Read-only ExergyNet MCP lookups and compute-cost estimates; write settlement is disabled.
MCPpedia last refreshed this data
Exergynet MCP Server is an MCP server that read-only ExergyNet MCP lookups and compute-cost estimates; write settlement is disabled. Its tool list has not been published yet over stdio and http, requires no API key, and scores 81/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"exergynet": {
"env": {
"RPC_URL": "your_base_rpc_url",
"BASE_PRIVATE_KEY": "your_hex_private_key"
},
"args": [
"-y",
"exergynet-mcp-server"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Read-only ExergyNet MCP lookups and compute-cost estimates; write settlement is disabled.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'exergynet-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked exergynet-mcp-server against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in other
Private-by-default, local-first memory/context/task orchestrator for MCP apps and agents.
Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.
SQL for Android APK and DEX files: classes, methods, strings, references and smali.
System 1 decision models (Jev, Laya, Cua-S1) as brain for agents: Browser use, computer use, games and robotics
MCP Security Weekly
Get CVE alerts and security updates for Exergynet Mcp Server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Read-only MCP lookups for the ExergyNet LNES-03 program on Solana, plus a local compute-cost estimator. Part of ExergyNet, model-independent infrastructure for persistent memory, governed execution, and verifiable settlement — see exergynet.org.
A prior version of this package (versions up to and including 0.2.2) shipped a working exergynet_open_job tool that, once a user configured a real wallet, sent a real Base Mainnet transaction — including an unconditional, unlimited USDC spending approval — to a contract address that ExergyNet's own status page identifies as retired, with access control that cannot be independently verified. No evidence was found of any independent (non-developer) wallet ever having used this path. Full detail: MCP_SECURITY_ADVISORY_2026-08-28.md in the exergynet-site repository.
As of 0.2.3, exergynet_open_job is disabled. It always returns a fail-closed message and does not construct, sign, or submit any transaction under any configuration. This version has no signing dependency at all (ethers and viem have been removed) and does not read or require any private key. 0.2.4 additionally fixes input-validation and audit-logging gaps found by an independent MCP security scan — see below.
If you installed a version before 0.2.3 and configured a real BASE_PRIVATE_KEY, revoke any USDC approval you may have granted to 0x5cfE075149776f4b3cca07a27D4fd85A60BA5e3f on Base Mainnet (e.g. via revoke.cash) and upgrade immediately.
An earlier build (0.1.10) was independently scanned by MCP Vouch against the OWASP MCP Top 10 and scored 71/100 (Grade C), with four warnings: input validation, audit/telemetry, rate limiting, and supply chain risk. 0.2.4 addresses all four in the current tool set:
exergynet_estimate_gate and exergynet_verify_program now reject non-finite, negative, or malformed input with a clear error instead of silently coercing it.exergynet_verify_program (the only tool making an outbound network call) is limited to 20 calls per 10-second window.ethers/viem were already removed in 0.2.3. npm audit fix was applied for the transitive ws vulnerability in 0.2.4. The remaining moderate-severity uuid advisory (reachable via @solana/web3.js → jayson → uuid@8.3.2) is resolved in 0.2.5 with a targeted overrides entry pinning jayson's uuid dependency to ^11.1.1, without downgrading @solana/web3.js itself. npm audit reports 0 vulnerabilities after this change. Verified safe, not just applied blindly: full rebuild, all 9 regression tests passing, and a live network call through exergynet_verify_program against Solana Mainnet-Beta confirmed the override doesn't change RPC behavior.A fresh independent rescan will be requested once a version is published; results (old vs. new) will be recorded rather than the 71/100 figure being quietly dropped.
exergynet-mcp-server is the settlement-surface MCP server: read-only LNES-03 Solana program lookups plus a local compute-cost estimator. It is one interface into the broader ExergyNet fabric.
ExergyNet is model-independent infrastructure for autonomous AI systems — per