Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add skillmds/skillmd --skill iota-agent-mcpgit clone --depth 1 https://github.com/skillmds/skillmdWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/skillmds/skillmd/iota-agent-mcp)<a href="https://agentmods.dev/skills/skillmds/skillmd/iota-agent-mcp"><img src="https://agentmods.dev/badge/skills/skillmds/skillmd/iota-agent-mcp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/skillmds/skillmd/iota-agent-mcp"><img src="https://agentmods.dev/badge/skills/skillmds/skillmd/iota-agent-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00078 | $0.01148 |
| Opus 5.5 | $0.00031 | $0.00459 |
| Sonnet 5 | $0.00016 | $0.00230 |
| Haiku 4.5 | $0.00008 | $0.00115 |
Grade B, and why
iota-agent-mcp scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
// Claude Code: ~/.claude/settings.json This is a copy
100% identical to iota-agent-mcp — 225 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 114 lines — stays where its author put it; the contents beside it link to each section on GitHub.
IOTA Agent MCP
MCP server that connects AI coding agents to the IOTA blockchain. Provides 18 tools across wallet operations, Move smart contract development, and on-chain data queries — all via stdio transport with no secrets in the MCP process.
Workflow
- Configure the MCP server in your agent's settings (Claude Code, Cursor, VS Code Copilot)
- Query on-chain data — fetch objects, transactions, coins, epoch info, or decompile modules
- Develop Move contracts — build, test with coverage, generate unsigned publish transactions
- Sign and publish — generate unsigned transaction, submit via
iota_wallet_sign_execute, checkiota_wallet_pendingfor approval status, verify on-chain withiota_transaction
Signing flow (human-in-the-loop)
Wallet operations that modify state require human approval:
- Call
iota_wallet_sign_executewith base64-encoded transaction bytes — creates a pending request - Call
iota_wallet_pendingto confirm the request was queued - The human approves (
iota_wallet_approve) or rejects (iota_wallet_reject) via the agent-wallet server - On approval, verify the transaction landed on-chain: call
iota_transactionwith the returned digest - If rejected, inform the user and do not retry without explicit instruction
Tools
Wallet (8 tools)
iota_wallet_address— Get the active wallet addressiota_wallet_balance— Check IOTA balance for the active walletiota_wallet_accounts— List all derived wallet accountsiota_wallet_sign_execute— Sign and execute a transaction (requires human approval via agent-wallet server)iota_wallet_pending— List pending signing requests awaiting approvaliota_wallet_approve— Approve a pending signing request by IDiota_wallet_reject— Reject a pending signing request by IDiota_wallet_switch_network— Switch between mainnet, testnet, and devnet
Move CLI (4 tools)
iota_cli— Run any IOTA CLI command (e.g.client gas,move new my_project)iota_move_build— Compile a Move package and report build resultsiota_move_test_coverage— Run Move tests with coverage analysis and summaryiota_move_publish_unsigned— Generate unsigned publish transaction for agent-wallet signing
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 114 lines · 78 tokens per session scan B e1aeca26dfd0
iota-agent-mcp is a skill published in the GitHub repository skillmds/skillmd (1 stars, last pushed yesterday), licensed MIT. It adds 78 tokens to every session and 1,148 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). It is 100% identical to iota-agent-mcp, differing in 225 lines, and is treated as a copy.
Other skills, from other repositories
aomi-transact
Build natural-language crypto/DeFi agents and EVM MCP plugins (Claude Code, Cursor, Codex, Gemini). Aomi turns prompts into wallet-signed txs on Ethereum, Base, Arbitrum, Optimism, Polygon, Linea — non-custodial, fork-simulated. 40+ apps: Uniswap, Aave, Lido, Morpho, GMX, Hyperliquid, Polymarket.
devloop
Goal-driven development loop — define objective, write rules with key-results, verify visually, sync to issue tracker.
skill0
Root index of x-cmd skill0 sub-skills. Defines the OKR-style agent workflow (goal → rule-verified results → execute), skill discovery, and agent tooling preferences. Style: principle-first, concise, delegate specifics to authoritative external sources.
cymbal
Tree-sitter indexed code navigator. Use the cymbal CLI — not Read, Grep, Glob, or Bash — for finding where symbols are defined, tracing callers and callees, locating interface implementations, understanding the impact of a change, and mapping imports across an existing codebase. Returns precise, token-efficient…
slopless
Use Slopless to review English Markdown for deterministic AI and human slop signals, including vague phrasing, formulaic prose, weak rhythm, filler, and cliches.
wallet-cli
Operate the TypeScript TRON wallet CLI for accounts, transfers, staking, governance, contracts, signing, chain queries, and password input with wallet-cli 4.13.0. Refuse wallet passwords in argv and require the supported stdin channel. For Java REPL requests, refuse that entry and offer the TypeScript one-shot CLI…