@starknetfoundation/starknet-agentic-mcp-server MIT 2 versions

@starknetfoundation/starknet-agentic-mcp-server

npm Repository Homepage

MCP server exposing Starknet operations as tools for AI agents

Versions

MIT

License

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

adrienlacombe-starknet

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
semgrep	semgrep:shady-links-raw-ip	AI (semgrep): All raw-IP hits are 127.0.0.1 localhost addresses in test files — not production network calls.	ai	2026/05/16
semgrep	semgrep:hex-decode	AI (semgrep): Hex decoding used for timing-safe HMAC comparison via timingSafeEqual — standard cryptographic pattern, not obfuscation.	ai	2026/05/16

Version	Deps	Published
0.1.1	5 / 5	2026-05-01
0.1.0	5 / 5	2026-04-30

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.