← MCP Security Catalog

TokenTool MCP 1.1.1

npm · token-tool-mcp · latest release

Verified with no proven findings
Security result
11
Observed tools
34
Version rating
100
Change risk

Independent inventory

Observed 2026-08-18T09:25:42.512Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
burn_tokensBurn/destroy tokens from your balance (only works if token was deployed with burnable=true)
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "contract_address": {
      "type": "string",
      "description": "Token contract address"
    },
    "amount": {
      "type": "string",
      "description": "Amount to burn (human-readable)"
    },
    "chain": {
      "type": "string",
      "description": "Chain the token is on"
    }
  },
  "required": [
    "contract_address",
    "amount",
    "chain"
  ]
}
——
deploy_tokenDeploy a new token using Bitbond Token Tool. Supports EVM chains (ERC20, CertiK-audited), Solana (SPL tokens), and Stellar (assets).
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Token name (e.g. \"My Token\")"
    },
    "symbol": {
      "type": "string",
      "description": "Token symbol/ticker (e.g. \"MTK\")"
    },
    "supply": {
      "type": "string",
      "description": "Initial token supply as a number (e.g. \"1000000\")"
    },
    "chain": {
      "type": "string",
      "description": "Chain to deploy on (e.g. \"ethereum\", \"polygon\", \"base\", \"sepolia\")"
    },
    "decimals": {
      "default": "18",
      "description": "Token decimals (default: 18)",
      "type": "string"
    },
    "mintable": {
      "description": "Allow minting more tokens after deployment",
      "type": "boolean"
    },
    "burnable": {
      "description": "Allow burning/destroying tokens",
      "type": "boolean"
    },
    "pausable": {
      "description": "Allow pausing all transfers (emergency stop)",
      "type": "boolean"
    },
    "whitelist": {
      "description": "Enable whitelist — only approved addresses can hold tokens",
      "type": "boolean"
    },
    "blacklist": {
      "description": "Enable blacklist — block specific addresses",
      "type": "boolean"
    },
    "force_transfer": {
      "description": "Allow owner to force-transfer tokens (compliance)",
      "type": "boolean"
    },
    "document_uri": {
      "description": "URI to legal document or prospectus",
      "type": "string"
    },
    "max_supply": {
      "description": "Maximum total supply cap",
      "type": "string"
    },
    "discount_code": {
      "description": "Bitbond discount code if you have one",
      "type": "string"
    }
  },
  "required": [
    "name",
    "symbol",
    "supply",
    "chain"
  ]
}
——
estimate_costGet the cost to deploy a token on a given chain before committing
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "description": "Chain name (e.g. \"ethereum\", \"polygon\", \"base\", \"sepolia\")"
    },
    "mintable": {
      "description": "Include mintable feature",
      "type": "boolean"
    },
    "burnable": {
      "description": "Include burnable feature",
      "type": "boolean"
    },
    "pausable": {
      "description": "Include pausable feature",
      "type": "boolean"
    }
  },
  "required": [
    "chain"
  ]
}
——
get_token_infoGet live on-chain info for any token contract (name, symbol, supply, paused state, owner)
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "contract_address": {
      "type": "string",
      "description": "Token contract address (0x...)"
    },
    "chain": {
      "type": "string",
      "description": "Chain the token is on"
    }
  },
  "required": [
    "contract_address",
    "chain"
  ]
}
——
get_wallet_infoGet the deployer wallet address and balance on a given chain
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "chain": {
      "type": "string",
      "description": "Chain to check balance on"
    }
  },
  "required": [
    "chain"
  ]
}
——
list_chainsList all supported blockchain networks for token deployment
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {}
}
——
list_deployed_tokensList all tokens deployed via this MCP server (local registry)
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "chain": {
      "description": "Filter by chain (optional)",
      "type": "string"
    }
  }
}
——
mint_tokensMint additional tokens (only works if token was deployed with mintable=true)
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "contract_address": {
      "type": "string",
      "description": "Token contract address"
    },
    "to": {
      "type": "string",
      "description": "Address to receive minted tokens"
    },
    "amount": {
      "type": "string",
      "description": "Amount to mint (human-readable)"
    },
    "chain": {
      "type": "string",
      "description": "Chain the token is on"
    }
  },
  "required": [
    "contract_address",
    "to",
    "amount",
    "chain"
  ]
}
——
pause_tokenPause all token transfers — emergency stop (only works if pausable=true)
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "contract_address": {
      "type": "string",
      "description": "Token contract address"
    },
    "chain": {
      "type": "string",
      "description": "Chain the token is on"
    }
  },
  "required": [
    "contract_address",
    "chain"
  ]
}
——
transfer_tokensTransfer tokens from your wallet to another address
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "contract_address": {
      "type": "string",
      "description": "Token contract address"
    },
    "to": {
      "type": "string",
      "description": "Recipient wallet address"
    },
    "amount": {
      "type": "string",
      "description": "Amount to transfer (human-readable, e.g. \"1000\")"
    },
    "chain": {
      "type": "string",
      "description": "Chain the token is on"
    }
  },
  "required": [
    "contract_address",
    "to",
    "amount",
    "chain"
  ]
}
——
unpause_tokenResume token transfers after a pause
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {
    "contract_address": {
      "type": "string",
      "description": "Token contract address"
    },
    "chain": {
      "type": "string",
      "description": "Chain the token is on"
    }
  },
  "required": [
    "contract_address",
    "chain"
  ]
}
——

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 94670714a7e52e64597a566734de3d649c7582be03e34f0e82626b623fdbfa57

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.