← MCP Security Catalog

paean-dex-mcp 0.2.0

npm · paean-dex-mcp · latest release

Scan failed
Security result
7
Observed tools
29
Version rating
100
Change risk

Independent inventory

Observed 2026-08-21T21:05:36.836Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
execute_swapExecute a token swap on the DEX. Requires a wallet: set DEX_PRIVATE_KEY_BASE/DEX_PRIVATE_KEY_SOLANA or DEX_MNEMONIC. Always call get_swap_quote first to confirm the trade details. Returns the transaction hash and explorer URL.
Input schema
{
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "enum": [
        "base",
        "solana"
      ],
      "description": "Chain to swap on. Defaults to the configured default chain."
    },
    "input_token": {
      "type": "string",
      "description": "Input token address."
    },
    "output_token": {
      "type": "string",
      "description": "Output token address."
    },
    "input_amount": {
      "type": "string",
      "description": "Human-readable amount to swap, e.g. \"1.5\"."
    },
    "slippage_bps": {
      "type": "integer",
      "minimum": 1,
      "maximum": 5000,
      "description": "Slippage tolerance in basis points. Default: 50 (0.5%)."
    },
    "deadline_minutes": {
      "type": "integer",
      "minimum": 1,
      "maximum": 60,
      "description": "Transaction deadline in minutes. Default: 20."
    }
  },
  "required": [
    "input_token",
    "output_token",
    "input_amount"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_swap_quoteGet a swap quote showing the expected output, price impact, route, and minimum received for a given trade. Always call this before execute_swap to verify the trade details. On Base uses Uniswap v3; on Solana uses Jupiter aggregator for optimal routing.
Input schema
{
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "enum": [
        "base",
        "solana"
      ],
      "description": "Chain to quote on. Defaults to the configured default chain."
    },
    "input_token": {
      "type": "string",
      "description": "Input token address (contract address on Base, mint address on Solana). Use list_common_tokens for addresses."
    },
    "output_token": {
      "type": "string",
      "description": "Output token address."
    },
    "input_amount": {
      "type": "string",
      "description": "Human-readable input amount, e.g. \"1.5\" or \"100\"."
    },
    "slippage_bps": {
      "type": "integer",
      "minimum": 1,
      "maximum": 5000,
      "description": "Slippage tolerance in basis points (1 bps = 0.01%). Default: 50 (0.5%). Max: 5000 (50%)."
    }
  },
  "required": [
    "input_token",
    "output_token",
    "input_amount"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_token_balanceGet the token or native coin balance for any wallet address. For ERC20/SPL tokens provide the token contract/mint address. Omit token_address to get the native balance (ETH on Base, SOL on Solana). Omit wallet_address to use the configured wallet.
Input schema
{
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "enum": [
        "base",
        "solana"
      ],
      "description": "Chain to query. Defaults to the configured default chain."
    },
    "wallet_address": {
      "type": "string",
      "description": "Wallet address to check. Defaults to the configured wallet."
    },
    "token_address": {
      "type": "string",
      "description": "Token contract address (ERC20) or mint address (SPL). Omit for native balance (ETH/SOL)."
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_token_priceGet the current USD price of a token using on-chain DEX pricing. On Base, queries a USDC pair via Uniswap v3. On Solana, queries Jupiter price API. Use list_common_tokens to find token addresses.
Input schema
{
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "enum": [
        "base",
        "solana"
      ],
      "description": "Chain to query. Defaults to the configured default chain."
    },
    "token_address": {
      "type": "string",
      "description": "Token contract/mint address to get the price for."
    }
  },
  "required": [
    "token_address"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_transaction_statusLook up a transaction by its hash and return its confirmation status, block number, timestamp, and gas used. Useful for monitoring swap execution.
Input schema
{
  "type": "object",
  "properties": {
    "tx_hash": {
      "type": "string",
      "description": "Transaction hash (hex on Base, base58 signature on Solana)."
    },
    "chain": {
      "type": "string",
      "enum": [
        "base",
        "solana"
      ],
      "description": "Chain the transaction is on. Defaults to the configured default chain."
    }
  },
  "required": [
    "tx_hash"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
get_wallet_addressGet the configured wallet address(es) used for trading. Returns addresses for all configured chains, or a specific chain if requested. Addresses are safe to share; private keys are never exposed.
Input schema
{
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "enum": [
        "base",
        "solana"
      ],
      "description": "Chain to get address for. Omit to get all configured chains."
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
list_common_tokensList commonly traded tokens with their contract/mint addresses and decimals for a given chain. Use this to find the correct address before calling get_swap_quote or execute_swap.
Input schema
{
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "enum": [
        "base",
        "solana"
      ],
      "description": "Chain to list tokens for. Defaults to the configured default chain."
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: a56f0e4302ff39dd3ad5c2f0e70778dad12a21be2f7f07ea31d8d066af18cec8

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.