← MCP Security Catalog

Klever MCP Server 1.3.0

npm · @klever/mcp-server · latest release

Verified with no proven findings
Security result
23
Observed tools
71
Version rating
Change risk

Independent inventory

Observed 2026-08-14T08:15:53.224Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
add_contextAdd a new knowledge entry to the Klever VM context store. Use this to save code examples, best practices, security tips, or documentation that can later be retrieved via query_context or search_documentation. Returns the generated ID of the new entry.
Input schema
{
  "type": "object",
  "properties": {
    "type": {
      "type": "string",
      "enum": [
        "code_example",
        "best_practice",
        "security_tip",
        "optimization",
        "documentation",
        "error_pattern",
        "deployment_tool",
        "runtime_behavior"
      ],
      "description": "The category of this knowledge entry. Choose the most specific type: \"code_example\" for Rust snippets, \"best_practice\" for recommended patterns, \"security_tip\" for vulnerability guidance, \"error_pattern\" for known error solutions."
    },
    "content": {
      "type": "string",
      "description": "The main content body — typically Rust source code, a CLI command, or a detailed explanation. For code, include the full working snippet."
    },
    "metadata": {
      "type": "object",
      "description": "Entry metadata including title, tags, and categorization. At minimum, provide a title.",
      "properties": {
        "title": {
          "type": "string",
          "description": "A concise, descriptive title (e.g. \"SingleValueMapper Storage Pattern\", \"KLV Payment Handling\")."
        },
        "description": {
          "type": "string",
          "description": "A 1-2 sentence summary of what this entry covers and when to use it."
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Searchable tags for discovery (e.g. [\"storage\", \"mapper\", \"singlemapper\"], [\"tokens\", \"KLV\", \"payment\"]). Use lowercase."
        },
        "contractType": {
          "type": "string",
          "description": "The contract category this applies to (e.g. \"token\", \"nft\", \"defi\", \"dao\"). Omit if generally applicable."
        },
        "author": {
          "type": "string",
          "description": "Author name or identifier for attribution."
        }
      },
      "required": [
        "title"
      ]
    }
  },
  "required": [
    "type",
    "content",
    "metadata"
  ]
}
Annotations
{
  "title": "Add Knowledge Entry",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": false,
  "openWorldHint": false
}
add_helper_scriptsAdd build, deploy, upgrade, query, test, and interact automation scripts to an existing Klever smart contract project. Creates a scripts/ directory with bash scripts and updates .gitignore. Run this from the project root directory (where Cargo.toml is located).
Input schema
{
  "type": "object",
  "properties": {
    "contractName": {
      "type": "string",
      "description": "The contract name to embed in scripts (e.g. \"my-token\"). If omitted, auto-detected from the `name` field in Cargo.toml."
    }
  }
}
Annotations
{
  "title": "Add Helper Scripts",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
analyze_contractAnalyze Klever smart contract Rust source code for common issues. Checks for missing imports, missing #[klever_sc::contract] macro, missing endpoint annotations, payable handlers without call_value usage, storage mappers without #[storage_mapper], and missing event definitions. Returns findings with severity (error/warning/info) and links to relevant knowledge base entries.
Input schema
{
  "type": "object",
  "properties": {
    "sourceCode": {
      "type": "string",
      "description": "The full Rust source code of the Klever smart contract to analyze. Must be valid Rust code using klever_sc imports."
    },
    "contractName": {
      "type": "string",
      "description": "Human-readable name for the contract (used in output labeling). Defaults to \"contract\" if omitted."
    }
  },
  "required": [
    "sourceCode"
  ]
}
Annotations
{
  "title": "Analyze Contract",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
check_sdk_statusCheck whether the Klever SDK is installed and report the status of each component. Returns JSON with installation state and versions for: ksc (smart contract compiler), koperator (blockchain CLI), VM library (libvmexeccapi), and wallet key file. Run this before init_klever_project or install_klever_sdk to verify prerequisites.
Input schema
{
  "type": "object",
  "properties": {}
}
Annotations
{
  "title": "Check SDK Status",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
deploy_scBuild an unsigned smart contract deployment transaction for the Klever blockchain. Provide either wasmPath (preferred — reads the file server-side) or wasmHex. Returns the unsigned transaction for client-side signing. The MCP server NEVER handles private keys.
Input schema
{
  "type": "object",
  "properties": {
    "sender": {
      "type": "string",
      "description": "Deployer address (klv1... bech32 format)."
    },
    "wasmPath": {
      "type": "string",
      "description": "Absolute path to the compiled WASM file (preferred over wasmHex to avoid loading large binaries into AI context)."
    },
    "wasmHex": {
      "type": "string",
      "description": "Smart contract WASM bytecode as a hex-encoded string. Use wasmPath instead for large contracts."
    },
    "initArgs": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Optional base64-encoded init arguments for the contract constructor."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to use. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "sender"
  ]
}
Annotations
{
  "title": "Build Deploy SC Transaction",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": false,
  "openWorldHint": true
}
enhance_with_contextAugment a natural-language query with relevant Klever VM knowledge base context. Extracts Klever-specific keywords, finds matching entries, and returns the original query combined with relevant code examples and documentation in markdown. Use this to enrich a user prompt before answering Klever development questions.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "The user's natural-language question or prompt to enhance (e.g. \"How do I handle KLV payments in my contract?\")."
    },
    "autoInclude": {
      "type": "boolean",
      "default": true,
      "description": "When true (default), automatically appends the most relevant knowledge base entries to the response. Set to false to only return metadata without injecting context."
    }
  },
  "required": [
    "query"
  ]
}
Annotations
{
  "title": "Enhance Query with Context",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
find_similarFind knowledge base entries similar to a given entry by comparing tags and content. Returns related contexts ranked by similarity score. Useful for discovering related patterns, examples, or documentation after finding one relevant entry.
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "The context ID to find similar entries for. Obtain from query_context or get_context results."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "default": 5,
      "description": "Maximum number of similar entries to return. Typical range is 1-20; higher values may be slower. Default: 5."
    }
  },
  "required": [
    "id"
  ]
}
Annotations
{
  "title": "Find Similar Contexts",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
freeze_klvBuild an unsigned Freeze KLV transaction on the Klever blockchain. Freezing KLV provides energy/bandwidth for network operations and enables staking rewards. Returns the unsigned transaction for client-side signing.
Input schema
{
  "type": "object",
  "properties": {
    "sender": {
      "type": "string",
      "description": "Address to freeze from (klv1... bech32 format)."
    },
    "amount": {
      "type": "integer",
      "minimum": 1,
      "description": "Amount of KLV to freeze in the smallest unit (1 KLV = 1,000,000 units)."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to use. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "sender",
    "amount"
  ]
}
Annotations
{
  "title": "Build Freeze KLV Transaction",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": false,
  "openWorldHint": true
}
get_accountGet full account details for a Klever blockchain address including nonce, balance, frozen balance, allowance, and permissions. Use this when you need comprehensive account state beyond just the balance.
Input schema
{
  "type": "object",
  "properties": {
    "address": {
      "type": "string",
      "description": "Klever address (klv1... bech32 format)."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to query. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "address"
  ]
}
Annotations
{
  "title": "Get Account",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
get_asset_infoGet complete properties and configuration for any asset on the Klever blockchain (KLV, KFI, KDA tokens, NFT collections). Returns supply info, permissions (CanMint, CanBurn, etc.), roles, precision, and metadata. Note: string fields like ID, Name, Ticker are base64-encoded in the raw response.
Input schema
{
  "type": "object",
  "properties": {
    "assetId": {
      "type": "string",
      "description": "Asset identifier (e.g. \"KLV\", \"KFI\", \"USDT-A1B2\", \"MYNFT-XY78\")."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to query. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "assetId"
  ]
}
Annotations
{
  "title": "Get Asset Info",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
get_balanceGet the KLV or KDA token balance for a Klever blockchain address. Returns the balance in the smallest unit (for KLV: 1 KLV = 1,000,000 units with 6 decimal places). Optionally specify an asset ID to query a specific KDA token balance instead of KLV.
Input schema
{
  "type": "object",
  "properties": {
    "address": {
      "type": "string",
      "description": "Klever address (klv1... bech32 format)."
    },
    "assetId": {
      "type": "string",
      "description": "Optional KDA token ID (e.g. \"USDT-A1B2\", \"LPKLVKFI-3I0N\"). Omit for KLV balance."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to query. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "address"
  ]
}
Annotations
{
  "title": "Get Balance",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
get_blockGet block information from the Klever blockchain by nonce (block number). If no nonce is provided, returns the latest block. Returns hash, timestamp, proposer, number of transactions, and other block metadata.
Input schema
{
  "type": "object",
  "properties": {
    "nonce": {
      "type": "integer",
      "minimum": 0,
      "description": "Block number (nonce). Omit to get the latest block."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to query. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  }
}
Annotations
{
  "title": "Get Block",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
get_contextRetrieve a single knowledge base entry by its unique ID. Returns the full entry including content, metadata, tags, and related context IDs. Use this after query_context or find_similar to get complete details for a specific entry.
Input schema
{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "The unique context ID (UUID format). Obtain IDs from query_context or find_similar results."
    }
  },
  "required": [
    "id"
  ]
}
Annotations
{
  "title": "Get Context by ID",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
get_knowledge_statsGet summary statistics of the Klever VM knowledge base. Returns total entry count, counts broken down by context type (code_example, best_practice, security_tip, etc.), and a sample entry title for each type. Useful for understanding what knowledge is available before querying.
Input schema
{
  "type": "object",
  "properties": {}
}
Annotations
{
  "title": "Knowledge Base Stats",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
get_transactionGet transaction details by hash from the Klever blockchain. Returns sender, receiver, status, block info, contracts, and receipts. Uses the API proxy for indexed data.
Input schema
{
  "type": "object",
  "properties": {
    "hash": {
      "type": "string",
      "description": "Transaction hash (hex string)."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to query. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "hash"
  ]
}
Annotations
{
  "title": "Get Transaction",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
init_klever_projectScaffold a new Klever smart contract project using the SDK. Creates the Rust project structure via `ksc new` and generates automation scripts (build, deploy, upgrade, query, test, interact). Requires Klever SDK installed at ~/klever-sdk/. Run check_sdk_status first to verify.
Input schema
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "The contract project name in kebab-case (e.g. \"my-token\", \"nft-marketplace\"). Used as the Cargo package name and directory name."
    },
    "template": {
      "type": "string",
      "enum": [
        "empty",
        "adder"
      ],
      "description": "Project template to scaffold from. \"empty\" creates a blank contract with just an init function. \"adder\" creates a simple counter example. Default: \"empty\".",
      "default": "empty"
    },
    "noMove": {
      "type": "boolean",
      "description": "When true, keeps the project in the SDK output directory instead of moving it to the current working directory. Default: false.",
      "default": false
    }
  },
  "required": [
    "name"
  ]
}
Annotations
{
  "title": "Initialize Klever Project",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": false,
  "openWorldHint": false
}
install_klever_sdkDownload and install Klever SDK tools to ~/klever-sdk/. Fetches the latest versions from the Klever CDN, installs binaries, and downloads required VM library dependencies. Supports macOS (arm64/amd64) and Linux. Run check_sdk_status first to see what is already installed.
Input schema
{
  "type": "object",
  "properties": {
    "tool": {
      "type": "string",
      "enum": [
        "ksc",
        "koperator",
        "all"
      ],
      "description": "Which SDK component to install. \"ksc\" = smart contract compiler only, \"koperator\" = blockchain operator CLI + VM library, \"all\" = both ksc and koperator. Default: \"all\".",
      "default": "all"
    }
  }
}
Annotations
{
  "title": "Install Klever SDK",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
invoke_scBuild an unsigned smart contract invocation transaction on the Klever blockchain. Calls a state-changing endpoint on a deployed contract. Returns the unsigned transaction for client-side signing. For read-only calls, use query_sc instead.
Input schema
{
  "type": "object",
  "properties": {
    "sender": {
      "type": "string",
      "description": "Caller address (klv1... bech32 format)."
    },
    "scAddress": {
      "type": "string",
      "description": "Smart contract address (klv1... bech32 format)."
    },
    "funcName": {
      "type": "string",
      "description": "Endpoint function name to invoke."
    },
    "args": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Optional base64-encoded arguments."
    },
    "callValue": {
      "type": "object",
      "additionalProperties": {
        "type": "integer"
      },
      "description": "Optional token amounts to send with the call, as a map of token ID to amount (e.g. {\"KLV\": 1000000}). Required for payable endpoints."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to use. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "sender",
    "scAddress",
    "funcName"
  ]
}
Annotations
{
  "title": "Build Invoke SC Transaction",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": false,
  "openWorldHint": true
}
list_validatorsList active validators on the Klever blockchain network. Returns validator addresses, names, commission rates, delegation info, and staking amounts.
Input schema
{
  "type": "object",
  "properties": {
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to query. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  }
}
Annotations
{
  "title": "List Validators",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
query_contextSearch the Klever VM knowledge base for smart contract development context. Returns structured JSON with matching entries, scores, and pagination. Use this for precise filtering by type or tags; use search_documentation for human-readable "how do I..." answers.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Free-text search query. Use Klever-specific terms for best results (e.g. \"storage mapper SingleValueMapper\", \"payable endpoint KLV\", \"deploy contract testnet\")."
    },
    "types": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "code_example",
          "best_practice",
          "security_tip",
          "optimization",
          "documentation",
          "error_pattern",
          "deployment_tool",
          "runtime_behavior"
        ]
      },
      "description": "Filter results by context type. Omit to search all types. Common combinations: [\"code_example\", \"documentation\"] for learning, [\"error_pattern\"] for debugging, [\"security_tip\", \"best_practice\"] for reviews."
    },
    "tags": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Filter by tags (e.g. [\"storage\", \"mapper\"], [\"tokens\", \"KLV\"], [\"events\"]). Tags are matched with OR logic — any matching tag includes the entry."
    },
    "contractType": {
      "type": "string",
      "description": "Filter by contract type (e.g. \"token\", \"nft\", \"defi\", \"dao\"). Only returns entries tagged for this contract category."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 100,
      "default": 10,
      "description": "Maximum number of results to return (1-100). Default: 10."
    },
    "offset": {
      "type": "integer",
      "minimum": 0,
      "default": 0,
      "description": "Number of results to skip for pagination. Use with limit to page through results. Default: 0."
    }
  }
}
Annotations
{
  "title": "Query Knowledge Base",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
query_scExecute a read-only query against a Klever smart contract (VM view call). Returns the contract function result as base64-encoded return data. Arguments must be base64-encoded. Use this to read contract state without modifying it.
Input schema
{
  "type": "object",
  "properties": {
    "scAddress": {
      "type": "string",
      "description": "Smart contract address (klv1... bech32 format)."
    },
    "funcName": {
      "type": "string",
      "description": "Function name to call (must be a #[view] function on the contract)."
    },
    "args": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Optional base64-encoded arguments. For addresses, encode the hex-decoded bech32 bytes. For numbers, use big-endian byte encoding."
    },
    "caller": {
      "type": "string",
      "description": "Optional caller address (klv1... bech32 format). Some view functions use the caller to look up address-keyed storage mappers."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to query. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "scAddress",
    "funcName"
  ]
}
Annotations
{
  "title": "Query Smart Contract",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": true
}
search_documentationSearch Klever VM documentation and knowledge base. Returns human-readable markdown with titles, descriptions, and code snippets. Optimized for "how do I..." questions. Use this instead of query_context when you need formatted developer documentation.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Search query in natural language (e.g. \"how to use storage mappers\", \"deploy contract to testnet\", \"handle KDA token transfers\")."
    },
    "category": {
      "type": "string",
      "enum": [
        "core",
        "storage",
        "events",
        "tokens",
        "modules",
        "tools",
        "scripts",
        "examples",
        "errors",
        "best-practices",
        "documentation"
      ],
      "description": "Narrow results to a specific knowledge category. Available: core, storage, events, tokens, modules, tools, scripts, examples, errors, best-practices, documentation."
    }
  },
  "required": [
    "query"
  ]
}
Annotations
{
  "title": "Search Documentation",
  "readOnlyHint": true,
  "destructiveHint": false,
  "idempotentHint": true,
  "openWorldHint": false
}
send_transferBuild an unsigned KLV or KDA token transfer transaction on the Klever blockchain. Returns the unsigned transaction data and hash for client-side signing. The MCP server NEVER handles private keys — signing must be done externally.
Input schema
{
  "type": "object",
  "properties": {
    "sender": {
      "type": "string",
      "description": "Sender address (klv1... bech32 format)."
    },
    "receiver": {
      "type": "string",
      "description": "Receiver address (klv1... bech32 format)."
    },
    "amount": {
      "type": "integer",
      "minimum": 1,
      "description": "Amount in the smallest unit. For KLV: 1 KLV = 1,000,000 units (6 decimals). Example: to send 10 KLV, use 10000000."
    },
    "assetId": {
      "type": "string",
      "description": "Optional KDA token ID for non-KLV transfers (e.g. \"USDT-A1B2\"). Omit for KLV."
    },
    "network": {
      "type": "string",
      "enum": [
        "mainnet",
        "testnet",
        "devnet",
        "local"
      ],
      "description": "Network to use. Options: \"mainnet\", \"testnet\", \"devnet\", \"local\". Defaults to server default (mainnet)."
    }
  },
  "required": [
    "sender",
    "receiver",
    "amount"
  ]
}
Annotations
{
  "title": "Build Transfer Transaction",
  "readOnlyHint": false,
  "destructiveHint": false,
  "idempotentHint": false,
  "openWorldHint": true
}

Resources 1

Resource templates 1

Prompts 4

Changes from previous version

No completed comparison is available.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 0332259c56a1b74d7afdf629ee09f4de102fa0ceca297ce5ffd26ab8a98c590e

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.