Mcp Signer

io.github.CryptoAPIs-io由 GitHub 账号 CryptoAPIs-io 发布v0.5.0更新于 Oct 24, 2026

Local transaction signing for EVM, UTXO, Tron, XRP, Kaspa, Solana and Tezos — no API calls

已验证STDIO仅桌面金融安全与监控

概览

AI 生成的概览

一个本地 MCP 服务器，让助手在用户自己的机器上为 EVM、UTXO、Tron、XRP、Kaspa、Solana 和 Tezos 交易签名，无需调用外部 API。

可以做什么
根据结构化字段、未签名十六进制或 EIP-712 类型化数据签署 EVM 交易（含 x402 免 gas 授权）。
适用场景
当助手需要在本地为受支持的链生成已签名交易或签名时使用，例如为广播准备交易或完成 x402 支付流程，同时不把密钥发送到远程服务。
运行要求
通过 npx 从 npm 包 @cryptoapis-io/mcp-signer 作为本地 stdio 进程运行，需要 Node.js。无需 API 密钥、环境变量或请求头。README 给出了 Claude Desktop 和 Cursor 的配置方式。
安装前请注意
私钥直接作为工具输入参数传入（privateKey、privateKeys、secret），而不是从环境变量读取，因此密钥会出现在对话和工具调用中。签名结果一旦广播即可转移资金，使用前应核对交易内容与收款地址。服务器本身不发起网络请求，但签名输出通常要在别处广播。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Signer，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@cryptoapis-io/mcp-signer

MCP server for local transaction signing across EVM, UTXO, Tron, XRP, Kaspa, Solana and Tezos. No Crypto APIs HTTP calls — signing happens entirely on your machine. No API key required.

Security

  • Stdio only — no HTTP transport. The server does not listen on any port.
  • Private keys in tool input — each tool receives privateKey / privateKeys / secret as parameters. Keys are never read from environment variables.
  • No network calls — all signing is done locally using cryptographic libraries.

Installation

bash
npm install @cryptoapis-io/mcp-signer

Or install all Crypto APIs MCP servers: npm install @cryptoapis-io/mcp

Usage

bash
npx @cryptoapis-io/mcp-signer

Claude Desktop

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):

json
{  "mcpServers": {    "cryptoapis-signer": {      "command": "npx",      "args": ["-y", "@cryptoapis-io/mcp-signer"]    }  }}

Cursor

Add to .cursor/mcp.json (project) or ~/.cursor/mcp.json (global):

json
{  "mcpServers": {    "cryptoapis-signer": {      "command": "npx",      "args": ["-y", "@cryptoapis-io/mcp-signer"]    }  }}

MCP Inspector

bash
npx @modelcontextprotocol/inspector npx @cryptoapis-io/mcp-signer

Available Tools

evm_sign

Sign an EVM transaction (Ethereum, Ethereum Classic, BSC, Polygon, Avalanche (C-Chain), Arbitrum, Base, Optimism, Tron).

ActionDescription
sign-from-detailsSign from structured transaction fields (to, value, gasLimit, etc.)
sign-unsigned-hexSign a pre-built unsigned transaction hex
sign-typed-dataSign an EIP-712 typed-data message (the x402 gasless path — e.g. the EIP-3009 TransferWithAuthorization from the x402 buyer /authorize). Returns { signature }, not a tx.

utxo_sign

Sign a UTXO transaction (Bitcoin, Bitcoin Cash, Litecoin, Dogecoin, Dash, Zcash).

ActionDescription
sign-from-detailsSign from a prepared transaction object (inputs, outputs). For zcash, produces a v5 (ZIP 225/244) transaction and requires exactly one of targetHeight (current chain tip + 1) or consensusBranchId (e.g. a node's getblockchaininfo consensus.nextblock)
sign-unsigned-hexSign a raw unsigned transaction hex with input descriptors. Does not support zcash

tron_sign

Sign a Tron transaction using secp256k1 (no TronWeb dependency).

ActionDescription
sign-from-detailsSign from a transaction object with raw_data_hex
sign-unsigned-hexSign a pre-built unsigned transaction hex

xrp_sign

Sign an XRP transaction.

ActionDescription
sign-from-detailsSign from structured XRP transaction fields
sign-unsigned-hexSign a pre-built unsigned transaction hex

kaspa_sign

Sign a Kaspa transaction using schnorr (BIP340) via kaspa-wasm. Mainnet only.

ActionDescription
sign-from-detailsSign a prepared Kaspa transaction (from the prepare-transaction API)

svm_sign

Partial-sign a Solana (SVM) x402 payment transaction — the buyer's source-authority signature only (the facilitator's feePayer slot stays unsigned, signed at settle).

ActionDescription
partial-signDeserialize the base64 unsigned TransferChecked tx from the x402 buyer /authorize (scheme svm-transaction), add the buyer signature, re-serialize to base64. Returns { transaction }.

tezos_sign

Sign a Tezos operation for tz1 (ed25519), tz2 (secp256k1) or tz3 (P-256) keys (edsk… / spsk… / p2sk…).

ActionDescription
sign-forged-operationSign the forgedOperation hex from prepare_transactions_tezos. The operation is decoded first: only reveal/transaction ops from the key's own address are signed, and the optional expected (destination, amount in mutez, maxFee) must match. Returns { signedOperation, operationHash, signature, … }; broadcast signedOperation.

Most tools return signedTransactionHex — ready to broadcast with @cryptoapis-io/mcp-broadcast. The x402 paths return { signature } (EVM typed-data) or { transaction } (SVM) instead.

Dependencies

PackagePurpose
ethersEVM transaction signing
bitcoinjs-lib + ecpair + tiny-secp256k1UTXO transaction signing
ellipticTron transaction signing (secp256k1)
xrplXRP transaction signing

License

MIT

来源：README.md，提交 a929bc3

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

3
  1. v0.5.0最新Sep 24, 2026
  2. v0.4.1Sep 24, 2026
  3. v0.4.0Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分