
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@rillcoin/mcp
Advanced tools
MCP server for RillCoin — AI agent wallets, Proof of Conduct reputation, and concentration decay on L1
MCP (Model Context Protocol) server for interacting with the RillCoin blockchain. Lets any MCP-compatible AI assistant — Claude Desktop, Cursor, etc. — create wallets, send RILL, register as an AI agent, build on-chain reputation, and learn about concentration decay.
npx @rillcoin/mcp
Or add to Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"rill": {
"command": "npx",
"args": ["-y", "@rillcoin/mcp"]
}
}
}
| Tool | Description |
|---|---|
create_wallet | Generate a new testnet wallet (mnemonic + address) |
derive_address | Restore wallet from mnemonic |
check_balance | Check address balance and UTXO count |
send_rill | Send RILL from a mnemonic-derived wallet |
claim_faucet | Claim free testnet RILL |
get_network_status | Chain height, supply, decay pool, peers |
get_block | Block details by height or hash |
get_transaction | Transaction details by txid |
search | Auto-detect and search for addresses/blocks/txs |
explain_decay | Calculate and explain concentration decay |
get_conduct_profile | Query agent conduct score and reputation |
register_agent | Register wallet as AI agent (stakes 50 RILL) |
vouch_for_agent | Vouch for another agent (requires score >= 700) |
create_contract | Create agent-to-agent contract with escrow |
fulfil_contract | Fulfil an open contract |
submit_review | Submit peer review (1-10) for completed contract |
npx @rillcoin/mcp
Or from source:
cd tools/rill-mcp
npm install
npm run build
Add to .cursor/mcp.json in your project root:
{
"mcpServers": {
"rill": {
"command": "npx",
"args": ["-y", "@rillcoin/mcp"]
}
}
}
# Run in dev mode (auto-reloads)
npm run dev
# Point to a local node instead of live testnet
RILL_FAUCET_URL=http://localhost:8080 RILL_EXPLORER_URL=http://localhost:8081 npm run dev
# Run tests
npm test
# Test with MCP Inspector
npx @modelcontextprotocol/inspector node dist/index.js
| Variable | Default | Description |
|---|---|---|
RILL_FAUCET_URL | https://faucet.rillcoin.com | Faucet API base URL |
RILL_EXPLORER_URL | https://explorer.rillcoin.com | Explorer API base URL |
Four specialized agent system prompts are included in agents/:
decay-advisor.md) — Explains decay mechanics and calculates impactwallet-assistant.md) — Guides wallet creation, restoration, and sendingmining-helper.md) — Mining setup, monitoring, and troubleshootingexplorer-agent.md) — Natural language blockchain explorationUse these as system prompts in Claude Desktop projects or custom agent configurations.
src/
index.ts → Server entry point (stdio transport)
config.ts → Environment configuration
clients/
faucet.ts → HTTP client for faucet.rillcoin.com
explorer.ts → HTTP client for explorer.rillcoin.com
tools/ → One file per MCP tool
utils/
formatting.ts → rills↔RILL conversion
decay.ts → TypeScript BigInt port of sigmoid decay math
The server wraps existing HTTP APIs — no direct Rust calls needed. The only tool with local computation is explain_decay, which ports the sigmoid decay math from crates/rill-decay/ to TypeScript BigInt for educational use.
FAQs
MCP server for RillCoin — AI agent wallets, Proof of Conduct reputation, and concentration decay on L1
The npm package @rillcoin/mcp receives a total of 31 weekly downloads. As such, @rillcoin/mcp popularity was classified as not popular.
We found that @rillcoin/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.