Mcp Hd Wallet

io.github.CryptoAPIs-ioPublished by GitHub account CryptoAPIs-iov0.4.0Updated Oct 24, 2026

MCP server for HD wallet management, balance, and sync on EVM, UTXO, XRP via Crypto APIs

VerifiedSTDIODesktop onlyFinanceDeveloper Tools

Overview

AI-generated overview

Lets an assistant track HD crypto wallets by extended public key, derive addresses, and read balances, transactions, and UTXOs via Crypto APIs.

What you can do
Wraps the Crypto APIs HD Wallet (Wallet as a Service) product. The assistant can sync a wallet from an extended public key (xPub/yPub/zPub), activate, list, delete, or check sync status, derive receiving and change addresses, and query aggregated balances, transactions, assets, and UTXOs across derived addresses. It also prepares unsigned transactions for local signing. Coverage includes EVM chains, UTXO chains, and XRP.
When to use it
Use it when an assistant should monitor or report on HD wallet activity without holding private keys, for example tracking balances and transactions across many derived addresses or preparing unsigned transactions for separate signing. It is not needed if you only want a hosted endpoint, since Crypto APIs offers a remote MCP server.
Requirements
Local Node.js 18+ and the npm package @cryptoapis-io/mcp-hd-wallet, run over stdio by default. A Crypto APIs account and API key are required, supplied via the CRYPTOAPIS_API_KEY environment variable or the --api-key argument. HTTP mode listens on 127.0.0.1:3000 by default; non-loopback binds need an auth token and host allowlist. Network access to Crypto APIs is required.
Before you install
The server needs the CRYPTOAPIS_API_KEY secret, and requests without a valid key may get your IP banned from the Crypto APIs ecosystem. Only extended public keys are sent, so private keys stay local, but an xPub still reveals all derived addresses and balances to the service. Actions can delete a synced wallet. HTTP mode without a startup key accepts a per-request x-api-key header, so protect any non-loopback bind with MCP_AUTH_TOKEN and --allowed-hosts.

Installation

In SourceWeft

  1. Open Mcp Hd Wallet in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@cryptoapis-io/mcp-hd-wallet

MCP server for Crypto APIs HD Wallet (Wallet as a Service) product. Track and manage HD wallets by their extended public key (xPub/yPub/zPub) — no private keys ever leave your device.

API Version: Compatible with Crypto APIs version 2024-12-12

How It Works

HD (Hierarchical Deterministic) wallets derive all addresses from a single extended public key (xPub). You sync your xPub with Crypto APIs, and the service tracks all derived addresses, balances, and transactions on your behalf.

  1. Sync your xPub — provide your extended public key (xPub, yPub, or zPub) to start tracking
  2. Derive addresses — generate new receiving and change addresses from the xPub
  3. Query wallet data — get balances, list transactions, list UTXOs, and view assets across all derived addresses
  4. Prepare transactions — build unsigned transactions ready for local signing with @cryptoapis-io/mcp-signer

Your private keys are never sent to or stored by Crypto APIs. Only the extended public key is used for address derivation and balance tracking.

Features

  • Sync wallets by extended public key (xPub/yPub/zPub)
  • Derive receiving and change addresses from the xPub
  • Query aggregated balances, transactions, and assets across all derived addresses
  • List UTXOs for UTXO-based wallets
  • Prepare unsigned transactions directly from wallet
  • Supports EVM (Ethereum, Ethereum Classic, BSC, Polygon, Avalanche (C-Chain), Arbitrum, Base, Optimism, Tron), UTXO (Bitcoin, Bitcoin Cash, Litecoin, Dogecoin, Dash, Zcash), and XRP

Prerequisites

Installation

bash
npm install @cryptoapis-io/mcp-hd-wallet

Or install all Crypto APIs MCP servers: npm install @cryptoapis-io/mcp

Usage

bash
# Run with API keynpx @cryptoapis-io/mcp-hd-wallet --api-key YOUR_API_KEY
# Or use environment variableexport CRYPTOAPIS_API_KEY=YOUR_API_KEYnpx @cryptoapis-io/mcp-hd-wallet
# HTTP transport (listens on 127.0.0.1; see "Exposing the server beyond localhost")npx @cryptoapis-io/mcp-hd-wallet --transport http --port 3000 --api-key YOUR_API_KEY

Claude Desktop

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):

json
{  "mcpServers": {    "cryptoapis-hd-wallet": {      "command": "npx",      "args": ["-y", "@cryptoapis-io/mcp-hd-wallet"],      "env": {        "CRYPTOAPIS_API_KEY": "your_api_key_here"      }    }  }}

Cursor

Add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):

json
{  "mcpServers": {    "cryptoapis-hd-wallet": {      "command": "npx",      "args": ["-y", "@cryptoapis-io/mcp-hd-wallet"],      "env": {        "CRYPTOAPIS_API_KEY": "your_api_key_here"      }    }  }}

MCP Inspector

bash
npx @modelcontextprotocol/inspector npx @cryptoapis-io/mcp-hd-wallet --api-key YOUR_API_KEY

n8n

  1. Start the server in HTTP mode:
    bash
    npx @cryptoapis-io/mcp-hd-wallet --transport http --port 3000 --api-key YOUR_API_KEY
  2. In your n8n workflow, add an AI Agent node
  3. Under Tools, add an MCP Client Tool and set the URL to http://localhost:3000/mcp

n8n in Docker: localhost inside the container is not your machine. Start the server with --host 0.0.0.0 and MCP_AUTH_TOKEN set (see Exposing the server beyond localhost), use http://host.docker.internal:3000/mcp as the URL, and add an Authorization: Bearer <token> header to the MCP Client Tool credential.

All servers default to port 3000. Use --port to assign different ports when running multiple servers.

Available Tools

manage_hd_wallet

Manage HD wallets (sync, activate, delete, list, status).

ActionDescription
sync-walletSync an HD wallet by extended public key (xPub/yPub/zPub)
list-walletsList all synced HD wallets
activate-walletActivate a previously synced wallet
delete-walletDelete a synced wallet
get-statusGet sync status of a wallet

hd_wallet_data_utxo

Query UTXO HD wallet data (Bitcoin, Bitcoin Cash, Litecoin, Dogecoin, Dash, Zcash).

ActionDescription
get-detailsGet wallet balance and details
derive-receiving-addressDerive next receiving address
derive-change-addressDerive next change address
list-addressesList all derived addresses
list-transactionsList wallet transactions
list-utxosList unspent transaction outputs
list-assetsList assets held by wallet
prepare-transactionPrepare an unsigned transaction from wallet

hd_wallet_data_evm

Query EVM HD wallet data (Ethereum, Ethereum Classic, BSC, Polygon, Avalanche (C-Chain), Arbitrum, Base, Optimism, Tron).

ActionDescription
get-detailsGet wallet balance and details
derive-receiving-addressDerive next receiving address
list-addressesList all derived addresses
list-transactionsList wallet transactions
list-assetsList tokens held by wallet
prepare-transactionPrepare an unsigned transaction from wallet

hd_wallet_data_xrp

Query XRP HD wallet data.

ActionDescription
get-detailsGet wallet balance and details
derive-receiving-addressDerive next receiving address
list-addressesList all derived addresses
list-transactionsList wallet transactions
list-assetsList assets held by wallet

CLI Arguments

ArgumentDescriptionDefault
--api-keyCrypto APIs API keyCRYPTOAPIS_API_KEY env var
--transportTransport type: stdio or httpstdio
--hostHTTP host (use 0.0.0.0 to accept remote connections — requires an auth token with --api-key)127.0.0.1
--auth-tokenBearer token callers must send (Authorization: Bearer <token>); prefer the MCP_AUTH_TOKEN env varMCP_AUTH_TOKEN env var
--allowed-hostsComma-separated Host header allowlist for non-loopback binds—
--portHTTP port3000
--pathHTTP path/mcp
--statelessEnable stateless HTTP modefalse

HTTP API Key Modes

When using HTTP transport, the server supports two API key modes:

  • With --api-key: The key is used for all requests. x-api-key request headers are ignored.
  • Without --api-key: Each request must include an x-api-key header with a valid Crypto APIs key. This enables hosting a public server where each user provides their own key.
bash
# Per-request key mode (multi-tenant)npx @cryptoapis-io/mcp-hd-wallet --transport http --port 3000# Clients send x-api-key header with each request

Exposing the server beyond localhost

HTTP mode listens on 127.0.0.1 by default, so only processes on the same machine can reach it. To accept connections from other machines or containers, bind explicitly and protect the port:

bash
# Startup-key mode: callers must present the token (the server refuses to start without one)export MCP_AUTH_TOKEN=$(openssl rand -hex 32)npx @cryptoapis-io/mcp-hd-wallet --transport http --host 0.0.0.0 --port 3000 --api-key YOUR_API_KEY \  --allowed-hosts mcp.internal.example# Clients send: Authorization: Bearer $MCP_AUTH_TOKEN
# Per-request key mode: no startup key, every request must carry the caller's own x-api-keynpx @cryptoapis-io/mcp-hd-wallet --transport http --host 0.0.0.0 --port 3000

--allowed-hosts restricts the Host header (DNS rebinding protection) when not bound to loopback. Prefer MCP_AUTH_TOKEN over --auth-token: command-line arguments are visible in the process list.

Stdio transport always requires an API key at startup.

Important: API Key Required

Warning: Making requests without a valid API key — or with an incorrect one — may result in your IP being banned from the Crypto APIs ecosystem. Always ensure a valid API key is configured before starting any server.

Remote MCP Server

Crypto APIs provides an official remote MCP server with all tools available via HTTP Streamable transport at https://ai.cryptoapis.io/mcp. Pass your API key via the x-api-key header — no installation required.

License

MIT

Source: README.md at commit 926cbb1

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v0.4.0LatestSep 24, 2026
  2. v0.3.1Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts