
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@one-source/api-mcp
Advanced tools
MCP server for OneSource blockchain data — 22 named tools for balances, NFTs, transactions, events, and live chain queries via x402
MCP server for OneSource blockchain data. 22 named tools for balances, NFTs, transactions, events, and live chain queries via x402 micropayments.
npx onesource-api-mcp
claude mcp add onesource-api -- npx onesource-api-mcp
# With x402 payments
claude mcp add onesource-api -e X402_PRIVATE_KEY=0x... -- npx onesource-api-mcp
Add to your MCP config (claude_desktop_config.json or Cursor settings):
{
"mcpServers": {
"onesource-api": {
"command": "npx",
"args": ["-y", "onesource-api-mcp"],
"env": {
"X402_PRIVATE_KEY": "0x..."
}
}
}
}
Remove the env block to run without payments.
| Tool | Description |
|---|---|
1s_allowance_live | ERC20 allowance check |
1s_contract_info_live | Contract type detection via ERC165 |
1s_erc1155_balance_live | ERC1155 balance via RPC |
1s_erc20_balance_live | ERC20 balance via balanceOf |
1s_erc20_transfers_live | ERC20 Transfer logs via eth_getLogs |
1s_erc721_tokens_live | ERC721 token enumeration |
1s_events_live | Event logs via eth_getLogs |
1s_multi_balance_live | ETH + multiple ERC20 balances |
1s_nft_metadata_live | NFT metadata via tokenURI |
1s_nft_owner_live | NFT owner via ownerOf |
1s_total_supply_live | Token total supply |
1s_tx_details_live | Transaction + receipt via RPC |
| Tool | Description |
|---|---|
1s_contract_code | Contract bytecode |
1s_ens_resolve | ENS name/address resolution |
1s_estimate_gas | Gas estimation |
1s_network_info | Chain ID, block number, gas price |
1s_nonce | Transaction count |
1s_pending_block | Pending block from mempool |
1s_proxy_detect | Proxy contract detection |
1s_simulate_call | Simulate eth_call |
1s_storage_read | Read storage slot |
1s_tx_receipt | Transaction receipt |
All tools accept an optional network parameter:
| Network | Description |
|---|---|
ethereum | Ethereum mainnet (default) |
sepolia | Ethereum Sepolia testnet |
avax | Avalanche C-Chain |
Endpoints are priced in USDC on Base via x402. When X402_PRIVATE_KEY is set, the server automatically signs and settles USDC payments for each tool call. Without it, paid endpoints return 402 errors with a descriptive message.
X402_PRIVATE_KEY is an EVM wallet private key — the same kind used by MetaMask, Foundry, or any Ethereum wallet. It must be a hex string starting with 0x.
Option A — Export from MetaMask:
0x)Option B — Generate a new wallet:
# Using Foundry (cast)
cast wallet new
# Using OpenSSL
openssl rand -hex 32 | sed 's/^/0x/'
The wallet needs USDC on Base to pay for tool calls. Send USDC to your wallet address on the Base network. Typical tool calls cost fractions of a cent.
# Inline
X402_PRIVATE_KEY=0x... npx onesource-api-mcp
Or configure the key in your MCP client's env block (see Install above).
MIT
FAQs
MCP server for OneSource blockchain data — named tools for balances, NFTs, transactions, events, live chain queries, with x402 (USDC on Base) and MPP (Tempo) pay-per-call payment rails
The npm package @one-source/api-mcp receives a total of 610 weekly downloads. As such, @one-source/api-mcp popularity was classified as not popular.
We found that @one-source/api-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.