io.github.nicofains1/onlyswaps

Name: io.github.nicofains1/onlyswaps
Author: io.github.nicofains1

MCPcommunity

v0.1.2io.github.nicofains1UnknownUpdated 6mo agonpm GitHub

DEX meta-aggregator for AI agents. Best prices from 15+ aggregators across 13 chains.

Multi-chain DEX meta-aggregator for AI agents. Queries 15+ DEX aggregators, returns the best price. MCP (Model Context Protocol) server that enables AI agents to execute token swaps. We query 0x, 1inch, Paraswap, DODO, Uniswap, Li.Fi, and 10+ more sources, returning only the best available quotes. Meta-Aggregator: Queries 15+ DEX aggregators (0x, 1inch, Paraswap, Li.Fi, etc.) and returns the best…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

6mo agoLast update

Package

Authorio.github.nicofains1

LicenseUnknown

Version0.1.2

Sourcemcp-registry

npm@onlyswaps/mcp-server

GitHubDelegueinu/onlyswaps

Trust Status

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies60 resolved · 1 with advisories

Tool surface13 tools · 1 privileged

Security scan✓ Cleanv0.2.3 · 2mo ago

MODERATEqs@6.14.0qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion · transitive MODERATEqs@6.14.0qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set · transitive LOWqs@6.14.0qs's arrayLimit bypass in comma parsing allows denial of service · transitive

EvalsNone

IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Keywords

mcp