Hedera MCP server
Build-only Hedera (Hashgraph) MCP — 73 tools across all core services plus analytics reads.
0 stars69 downloads/wk
Reviews
Write oneNobody has reviewed Hedera yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Hedera tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan27 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 19 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Hedera compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- Downloads a week
- 69
- more than 53% of 12,191 servers with a package
Install Hedera in Claude Code, Cursor or VS Code
Runs npx -y @purplesquirrel/hedera-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add hedera-mcp -- npx -y @purplesquirrel/hedera-mcp
What the publisher says
From the Hedera repository's README, as published. We do not edit it. Read it on GitHub
hedera-mcp
Comprehensive Model Context Protocol server for Hedera (Hashgraph). Full coverage of every core Hedera service — Account, Token (HTS), Consensus (HCS), Smart Contract (EVM), File, Schedule, and Network — exposed as 73 MCP tools any AI agent (Claude, Cursor, etc.) can call.
Build-only. Never holds keys. Reads hit the public Mirror Node REST API (no auth). Writes return an unsigned, frozen transaction (base64) for you to sign and submit with your own wallet/SDK/CLI. This server never sees a private key and never executes anything.
Why this exists
The official Hedera Agent Kit ships a preconfigured MCP server, but its tool surface is intentionally small (balance, transfer, deploy). This server fills the gap with end-to-end coverage of the Hedera API, organized for developer education and agent-driven onboarding — so a developer can go from "certified" to "shipping their first HTS token / HCS topic / contract" inside a single AI session.
Security model
- Reads → public Mirror Node REST. No keys, no account required.
- Writes → the tool constructs the transaction, freezes it for offline signing, and returns base64 bytes plus a human summary. You inspect it (hederadecodetransaction), then sign and submit yourself.
- The only optional environment input is HEDERAOPERATORID — an account id, used as the default payer/treasury when building. Never a key.
This mirrors the posture of goat-network-mcp: safe to run anywhere, safe to give to an autonomous agent.
Published on npm and the MCP Registry as io.github.ExpertVagabond/hedera-mcp.
Install
Run directly with npx (no clone needed):
npx @purplesquirrel/hedera-mcpOr from source:
npm install
npm run buildConfigure (Claude Desktop / Claude Code)
{
"mcpServers": {
"hedera": {
"command": "npx",
"args": ["-y", "@purplesquirrel/hedera-mcp"],
"env": {
"HEDERA_NETWORK": "testnet",
"HEDERA_OPERATOR_ID": "0.0.1234"
}
}
}
}Build-only workflow
agent calls hedera_create_fungible_token
│
▼
hedera-mcp builds + freezes the TokenCreateTransaction
│
▼
returns base64 (unsigned) ──► you sign in HashPack / SDK / CLI ──► submit to HederaInspect anything before signing:
hedera_decode_transaction { transactionBase64: "<bytes>" }
→ { type: "TokenCreateTransaction", transactionId, nodeAccountIds, maxTransactionFee, ... }Tool catalog (73)
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Hedera: common questions
- Is Hedera MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Hedera safety report
- How do I install Hedera?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Hedera need an API key?
- No secret keys are declared. It reads 3 settings from the environment.
- Is Hedera maintained?
- The last commit was 57 days ago (2026-09-08). The latest release is v0.5.0.
- How does Hedera compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); downloads a week 69 (more than 53% of 12,191 servers with a package). Full comparison.