Base Tx Explain MCP Server

This MCP server implements transaction explanation on Base mainnet with dual payment systems (x402 and Stripe). The codebase demonstrates thoughtful security design in authentication, payment handling, and credential management, but has notable concerns: sensitive data (Stripe webhook secrets, payment nonces, authorization tokens) is logged extensively to console/ledger without redaction, environment variables containing API keys are accessed throughout without validation, and there is risk of information disclosure through error messages and structured logging. Permissions are appropriately scoped to the server's purpose (blockchain RPC, payment processing, HTTP), but operational security in logging practices creates attack surface. Supply chain analysis found 2 known vulnerabilities in dependencies (2 critical, 0 high severity).

3 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.