
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
blocklottos-mcp
Advanced tools
A public, open-source MCP server and cross-agent skill for safely reading Block Lottos data and preparing one bounded Base Future Ledger ticket.
mcp-name: com.blocklottos/blocklottos
Block Lottos can be presented as a weekly probability challenge, but not as a solvable equation. Six winning numbers will be drawn, yet a random future draw has no known equation that agents can solve to reveal those numbers in advance. Agents may analyze history, simulate, select numbers, submit an eligible lottery entry, and verify the result, but must never claim certainty or conceal the lottery and ticket cost.
skills/block-lottos-probability-challenge/SKILL.md.Canonical skill URL:
https://blocklottos.com/skills/block-lottos-probability-challenge/SKILL.md
mkdir -p ~/.hermes/skills/block-lottos-probability-challenge
curl -fsSL https://blocklottos.com/skills/block-lottos-probability-challenge/SKILL.md \
-o ~/.hermes/skills/block-lottos-probability-challenge/SKILL.md
Start a new Hermes session so the skill loader discovers it.
Run from the OpenClaw workspace:
mkdir -p skills/block-lottos-probability-challenge
curl -fsSL https://blocklottos.com/skills/block-lottos-probability-challenge/SKILL.md \
-o skills/block-lottos-probability-challenge/SKILL.md
Start a new OpenClaw session so it loads the workspace skill.
Download the canonical SKILL.md into that runtime's supported skill directory. The file follows the open Agent Skills SKILL.md format and contains no credentials or executable installer.
A versioned source archive is also available at:
https://blocklottos.com/downloads/blocklottos-agent-tools-v1.0.0.zip
Install from the Python Package Index:
python -m pip install blocklottos-mcp
Or launch the standard-input/output MCP without a permanent installation:
uvx blocklottos-mcp
The public Block Lottos Git mirror remains available as a source fallback:
uvx --from git+https://blocklottos.com/git/blocklottos-agent-tools.git blocklottos-mcp
Add this to ~/.hermes/config.yaml, then restart Hermes:
mcp_servers:
block_lottos:
command: uvx
args:
- blocklottos-mcp
timeout: 30
connect_timeout: 60
sampling:
enabled: false
Hermes exposes the tools with names such as mcp_block_lottos_get_jackpot.
Configure a standard-input/output server with:
uvxblocklottos-mcpNo API key is required. Financial transactions remain unsigned and require the wallet owner's approval or an explicit, bounded, revocable spending policy.
get_capabilitiesget_jackpot for Base or Polygonget_statsget_draw_historyget_draw_proofget_wallet_ticketscheck_wallet_prizesget_or_create_referralprepare_ticket_purchaseconfirm_ticket_purchasepython3.12 -m venv .venv
.venv/bin/python -m pip install -e '.[test]'
.venv/bin/pytest -q
Only participate when the wallet owner meets the legal age requirement and lottery participation is permitted in their jurisdiction. Never chase losses, silently increase limits, use unlimited approvals, imply guaranteed winnings, or represent a random draw as a solved mathematical equation.
MIT. See LICENSE.
FAQs
Safe Block Lottos MCP for Base ticket preparation and Base/Polygon jackpot reads
We found that blocklottos-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.