← Back to Skills Marketplace
KaspaCom DeFi MCP
by
marciano147
· GitHub ↗
· v0.1.0
· MIT-0
85
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install kaspacom-defi-mcp
Description
Use KaspaCom DeFi MCP or CLI to query and transact across KaspaCom DEX, Lending, and LFG Launchpad on IGRA and Kasplex mainnet/testnet. Trigger when the user...
README (SKILL.md)
KaspaCom DeFi MCP
KaspaCom DeFi MCP exposes KaspaCom DeFi through a single MCP server and CLI.
Supports
- DEX: pairs, prices, swaps, add/remove liquidity
- Lending: markets, positions, supply, borrow, repay
- LFG Launchpad: active launches, buy/sell launch tokens
- Networks:
igra,igra-testnet,kasplex,kasplex-testnet
Install
npm i -g @kaspacom/defi-mcp
Start MCP server
MCP_NETWORK=igra node dist/mcp/index.js
With wallet:
MCP_WALLET_KEY="0x..." MCP_NETWORK=igra node dist/mcp/index.js
CLI
kaspacom-defi --help
Good use cases
- "Show me all KaspaCom DEX pairs on Kasplex"
- "Get my lending health factor on IGRA"
- "List active LFG launches"
- "Buy a launch token with 100 KAS"
- "Get protocol info across networks"
Notes
- Read-only tools work without a wallet.
- Write actions require
MCP_WALLET_KEY. - Use
igra-testnetorkasplex-testnetfor safe testing first.
Usage Guidance
This skill appears functionally consistent with a KaspaCom DeFi CLI/MCP but has two red flags: the runtime tells you to install and run an npm package (which will execute code on your machine) and to supply MCP_WALLET_KEY, yet the registry lists no source/homepage and no required env vars. Before installing: 1) Ask the publisher for the package source (npm page and GitHub repo) and verify checksums and release authenticity. 2) Inspect the package code (or have it reviewed) before running, especially dist/mcp/index.js. 3) Never use your mainnet private key in an env var; use a testnet or ephemeral wallet with minimal funds and consider a hardware wallet or signing proxy. 4) Prefer running the package in an isolated environment (container or VM) until you trust it. 5) Request that the skill metadata be updated to declare MCP_WALLET_KEY as a required credential and include a homepage/source. If the publisher cannot provide verifiable source code or a reputable package listing, avoid installing it on sensitive hosts.
Capability Analysis
Type: OpenClaw Skill
Name: kaspacom-defi-mcp
Version: 0.1.0
The skill bundle provides documentation and instructions for the KaspaCom DeFi MCP server, which enables AI agents to interact with decentralized finance protocols (DEX, Lending, Launchpad) on the Kaspa network. The instructions in SKILL.md describe standard installation via NPM (@kaspacom/defi-mcp) and configuration using environment variables for network selection and wallet keys. No malicious code, data exfiltration logic, or prompt injection attempts were identified in the provided files.
Capability Tags
Capability Assessment
Purpose & Capability
The SKILL.md behavior (querying and transacting on KaspaCom, performing swaps/lending/launchpad actions) matches the name/description — those actions legitimately require network access and a wallet key for writes. However the skill metadata declares no required env vars/credentials while the runtime instructions explicitly reference MCP_WALLET_KEY, an inconsistency that should be resolved.
Instruction Scope
The instructions stay within the DeFi/CLI domain: they show an npm install, how to start a local MCP server, how to pass MCP_WALLET_KEY for write actions, and recommend testnets. The instructions do not request unrelated files or other system secrets. They do, however, instruct executing code from a package you cannot verify from the registry data.
Install Mechanism
The SKILL.md tells users to run `npm i -g @kaspacom/defi-mcp` and `node dist/mcp/index.js`. Installing and executing a global npm package is moderate risk—acceptable for this use-case if the package origin is trustworthy. Here there is no homepage/source provided in the registry metadata, so the package origin and contents cannot be audited from the registry data, increasing risk.
Credentials
Write actions require a wallet private key (MCP_WALLET_KEY) per the instructions. The registry metadata, however, lists no required environment variables or primary credential. Requiring a private key is reasonable for transaction capability, but the omission in metadata is a meaningful mismatch and the practice of putting a private key in an env var should be considered sensitive and handled with caution.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and does not request elevated platform privileges. Installing a global npm package modifies the system (binaries on PATH) which is normal for a CLI but is a persistence footprint the user should accept explicitly. There's no indication the skill attempts to modify other skills or system-wide agent configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install kaspacom-defi-mcp - After installation, invoke the skill by name or use
/kaspacom-defi-mcp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial publish
Metadata
Frequently Asked Questions
What is KaspaCom DeFi MCP?
Use KaspaCom DeFi MCP or CLI to query and transact across KaspaCom DEX, Lending, and LFG Launchpad on IGRA and Kasplex mainnet/testnet. Trigger when the user... It is an AI Agent Skill for Claude Code / OpenClaw, with 85 downloads so far.
How do I install KaspaCom DeFi MCP?
Run "/install kaspacom-defi-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is KaspaCom DeFi MCP free?
Yes, KaspaCom DeFi MCP is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does KaspaCom DeFi MCP support?
KaspaCom DeFi MCP is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created KaspaCom DeFi MCP?
It is built and maintained by marciano147 (@marciano147); the current version is v0.1.0.
More Skills