
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
EVM + MCP — give your AI assistant blockchain superpowers.
MCP server providing real-time access to on-chain data across Base, Optimism, Avalanche, and Celo, with companion smart contracts deployed on-chain for batch queries and cross-chain data.
EVMCP implements the Model Context Protocol (MCP), a standard that lets AI assistants call external tools. When connected, your AI assistant gains 28 read-only blockchain tools it can invoke to query balances, decode transactions, compare gas prices, and more across four EVM chains.
What sets EVMCP apart is its companion smart contracts — four Solidity contracts deployed on Avalanche and Celo that enable batch queries via Multicall3, an on-chain tool registry, event aggregation, and cross-chain balance caching. The MCP server reads from these contracts; all write operations are performed separately by an admin CLI.
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"evmcp": {
"command": "npx",
"args": ["-y", "evmcp"],
"env": { "ALCHEMY_API_KEY": "your_key_here" }
}
}
}
claude mcp add evmcp -- npx -y evmcp
| Chain | Chain ID | Native Token | Companion Contracts |
|---|---|---|---|
| Base | 8453 | ETH | Not yet deployed |
| Optimism | 10 | ETH | Not yet deployed |
| Avalanche C-Chain | 43114 | AVAX | Deployed |
| Celo | 42220 | CELO | Deployed |
Ethereum mainnet (chain ID 1) is also supported for ENS resolution only.
| Tool | Description |
|---|---|
getBalance | Get the native token balance (ETH/AVAX/CELO) of an address on a specific chain |
getTokenBalance | Get the ERC20 token balance of an address on a specific chain |
getMultiChainBalance | Get the native token balance of an address across all 4 supported chains in parallel |
| Tool | Description |
|---|---|
getBlock | Get a block by its hash on a specific chain |
getBlockByNumber | Get a block by its number on a specific chain, or pass "latest" for the most recent block |
getLatestBlock | Get the latest block number, timestamp, and base fee for a specific chain |
| Tool | Description |
|---|---|
getTransaction | Get a transaction by its hash on a specific chain |
getTransactionReceipt | Get the receipt for a transaction including status, gasUsed, and logs |
decodeTransaction | Decode a transaction's function call using a provided ABI |
| Tool | Description |
|---|---|
readContract | Call a read-only function on a smart contract with a provided ABI |
getContractCode | Check if an address has contract code deployed, with bytecode length and hash |
getStorageAt | Read the raw value of a storage slot at a specific address |
| Tool | Description |
|---|---|
getERC20Info | Get ERC20 token metadata including name, symbol, decimals, and total supply |
getTokenAllowance | Get the ERC20 token allowance granted by an owner to a spender |
| Tool | Description |
|---|---|
getGasPrice | Get current gas price and EIP-1559 fee data for a specific chain |
estimateGas | Estimate gas for a transaction on a specific chain |
compareGasAcrossChains | Compare current gas prices across all 4 supported chains |
| Tool | Description |
|---|---|
resolveENS | Resolve an ENS name (e.g. vitalik.eth) to an Ethereum address via Ethereum L1 |
lookupAddress | Reverse lookup an address to its ENS name via Ethereum L1 |
| Tool | Description |
|---|---|
getContractEvents | Get event logs emitted by a contract on a specific chain |
decodeEventLog | Decode a raw event log using a provided ABI |
| Tool | Description |
|---|---|
getChainInfo | Get chain name, chain ID, current block number, block time, and native symbol |
isContractDeployed | Check if an address has contract code deployed on all 4 supported chains |
healthCheck | Test connectivity to all 5 RPC endpoints (Ethereum, Base, Optimism, Avalanche, Celo) |
| Tool | Description |
|---|---|
batchQuery | Execute multiple read calls in a single RPC request using Multicall3 |
| Tool | Description |
|---|---|
compareBalances | Compare native token balances for an address across all 4 chains |
crossChainActivity | Check transaction counts for an address across all 4 chains |
| Tool | Description |
|---|---|
queryRegistry | Read registered tool metadata from the on-chain MCPRegistry companion contract |
| URI Pattern | Description | Cache TTL |
|---|---|---|
chain://{chainId}/status | Current block height and gas price for a chain | 12s |
chain://{chainId}/gas | Base fee, gas price, and priority fee in gwei | 12s |
chain://{chainId}/tokens/popular | Popular token addresses and decimals (hardcoded for v1) | 1 hour |
evmcp://chains | All supported chains with IDs, symbols, and companion contract addresses | Static |
Supported chain IDs for templated resources: 8453 (Base), 10 (Optimism), 43114 (Avalanche), 42220 (Celo).
| Prompt | Arguments | Description |
|---|---|---|
analyze-wallet | address | Multi-chain balance and activity analysis of a wallet |
audit-contract | contractAddress, chain | Basic inspection and audit workflow for a smart contract |
compare-chains | (none) | Compare gas costs, speed, and characteristics across all chains |
investigate-tx | txHash, chain | Decode, analyze, and trace a transaction in detail |
Four Solidity contracts are deployed on Avalanche and Celo. The MCP server reads from these contracts to provide batch queries, on-chain tool metadata, and cross-chain data. Base and Optimism deployments are planned.
| Contract | Address |
|---|---|
| MCPRegistry | 0x62402b65bfb4Fd022285A6FC2F26d8caEEc3D055 |
| BatchQuery | 0xfDc19e0617AdF1811A68Aa1575409F3769f39491 |
| EventAggregator | 0xECE24a53A28F088351EC2Da258f78479e81A8007 |
| CrossChainCache | 0x0899a6Ef23c6B39A4D9B877B219645B89209A670 |
| Contract | Address |
|---|---|
| MCPRegistry | 0x62402b65bfb4Fd022285A6FC2F26d8caEEc3D055 |
| BatchQuery | 0xfDc19e0617AdF1811A68Aa1575409F3769f39491 |
| EventAggregator | 0xECE24a53A28F088351EC2Da258f78479e81A8007 |
| CrossChainCache | 0x0899a6Ef23c6B39A4D9B877B219645B89209A670 |
| Variable | Required | Description |
|---|---|---|
ALCHEMY_API_KEY | Yes* | Alchemy API key (covers all chains) |
BASE_RPC_URL | No* | Override RPC URL for Base |
OPTIMISM_RPC_URL | No* | Override RPC URL for Optimism |
AVALANCHE_RPC_URL | No* | Override RPC URL for Avalanche |
CELO_RPC_URL | No* | Override RPC URL for Celo |
ETHEREUM_RPC_URL | No | Override RPC URL for ENS resolution |
CACHE_TTL_SECONDS | No | Cache TTL in seconds (default: 15) |
CACHE_MAX_ENTRIES | No | Max cache entries (default: 1000) |
LOG_LEVEL | No | debug, info, warn, or error (default: info) |
USE_TESTNETS | No | Use testnet chains (default: false) |
*Provide either ALCHEMY_API_KEY or all four individual chain RPC URLs.
pnpm install
pnpm build
pnpm inspect # MCP Inspector UI at localhost:6274
pnpm test # Unit tests
pnpm typecheck # Type check
pnpm lint # ESLint
MIT
FAQs
MCP server for multi-chain EVM blockchain data with companion smart contracts
We found that evmcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.