pair_ledger_live(EVM/WC),pair_ledger_tron/_solana/_btc/_ltc(USB HID)
- prepare_aave_,prepare_compound_,prepare_morpho_— EVM lending (supply / borrow / withdraw / repay)
- prepare_lido_stake/_unstake/_wrap/_unwrap(stETH↔wstETH),prepare_eigenlayer_deposit,prepare_rocketpool_stake/_unstake
- prepare_swap(LiFi),prepare_native_send,prepare_token_send,prepare_token_approve,prepare_revoke_approval,prepare_weth_unwrap
- prepare_uniswap_swap— direct V3 swap, same-chain, auto-picks fee tier across 100/500/3000/10000 bps. Use only when the user names Uniswap; otherwise prefer LiFi
- prepare_uniswap_v3_mint/_increase_liquidity/_decrease_liquidity/_collect/_burn/_rebalance— full LP verb set
- prepare_curve_swap,prepare_curve_add_liquidity
- prepare_safe_tx_propose/_approve/_execute,submit_safe_tx_signature— Safe multisig proposal flow
- prepare_custom_call— escape hatch for arbitrary verified-contract calls (acknowledgeNonProtocolTarget: truegate; bypasses the canonical-dispatch allowlist by design)
- prepare_tron_— native + TRC-20 transfers, WithdrawBalance, Stake 2.0, vote, claim rewards, TRC-20 approve, LiFi swap, SunSwap swap (prepare_sunswap_swap)
- prepare_solana_nonce_init/_close— one-time durable-nonce PDA setup/teardown
- prepare_solana_native_send,_spl_send(auto-includes ATA create),prepare_solana_swap(Jupiter),prepare_solana_lifi_swap
- prepare_marginfi_init,_supply,_withdraw,_borrow,_repay
- prepare_kamino_init_user,_supply,_withdraw,_borrow,_repay
- prepare_marinade_stake/_unstake_immediate(fee applies; unstake-ticket delayed path deferred),prepare_jito_stake(stake only — unstake deferred),list_solana_validators
- prepare_native_stake_delegate/_deactivate/_withdraw— native SOL staking
- prepare_btc_send,prepare_btc_rbf_bump,prepare_btc_multisig_send,register_btc_multisig_wallet/unregister_btc_multisig_wallet,combine_btc_psbts,sign_btc_multisig_psbt,finalize_btc_psbt,sign_message_btc,prepare_btc_lifi_swap,rescan_btc_account
- prepare_litecoin_native_send,sign_message_ltc,rescan_ltc_account
- preview_send(EVM) — pins gas, emitsLEDGER BLIND-SIGN HASHfor pre-match, mintspreviewToken; required between every EVMprepare_andsend_transaction
- preview_solana_send— pins nonce/blockhash, computes Message Hash for on-device match, runs simulation, emitsCHECKS PERFORMED; required between everyprepare_solana_andsend_transaction
- send_transaction— forwards to Ledger (EVM via WC, TRON/Solana/BTC/LTC via USB HID)

get_demo_walletlists personas + addresses +rehearsableFlows.set_demo_wallet({ persona })activates one. State is process-local.exit_demo_modereturns a handoff guide for permanent setup. Demo is a scaffold for first contact, not a sandbox — no virtual chain overlay.

Use with Claude Code (CLI) / Cursor / Claude Desktop

All optional if the matching field is in~/.vaultpilot-mcp/config.json; env wins.

npm run dev # tsc --watch npm test # vitest run npm run test:watch

- Personal self-custodial use is free, including yield / swap / lend / stake on your own behalf.
- Internal organizational use is free.
- Hosted services and embedded redistribution require a commercial license— open an issue or contact the maintainer.
- Auto-converts to Apache 2.0 on 2030-04-26.Each version's restrictions expire four years after release.
- Versions ≤ 0.8.2 remain MIT.The license change applies to v0.9.0 onward.

MCP to interface with multiple blockchains, staking, DeFi, swap, bridging, wallet management, DCA, Limit Orders, Coin Lookup, Tracking and more.

Financial intelligence for AI agents — 31 tools across 8 data sources including regime, derivatives, stablecoin flows, momentum, macro, weather patterns, and political cycles.

Execute stock and crypto trades via Trade Agent

MCP server for Aave — lending pool data, reserve info, user positions, and liquidation thresholds.

Bitcoin-native MCP server for AI agents: BTC/STX wallets, DeFi yield, sBTC peg, NFTs, and x402 payments.

Provides real-time prices for assets like precious metals and cryptocurrencies.

EUR settlement for AI agents. USDC/EURC to EUR via SEPA Instant. Trust scoring (KYA 0-100), market data, crypto analytics, AI tools.

Full-lifecycle algorithmic trading: describe strategies in plain English, AI generates code, backtest on real data, deploy live to 10+ brokers. Stocks, options, crypto, futures. Free tier available.

Crypto prices, market data, and token metadata via CoinGecko.