← 返回 Skills 市场
aviclaw

Debridge Mcp

作者 aviclaw · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
523
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install debridge-mcp
功能描述
Enable non-custodial cross-chain crypto swaps and transfers with optimized routing, fee estimation, and order tracking via the deBridge protocol.
使用说明 (SKILL.md)

deBridge MCP Skill

Enable AI agents to execute non-custodial cross-chain cryptocurrency swaps and transfers via the deBridge protocol.

What It Does

  • Cross-chain swaps: Find optimal routes and execute trades across 20+ chains
  • Transfer assets: Move tokens between chains with better rates than traditional bridges
  • Fee estimation: Check fees and conditions before executing
  • Non-custodial: Assets never leave user control

Installation

# Clone the MCP server
git clone https://github.com/debridge-finance/debridge-mcp.git ~/debridge-mcp
cd ~/debridge-mcp
npm install
npm run build

# Add to OpenClaw config
# See configuration below

Configuration

Add to ~/.openclaw/openclaw.json:

{
  "plugins": {
    "entries": {
      "mcp-adapter": {
        "enabled": true,
        "config": {
          "servers": [
            {
              "name": "debridge",
              "transport": "stdio",
              "command": "node",
              "args": ["/home/ubuntu/debridge-mcp/dist/index.js"]
            }
          ]
        }
      }
    }
  }
}

Then restart: openclaw gateway restart

Available Tools

When MCP is connected, agents can use:

  • get_quote: Get swap quote for cross-chain trade
  • create_order: Create cross-chain order
  • get_status: Check order status
  • get_supported_chains: List supported chains

Usage Example

Ask: "Swap 100 USDC from Ethereum to Arbitrum"

Agent uses MCP to:
1. Get quote for USDC → USDC on Arbitrum
2. Show estimated receive amount and fees
3. Create order if user confirms
4. Monitor until completion

Security Notes

  • Always verify quoted rates before executing
  • Check slippage tolerance settings
  • deBridge uses DLN (Decentralized Liquidity Network) - not a bridge
  • No liquidity pools - uses order-based matching

Chains Supported

Ethereum, Arbitrum, Optimism, Base, Polygon, Avalanche, BNB Chain, Solana, and 15+ more.


Skill by: Avi (github.com/aviclaw)

安全使用建议
Do not install or run this skill blindly. Before proceeding: 1) Verify the correct upstream repository (SKILL.md/setup.sh clone https://github.com/debridge-finance/debridge-mcp while _meta.json points to a different repo); confirm you trust that exact GitHub repo and the commit being cloned. 2) Inspect the upstream repository's code (especially any code that requests signing or holds private keys), and run npm audit and static checks. 3) Clarify how transaction signing is handled — never supply private keys to code unless you fully understand and trust its signing workflow (prefer external hardware wallets or explicit user signing prompts). 4) Run the MCP server in an isolated environment (container or VM) and avoid using hard-coded paths like /home/ubuntu; review and sanitize the adapter config before adding it to ~/.openclaw/openclaw.json. 5) If you need this functionality, contact the deBridge project directly or use an officially documented integration; if anything remains ambiguous (origin, signing, required node version), treat the package as untrusted and do not run it on a machine with sensitive keys or production assets.
功能分析
Type: OpenClaw Skill Name: debridge-mcp Version: 0.1.0 The skill bundle appears benign. The `SKILL.md` provides clear instructions and tool definitions without any prompt injection attempts. The `setup.sh` script automates cloning a public GitHub repository (`debridge-finance/debridge-mcp`) and building a Node.js project using `npm install` and `npm run build`. Crucially, the script does not automatically modify the OpenClaw configuration; instead, it instructs the user to perform this step manually, which is a safer practice. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation within the provided files.
能力评估
Purpose & Capability
The SKILL.md and setup.sh instruct cloning and running a Node-based MCP server (git clone, npm install, npm run build, node dist/index.js) but the skill metadata declares no required binaries or credentials. That is inconsistent: node/npm should be declared. Additionally, _meta.json points to a repo under aviclaw while the install instructions and setup.sh clone github.com/debridge-finance/debridge-mcp — the origin is ambiguous.
Instruction Scope
Instructions direct the agent/operator to download and run external code as a local adapter and to modify ~/.openclaw/openclaw.json to launch it via stdio. The SKILL.md does not explain how transaction signing or wallet/private-key access is handled (critical for cross-chain swaps). Running a third-party server locally can give the skill broad ability to initiate blockchain transactions if signing is available — but the workflow for signing/authentication is missing.
Install Mechanism
Installation is a simple git clone from GitHub and npm build (no packaged installer). The GitHub URL (debridge-finance) is an expected host for this project, which reduces risk versus a random URL, but it still results in arbitrary code being written and executed locally (npm install, npm run build, node). The skill registry did not provide an install spec, so setup.sh bundled with the skill is the only installer; that script performs cloning and building on the user's machine.
Credentials
No environment variables or credentials are declared, yet the feature (executing swaps/transfers) normally requires signing transactions or proxying through wallets or RPC endpoints. The SKILL.md gives no guidance on how keys are provided or how signing requests are routed, which is a material omission. The setup script reads and backs up ~/.openclaw/openclaw.json (expected) and references a hard-coded installation path (/home/ubuntu) in the example config — this is not proportional to the claimed zero-dependency footprint.
Persistence & Privilege
The skill does not request forced persistence (always: false) and setup.sh only suggests adding an adapter entry and backing up the OpenClaw config; it does not autonomously modify plugin-enabled flags or system-wide settings beyond the user's OpenClaw config backup step. Autonomous invocation remains possible by default (platform behavior) but is not elevated by the skill metadata.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install debridge-mcp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /debridge-mcp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
- Initial release of deBridge MCP Skill. - Enables AI agents to perform non-custodial cross-chain swaps and transfers using the deBridge protocol. - Supports optimal route finding, fee estimation, and cross-chain order management across 20+ blockchains. - Includes tools for getting swap quotes, creating orders, checking order status, and listing supported chains. - Provides installation, configuration, and usage instructions for integration with OpenClaw.
元数据
Slug debridge-mcp
版本 0.1.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Debridge Mcp 是什么?

Enable non-custodial cross-chain crypto swaps and transfers with optimized routing, fee estimation, and order tracking via the deBridge protocol. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 523 次。

如何安装 Debridge Mcp?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install debridge-mcp」即可一键安装,无需额外配置。

Debridge Mcp 是免费的吗?

是的,Debridge Mcp 完全免费(开源免费),可自由下载、安装和使用。

Debridge Mcp 支持哪些平台?

Debridge Mcp 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Debridge Mcp?

由 aviclaw(@aviclaw)开发并维护,当前版本 v0.1.0。

💬 留言讨论