Vaultguard Mcp

io.github.kota1026由 GitHub 账号 kota1026 发布v1.0.0更新于 Oct 24, 2026

VaultGuard MCP Server - Yearn V3 / DeFi vault security and analysis tools for AI coding agents....

已验证STDIO仅桌面金融安全与监控

概览

AI 生成的概览

一个本地 MCP 服务器,为 AI 编程代理提供 Yearn V3 与 DeFi 金库的安全和分析工具。

可以做什么
按注册表描述,为 AI 编程代理提供面向 Yearn V3 金库的 DeFi 金库安全与分析工具。清单中未列出具体工具,因此无法确认具体操作。随附的 README 描述的是一个独立的以太坊后量子资产保护项目,涉及金库托管、证明者验证、治理与代币质押流程,但未说明本服务器自身的工具。
适用场景
当助手在编程或安全审查中需要检查、分析 Yearn V3 或类似 DeFi 金库合约时可以考虑。由于工具列表未记录,建议先确认其实际暴露的能力再决定是否安装。
运行要求
通过 npm 包 vaultguard-mcp 以 stdio 在用户机器上作为本地进程运行,仅限桌面端,不可在网页中执行。未声明认证、环境变量或请求头。README 的开发环境列出 Docker、Rust、Node.js 和 Foundry,但那是针对其所描述的项目,未必适用于本服务器。
安装前请注意
README 描述了锁定资产、解锁、保证金存入、质押、罚没、治理投票和紧急暂停等链上操作,并列出 Sepolia 与 Arbitrum Sepolia 测试网上的合约地址。对任何会签名或发送交易的工具都应谨慎。项目声明尚未完成外部审计。README 内容与注册表描述并不完全一致,安装前请核实该软件包。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Vaultguard Mcp,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Quantum Shield

[License: MIT] [Rust] [Solidity] [Next.js]

Post-quantum asset protection protocol for Ethereum using NIST-standardized cryptography

What is Quantum Shield?

Quantum Shield protects smart contract assets against quantum computing threats using NIST FIPS 204 (ML-DSA/Dilithium) and FIPS 205 (SLH-DSA/SPHINCS+) dual post-quantum signatures, combined with a decentralized Prover Pool, VRF-based selection, and time-locked custody.

Key Features

  • Dual PQC Signatures — ML-DSA-65 + SLH-DSA for defense-in-depth
  • Prover Pool — Decentralized verification with stake-weighted selection via VRF
  • Time-Locked Custody — 24h normal unlock, 7-day emergency path with bond
  • Observer Network — Independent challenge system with quadratic slashing
  • On-Chain Governance — veQS token voting, security council, insurance fund
  • 11 Sub-Applications — Consumer, Prover, Observer, Explorer, Enterprise, Governance, Admin

Architecture

┌─────────────────────────────────────────────────────────────────┐│  Frontend (Next.js 15)         11 apps, 136 routes, ja/en i18n │├─────────────────────────────────────────────────────────────────┤│  Backend API (Rust/Axum)       REST API, SIWE auth, Auto-Claim │├──────────────────┬──────────────────────────────────────────────┤│  L1: Sepolia     │  L3: Arbitrum Sepolia                       ││  • Vault         │  • CoreLayer    • Governor                  ││  • ProverRegistry│  • veQS         • RewardRouter              ││  • SPHINCS+ Vfy  │  • QSToken      • InsuranceFund             │└──────────────────┴──────────────────────────────────────────────┘

9 Core Sequences

#FlowPath
1Consumer LockFrontend → API → DB → L1 Vault
2Normal Unlock24h timelock → Prover verification → L1 claim
3Emergency UnlockBond deposit → 7-day lock → Emergency path
4Prover RegistrationStake → VRF selection → Proof generation
5Observer ChallengeMonitor → Challenge → VRF arbitration
6SlashingQuadratic penalty → L1 ProverRegistry
7GovernanceveQS voting → Proposal execution on L3
8Emergency PauseSecurity council → L1 pause
9Token HubStake QS → veQS → Rewards

Tech Stack

LayerTechnology
FrontendNext.js 15, TypeScript, Tailwind CSS, Wagmi, RainbowKit
BackendRust, Axum, PostgreSQL, Redis, RabbitMQ
ContractsSolidity 0.8.24 (Foundry), deployed to Sepolia + Arbitrum Sepolia
CryptographyNIST FIPS 204 (ML-DSA-65), FIPS 205 (SLH-DSA), SHA3-256
SDKWASM (Rust → wasm-pack), npm-publishable
TestingPlaywright (E2E), Vitest, cargo test, Foundry forge test

Deployed Contracts

L1: Ethereum Sepolia

ContractAddress
Vault0x07012aeF87C6E423c32F2f8eaF81762f63337260
ProverRegistry0x08e1fc1A0d614bc132B48950760c7A291cCB8946
SPHINCS+ Verifier0xD090b5A627d9bd6D96a8b5f6F504ebCa79980103

L3: Arbitrum Sepolia (12 contracts)

ContractAddress
CoreLayer0xb04F4DFe093dC80420117EDC8300f5EB6F6EDBf0
veQS0xE72dFa97C9E452dC0b8E6aa026c910D21B20fCAE
Governor0xe93b8129DC3dBD48E5d78C5A4C156DD1BFa8D65B
QSToken0xBD66beBE19E664dF143da54808d746192e4f2ee2

All L3 contracts verified on Sourcify.

Quick Start

Prerequisites

  • Docker & Docker Compose
  • Rust 1.75+ with cargo
  • Node.js 20+ with pnpm
  • Foundry (forge, anvil)

Development Setup

bash
# 1. Start infrastructuredocker compose up -d postgres redis rabbitmq l3-node minio minio-init
# 2. Run database migrationscd src/api/apiDATABASE_URL="postgresql://quantum:quantum_dev@localhost:5432/quantum_shield" sqlx migrate run
# 3. Start backend API (port 8080)cargo run --bin api-server
# 4. Start frontend (port 3000)cd src/frontend/webpnpm installpnpm dev

Verify

bash
curl http://localhost:8080/v1/health# {"status":"healthy"}

Project Structure

quantum-shield/├── src/│   ├── api/api/              # Rust/Axum backend│   │   ├── src/routes/       # API route handlers│   │   ├── src/services/     # Business logic│   │   ├── migrations/       # PostgreSQL migrations (17 files)│   │   └── config/           # YAML configuration│   ├── frontend/web/         # Next.js 15 frontend│   │   ├── src/app/          # App Router pages (11 apps)│   │   ├── src/components/   # 300+ React components│   │   ├── src/hooks/        # React Query hooks per app│   │   └── locales/          # ja/en translations│   ├── l1/contracts/         # L1 Solidity contracts (Foundry)│   ├── l3/                   # L3 governance contracts│   └── frontend/sdk/wasm/    # WASM SDK (Dilithium + SPHINCS+)├── docs/│   ├── core/SEQUENCES.md     # 9 core sequence specifications│   ├── ACTUAL_STATE.md       # Current implementation state│   └── pitch/                # Pitch deck, grant applications├── docker-compose.yml        # Development infrastructure└── .github/workflows/        # CI/CD pipelines

Testing

bash
# Backendcd src/api/api && cargo test
# Frontend E2Ecd src/frontend/web && npx playwright test
# Smart Contractscd src/l1/contracts && forge test

Test Coverage: 137 E2E tests passing, 107 integration tests, 0 failures.

Security

  • Cryptography: NIST FIPS 204 ML-DSA-65 + FIPS 205 SLH-DSA (post-quantum)
  • Hashing: SHA3-256 (no keccak256 in application layer)
  • Authentication: SIWE (Sign-In with Ethereum) + JWT
  • Time Locks: 24h normal, 7-day emergency with bond collateral
  • Slashing: Quadratic penalty for malicious provers

Audit Status

  • Internal code review
  • External audit (planned)

License

This project is licensed under the MIT License. See LICENSE for details.


Built for a post-quantum future.

来源:README.md,提交 90447cb

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v1.0.0最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分