MCP.Market

FlashBank MCP server

by Rotwang9000·io.github.Rotwang9000/flashbank·v1.1.1
No reviews yet

Fixed-fee P2P term loans (no oracles) and flash loans on Ethereum, Base, Arbitrum and Sepolia.

B78/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
New

0 stars44 downloads/wk

Reviews

Write one

Nobody has reviewed FlashBank yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

FlashBank tools (15, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • explain

    Plain-English primer on both FlashBank products, the loan lifecycle, fees and safety rules. Call this first if you are unsure how anything works.

  • faucet_mint

    Mint a free batch of 10,000 fpUSD or fpETH (valueless playground tokens) to the signing wallet on Sepolia. The safe way for agents to get funds to experiment with.

  • flash_pools

    Per-token flash-loan liquidity on a chain: committed amount, live available liquidity, fee, per-loan cap and provider count.

  • flash_quote

    Fee quote for flash-borrowing a given amount of a token (symbol or address) on a chain.

  • list_chains

    Supported chains with contract addresses, registry tokens and whether writes are currently permitted for each.

  • p2p_cancelwrite action

    Cancel an offer you created that has not been taken, reclaiming your escrow (any boost spend is not refunded). Mainnet gated.

  • p2p_claim_default

    After the repay window closes unpaid, the lender claims the collateral (any agreed surplus returns to the borrower). Irreversibly settles the loan. Requires the signing wallet to be the lender (mainnet gated).

  • p2p_create_offerwrite action

    Post a loan offer (you lend) or borrow request (you borrow) on-chain. Escrows your side immediately: lenders escrow the principal, borrowers escrow the collateral. Reversible via p2p_cancel while untaken. Requires a signing key; mainnet additionally requires FLASHBANK_MCP_ALLOW_MAINNET=true.

  • p2p_get_loan

    Full detail for one loan id: terms, parties, status, what a taker must provide, repayment quote, default deadline/split and the on-chain terms hash.

  • p2p_list_offers

    Open, takeable loan offers/requests on a chain, newest first with boosted (featured) offers ranked on top. Returns human-readable terms plus the raw ids for follow-up calls.

  • p2p_my_loans

    Every loan created by or assigned to an address (defaults to the configured wallet), with current status.

  • p2p_repay

    Repay an active loan you borrowed, redeeming your collateral. On v2 chains (Sepolia) the fee is the VESTED amount — repaying inside the cooling-off window is rebated down to a 10% floor. Requires the signing wallet to be the borrower (mainnet gated).

  • p2p_take_offer

    Accept an open offer, pinning the EXACT terms currently on-chain (takeWithTerms) so a last-second re-price reverts instead of surprising you. Approves and escrows your side, which activates the loan — a BINDING commitment until repaid or defaulted. Requires a signing key (mainnet gated).

  • p2p_withdraw_unclaimed

    v2 chains (Sepolia) only: if a settlement payout to you could not be delivered (e.g. a blocklisting token), it queues on-chain — this checks your queued balance for a token and withdraws it.

  • wallet_status

    Address, native balance and registry-token balances of the configured signing wallet on one chain. Reports read-only mode when no key is set.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan6 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 55 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How FlashBank compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 57% of 48,255 servers
Tools
15
the typical server has 7
Tools that change things
13%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
44
more than 36% of 12,191 servers with a package

What its tools let an agent do: 13 read · 2 change

Install FlashBank in Claude Code, Cursor or VS Code

Runs npx -y @flashbank/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add flashbank -- npx -y @flashbank/mcp
Add to Cursor

What the publisher says

From the FlashBank repository's README, as published. We do not edit it. Read it on GitHub

FlashBank

Non-custodial, on-chain lending where your funds stay in your wallet until the moment they're used. FlashBank is two complementary products that share that principle:

Branding rule: "flashbank" is only ever used as a verb (you flashbank a loan). FlashBank is

not a bank, does not hold deposits and takes no custody as a financial institution.

Website: flashbank.net · Source: github.com/Rotwang9000/flashbank-net

Flash Loans (the Router)

FlashBankRouter is a multi-provider flash-loan pool where liquidity providers keep custody:

  • No deposits. Providers approve the router and call setCommitment(token, limit, expiry, paused). WETH stays in their wallet and is only pulled for the microseconds of a flash loan.
  • Atomic or nothing. The borrower implements IL2FlashLoan and must repay principal + fee in the same transaction, or the whole thing reverts.
  • Configurable, bounded fees. Per-token feeBps (1–100 bps) with a separate owner cut (ownerFeeBps) and a per-tx max-borrow share of the pool (maxBorrowBps).
  • Dual-control admin. Sensitive changes (token config, ownership, profit withdrawal) use a propose-then-execute flow split between the owner and a separate admin. See docs/security/DUAL_CONTROL.md.

Provider flow (WETH):

await weth.deposit({ value: ethers.parseEther("5") });        // wrap ETH (stays in your wallet)
await weth.approve(routerAddress, ethers.MaxUint256);         // approve once
await router.setCommitment(wethAddress, ethers.parseEther("3"), 0, false); // lend up to 3 WETH
// pause/resume any time — just flip the paused flag or drop the limit to 0

Borrower flow (MEV / arbitrage bots):

await router.flashLoan(
  wethAddress,
  ethers.parseEther("100"),
  true,            // receive native ETH (router unwraps WETH for you)
  strategyCalldata // forwarded to IL2FlashLoan.executeFlashLoan
);

Lives in flashloans/. Deploy with cd flashloans && npx hardhat run scripts/deploy-router.js --network (set ADMINADDRESS / TESTNETADMINADDRESS in the repository-root .env). Per-network addresses are read from NEXTPUBLIC_* env vars by the website.

P2P Term Loans

FlashBankP2PLoan is a neutral escrow that lets two parties flashbank a fixed-term, collateral-backed loan:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

FlashBank: common questions

Is FlashBank MCP server safe?
Mostly: it is graded B (78/100). Read the FlashBank safety report
How do I install FlashBank?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does FlashBank need an API key?
Yes. The registry entry asks for FLASHBANK_MCP_PRIVATE_KEY.
Is FlashBank maintained?
The last commit was 93 days ago (2026-08-03). The latest release is v1.1.1.
How does FlashBank compare with other MCP servers?
safety score 78/100 (higher than 57% of 48,255 servers); tools 15 (the typical server has 7); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.