MCP server for interacting with EVM (Ethereum Virtual Machine) blockchains. Provides tools to check ETH balances and send ETH transactions.
Two tools with basic verb-noun naming (get-eth-balance, send-eth) but significant quality gaps. Both tools have minimal descriptions (under 100 chars) that lack context on when to use them, prerequisites, or return value details. Input schemas are present with Zod validation but parameter descriptions are sparse and lack format/constraint details. No output schema documentation. Critical security issue: send-eth is IRREVERSIBLE but lacks confirmation/dry-run pattern. No error recovery guidance. Baseline: production tools average 194 chars for descriptions and 72 chars per param; these fall well short.
Gets the ETH balance of a given wallet
Sends a given amount of ETH to a given address
Irreversible send-eth tool lacks confirmation/dry-run pattern. No guard against accidental fund transfers. Agents can execute destructive operations without user confirmation.
Tool descriptions are too brief (30-35 chars) and lack actionable context. Missing: when to use each tool, what it returns, prerequisites (e.g., private key setup for send-eth), and error recovery guidance.
Parameter descriptions lack format/constraint details. 'address' param does not specify format (0x-prefixed hex, length, validation). 'amount' param lacks numeric range, precision, or unit clarification (wei vs ETH).
No output schema documentation. Callers cannot predict response structure. send-eth error handling returns raw error objects instead of actionable recovery guidance (e.g., 'Insufficient balance. Current balance: X ETH').
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 44 | 2026-07-28+ | v2 |
Private key exposed via environment variable without vault/secret manager integration. No audit trail or permission gates. Tool can drain wallets without rate limiting or approval workflow.