XCP MCP server
io.github.XCP/mcp-server·v1.0.1·1 starsInteract with Counterparty — the token protocol on Bitcoin. Query, compose, sign.
1 stars49 downloads/wk
Reviews
Write oneNobody has reviewed XCP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
XCP tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it
- Code scan23 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 229 days ago4/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
How XCP compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 68/100
- higher than 30% of 48,255 servers
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 49
- more than 41% of 12,191 servers with a package
Install XCP in Claude Code, Cursor or VS Code
Runs npx -y @21e14/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-server -- npx -y @21e14/mcp-server
What the publisher says
From the XCP repository's README, as published. We do not edit it. Read it on GitHub
Counterparty MCP Server
Give AI agents the ability to interact with Counterparty — the token protocol built on Bitcoin. Query balances, assets, orders, and dispensers. Compose, sign, and broadcast transactions. Works with any MCP-compatible client.
Install
No download needed — just add the config below to your AI client. npx fetches and runs the server automatically.
Claude Desktop
Add to claudedesktopconfig.json (how to find it):
{
"mcpServers": {
"counterparty": {
"command": "npx",
"args": ["-y", "@21e14/mcp-server"]
}
}
}Claude Code
claude mcp add counterparty -- npx -y @21e14/mcp-serverWith signing (see Signing & Broadcasting):
claude mcp add counterparty \
-e SIGNER_PRIVATE_KEY=L1aW4aubDFB7yfras2S1mN... \
-e SIGNER_ADDRESS=bc1q... \
-- npx -y @21e14/mcp-serverManage servers with claude mcp list, claude mcp get counterparty, or claude mcp remove counterparty.
VS Code (Copilot)
Use Ctrl+Shift+P → MCP: Add Server → Stdio, then enter:
npx -y @21e14/mcp-serverOr add to .vscode/mcp.json:
{
"servers": {
"counterparty": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@21e14/mcp-server"]
}
}
}Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"counterparty": {
"command": "npx",
"args": ["-y", "@21e14/mcp-server"]
}
}
}Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"counterparty": {
"command": "npx",
"args": ["-y", "@21e14/mcp-server"]
}
}
}ChatGPT
In ChatGPT desktop, go to Settings → Beta Features → MCP Servers, then add:
npx -y @21e14/mcp-serverAny MCP Client
The server speaks stdio. Point any MCP-compatible client at:
npx -y @21e14/mcp-serverThat's it. The agent can now query the Counterparty network and compose unsigned transactions.
Signing & Broadcasting
To let the agent sign and broadcast transactions, add a signing key:
{
"mcpServers": {
"counterparty": {
"command": "npx",
"args": ["-y", "@21e14/mcp-server"],
"env": {
"SIGNER_PRIVATE_KEY": "L1aW4aubDFB7yfras2S1mN...",
"SIGNER_ADDRESS": "bc1q..."
}
}
}
}This enables the signandbroadcast tool. Signing gives the AI agent the ability to spend funds — read the security guidance below.
Bot wallet pattern (recommended)
- Generate a fresh keypair offline. Don't reuse an existing wallet or generate keys through the AI.
- Fund it with only what you're willing to risk. This is your blast radius.
- Use a segwit address. P2WPKH (bc1q...), P2SH-P2WPKH (3...), or P2TR (bc1p...). Legacy P2PKH is not supported.
- One key, one address. No HD derivation. Counterparty reuses addresses by design.
- Keep main holdings elsewhere. The bot wallet is disposable.
Compose-only mode
Without signing keys, the server returns unsigned transaction hex from all compose tools. You can review and sign offline with your own tooling. This is the safest mode.
Transaction verification
signandbroadcast extracts and returns the embedded OP_RETURN data from the transaction before signing — done locally without trusting the API, so the agent can verify the transaction matches what was requested.
Environment Variables
Tools
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
XCP: common questions
- Is XCP MCP server safe?
- With care: it is graded C, so read the findings first (68/100). Read the XCP safety report
- How do I install XCP?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does XCP need an API key?
- Yes. The registry entry asks for
SIGNER_PRIVATE_KEY. - Is XCP maintained?
- The last commit was 266 days ago (2026-02-11). The latest release is v1.0.1.
- How does XCP compare with other MCP servers?
- safety score 68/100 (higher than 30% of 48,255 servers); github stars 1 (more than 65% of 28,688 servers); downloads a week 49 (more than 41% of 12,191 servers with a package). Full comparison.