🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@hederatoolbox/platform

Package Overview
Dependencies
Maintainers
1
Versions
14
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@hederatoolbox/platform

Hedera blockchain intelligence for AI agents. 23 tools across 7 modules — HCS, compliance, governance, tokens, identity, contracts, Fixatum DID. Pay per call in HBAR. No registration required.

latest
Source
npmnpm
Version
3.5.5
Version published
Maintainers
1
Created
Source

HederaToolbox

The intelligence layer for AI agents on Hedera.

23 tools. 7 modules. Pay per call in HBAR. No registration.

npm MCP Registry Glama ClawHub Network License

HederaToolbox is a production Model Context Protocol server. It gives AI agents structured, metered access to the full Hedera ecosystem — HCS topics, tokens, identity, smart contracts, governance, compliance, and Fixatum DID registration.

Built for agents that need to reason about Hedera, not just interact with it.

Demo

Claude Desktop — one business objective, no steps specified, agent decides everything:

Claude Desktop Demo

Terminal agent — autonomous compliance workflow running headless:

Terminal Agent Demo

Autonomous Agent Examples

Four production-ready agents in examples/. Clone the repo, fund once, run. Zero dependencies beyond Node.js 18+.

One-time setup for all agents:

git clone https://github.com/mountainmystic/hederatoolbox.git
cd hederatoolbox

# Send any HBAR to the platform wallet from your Hedera account.
# Your account ID becomes your API key automatically within 10 seconds.
# Platform wallet: 0.0.10309126

Windows users: set env vars before running: set HEDERA_ACCOUNT_ID=0.0.YOUR_ID && set TOKEN_ID=0.0.731861 && node examples/whale-alert-agent.mjs Or edit the config constants directly at the top of each file.

🐋 Whale Alert Monitor

examples/whale-alert-agent.mjs

Monitors any Hedera token for unusual whale concentration on a schedule. When top-10 holders exceed your threshold, writes a tamper-proof whale_alert record to HCS and prints the Hashscan proof URL.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/whale-alert-agent.mjs
ConfigDefaultDescription
TOKEN_ID0.0.731861Token to monitor
THRESHOLD_PCT80Alert if top-10 holders exceed this %
CHECK_INTERVAL_MS3600000Check every hour

Cost: 0.2 ℏ per check · 5 ℏ only when anomaly fires

✅ Compliance Onboarding

examples/compliance-onboarding-agent.mjs

Screens a Hedera account before doing business with them. Runs identity resolution, sanctions screening, and optional KYC verification in sequence — then writes a tamper-proof compliance record to HCS. Returns APPROVED, REJECTED, PENDING_REVIEW, or PENDING_KYC.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID SUBJECT=0.0.999999 node examples/compliance-onboarding-agent.mjs

# With KYC check for your token:
HEDERA_ACCOUNT_ID=0.0.YOUR_ID SUBJECT=0.0.999999 KYC_TOKEN_ID=0.0.731861 node examples/compliance-onboarding-agent.mjs

Cost: ~1.7 ℏ per screening · add 0.5 ℏ for KYC check

🔍 Token Due Diligence

examples/token-due-diligence-agent.mjs

Full investment and listing due diligence on any Hedera token in one run. Pulls price data, deep holder analysis, admin key risks, and treasury account identity — outputs a structured risk report with an overall verdict.

HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/token-due-diligence-agent.mjs

Cost: ~1.0 ℏ per report (token_price + token_analyze + identity_resolve on treasury)

🗳️ DAO Governance Monitor

examples/dao-monitor-agent.mjs

Watches active governance proposals for a Hedera token on a schedule. Alerts when a proposal is closing within 24 hours. Pass --analyze with a PROPOSAL_ID for deep vote tally and outcome prediction.

# Monitor proposals
HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 node examples/dao-monitor-agent.mjs

# Deep-analyze a specific proposal (requires HCS topic)
HEDERA_ACCOUNT_ID=0.0.YOUR_ID TOKEN_ID=0.0.731861 TOPIC_ID=0.0.999 PROPOSAL_ID=42 node examples/dao-monitor-agent.mjs --analyze

Cost: 0.2 ℏ per check · 1.0 ℏ for deep analysis · 10 ℏ covers ~12 days at 4 checks/day

Connect

MCP endpoint:

https://api.hederatoolbox.com/mcp

Claude.ai (web or mobile) Settings → Connectors → Add → paste the endpoint URL above.

Claude Desktop app

Step 1 — install the package globally (required, do this once):

npm install -g @hederatoolbox/platform

Step 2 — add to claude_desktop_config.json under mcpServers:

{
  "mcpServers": {
    "hederatoolbox": {
      "command": "npx",
      "args": ["-y", "@hederatoolbox/platform"]
    }
  }
}

Restart Claude Desktop after saving the config.

Windows users: if you see npm error could not determine executable to run, your npm global directory may not exist yet. Run these first:

mkdir %APPDATA%\npm
npm config set prefix %APPDATA%\npm
npm install -g @hederatoolbox/platform

OpenClaw / ClawHub

Install the HederaToolbox skill directly from ClawHub:

clawhub install mountainmystic/hederatoolbox

Then add your Hedera account ID to your OpenClaw environment:

HEDERA_ACCOUNT_ID=0.0.YOUR_ACCOUNT_ID

Skill listing: clawhub.ai/mountainmystic/hederatoolbox

Cursor / other MCP-compatible clients Use the endpoint URL directly in your MCP server config.

How It Works

HederaToolbox uses agent-native HBAR payments. No accounts, no OAuth, no email.

1. get_terms        -> read the Terms of Service         (free)
2. confirm_terms    -> record consent                    (free)
3. account_info     -> get platform wallet + pricing     (free)
4. send HBAR        -> your account ID becomes your key  (auto-provisioned)
5. call any tool    -> pass your Hedera account ID as api_key

Platform wallet: 0.0.10309126 (mainnet)

Credits are persistent. Unused balance carries over indefinitely.

Safety Architecture

All safety controls run server-side and cannot be bypassed by modifying the npm package.

  • Consent gateconfirm_terms required before any paid tool executes
  • Atomic balance deduction — balance check and deduct are a single SQL operation, race-condition proof
  • Loop guard — same tool called >20 times in 60s by the same key is blocked automatically
  • No private keys — we never see your private key and never ask for it. You authenticate with your Hedera account ID — a public identifier, like a username. Your key stays in your wallet.

Terms of Service: get_terms tool or /public/terms.json

Tools

ToolDescription
get_termsMachine-readable Terms of Service. Call before anything else.
confirm_termsRecord consent. Required before any paid tool.
account_infoPlatform wallet address, full pricing table, your balance.

Module 1 — HCS Topic Intelligence

ToolCostDescription
hcs_monitor0.10 HBARTopic status, message count, recent activity
hcs_query0.10 HBARNatural language Q&A over topic messages, AI-ranked
hcs_understand1.00 HBARAnomaly detection, trend analysis, entity extraction

Module 2 — Compliance and Audit Trail

ToolCostDescription
hcs_write_record5.00 HBARWrite tamper-evident record to HCS
hcs_verify_record1.00 HBARVerify a record has not been altered
hcs_audit_trail2.00 HBARFull chronological audit history for an entity

Module 3 — Governance Intelligence

ToolCostDescription
governance_monitor0.20 HBARActive proposals, deadlines, current vote tallies
governance_analyze1.00 HBARVoter sentiment, participation rate, outcome prediction

Module 4 — Token Intelligence

ToolCostDescription
token_price0.10 HBARSpot price, 1h/24h/7d change, liquidity — via SaucerSwap
token_monitor0.20 HBARRecent transfers, whale movements, unusual patterns
token_analyze0.60 HBARHolder distribution, velocity, concentration, risk score

Module 5 — Identity Resolution

ToolCostDescription
identity_resolve0.20 HBARAccount profile: age, holdings, transaction history
identity_verify_kyc0.50 HBARKYC grant status and verification history for a token
identity_check_sanctions1.00 HBAROn-chain risk screening, counterparty patterns

Module 6 — Smart Contract Intelligence

ToolCostDescription
contract_read0.20 HBARMetadata, bytecode size, recent callers, gas stats
contract_call1.00 HBARRead-only function call — no gas, no transaction
contract_analyze1.50 HBARActivity patterns, caller distribution, risk classification

Accepts both Hedera native IDs (0.0.123456) and EVM addresses (0x...).

Module 7 — Fixatum DID Identity

Register agents on Fixatum — a W3C DID issuance and KYA (Know Your Agent) trust scoring platform built on Hedera.

ToolCostDescription
fixatum_register105 HBARRegister for a permanent W3C DID anchored to Hedera HCS and a live KYA trust score
fixatum_scoreFreeQuery live KYA score (0–100, grade A–F) and component breakdown for any registered agent
fixatum_statusFreeCheck registration status, current score, and whether provenance is actively building

Call fixatum_register without ed25519_public_key to get key generation instructions first — no charge until registration proceeds.

Changelog

v3.5.3 — Fixatum DID module added (fixatum_register, fixatum_score, fixatum_status) — 23 tools, 7 modules

v3.4.5 — Agent examples improved, xagent persona rewrite

v3.4.2 — X agent (Telegram-gated autonomous tweet drafting), agent examples added to repo

v3.4.0 — Repriced all tools across all 6 modules

v3.3.1 — Full security audit: SQLite-backed rate limiting, API key validation, 1MB body cap, separate BACKUP_SECRET, 90-day PII purge, HITL removed, legal pages deployed

Known Limitations

  • Mirror node balance endpoint occasionally returns empty for high-holder tokens. Metadata unaffected.
npmhttps://www.npmjs.com/package/@hederatoolbox/platform
MCP Registryhttps://registry.modelcontextprotocol.io/?q=hederatoolbox
Glamahttps://glama.ai/mcp/servers/mountainmystic/hederatoolbox
ClawHubhttps://clawhub.ai/mountainmystic/hederatoolbox
Live endpointhttps://api.hederatoolbox.com/mcp
Termshttps://api.hederatoolbox.com/terms

Note: The old package @hederaintel/platform is deprecated. Update your config to use @hederatoolbox/platform.

License

npm package — provided for integration use only.

Remote server and all backend logic — Proprietary. See LICENSE.md.

Enterprise licensing and SLA inquiries: open an issue titled [Enterprise].

Website

hederatoolbox.com

On-Chain Identity

HederaToolbox has a permanent platform identity record written to Hedera mainnet.

FieldValue
HCS Topic0.0.10353855
Record IDc420c3b9-408e-4f87-a9e1-1dcbb54facfa
Transaction0.0.10309126@1773623419.733217779
Written16 March 2026
Verifyhashscan.io/mainnet/topic/0.0.10353855

Keywords

hederatoolbox

FAQs

Package last updated on 17 Apr 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts