IronWallet MCP server

Read from the package source without running it. The installed server may list more.

• accept_mcp_consent

  Record that the user accepted the MCP risk disclaimer in chat. Call only after showing the full consent text (from a previous create_wallets needs_consent response, or the skill) and the user explicitly confirms. Does not create a wallet. accepted must be true.

• create_walletswrite action

  Generate one or more brand-new wallets (BIP-39). Requires a current MCP consent (accept_mcp_consent in chat, or the local wallet manager). Returns names and addresses only. Seed phrases are NOT returned to the agent. The response includes a local browser URL where the user can view and back up the recovery phrases. If consent is missing, returns needs_consent and the full disclaimer instead of cre

• estimate_swap

  Get a swap quote (amounts, fees). Read-only: no order is created and no operationId is returned — there is nothing to poll with get_swap_status until execute_swap. Quote can expire — prefer execute_swap for sending (it re-estimates). Amount is a decimal string; set maxMode=true to sell the full balance (backend corrects amount).

• estimate_transferwrite action

  Estimate fees for a transfer without sending. Returns fees and the number of transactions that would be signed.

• execute_swapwrite action

  Execute a swap: fresh estimate → create → local sign → execute. Does NOT use the transfer relay. Irreversible once submitted — no second confirmation. Returns operationId and txHash; poll with get_swap_status.

• get_balance

  Get the balance for a wallet on a network. Optionally pass a token contract address; omit for the native coin.

• get_deposit_qr

  PNG QR to receive funds (generated on the fly; network name above the code, IW mark, address under it). Pass network for one chain; omit it for one QR per unique address — the shared EVM address is one QR captioned with every chain it serves (sharedWith). Does not move funds. Never returns keys or seed phrases. Show the attached images in chat when the host renders them and name each one by its la

• get_operation_status

  Poll the state of a forward operation by its operation id.

• get_runtime_info

  Report this process's @ironwallet/mcp-server version and compare it to the published npm package (dist-tags on the configured registry). Does not update or restart the server. If updateAvailable is true, tell the user and offer prepare_update; stage it only after they agree.

• get_swap_status

  Poll swap order status by the operationId returned by execute_swap. Only executed swaps have a status; estimate_swap does not create an order.

• get_transaction_history

  Recent transactions of a wallet address on one network, newest first, read from public block explorers (not the IronWallet backend). Each item is normalized: hash, timestamp, kind (transfer / token_transfer / contract_call / other), direction (in / out / self), status, from, to, asset, amount, fee. One call returns one page (up to 20 items); fetch older pages by passing nextCursor back as cursor o

• list_swap_assets

  List tradable assets. direction=from lists sell assets; direction=to requires fromNetwork/fromSymbol (and fromAddress for tokens) and lists buy assets. Enriches with wallet address and balance when possible.

• list_swap_networks

  List networks available for swaps. Use before listing swap assets.

• list_wallets

  List the wallets in the local keystore with their addresses per network. Each wallet includes policy ({ enabled: false } when unset). Never returns private keys or seed phrases.

• open_wallet_manager

  Open a local browser form to add/import/create wallets, back them up (reveal the recovery phrase), or delete them. Returns a localhost URL for the user to open. Seed phrases are entered and shown ONLY in the browser and never pass through the agent. Use this whenever the user asks to add, import, create, back up, or delete a wallet — there is no tool for deleting; the user confirms it in the manag

• prepare_updatewrite action

  Stage a newer @ironwallet/mcp-server into this server's npx cache so the NEXT MCP restart runs it. Call only when the user explicitly asks to update (usually after get_runtime_info shows updateAvailable). The running server keeps its current version until the user restarts the MCP host; wallets and keys are untouched. Not available for global or local installs.

• send_transferwrite action

  Send a transfer: sign locally with the wallet's key and broadcast via the IronWallet forward relay (estimate -> sign -> forward) for EVM, Tron, Bitcoin, Litecoin, Doge, Solana, XRP and TON. Irreversible once broadcast — no second confirmation. Returns the transaction hash (and operation id where applicable).

• set_wallet_policy

  Replace the spending policy of a wallet (chat intent is the authorization; no extra confirmation). FULL REPLACE, not a patch: read list_wallets first and pass every field you want to keep. enabled=false removes all limits. readOnly blocks send_transfer and execute_swap. maxPerTxUsd caps each send/swap by USD value at the moment of the operation (rate from the IronWallet backend; if the rate is una

• Code scan129 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 22 days ago15/15
• Maintainer identityregistry namespace matches repository owner; website matches verified namespace9/10

Safety score

94/100

higher than 96% of 1,761 Finance servers

Tools

18

the typical Finance server has 8

Tools that change things

28%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

78

more than 62% of 421 Finance servers with a package

IronWallet: common questions

Is IronWallet MCP server safe?

Yes, by our scan: it is graded A (94/100). Read the IronWallet safety report

How do I install IronWallet?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does IronWallet need an API key?

No secret keys are declared. It reads 1 setting from the environment.

Is IronWallet maintained?

The last commit was 55 days ago (2026-09-10). The latest release is v1.2.1.

What can I use instead of IronWallet?

Servers from other publishers that do the same job: Yolfi Payments MCP server, Sato Hub: Build Onchain & Crypto Agents MCP server and Trading Signals MCP server. Compare all IronWallet alternatives.

How does IronWallet compare with other Finance MCP servers?

safety score 94/100 (higher than 96% of 1,761 Finance servers); tools 18 (the typical Finance server has 8); tools that change things 28% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.