# voyager-mcp

Live Starknet explorer data: transactions, contracts, tokens, NFTs, staking

- **Type:** MCP server
- **Trust:** 60/100 (B), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 0.2.1
- **Author:** online.voyager
- **License:** MIT
- **npm:** voyager-mcp
- **Source:** https://docs.voyager.online/ai/mcp-quickstart
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

60/100 (B), scored on the package rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 0 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-09-08T05:55:50.908Z
- **Version scanned:** 0.2.1
- **CVEs:** none found by OSV at scan time

## Tools

40 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `list_blocks` — List Starknet blocks (paginated, newest first).
- `get_block` — Get a Starknet block by number, hash, or "pre_confirmed".
- `list_classes` — List declared classes (contract templates) on Starknet, newest first. Cursor pagination: pass `cursor` from a previous response's nextCursor/prevCursor; a null 
- `get_class` — Get a Starknet class by hash: type, declaration info, verification status, and ABI.
- `get_class_code` — Get the verified Cairo source code for a class. Use this to read the actual contract implementation when writing or auditing Starknet code.
- `get_class_functions` — Get the callable functions (ABI entrypoints) declared by a class.
- `get_class_decompiled` — Get the decompiled code of a class (useful when verified source is not available).
- `get_class_contracts` — List the contracts deployed from a given class, newest first. Cursor pagination: pass `cursor` from a previous response's nextCursor/prevCursor; a null nextCurs
- `list_contracts` — List contracts deployed on Starknet, newest first. Cursor pagination: pass `cursor` from a previous response's nextCursor/prevCursor; a null nextCursor means th
- `get_contract` — Get a Starknet contract by address: class hash, type, deployment info, ABI, and aliases.
- `get_contract_token_balances` — Get the token balances held by a specific contract address.
- `get_contract_code` — Get the code of a contract: verified Cairo source if available, otherwise bytecode/decompiled.
- `get_contract_functions` — Get the callable functions (ABI entrypoints) of a contract.
- `get_contract_transfers` — List token transfers involving a contract, with filters (token, counterparties, time range). Keyset pagination via `cursor`.
- `list_protocols` — List known protocols / dapps on Starknet (paginated).
- `get_top_contracts_stats` — Get the most-used contracts ranked by activity over a timeframe.
- `get_contract_holders` — List token holders for a token contract (paginated).
- `get_contract_transfer_tokens` — List the distinct tokens involved in a contract's transfers (filter helper).
- `get_contract_class_history` — List the class history (implementation upgrades) of a contract.
- `get_contract_bridge_transactions` — List L1↔L2 bridge transactions involving a contract.
- `get_contract_erc20_balance_history` — Get the ERC-20 balance history of a contract over a time range.
- `get_contract_erc20_tokens_held` — List the ERC-20 tokens a contract has ever held.
- `get_contract_portfolio` — Get the current token portfolio (holdings) of a contract / account.
- `list_events` — List events emitted on Starknet (newest first). Optionally filter by emitting contract and/or block. Unbounded lists use cursor pagination (pass `cursor` from a
- `get_event` — Get details of a single event by its id.
- `get_l1_transaction` — Get an Ethereum L1 transaction related to Starknet by its hash.
- `get_l1_bridge_transactions` — Get the bridge transactions associated with an L1 transaction (paginated).
- `get_l1_state_updates` — Get the Starknet state updates included in an L1 transaction (paginated).
- `list_messages` — List L1↔L2 messages on Starknet (newest first). Filter by block, contract, or direction. Unbounded lists use cursor pagination (pass `cursor` from a previous re
- `get_message` — Get a Starknet L1↔L2 message by its message hash.
- `get_message_bridge_transactions` — Get the bridge transactions associated with an L1↔L2 message (paginated).
- `get_network_status` — Get the Starknet network status (chain health / indexer state).
- `get_indexer_lagging` — Check whether the Voyager indexer is lagging behind the chain tip.
- `get_cairo_v1_contracts_count` — Get the count of Cairo 1 contracts on Starknet.
- `get_account_call` — Get details of a specific account call by its id.
- `list_nfts` — List NFTs across Starknet.
- `get_nft_contract` — Get details of an NFT contract (collection) by address.
- `get_nft` — Get details of a single NFT (token) by contract address and token id.
- `list_nft_items` — List the items (tokens) of an NFT collection, optionally filtered by owner.
- `list_nft_balances` — List NFT balances for a collection (optionally a specific token id).

## Install

**Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for.
**Cautions** (coverage gaps and advisories — never blocking)
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"voyager\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"voyager-mcp\"\n      ]\n    }\n  }\n}"
```

## Blast radius

Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on your machine; read-only tool surface.
- Floor 13, ceiling 31 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/voyager-mcp
- Install plan: https://forgeregistry.com/api/v1/packages/voyager-mcp/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/voyager-mcp
- HTML page: https://forgeregistry.com/registry/voyager-mcp
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.
