
Research
/Security News
CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.
@nirholas/binance-us-mcp-server
Advanced tools
MCP server for Binance.US exchange - spot trading, wallet management, and US-specific features
A Model Context Protocol (MCP) server for interacting with the Binance.US cryptocurrency exchange API.
This MCP server provides programmatic access to Binance.US exchange features including:
This server is specifically designed for Binance.US, which differs from Binance.com in several important ways:
| Feature | Binance.US | Binance.com |
|---|---|---|
| Base URL | api.binance.us | api.binance.com |
| WebSocket | stream.binance.us:9443 | stream.binance.com:9443 |
| Regulation | US SEC/FinCEN compliant | International |
| Futures Trading | ❌ Not available | ✅ Available |
| Margin Trading | ❌ Not available | ✅ Available |
| Lending | ❌ Not available | ✅ Available |
| Custodial Solution API | ✅ Available | ❌ Not available |
| Credit Line API | ✅ Available | ❌ Not available |
| Available Pairs | ~150 pairs | ~1,500+ pairs |
Binance.US offers three types of API keys:
# Clone the repository
git clone https://github.com/nirholas/universal-crypto-mcp.git
cd universal-crypto-mcp/binance-us-mcp-server
# Install dependencies
npm install
# Build the project
npm run build
Create a .env file or set these environment variables:
BINANCE_US_API_KEY=your_api_key_here
BINANCE_US_API_SECRET=your_api_secret_here
Add to your Claude Desktop config file (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"binance-us-mcp": {
"command": "node",
"args": ["/path/to/binance-us-mcp-server/build/index.js"],
"env": {
"BINANCE_US_API_KEY": "your_api_key",
"BINANCE_US_API_SECRET": "your_api_secret"
}
}
}
}
# Run in development mode with hot reload
npm run dev
# Test with MCP Inspector
npm test
# Build the project
npm run build
# Start the server
npm start
Binance.US has the following rate limits:
The server handles rate limiting automatically, but be mindful of these limits when making many requests.
The server returns standardized error responses:
{
"success": false,
"error": {
"code": -1121,
"msg": "Invalid symbol."
}
}
Common error codes:
-1000: Unknown error-1002: Unauthorized-1021: Timestamp outside recvWindow-1022: Invalid signature-2010: New order rejected-2011: Cancel rejectedContributions are welcome! Please read the contributing guidelines before submitting pull requests.
Detailed documentation is available in the docs/ folder:
MIT License - see LICENSE for details.
FAQs
MCP server for Binance.US exchange - spot trading, wallet management, and US-specific features
We found that @nirholas/binance-us-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The worm-enabled campaign hit @emilgroup and @teale.io, then used an ICP canister to deliver follow-on payloads.

Research
/Security News
Attackers compromised Trivy GitHub Actions by force-updating tags to deliver malware, exposing CI/CD secrets across affected pipelines.

Security News
ENISA’s new package manager advisory outlines the dependency security practices companies will need to demonstrate as the EU’s Cyber Resilience Act begins enforcing software supply chain requirements.