Web3 Signals MCP Server

Web3 Signals MCP is a sophisticated crypto signal aggregation server with generally sound architecture, but has several moderate security concerns that warrant user awareness. The x402 payment middleware and CDP authentication add complexity with potential initialization failure modes; environment variable handling could expose secrets in logs; and the broad network permissions (required for its purpose) should be understood. Permissions are appropriate for a financial data aggregator, but the server's reliance on external APIs and unauthenticated local caching create avenues for data staleness and potential cache poisoning if local storage is compromised. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 4 high severity).

4 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.