
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@rougechain/mcp-server
Advanced tools
MCP server for RougeChain — AI agents read AND transact on a post-quantum blockchain
AI agents can now read and transact on a post-quantum blockchain.
The first MCP-native blockchain integration — lets AI agents (Claude, ChatGPT, custom agents) read chain state, query tokens, check balances, deploy WASM smart contracts, and — with a wallet configured — sign and submit real transactions (transfers, swaps, token/NFT minting, staking, social posts, and more) using the Model Context Protocol.
Every write is signed locally with ML-DSA-65 (FIPS 204) via @rougechain/sdk — private keys never leave the server process.
| Mode | How | What the agent can do |
|---|---|---|
| Read-only (default) | no wallet env | All query tools. Safe to expose anywhere. |
| Read + write | set a wallet env (below) | Everything above plus signed transactions from that wallet. |
Write tools are only registered when a wallet is configured — with no wallet, the server is strictly read-only and the transaction tools don't even appear.
No install needed — the server is published on npm as @rougechain/mcp-server and runs via npx.
Add to ~/.config/claude/claude_desktop_config.json:
{
"mcpServers": {
"rougechain": {
"command": "npx",
"args": ["-y", "@rougechain/mcp-server"],
"env": {
"ROUGECHAIN_URL": "https://api.rougechain.io"
}
}
}
}
cd mcp-server
npm install
npm run build
Then point the config at the built file:
{
"mcpServers": {
"rougechain": {
"command": "node",
"args": ["/path/to/quantum-vault/mcp-server/dist/index.js"],
"env": { "ROUGECHAIN_URL": "https://api.rougechain.io" }
}
}
}
| Variable | Default | Description |
|---|---|---|
ROUGECHAIN_URL | https://api.rougechain.io | RougeChain API host (the api. subdomain — not the rougechain.io frontend, which serves the web app) |
ROUGECHAIN_API_KEY | (none) | Optional API key |
ROUGECHAIN_MNEMONIC | (none) | Enables write mode. 12/24-word BIP-39 seed of the signing wallet |
ROUGECHAIN_PRIVATE_KEY + ROUGECHAIN_PUBLIC_KEY | (none) | Alternative to the mnemonic — raw hex keys |
⚠️ The mnemonic/private key controls real funds. Only set it for a wallet you intend the agent to spend from, keep it out of shared configs, and prefer a low-balance "agent wallet". Need a fresh one? Call the
generate_wallettool.
{
"mcpServers": {
"rougechain": {
"command": "npx",
"args": ["-y", "@rougechain/mcp-server"],
"env": {
"ROUGECHAIN_URL": "https://api.rougechain.io",
"ROUGECHAIN_MNEMONIC": "word1 word2 … word24"
}
}
}
}
generate_wallet — Create a fresh ML-DSA-65 wallet (mnemonic + address); not persistedwallet_info — Show the configured signer, its address, live balance, and whether writes are enabledsend_transaction, burn_tokens, stake, unstake, request_faucet (testnet)create_token, mint_tokens, update_token_metadata, claim_token_metadataswap, create_pool, add_liquidity, remove_liquiditynft_create_collection, nft_mint, nft_batch_mint, nft_transfer, nft_burn, nft_lock, nft_freeze_collectionregister_name, release_namecreate_post, delete_post, repost, follow, like_track, comment_on_trackbridge_withdrawget_chain_stats — Network stats (height, peers, validators, supply)get_block — Get block by heightget_latest_blocks — Recent blocksget_balance — Check XRGE or token balanceget_transaction — Look up a transactionlist_tokens — All custom tokensget_token — Token metadataget_token_holders — Top holderslist_pools — Liquidity poolsget_swap_quote — AMM swap quotelist_nft_collections — All NFT collectionsget_nft_collection — Collection details + tokenslist_validators — Network validatorslist_contracts — All deployed contractsget_contract — Contract metadataget_contract_state — Read contract storageget_contract_events — Contract event logdeploy_contract — Deploy WASM bytecodecall_contract — Execute contract methodget_global_timeline — Global post timeline (newest first)get_post — Get a single post with engagement statsget_user_posts — Get posts by a specific userget_post_replies — Get threaded replies to a postget_track_stats — Get play/like/comment stats for a trackget_artist_stats — Get follower/following counts for an artistresolve_name — Resolve a mail name to wallet info and encryption keysreverse_lookup_name — Look up the registered mail name for a wallet IDlist_messenger_wallets — List registered messenger wallets with display nameslist_proposals — Governance proposalsget_fee_info — Dynamic fee info (EIP-1559)rougechain://info — Static context about RougeChain's tech stack, features, and APIAI Agent (Claude/GPT/GLTCH)
↕ stdio (MCP protocol)
RougeChain MCP Server
↕ HTTPS
RougeChain Node API
↕ PQC-signed transactions
RougeChain L1 (ML-DSA + ML-KEM)
All operations maintain post-quantum security. WASM contract execution runs in a fuel-metered sandbox. Transactions are ML-DSA-65 signed.
FAQs
MCP server for RougeChain — AI agents read AND transact on a post-quantum blockchain
The npm package @rougechain/mcp-server receives a total of 1 weekly downloads. As such, @rougechain/mcp-server popularity was classified as not popular.
We found that @rougechain/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.