mcpField
M
MistTrack MCP

MistTrack MCP

Local
github.com/slowmistSecurity39Updated 26w ago

About MistTrack MCP

MistTrack MCP connects MCP clients such as Claude Desktop to MistTrack blockchain data for investigators and risk teams. Its tools cover address and transaction analysis, risk scoring, malicious-fund checks, and recursive fund-flow tracing.

Key features

  1. 01Address chain detection and labels
  2. 02Address profiles, balances, and counterparties
  3. 03Address and transaction risk scores
  4. 04Malicious-fund exposure checks
  5. 05Recursive multi-layer transaction tracing
  6. 06Risk-analysis resources and prompts

Use cases

  1. 01Assess risk for a blockchain address or transaction
  2. 02Investigate counterparties and address activity
  3. 03Trace multi-layer fund flows
  4. 04Check an address for malicious-fund exposure

MCP support

The MCP server exposes MistTrack API data and analysis tools to MCP clients, including address lookups, risk scores, transaction tracing, resources, and prompts.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
"mcpServers": {
"MistTrackMCP": {
"command": "npx",
"args": [
"-y",
"misttrack"
]
}
}
}
Run commandnpx -y misttrack

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmmisttrack

Tools

12

Saved tool list · updated 3w ago

ParameterTypeRequiredDescription
addressstringYesAddress to detect

Details

From the project README

MistTrack MCP Server

MistTrack MCP Server connects MCP clients such as Claude Desktop to the MistTrack OpenAPI. It lets an AI assistant query blockchain addresses and transactions for labels, balances, profiles, counterparties, risk scores, malicious fund signals, and fund-flow traces.

Features

  • Address detection for common chains and token formats
  • Address labels, overview, profile, action, and counterparty analysis
  • MistTrack Risk Score V3.0 for address and transaction hash checks
  • Malicious fund checks based on MistTrack threat intelligence
  • Recursive multi-layer transaction investigation
  • MistTrack dashboard and chain explorer URL generation
  • Built-in MCP resources and prompts for risk analysis workflows

Requirements

  • Node.js 18 or newer
  • A MistTrack API key
  • A MistTrack plan that supports OpenAPI access

Get an API key from the MistTrack dashboard: https://dashboard.misttrack.io/apikeys

Installation

Use the package directly through npx:

npx -y misttrack@latest --key YOUR_MISTTRACK_API_KEY

Or install it globally:

npm install -g misttrack
misttrack --key YOUR_MISTTRACK_API_KEY

You can also provide the API key through the environment:

export MISTTRACK_API_KEY=YOUR_MISTTRACK_API_KEY
npx -y misttrack@latest

Claude Desktop Configuration

Add the server to your Claude Desktop MCP configuration:

{
  "mcpServers": {
    "misttrack": {
      "command": "npx",
      "args": [
        "-y",
        "misttrack@latest",
        "--key",
        "YOUR_MISTTRACK_API_KEY"
      ]
    }
  }
}

Restart Claude Desktop after changing the configuration.

Command Options

OptionDescriptionDefault
-k, --key <key>MistTrack API keyMISTTRACK_API_KEY
-u, --base-url <url>MistTrack API base URLhttps://openapi.misttrack.io
-r, --rate-limit <limit>API request rate limit, requests per second1.0
-m, --max-retries <retries>Maximum retry count for retryable API errors3
-d, --retry-delay <delay>Initial retry delay in seconds1.0
-b, --retry-backoff <backoff>Retry backoff multiplier2.0

Tools

Tool names below are the server-side MCP tool names. Some clients display them with a server prefix, such as mcp_misttrack_get_risk_score.

ToolPurpose
detect_address_chainDetect likely chains and token formats from an address
get_address_labelsGet MistTrack labels for an address
get_address_overviewGet address balance, transaction statistics, and formatted overview
get_address_actionGet transaction action analysis for an address
get_address_traceGet address profile, interacted platforms, and threat intelligence
get_address_counterpartyGet address counterparty analysis
check_malicious_fundsCheck malicious fund signals from address threat intelligence
get_risk_scoreGet MistTrack Risk Score V3.0 for an address or transaction hash
get_dashboard_urlGenerate a MistTrack dashboard URL
get_chain_explorer_urlGenerate a blockchain explorer URL for an address or transaction hash
get_url_infoReturn both MistTrack dashboard and explorer URLs
analyze_transactions_recursiveRecursively analyze transaction relationships and fund-flow paths

Risk Score

get_risk_score uses MistTrack's official GET /v3/risk_score endpoint.

{
  coin: string;                       // Example: ETH, BTC, USDT-TRC20
  address?: string;                   // Provide either address or txid
  txid?: string;                      // Provide either txid or address
  direction?: 'deposit' | 'withdraw'; // Only used for txid queries, default: deposit
}

Important response fields:

FieldDescription
scoreRisk score returned by MistTrack
risk_levelLow, Moderate, High, or Severe
detail_listHuman-readable risk indicators
risk_detailDetailed risk exposure records used in scoring
risk_detail[].hop_dicHop-level fund-flow path between the queried target and risk entity
address_labelEntity label for the queried address, or from/to address label for txid queries
risk_report_urlMistTrack AML risk report URL

Risk level guide:

LevelScoreSuggested operation
Severe91-100Prohibit withdrawals and trading, report immediately
High71-90Maintain high-level surveillance and perform deeper investigation
Moderate31-70Apply moderate supervision
Low0-30Minimal supervision

Example prompts:

Assess the ETH risk score for address 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045.
Check the risk score for this ETH transaction hash using withdraw direction: [TX_HASH]

Recursive Transaction Analysis

analyze_transactions_recursive builds a compact multi-layer transaction graph for fund tracing.

{
  coin: string;
  address: string;
  max_depth?: number;                  // 1-3, default: 1
  start_timestamp?: number;
  end_timestamp?: number;
  transaction_type?: 'in' | 'out' | 'all';
}

It can identify labeled counterparties, important risk entities, label statistics, and traceable fund-flow paths.

Example:

Analyze potential BTC fund flows for 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa with a depth of 2.

Supported Coins

MistTrack supports many chains and token formats. Common examples include:

  • Ethereum: ETH, USDT-ERC20, USDC-ERC20, WETH-ERC20
  • Bitcoin: BTC
  • TRON: TRX, USDT-TRC20, USDC-TRC20
  • BNB Smart Chain: BNB, USDT-BEP20, USDC-BEP20
  • Polygon: POL-Polygon, USDT-Polygon, USDC-Polygon
  • Avalanche: AVAX-Avalanche, USDT-Avalanche, USDC-Avalanche
  • Arbitrum, Optimism, Base, zkSync, Merlin, Toncoin, Solana, Litecoin, Dogecoin, Bitcoin Cash, HashKey Chain, and Sui

For the latest full list, see the official MistTrack documentation: https://docs.misttrack.io/openapi/overview

Example Workflows

Address label lookup
Check the labels for this Ethereum address: [ETH_ADDRESS]

Label Check Example

Address overview
Analyze the overview information for this Bitcoin address: [BTC_ADDRESS]

Address Overview Example

Counterparty analysis
Analyze the counterparties of this address: [ETH_ADDRESS]
Exchange fund-flow tracing
Track fund flow between this address and exchanges with depth 2: [ETH_ADDRESS]

Exchange Fund Flow

Malicious fund detection
Check whether this address has malicious fund exposure: [ETH_ADDRESS]

Malicious Fund Detection

Local Development

Install dependencies:

npm install

Build TypeScript:

npm run build

Run locally:

npm run dev -- --key YOUR_MISTTRACK_API_KEY

Official Documentation

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.