Back to Browse

Eurorwa MCP Server

Developer ToolsUse Caution3.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

EuroRWA analyst: tokenized money-market fund signals, snapshots, analytics and alerts.

About

EuroRWA analyst: tokenized money-market fund signals, snapshots, analytics and alerts.

Remote endpoints: streamable-http: https://rwa-dashboard-gamma.vercel.app/mcp

Security Report

3.2
Use Caution3.2High Risk

EuroRWA is a legitimate tokenized RWA dashboard with responsible architecture, but contains several moderate security concerns that merit user awareness. The codebase properly isolates sensitive operations (on-chain signing, AI analysis) and uses environment-based credential management, but the X402 payment module stores sensitive cryptographic keys in memory without additional protection, and the analyst LLM integration lacks input validation on LLM responses. Dependencies are well-scoped and the project's permissions align with its stated purpose (web scraping, data storage, API integration, blockchain interaction). The score reflects the need for hardened credential handling and stronger validation on untrusted LLM outputs. Supply chain analysis found 10 known vulnerabilities in dependencies (0 critical, 3 high severity).

6 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

EuroRWA — Research Project

Independent research into public data transparency and verifiable snapshots for tokenized money-market funds (MMFs).

This repository is a research project. It studies how publicly available tokenized-MMF data can be collected, stored, and independently verified. It is provided as code and methodology for studying open financial data — not a product, service, or offering, and no hosted service, dashboard, or bot is operated here.

Free and open. The code is MIT-licensed and free to fork and use. There is no paywall, no API key, and no advertising — every endpoint (REST + MCP) is open, and the pipeline runs with no credentials. Monetization and freelance/lead-generation features that previously existed here have been removed.

Research questions

  • How can a daily fund snapshot be made independently verifiable (keccak-256 hash → signed → published on-chain)?
  • What does public tokenized-MMF data look like across EU + US issuers (TVL, yield, flows, holders)?
  • Can an analyst layer produce reproducible, explainable signals from that data?

What the code does

  1. Collect public fund data (rwa.xyz) → SQLite snapshots.
  2. Attest each snapshot: hash it (keccak-256), sign with a dedicated key, and publish the signature to a Sepolia contract.
  3. Analyze: deterministic scoring plus an analyst layer over news / on-chain flows / macro context.
  4. Verify: anyone can re-hash the data and check the on-chain signature.

Components

ComponentPath
Snapshot collectorsrc/fetch.ts
Store (SQLite)src/ingest.ts
Analystsrc/analyst/
On-chain attestationsrc/agent/
API (REST + MCP)api/
Pipeline scriptsscripts/

Verify an attestation

bun run verify            # latest snapshot
bun run verify -- 2026-08-06   # a specific date

Verifies the payload hash matches the published keccak-256 and that the recovered signer is the agent wallet.

Status

Research code, provided as-is for study. No hosted service is operated, and no keys are required to run it.

Compliance

Per Vietnamese law (prohibition on crypto/coin advertising and registration, effective 1 Sep 2026), this repository contains no public web dashboard and no advertising. It is distributed solely as open research code.

MIT © 2026 — data sourced from rwa.xyz public APIs. Not financial advice.

Reviews

No reviews yet

Be the first to review this server!