
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@guavawalletintelligence/mcp-server
Advanced tools
MCP server for Guava Wallet Intelligence - crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains. Connect AI agents (Claude, Cursor, Windsurf, Devin) to Guava's security API.
Connect AI agents (Claude, Cursor, Windsurf, Devin) to Guava Wallet Intelligence's crypto security API via the Model Context Protocol.
No installation needed. Add the remote URL to your MCP client config:
{
"mcpServers": {
"guava": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.guavaintel.com/mcp",
"--header",
"X-API-Key: gw_your_api_key_here"
]
}
}
}
Get your API key at guavaintel.com/api-access.
npm install -g @guavawalletintelligence/mcp-server
{
"mcpServers": {
"guava": {
"command": "guava-mcp-server",
"env": {
"GUAVA_API_KEY": "gw_your_api_key_here",
"GUAVA_API_URL": "https://api.guavaintel.com"
}
}
}
}
Check if a token is a honeypot or has security risks.
Returns: honeypot status, risk score (0-100), buy/sell tax, contract verification, owner privileges, holder count.
Analyze a wallet's risk profile, transaction history, and token holdings.
Returns: risk score, balance, transaction count, token holdings, risk flags.
List all 31 supported blockchains. No parameters required.
Ethereum, Solana, BSC, Base, Arbitrum, Polygon, Optimism, Avalanche, zkSync, Linea, Scroll, Mantle, Blast, Celo, and more (31 total).
Uses the same API key for both the REST API and MCP server. Existing Guava users with gw_... or gwa_... keys can use MCP without changes.
OAuth 2.1 with PKCE is also supported for interactive MCP clients (Cursor, Devin, etc.) that prefer browser-based login.
MIT
FAQs
MCP server for Guava Wallet Intelligence - crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains. Connect AI agents (Claude, Cursor, Windsurf, Devin) to Guava's security API.
The npm package @guavawalletintelligence/mcp-server receives a total of 25 weekly downloads. As such, @guavawalletintelligence/mcp-server popularity was classified as not popular.
We found that @guavawalletintelligence/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.