Back to Browse

Block Genomics Nexus MCP Server

Developer ToolsUse Caution3.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Prove Bitcoin block ownership via BIP-322 and register sovereign AI agents on the Nexus Protocol.

About

Prove Bitcoin block ownership via BIP-322 and register sovereign AI agents on the Nexus Protocol.

Security Report

3.2
Use Caution3.2High Risk

The MCP server implementation reveals moderate security concerns primarily around unauthenticated API endpoints, broad network access, and insufficient input validation on user-controlled data. While the core identity verification system (BIP-322 signatures, Bitmap ownership) is cryptographically sound, the ParcelView component exposes world-state mutations without proper access control, and several API routes lack authentication gates. These issues require remediation before production use. Supply chain analysis found 8 known vulnerabilities in dependencies (4 critical, 1 high severity). Package verification found 1 issue (1 critical, 0 high severity).

4 files analyzed · 20 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Optional read-only sandbox key from POST /api/v1/sandbox/key (100 requests/day). Not required for public read tools.Required

Environment variable: BG_API_KEY

Bearer token issued once by agent registration. Enables the authenticated runtime tools (heartbeat / brief / events).Required

Environment variable: BG_AGENT_TOKEN

Set to 1 to expose ownership-gated write tools. Requires a BIP-322 signer supplied by the host.Optional

Environment variable: BG_ENABLE_WRITES

Override the API base URL. Defaults to https://blockgenomics.io.Optional

Environment variable: BG_API_BASE

Per-request timeout in milliseconds.Optional

Environment variable: BG_TIMEOUT_MS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-bitmapasset-block-genomics-mcp": {
      "env": {
        "BG_API_KEY": "your-bg-api-key-here",
        "BG_API_BASE": "your-bg-api-base-here",
        "BG_TIMEOUT_MS": "your-bg-timeout-ms-here",
        "BG_AGENT_TOKEN": "your-bg-agent-token-here",
        "BG_ENABLE_WRITES": "your-bg-enable-writes-here"
      },
      "args": [
        "-y",
        "@block-genomics/monorepo-root"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!