Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ironwallet/ironwallet-agent-kit --skill ironwallet-mcpgit clone --depth 1 https://github.com/ironwallet/ironwallet-agent-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp)<a href="https://agentmods.dev/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp"><img src="https://agentmods.dev/badge/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp"><img src="https://agentmods.dev/badge/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00102 | $0.02590 |
| Opus 5 | $0.00051 | $0.01295 |
| Sonnet 5 | $0.00020 | $0.00518 |
| Haiku 4.5 | $0.00010 | $0.00259 |
Grade C, and why
ironwallet-mcp scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
Do not only tell the user to open nodejs.org.** Do not use `curl | sh` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Do not only tell the user to open nodejs.org.** Do not use `curl | sh` How it starts
The opening of the file, as written. The whole thing — 203 lines — stays where its author put it; the contents beside it link to each section on GitHub.
IronWallet
Non-custodial wallet for the agent. Seed phrases stay encrypted locally and never leave this machine. The agent can retrieve balances, sign locally, transfer tokens, and swap across 10+ networks. There is no per-transaction confirmation UI. Prefer a dedicated hot wallet with limited balance.
When to use
- Check balances or addresses
- Show recent transactions for a wallet (
get_transaction_history) - Show a deposit QR for an address (PNG in chat, or
qr_urlif the host hides it) - Send / transfer on supported networks
- Swap tokens
- Create, import, back up, or delete a wallet (seed stays in the local browser)
- Check whether this MCP is the published npm version (
get_runtime_info) and stage an update on explicit request (prepare_update)
Before calling tools
- Runtime. The MCP server is launched with
npxand needs Node.js 20+. Check withnode -v(andnpx -vif needed).-
If both work and the version is 20+, continue.
-
If they are missing or too old, install Node yourself in the terminal. Do not only tell the user to open nodejs.org. Do not use
curl | shor unofficial installers. Ask once if the installer may show a UAC / admin prompt, then run:- Windows:
winget install -e --id OpenJS.NodeJS.LTS - macOS:
brew install node - Linux: the distro manager (
apt,dnf, …) for Node 20+
If
wingetorbrewis missing, do not invent Chocolatey/Scoop/nvm. Give https://nodejs.org and stop. After a successful install, tell the user to reload the editor soPATHupdates, then rechecknode -v. - Windows:
-
- Confirm the ironwallet MCP server is enabled. If it is missing after Node works, tell the user to install the IronWallet plugin (or add the MCP) and reload.
- Do not invent secrets. Do not put keys into MCP config. On first launch the
server creates what it needs under
~/.ironwallet-mcp/. The user-facing backup is the recovery phrase in the wallet manager. - MCP consent. Before
create_walletsor a manager import, the user must accept the current disclaimer. Callcreate_wallets(oropen_wallet_manager) first — if the response hasneeds_consent, show the fullconsenttext in chat (title, lead, every bullet, checkbox line). Do not shorten it. Wait for an explicit confirmation, then callaccept_mcp_consentwithaccepted=true, or ask them to Continue in the manager (manager_url). Only then create or import. Cancel means stop and do not write consent. This disclaimer is required; do not invent extra confirmations on each later send or swap. - If there is no wallet yet and consent is already recorded,
create_walletsoropen_wallet_manager.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +7 lines e839c90559e3
- 7d ago Changed · +40 lines d2af5522ee5a
- 10d ago First seen · 156 lines · 102 tokens per session scan C ec41ec22a185
ironwallet-mcp is a skill published in the GitHub repository ironwallet/ironwallet-agent-kit (0 stars, last pushed today), licensed MIT. It adds 102 tokens to every session and 2,590 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
defi-protocol-templates
Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and flash loans. Use when building decentralized finance applications or smart contract protocols.
telnyx-x402-payment
Make cryptocurrency payments to fund a Telnyx account using the x402 protocol (USDC on Base). Covers quoting, EIP-712 signing, and settlement.
helius-jupiter
Skill "helius-jupiter" from helius-labs/core-ai, covering helius x jupiter — build defi apps on solana, mcp router surface, prerequisites, 1. helius mcp server and 2. jupiter api key.
helius-okx
Skill "helius-okx" from helius-labs/core-ai, covering helius x okx — build trading & intelligence apps on solana, mcp router surface, prerequisites, 1. helius mcp server and 2. okx skill library (required).
sera
Multi-currency settlement skill — quote, swap, and settle across 40 stablecoins via Sera Protocol.
sera
Multi-currency settlement for AI agents. Quote, swap, and settle across 40 stablecoins (USDC, USDT, EURC, XSGD, JPYC, MYRT, TGBP, BRZ, MXNT, IDRT, AUDD, and more) and 22 fiat currencies via Sera Protocol. 55 tools — quotes, swaps, treasury management, FX deal scanning, and a maker spread ladder.