Back to Home
NickFlach icon

PFORK_MCP

Verified Safe

by NickFlach

Overview

Unified API gateway for the Pitchforks ecosystem, enabling AI agents and other clients to interact with decentralized tools for peaceful resistance on Neo X.

Installation

Run Command
npm start

Environment Variables

  • SESSION_SECRET
  • PROTOCOL_API_URL
  • PROTOCOL_API_KEY
  • DEX_API_URL
  • DEX_CONTRACT_ADDRESS
  • NEO_X_RPC_URL
  • FERRY_API_URL
  • ETHEREUM_RPC_URL
  • ANALYST_API_URL
  • APP_API_URL
  • MINDS_API_KEY
  • ADMIN_ADDRESSES
  • DEVELOPER_ADDRESS
  • DEVELOPER_PRIVATE_KEY
  • PORT
  • NODE_ENV
  • REDIS_HOST
  • REDIS_PORT
  • REDIS_PASSWORD
  • ALLOWED_ORIGINS
  • HEALTH_CHECK_INTERVAL
  • NETWORK
  • CHAIN_ID
  • EXPLORER_URL
  • PFORK_TOKEN_ADDRESS
  • GOVERNANCE_ADDRESS
  • TREASURY_ADDRESS
  • PROTOCOL_ADAPTER_ADDRESS
  • DEX_ADAPTER_ADDRESS
  • FERRY_ADAPTER_ADDRESS
  • CONTRACT_ADDRESSES

Security Notes

The server implements robust multi-layer authentication (wallet signatures and API keys), includes input validation using Joi, uses nonce management to prevent replay attacks, and configures rate limiting and standard security headers (Helmet, CORS). TypeScript strict mode enhances code quality and reduces common vulnerabilities. However, the `AuthMiddleware`'s reliance on `DEVELOPER_PRIVATE_KEY` directly from environment variables for server-side signing is a significant risk; in a production environment, this should be replaced with a secure key management system (e.g., KMS). Additionally, the initial `xmcp` tools return placeholder data, meaning the security of actual integrations with live Pitchforks APIs (when implemented) will require further review.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens20
Stars0
Forks0
Last Update2025-11-26

Tags

MCPAPI GatewayWeb3BlockchainNeo XGovernanceDeFiAI Agent