
Token Tool
io.github.bitbondPublished by GitHub account bitbondv1.1.1Updated Oct 24, 2026
Deploy compliant ERC-20 tokens from any AI agent. 17 tools, 10 networks, CertiK-audited.
Overview
A local MCP server that lets an AI assistant deploy and manage ERC-20, SPL and Stellar tokens on 10 production networks and 5 testnets from natural-language or,
- What you can do
- Deploy audited tokens with optional issuer controls such as whitelist, blacklist, pausable, force transfer, document URI and max supply cap, and quote deployment cost before committing funds on supported EVM, Solana and Stellar networks and testnets, with human-friendly chain aliases. Manage supply and transfers by minting, burning, transferring, pausing and unpausing tokens, and read live on-chain token state such as name, symbol, supply, paused status and owner. Administer compliance lists by adding to or removing from whitelist and blacklist, viewing whitelist entries and checking a token's compliance configuration. Inspect the deployer wallet address and native balance, and list tokens,
- When to use it
- Useful when you want an assistant to create or administer a token without writing Solidity, especially for testing on free testnets first or for asset and security-style tokens that need issuer controls. Also suited to checking deployment costs and managing an existing token's supply, transfers and compliance lists.
- Requirements
- Runs locally over stdio, typically via npx token-tool-mcp or a global npm install; Node.js is needed. Requires the BITBOND_PRIVATE_KEY environment variable holding the deployer wallet's private key. Network access to the target chain and Bitbond's contract factory is needed. No API key or account is declared.
Installation
In SourceWeft
- Open Token Tool in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
TokenTool MCP
[npm version] [License: MIT] [Node.js ≥18] [10 Networks] [CertiK Audited]
Deploy and manage tokens from Claude, Cursor, or any AI agent, by typing a sentence.
Built on Bitbond TokenTool: 7,000+ tokens deployed, CertiK-audited contracts, issuer controls (allowlist, blocklist, pause, force transfer) built in.
See It in Action
→ CertiK-audited ERC-20 deployed on-chain in ~30 seconds. Contract address returned. No Solidity required.
Install
Claude Desktop
Add to ~/.claude/claude_desktop_config.json:
Cursor
→ One-click install for Cursor
Or add manually to .cursor/mcp.json:
VS Code
→ One-click install for VS Code
Or add to .vscode/mcp.json in your workspace:
Claude Code
Then set your key in the environment: export BITBOND_PRIVATE_KEY=0x...
Example Prompts
Once connected, try these:
Tools
17 tools across the full token lifecycle:
Supported Networks
EVM (8): Ethereum · Polygon · BNB Chain · Arbitrum · Base · Optimism · Avalanche · Peaq
Non-EVM (2): Solana (SPL tokens) · Stellar (Stellar assets)
Testnets (5): Sepolia · Base Sepolia · BNB Testnet · Solana Devnet · Stellar Testnet
Human-friendly aliases work everywhere: eth, polygon, bnb, arb, base, op, avax, peaq, sol, stellar
Issuer Controls
Optional flags on every deployment, the controls institutional issuers and RWA platforms ask for. They are tools for an issuer's own compliance process; the token itself does not make an offering compliant.
How It Works
- You type a prompt in your MCP client
- The client calls the appropriate tool on the local MCP server (stdio transport — nothing leaves your machine until step 3)
- The MCP server constructs a deployment transaction and submits it to Bitbond's TokenTool smart contract factory on the target chain
- The factory deploys a CertiK-audited ERC-20 contract with your parameters
- The contract address and transaction hash are returned to your MCP client
Your private key signs transactions locally. It is read from an environment variable, never passed as an argument, and never transmitted to Bitbond or any third party. The MCP server itself is stateless — the only local state is an optional deployment registry at data/registry.json.
CLI
TokenTool MCP also works as a standalone CLI for scripts, CI/CD, and non-MCP agents:
All commands output structured JSON. Install globally with npm install -g token-tool-mcp to use token-tool directly.
Deploy Flags
Security
- Private key stays local. Read from
BITBOND_PRIVATE_KEYenv var only — never passed as a CLI argument, never logged, never transmitted - stdio transport. The MCP server communicates with your client locally. No network listener, no open ports
- CertiK-audited contracts. You're deploying battle-tested smart contracts, not generated Solidity
- Testnet by default. We recommend starting on Sepolia or Base Sepolia — it's free and functionally identical to mainnet
- Human-in-the-loop. For mainnet deployments ($499 each, see Pricing), enable confirmation prompts in your MCP client before executing transactions
Pricing
The MCP deploys TokenTool's asset token contract (the one with allowlist, blocklist, force transfer and document URI), so the fee matches Create Asset Token on the TokenTool pricing page, the same whether you deploy via the web UI, the API, or this MCP server. estimate_cost returns the live quote before you commit. It's paid in the chain's native token (ETH, MATIC, BNB, etc.) at the time of deployment. No subscription, no API key, no per-call charges.
Architecture
Built on TokenTool
Bitbond TokenTool is one of the most widely used token deployment platforms in Web3:
- 8,300+ tokens deployed across production networks
- CertiK-audited smart contracts — audit report
- Used by enterprises, DAOs, and developers in 50+ countries
- Live since 2020, maintained by Bitbond GmbH (Berlin)
TokenTool MCP wraps this same production infrastructure for AI agents.
Contributing
Issues and PRs welcome.
License
MIT — Bitbond GmbH
Source: README.md at commit 6dc4e2e
Tools
0Version history
1- v1.1.1LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts