Skip to main content
Glama
ahnlabio

BICScan MCP Server

by ahnlabio

BICScan MCP Server

A powerful and efficient Blockchain address risk scoring API MCP Server, leveraging the BICScan API to provide comprehensive risk assessments and asset information for blockchain addresses, domains, and decentralized applications (dApps).

Key Features

  • Risk Scoring: Obtain risk scores for various blockchain entities, including crypto addresses, domain names, and decentralized application URLs, with scores ranging from 0 to 100, where 100 indicates high risk.

  • Asset Information: Retrieve detailed asset holdings for specified crypto addresses, including cryptocurrencies and tokens, with support for multiple blockchain networks.

  • Real-time Scanning: Utilize the BICScan API to perform real-time scans and receive up-to-date information on potential risks and asset holdings.

  • Secure and Reliable: Built with robust error handling and logging to ensure secure and reliable operations.

Related MCP server: onchain-forensics

Example Output

How to use.

You con either use Python with uv or docker depending on your preference.

Depending on your environment, you can choose to use either uv, docker, or uvx.

1. Running with uv

1-1. Requirements

  1. Python 3.10 or higher

  2. uv 0.6.x

  3. git

1.2. Clone the repository

git clone https://github.com/ahnlabio/bicscan-mcp

1.3. Config claude_desktop_config.json

Append following to claude_desktop_config.json.

Make sure to replace:

  • YOUR_BICSCAN_REPO_DIR_HERE: to something like C:\\Users\\ABC\\repo\\bicscan-mcp or /home/abc/repo/bicscan-mcp similarly.

  • YOUR_BICSCAN_API_KEY_HERE: to free API key can be obtained from https://bicscan.io (details below)

{
  "mcpServers": {
    ... some other mcp servers ...,
    "bicscan": {
      "command": "uv",
      "args": [
        "--directory",
        "YOUR_BICSCAN_REPO_DIR_HERE",
        "run",
        "bicscan-mcp"
      ],
      "env": {
        "BICSCAN_API_KEY": "YOUR_BICSCAN_API_KEY_HERE"
      }
    }
  }
}

2. Running with Docker

2.1. Requirements

  1. Docker environment

2.2. Clone the repository

git clone https://github.com/ahnlabio/bicscan-mcp

2.3. Build Docker image.

Just run make in the repository directory to build docker image.

2.4. Config

Append following to claude_desktop_config.json

Make sure to replace:

{
  "mcpServers": {
    ... some other mcp servers ...,
    "bicscan": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "--interactive",
        "--env", "BICSCAN_API_KEY=YOUR_BICSCAN_API_KEY_HERE",
        "bicscan-mcp"
      ]
    }
  }
}

3. Running with uvx

3.1. Requirements

  1. Python 3.10 or higher

  2. uv 0.6.x

  3. git

3.2. Config claude_desktop_config.json

Append following to claude_desktop_config.json.

Make sure to replace:

  • YOUR_BICSCAN_API_KEY_HERE: to free API key can be obtained from https://bicscan.io (details below)

{
  "mcpServers": {
    ... some other mcp servers ...,
    "bicscan": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/ahnlabio/bicscan-mcp",
        "bicscan-mcp"
      ],
      "env": {
        "BICSCAN_API_KEY": "YOUR_BICSCAN_API_KEY_HERE"
      }
    }
  }
}

How to obtain Free BICScan API Key?

  1. Visit https://bicscan.io and register.

  2. Go to profile and create "Create App"

  3. Enter name and description on your choice.

  4. Replace YOUR_BICSCAN_API_KEY_HERE part from above config to your newly obtained key.

  5. restart the Claude Desktop.

Available Tools

2 tools
get_assetsB

Get Assets holdings by CryptoAddress

Args:
    address: EOA, CA, ENS, CNS, KNS.
Returns:
    Dict: where assets is a list of assets
ParametersJSON Schema
NameRequiredDescriptionDefault
addressYes

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states this is a 'Get' operation which implies read-only behavior, but doesn't disclose any behavioral traits like rate limits, authentication requirements, error conditions, or what happens with invalid addresses. The description mentions the return format ('Dict: where assets is a list of assets') but provides minimal detail about the response structure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is appropriately sized and well-structured with clear sections for Args and Returns. The main purpose is stated upfront, followed by parameter details and return information. There's minimal wasted text, though the formatting could be slightly cleaner (e.g., consistent capitalization in the Returns section).

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (single parameter with multiple formats), no annotations, and no output schema, the description is minimally adequate. It covers the basic purpose and parameter semantics well, but lacks behavioral context and usage guidance. For a tool that presumably queries blockchain data, more information about limitations, data freshness, or error handling would be beneficial.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds significant value beyond the input schema, which has 0% description coverage. It explains that the 'address' parameter accepts multiple formats: 'EOA, CA, ENS, CNS, KNS' (presumably Externally Owned Account, Contract Address, Ethereum Name Service, etc.). This semantic clarification is crucial for proper tool invocation and compensates well for the schema's lack of documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Get Assets holdings by CryptoAddress' specifies both the action (get) and the resource (assets holdings). It distinguishes from the sibling tool 'get_risk_score' by focusing on asset holdings rather than risk assessment. However, it doesn't fully differentiate from potential other asset-related tools beyond the single sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. There's no mention of when this tool is appropriate, what scenarios it's designed for, or any prerequisites for its use. The single sibling tool 'get_risk_score' is not referenced, leaving the agent with no comparative context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_risk_scoreB

Get Risk Score for Crypto, Domain Name, ENS, CNS, KNS or even Hostname Address

Args:
    address: EOA, CA, ENS, CNS, KNS or even HostName
Returns:
    Dict: where summary.bicscan_score is from 0 to 100. 100 is high risk.
ParametersJSON Schema
NameRequiredDescriptionDefault
addressYes

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It adds some context by explaining the return format and risk score range (0-100, where 100 is high risk), which is useful beyond basic functionality. However, it lacks details on error handling, rate limits, or authentication needs, leaving gaps in behavioral understanding.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is appropriately sized and front-loaded, with the purpose stated first, followed by parameter and return details. It avoids unnecessary fluff, but the formatting with 'Args:' and 'Returns:' could be more integrated for better flow.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (risk scoring with various address types), no annotations, and no output schema, the description is moderately complete. It covers purpose, parameter semantics, and return format, but lacks usage guidelines, error details, or behavioral traits like rate limits, making it adequate but with clear gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, so the description must compensate. It adds meaning by listing examples of address types (EOA, CA, ENS, CNS, KNS, HostName), which clarifies the parameter's semantics beyond the schema's generic 'string' type. This significantly enhances understanding, though it could be more detailed on format constraints.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Get Risk Score for Crypto, Domain Name, ENS, CNS, KNS or even Hostname Address.' It specifies the verb 'Get' and the resource 'Risk Score,' with explicit examples of address types. However, it doesn't differentiate from the sibling tool 'get_assets,' which might have overlapping functionality, preventing a perfect score.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives, such as the sibling tool 'get_assets.' It lists address types but doesn't specify contexts or exclusions for usage, leaving the agent without clear direction on tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

TDQS

B3.3/5.0
Disambiguation5/5

The two tools have clearly distinct purposes: get_assets retrieves asset holdings, while get_risk_score calculates risk scores. There is no overlap in functionality, and an agent can easily differentiate between them based on their names and descriptions.

Naming Consistency5/5

Both tools follow a consistent verb_noun pattern with get_assets and get_risk_score. The naming is predictable and readable, using snake_case throughout without any deviations or mixed conventions.

Tool Count2/5

With only 2 tools, the server feels thin for a BICScan MCP Server, which suggests a domain involving crypto and risk analysis. This limited set may not cover essential operations like querying transactions, checking contract details, or updating data, making it borderline inadequate for the apparent scope.

Completeness2/5

The tool surface has significant gaps for a crypto/risk analysis domain. While it includes asset retrieval and risk scoring, it lacks basic operations such as querying transaction histories, verifying contract addresses, or performing deeper analytics. This incompleteness could lead to agent failures when handling common tasks in this domain.

Maintenance

ActivityInactive
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    C
    maintenance
    Provides counterparty risk checks for any EVM address, returning malicious-history flags, tiered risk scoring, and plain-language summaries via x402 payment.
  • A
    license
    B
    quality
    B
    maintenance
    Provides on-chain forensic checks for evaluating transaction risks, including token verification, rug-pull detection, and fund tracing, using public blockchain endpoints.
    12
    14
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to perform AML and compliance risk scoring for crypto addresses and transactions on Ethereum, BSC, TRON, TON, and Bitcoin, returning 0–100 risk scores, bands, flags, and detailed signals.
    2
    306
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ahnlabio/bicscan-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server