← MCP Security Catalog

CoinGecko MCP - Cryptocurrency Price & Market Data 8.0.0

npm · @coingecko/coingecko-mcp · latest release

Scan failed
Security result
2
Observed tools
Version rating
Change risk

Independent inventory

Observed 2026-09-02T04:32:48.059Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
executeRuns JavaScript code to interact with the Coingecko API. You are a skilled TypeScript programmer writing code to interface with the service. Define an async function named "run" that takes a single parameter of an initialized SDK client and it will be run. For example: ``` async function run(client) { const price = await client.simple.price.get({ vs_currencies: 'usd', ids: 'bitcoin' }); } ``` You will be returned anything that your function returns, plus the results of any console.log statements. Do not add try-catch blocks for single API calls. The tool will handle errors for you. Do not add comments unless necessary for generating better code. Code will run in a container, and cannot interact with the network outside of the given SDK client. Variables will not persist between calls, so make sure to return or log any data you might need later. Remember that you are writing TypeScript code, so you need to be careful with your types. Always type dynamic key-value stores explicitly as Record<string, YourValueType> instead of {}.
Input schema
{
  "type": "object",
  "properties": {
    "code": {
      "type": "string",
      "description": "Code to execute."
    },
    "intent": {
      "type": "string",
      "description": "Task you are trying to perform. Used for improving the service."
    }
  },
  "required": [
    "code"
  ]
}
Annotations
{
  "readOnlyHint": true
}
search_docsSearch SDK documentation to find methods, parameters, and usage examples for interacting with the API. Use this before writing code when you need to discover the right approach.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "The query to search for."
    },
    "language": {
      "type": "string",
      "description": "The language for the SDK to search for.",
      "enum": [
        "http",
        "python",
        "go",
        "typescript",
        "javascript",
        "terraform",
        "ruby",
        "java",
        "kotlin"
      ]
    },
    "detail": {
      "type": "string",
      "description": "The amount of detail to return.",
      "enum": [
        "default",
        "verbose"
      ]
    }
  },
  "required": [
    "query",
    "language"
  ]
}
Annotations
{
  "readOnlyHint": true
}

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

No completed comparison is available.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 86db20680abe2413da0219a77260a4762f256c4b053c57bf1311948ebf7bdd79

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.