
DERO MCP Server
io.github.DHEBPPublished by GitHub account DHEBPv0.6.0Updated Oct 24, 2026
Read-only DERO blockchain MCP: 33 tools (12 composites) incl. TELA discovery + bundled docs.
Overview
Read-only MCP server for the DERO privacy blockchain, letting an assistant query live chain data, inspect smart contracts and TELA apps, and search bundled…
- What you can do
- Inspect the chain: blocks, transactions, mempool, encrypted balances and registered names
- Analyze smart contracts: read code and state, classify patterns, estimate deploy gas, pull DVM-BASIC docs
- Trace transactions: look up hashes, confirm inclusion, classify transfer, SC install or SC call
- Explore the on-chain TELA web: resolve names to SCIDs, list apps, inspect manifests and read on-chain HTML/JS/CSS
- Search and read the bundled documentation index across derod, tela, hologram and deropay
- Run composite analyses such as chain health, claim audits, docs paths and deploy pre-flights
- When to use it
- Useful when you want an assistant to answer DERO questions from live chain data and shipped docs instead of its training data, or to inspect DVM-BASIC contracts and TELA apps without running a separate indexer.
- Requirements
- Node.js 20+ for the npm package, or a self-hosted streamable-HTTP deployment. A reachable DERO daemon with RPC enabled: a local node at 127.0.0.1:10102 is auto-detected, otherwise a third-party public RPC is used; DERO_DAEMON_URL pins a specific endpoint. HTTP mode can require a bearer token via DERO_MCP_AUTH_TOKEN.
Installation
In SourceWeft
- Open DERO MCP Server in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.DHEBP%2Fdero-mcp-server/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config.
{
"mcpServers": {
"dero": {
"type": "http",
"url": "https://mcp.derod.org/mcp"
}
}
}README
DERO MCP server
A read-only Model Context Protocol server for the DERO privacy blockchain — a private-by-default Layer 1 with encrypted balances, private smart contracts (DVM-BASIC), and no public transaction graph. 21 daemon primitives + 12 composite tools (including TELA on-chain app inspection and dURL→SCID discovery), with a bundled documentation index spanning derod, tela, hologram, and deropay.
[MCP Registry] [CI] [dero-mcp-server MCP server]
Registry listing: io.github.DHEBP/dero-mcp-server · Version: 0.6.0 · Transports: stdio (default, npm package) · streamable-http (--http, for self-hosting)
What is an MCP server
An MCP server (Model Context Protocol) is a small program that gives your AI assistant — Claude Desktop, Cursor, OpenCode, ChatGPT with Custom Connectors — the ability to call specific tools on your behalf. Instead of the AI talking about DERO from memory, it can actually look things up: fetch a block, read a contract, search the docs, trace a transaction, estimate a deploy.
You install it once and point your AI host at it. From then on, every DERO question you ask in chat hits live chain data and the bundled docs corpus — not the AI's training cutoff.
What is DERO
If you're new to DERO: it's a privacy-first L1 blockchain — often described as a private alternative to Ethereum for builders who want smart contracts without a transparent ledger, or as a Monero alternative for users who want account-based privacy with native programmability instead of UTXO-only payments. Homomorphically encrypted balances. Ring signatures hide senders. Zero-knowledge range proofs (Bulletproofs) hide amounts. There is no public transaction graph. The current mainnet is DERO Stargate.
Full docs: derod.org
About this server
Model Context Protocol (MCP) server that exposes read-only and analysis calls against a DERO Stargate daemon JSON-RPC endpoint. Ships as a stdio process for local MCP hosts (Claude Desktop, Cursor, OpenCode) or in streamable-HTTP mode behind a domain (e.g. mcp.derod.org) for ChatGPT Custom Connectors, Cursor hosted mode, and any agent that needs a remote URL. See deploy/ for a reference self-hosted deployment.
Quick start
Get a working DERO MCP connection in under 5 minutes.
What you need
- Node.js 20+ (install) — verify with
node --version. - An MCP host — Claude Desktop, Cursor, OpenCode, or ChatGPT with Custom Connectors. This walkthrough uses Claude Desktop; the JSON config below works identically in Cursor and OpenCode.
- Optional: a local DERO daemon. If one is running on
127.0.0.1:10102, the server detects and uses it automatically; otherwise it falls back to a public RPC, so it works with zero setup. Run your own for production — how to.
1. Open your MCP host's config
Create the file if it doesn't exist.
2. Add the DERO MCP server
This uses npx to fetch and run the latest published version — no manual install or build required.
The server auto-detects a local node at 127.0.0.1:10102. To pin a specific daemon (custom port or a remote URL), add an env block:
3. Restart your MCP host
Fully quit and reopen — not just refresh. MCP servers load at startup.
4. Verify it works
In a new chat:
"What's the current DERO chain height?"
A number back means you're connected. If you see an error, confirm the config file path is correct and your host was fully restarted (not just refreshed).
Once it's working, jump to Try a prompt for a full tour.
What you can do with it
Once installed, your MCP host can do all of these on your behalf — in natural language, no JSON-RPC needed:
- Inspect the chain — blocks, transactions, mempool, encrypted balances, registered names
- Analyze smart contracts — read code and state, classify the pattern, estimate deploy gas, pull relevant DVM-BASIC docs in one call
- Trace transactions — look up any hash, confirm inclusion, classify the kind (transfer / SC install / SC call)
- Explore the on-chain web (TELA) — discover apps by name (
vault.tela→ SCID), browse what's deployed, inspect an app's manifest and files, and read the actual on-chain HTML/JS/CSS — no separate indexer to run - Search the docs — across all four DERO sites (derod, tela, hologram, deropay)
- Run composite analyses — chain health, claim audits, docs path recommendations, deploy pre-flights — each returns curated DERO docs citations alongside the data
Try a prompt
After installing and restarting your MCP host, paste any of these. Start simple and work up.
Basic
Single-tool questions that verify the install and exercise live queries.
"What's the current DERO chain height?"
"Resolve the DERO name 'engram' to an address."
"Find the documentation page on Bulletproofs."
"What does the smart contract at SCID 0000…0001 do?"
Intermediate
Composite tools that fan out into multiple primitives and return a synthesized answer with citations.
"Explain the smart contract at SCID 0000000000000000000000000000000000000000000000000000000000000001 — what it does, its functions, and which DVM-BASIC docs are relevant."
"Trace transaction with full context — confirmation, classification, and what it touched."
"What's the right reading path for someone new to DERO smart contracts who wants to deploy a DVM-BASIC contract?"
"Estimate the gas cost to deploy this DVM source: "
TELA — the decentralized web on DERO
TELA apps are full web apps (HTML/CSS/JS) deployed entirely on-chain. The server discovers and reads them with no external indexer — the first discovery query runs a one-time ~15s scan, then it's instant.
"What's the SCID for vault.tela?"
"What TELA apps exist on DERO? Show me a few."
"Inspect the TELA app at SCID — what is it, who made it, and what files does it have?"
"Show me the actual HTML of that app's index.html."
For multi-step agent recipes, per-tool guidance, error contract, and the composite-first rule, see SKILL.md.
Not included (by design): wallet RPC (transfer, scinvoke), DERO.SendRawTransaction, DERO.SubmitBlock. Those can move funds or consensus data; add them only with explicit user consent and a locked-down setup.
See also
SKILL.md— per-tool agent runbook: composite-first rule, structured error contract, citation rules, agent-loop recipes, port reference.POSITIONING.md— who DERO MCP is for, who it isn't, comparison vs ACP / Stripe / Crossmint / Skyfire, privacy posture.
Requirements
- Node.js 20+
- A reachable DERO daemon with RPC enabled (local node or your own remote URL).
Install & build
Run (auto-detects a local node at 127.0.0.1:10102, else public fallback, when DERO_DAEMON_URL is unset):
Or set an explicit URL (e.g. your local daemon):
Daemon resolution is local-first: with DERO_DAEMON_URL unset, the server uses a local node at 127.0.0.1:10102 if it answers, else the baked-in third-party public RPC (82.65.143.182:10102). Prefer your own node for privacy.
Strip a trailing /json_rpc if you paste a full JSON-RPC URL — this server appends /json_rpc.
HTTP mode (self-hosted)
For clients that can't launch a local subprocess — ChatGPT Custom Connectors, Cursor hosted mode, n8n / Zapier integrations — run the server in streamable-HTTP mode and put it behind your own domain:
Both stdio and HTTP serve MCP 2026-07-28 and retain compatibility with 2025-era clients. HTTP exchanges are stateless and do not issue Mcp-Session-Id; 2026 clients negotiate through server/discover.
For a turnkey deploy with Caddy + auto-TLS + Docker Compose, see deploy/README.md. It's a self-hosting reference for running your own hosted instance. The public mcp.derod.org instance was retired on 2026-10-10; use npx dero-mcp-server or self-host. The public default daemon behind a hosted instance may use an older GetInfo schedule formula than CalcSupply; verify_supply still treats the offline schedule number as authoritative (see Verify the Supply).
The stdio transport (below) and the HTTP transport share the same underlying server factory, so the tool surface, response shapes, and error codes are identical across both.
Claude Desktop (same pattern for OpenCode and Cursor)
Add to claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/claude_desktop_config.json):
Optional: add "env": { "DERO_DAEMON_URL": "http://127.0.0.1:10102" } to pin a specific daemon. Not needed if your local node uses the default port — the server auto-detects it.
Restart Claude Desktop (or your OpenCode/Cursor host).
Cursor (or OpenCode)
In Cursor Settings → MCP (or OpenCode MCP settings), add a server that runs the same command / args / env as above.
OpenCode
In OpenCode MCP settings, add a server with the same command / args / env as above.
Codex
Codex supports DERO MCP as either a local stdio server or a streamable-HTTP server. The stdio setup is simplest for local development because Codex launches the server process for each session.
Add the published npm package with:
Replace http://127.0.0.1:10102 with your daemon base URL when using a custom host or port. Do not include /json_rpc; this server appends it.
Equivalent ~/.codex/config.toml:
A copyable example lives at .codex/config.example.toml. Rename or copy it to .codex/config.toml only when you want a project-scoped Codex config; Codex loads project config only for trusted projects.
For an already-running streamable-HTTP deployment, add the URL instead:
If the HTTP server requires a bearer token, store the token in an environment variable and add --bearer-token-env-var DERO_MCP_AUTH_TOKEN.
Restart Codex or start a new session, then run /mcp to confirm dero-daemon is enabled. A simple verification prompt is:
"What's the current DERO chain height?"
Environment
Maintainer: bundled docs
Docs tools read from data/docs-index.json, committed in this repo and shipped with the npm package. Rebuild the index when dero-docs changes:
Or run Refresh docs bundle under Actions to open a PR. Pushes to dero-docs main can trigger that workflow via repository_dispatch when MCP_DOCS_SYNC_TOKEN is configured on the docs repo.
After merging a bundle update: bump the patch version in package.json and server.json, then npm publish --otp=... and mcp-publisher publish.
Testing
Flow tests run against the default public RPC. Set DERO_DAEMON_URL to test against your own daemon.
CI runs on every push and PR — see .github/workflows/ci.yml.
Official MCP Registry
Publish flow (maintainers):
Verify listing:
MCP Surface
- Tools (33): 21 daemon read/analysis primitives + 12 composites, including
verify_supply(offline CalcSupply), TELA app inspection (tela_inspect,tela_get_doc_content), TELA discovery (dero_durl_to_scid,dero_tela_list_apps), and docs retrieval (dero_docs_search,dero_docs_get_page,dero_docs_list) - Resources (4):
dero://mcp/server-info,dero://mcp/safety-boundary,dero://mcp/example-flows,dero://mcp/composites - Prompts (5):
network_health_check,inspect_smart_contract,trace_transaction,find_dero_docs_for_intent,estimate_deploy_for_contract
Error Contract
When a tool call fails, the server returns a structured error payload in tool content:
Common code values:
INVALID_INPUTRPC_INVALID_PARAMSRPC_METHOD_NOT_FOUNDRPC_HTTP_ERRORRPC_UNREACHABLERPC_INVALID_RESPONSETOOL_EXECUTION_ERROR
Roadmap
- Optional wallet-RPC tools behind
DERO_ENABLE_WALLET_RPC=1+ separate URL. - Stricter typing / OpenAPI-derived tool schemas.
- TELA-aware contract tooling (INDEX/DOC inspection, on-chain app discovery).
License
MIT
Source: README.md at commit 02eeff7
Tools
0Version history
1- v0.6.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declaredRequired10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts