@m2msentinel/sdk

MCPcommunitydegraded
v1.2.5io.github.M2M-SentinelUnknownUpdated 1mo agonpmGitHub

Base bytecode capability observations, proxy resolution, gas, DEX, and transfer telemetry.

Endpoint healthdegraded
checked 8 days ago · last reachable 8 days ago · 170ms · 2 endpoints
100% of the last 5 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (stdio, streamable-http, sse). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Reads these credentials
  • M2M_SENTINEL_API_KEYAPI keyoptional

    Optional M2M Sentinel API key for prepaid access.

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
Authorio.github.M2M-Sentinel
LicenseUnknown
Version1.2.5
Sourcenpm+mcp-registry
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/20
→ Publisher: run `forge publish` from the package repo to claim ownership
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
—npm Trusted Publishing (Sigstore)+0/5
→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
—npm maintainer match+0/5
→ Earned once your identity is verified above and that login is an npm maintainer of this package
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
Dependencies✓ 0 resolved · none vulnerable
Tool surface12 tools · none privileged
Security scan✓ Cleanv1.2.5 · 29d agoHow well does this scan work?
EvalsNone
IndexedAug 26, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

12 tools · none privileged
Statically extracted from the published packagev1.2.5 · 29d ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

m2m_audit_contractInspect Base target contract bytecode capability observations, proxy implementation slots, and limitations before executing transactions. Returns factual evidence, not a safety guarantee.

Inspect Base target contract bytecode capability observations, proxy implementation slots, and limitations before executing transactions. Returns factual evidence, not a safety guarantee.

No input schema was published for this tool.

m2m_get_gas_metricsGet real-time Base network gas execution metrics and recommendations before submitting on-chain transactions.

Get real-time Base network gas execution metrics and recommendations before submitting on-chain transactions.

No input schema was published for this tool.

m2m_get_token_priceObserve real-time Base DEX token price for slippage check and valuation.

Observe real-time Base DEX token price for slippage check and valuation.

No input schema was published for this tool.

m2m_get_dex_liquidityGet tracked Base DEX pool reserve and liquidity metrics.

Get tracked Base DEX pool reserve and liquidity metrics.

No input schema was published for this tool.

m2m_get_whale_signalsGet tracked Base whale transfer and concentration signals.

Get tracked Base whale transfer and concentration signals.

No input schema was published for this tool.

m2m_get_service_statusCheck operational status of M2M Sentinel upstream verification rails.

Check operational status of M2M Sentinel upstream verification rails.

No input schema was published for this tool.

audit_contractAlias for m2m_audit_contract.

Alias for m2m_audit_contract.

No input schema was published for this tool.

get_capability_scoreReturn the static capability coverage index and provenance for a Base contract. This is not a safety score.

Return the static capability coverage index and provenance for a Base contract. This is not a safety score.

No input schema was published for this tool.

get_gas_feesAlias for m2m_get_gas_metrics.

Alias for m2m_get_gas_metrics.

No input schema was published for this tool.

get_dex_metricsAlias for m2m_get_dex_liquidity.

Alias for m2m_get_dex_liquidity.

No input schema was published for this tool.

get_token_priceAlias for m2m_get_token_price.

Alias for m2m_get_token_price.

No input schema was published for this tool.

get_whale_signalsAlias for m2m_get_whale_signals.

Alias for m2m_get_whale_signals.

No input schema was published for this tool.

12 of 12 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Base bytecode capability observations, proxy resolution, gas, DEX, and transfer telemetry.

Keywords
mcp
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-13 — observed resolution, not a publisher declaration.

0 packages resolved · 0 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

This package declares no runtime dependencies.