ironwallet-mcp

ironwallet-mcp is a skill for Claude Code, Codex from ironwallet/ironwallet-agent-kit. It costs 102 tokens per session (2,590 once invoked), scanned C, original, MIT.

A skill for using IronWallet, a non-custodial cryptocurrency wallet that keeps recovery phrases encrypted on the user's machine. It supports local signing, balance checks, transfers, swaps, and receive addresses across supported networks.

In plain words
What is it for?
Use it to check balances, show deposit QR codes, send tokens, swap assets, or create, import, and back up a wallet.
Why use it?
It lets an agent work with funds the user controls while keeping the wallet secrets on the local computer.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Part of the ironwallet-mcp plugin — 1 skill, 1 agent shipped together

Good fit Use it to check balances, show deposit QR codes, send tokens, swap assets, or create, import, and back up a wallet.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add ironwallet/ironwallet-agent-kit --skill ironwallet-mcp
Clone the repo
git clone --depth 1 https://github.com/ironwallet/ironwallet-agent-kit

Made for: Claude Code, Codex.

Or install ironwallet-mcp, the plugin that ships this one along with the rest of its 1 skill, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ironwallet-mcp

README.md
[![agentmods](https://agentmods.dev/badge/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp/github.svg)](https://agentmods.dev/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp)
Your own site
<a href="https://agentmods.dev/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp"><img src="https://agentmods.dev/badge/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ironwallet-mcp

Your own site · 80×15
<a href="https://agentmods.dev/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp"><img src="https://agentmods.dev/badge/skills/ironwallet/ironwallet-agent-kit/ironwallet-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 102 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,590 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00102 $0.02590
Opus 5 $0.00051 $0.01295
Sonnet 5 $0.00020 $0.00518
Haiku 4.5 $0.00010 $0.00259

Measured today against content hash e839c90559e3, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade C, and why

ironwallet-mcp scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Downloads and executes remote codehighSupply chain

curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.

Do not only tell the user to open nodejs.org.** Do not use `curl | sh`

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

Do not only tell the user to open nodejs.org.** Do not use `curl | sh`
providers/claude/plugin/skills/ironwallet-mcp/SKILL.md · 203 lines

How it starts

The opening of the file, as written. The whole thing — 203 lines — stays where its author put it; the contents beside it link to each section on GitHub.

IronWallet

Non-custodial wallet for the agent. Seed phrases stay encrypted locally and never leave this machine. The agent can retrieve balances, sign locally, transfer tokens, and swap across 10+ networks. There is no per-transaction confirmation UI. Prefer a dedicated hot wallet with limited balance.

When to use

  • Check balances or addresses
  • Show recent transactions for a wallet (get_transaction_history)
  • Show a deposit QR for an address (PNG in chat, or qr_url if the host hides it)
  • Send / transfer on supported networks
  • Swap tokens
  • Create, import, back up, or delete a wallet (seed stays in the local browser)
  • Check whether this MCP is the published npm version (get_runtime_info) and stage an update on explicit request (prepare_update)

Before calling tools

  1. Runtime. The MCP server is launched with npx and needs Node.js 20+. Check with node -v (and npx -v if needed).
    • If both work and the version is 20+, continue.

    • If they are missing or too old, install Node yourself in the terminal. Do not only tell the user to open nodejs.org. Do not use curl | sh or unofficial installers. Ask once if the installer may show a UAC / admin prompt, then run:

      • Windows: winget install -e --id OpenJS.NodeJS.LTS
      • macOS: brew install node
      • Linux: the distro manager (apt, dnf, …) for Node 20+

      If winget or brew is missing, do not invent Chocolatey/Scoop/nvm. Give https://nodejs.org and stop. After a successful install, tell the user to reload the editor so PATH updates, then recheck node -v.

  2. Confirm the ironwallet MCP server is enabled. If it is missing after Node works, tell the user to install the IronWallet plugin (or add the MCP) and reload.
  3. Do not invent secrets. Do not put keys into MCP config. On first launch the server creates what it needs under ~/.ironwallet-mcp/. The user-facing backup is the recovery phrase in the wallet manager.
  4. MCP consent. Before create_wallets or a manager import, the user must accept the current disclaimer. Call create_wallets (or open_wallet_manager) first — if the response has needs_consent, show the full consent text in chat (title, lead, every bullet, checkbox line). Do not shorten it. Wait for an explicit confirmation, then call accept_mcp_consent with accepted=true, or ask them to Continue in the manager (manager_url). Only then create or import. Cancel means stop and do not write consent. This disclaimer is required; do not invent extra confirmations on each later send or swap.
  5. If there is no wallet yet and consent is already recorded, create_wallets or open_wallet_manager.

Read the full file on GitHub · 203 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +7 lines e839c90559e3
  2. 7d ago Changed · +40 lines d2af5522ee5a
  3. 10d ago First seen · 156 lines · 102 tokens per session scan C ec41ec22a185

Subscribe to this mod's changes

ironwallet-mcp is a skill published in the GitHub repository ironwallet/ironwallet-agent-kit (0 stars, last pushed today), licensed MIT. It adds 102 tokens to every session and 2,590 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.