reputa-mcp

Reputa MCP: use wallet-risk analysis in your AI agent

Reputa analyses Ethereum wallets: how they behaved in real market crises, and how safe they are today. This is a small MCP server that exposes Reputa as tools any AI agent can call: Claude Desktop, Cursor, or any MCP host.

It's a thin wrapper over the public Reputa API. No API key needed for the free tool.

Tools

Tool	Cost	What it does
reputa_analyze_wallet	free	Crisis behaviour (Terra, Celsius, Voyager, FTX, Multichain, Humanity), risk verdict (risk_avoider / risk_manager / risk_seeker), activity type, and a security snapshot: unlimited approvals, flagged-address contact (mixer / scam / OFAC), protocol usage, portfolio concentration.
reputa_wallet_scores	paid (x402)	Full Security + Risk + Reputation scores with reason codes, profile traits (HODLer, DeFi-native, governance, staker, Safe/smart-account, or entity type CEX/DEX/bridge/DAO), and a staking & governance breakdown.
reputa_deep_approval_scan	paid (x402)	Full ERC-20 approval history (deeper than the free scan's recent window).
reputa_safe_check	paid (x402)	Gnosis Safe security check: on-chain version, transaction guard, and enabled modules (named or flagged unknown).
reputa_safe_owner	teaser free / details paid	Which Safes an address co-controls. Free Ethereum-only count; details:true returns the full multichain breakdown incl. Safe addresses (paid).
reputa_chain_history	paid (all windows)	Historical ETH/WETH distribution across chains, months = 3, 6, 12, or 24. The current distribution comes free with reputa_analyze_wallet.
reputa_full_report	paid (bundle)	Everything above in one paid call: scores + traits, Safe config, Safe co-control (all chains), deep approvals, and the 2-year history. Bundled price (default = single-scan price × 5).

Cover analyses (Cover Raccoon)

The cover area moved to its own site, coverraccoon.com, on 2026-07-20. These four tools still ship here and now call that site. The tool names stay unchanged so existing agent configs keep working.

As of 2026-07-24 these four tools also live in their own dedicated package, coverraccoon-mcp, under shorter names (cover_list, cover_analysis, cover_check, cover_buy_quote). Same API, same behaviour, just without the reputa_ prefix. Use that one for new setups; the tools here are not going away, they just stay reputa_cover_* for whoever already depends on that name.

Tool	Cost	What it does
reputa_cover_list	free	Catalog of every scored cover: Assecura score and band, covered protocol, coverage-gap counts, red flags, cheapest premium snapshot, analysis date. Source of valid provider/product slugs.
reputa_cover_analysis	paid (x402)	Full report on one cover: 7 score categories with notes, clause-by-clause gap map, claims process and payout history, capital adequacy, red flags, open questions, sources.
reputa_cover_check	paid (x402, cheap)	The decision question only: does this cover pay for my risk? Gap map plus all red-flag texts, priced for high-frequency agent use.
reputa_cover_buy_quote	free	Ready-to-sign purchase transaction for the Nexus Mutual CoverBroker, with disclosed commission and the compliance notices you must show your principal. Does not execute anything: you sign and submit yourself.

All paid tools use x402 (USDC on Polygon): with a payer wallet configured (REPUTA_PAYER_PRIVATE_KEY) the server pays autonomously (EIP-3009); otherwise it returns the payment requirements so the caller can pay and retry.

Ethereum mainnet only.

Requirements

• Node.js 18+ (node --version).

1. Get the server

git clone <this-repo>            # or download it
cd <repo>/mcp
npm install

Note the absolute path to server.js, e.g. /Users/you/reputer.xyz/mcp/server.js.

2. Add it to Claude Desktop

Open the config file (create it if it doesn't exist):

OS	Path
macOS	~/Library/Application Support/Claude/claude_desktop_config.json
Windows	%APPDATA%\Claude\claude_desktop_config.json

Add the reputa entry under mcpServers (merge with anything already in the file):

{
  "mcpServers": {
    "reputa": {
      "command": "node",
      "args": ["/ABSOLUTE/PATH/TO/mcp/server.js"]
    }
  }
}

If Claude reports "spawn node ENOENT", it can't find node on its PATH. Replace "node" with the absolute path from which node (macOS/Linux) or where node (Windows), e.g. "/usr/local/bin/node".

3. Restart Claude Desktop

Fully quit (⌘Q on macOS) and reopen. A window close is not enough; the config is only read on launch.

4. Try it

In a new chat:

Analyze the wallet 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045 with Reputa.

(That's vitalik.eth. Pass the 0x address; the tool doesn't resolve ENS itself.)

Configuration

Env var	Default	Purpose
REPUTA_BASE_URL	https://reputa.xyz	API base. Point at http://localhost:5173 for local development.
COVERRACCOON_BASE_URL	https://coverraccoon.com	Base for the four cover tools. Separate from REPUTA_BASE_URL since the 2026-07-20 split.
REPUTA_PAYER_PRIVATE_KEY	none	Optional. Private key of a wallet funded with USDC on Polygon. If set, the paid tools sign and pay the x402 charge autonomously (EIP-3009).

Set it in the config, e.g.:

"reputa": {
  "command": "node",
  "args": ["/ABSOLUTE/PATH/TO/mcp/server.js"],
  "env": {
    "REPUTA_BASE_URL": "https://reputa.xyz",
    "REPUTA_PAYER_PRIVATE_KEY": "0x…"
  }
}

Security: the payer key is a hot key that can spend USDC. Use a dedicated wallet, keep only a small balance on it, and never reuse a key that holds other funds. Each x402 charge is bounded (EIP-3009: exact amount, single-use nonce, ~short validity), so the most a single call can spend is the advertised price.

Troubleshooting

• Tools don't appear → invalid JSON in the config (check commas/braces), or Claude wasn't fully restarted.
• "spawn node ENOENT" → use the absolute path to node (see above).
• HTTP 403 / origin errors → you're pointing at an old deploy; the public API at https://reputa.xyz is open to agents.

Machine-readable API

The full API contract is published at https://reputa.xyz/openapi.json (OpenAPI 3.1). Agents can consume it directly, with or without this MCP wrapper.