BICScan MCP Server
The BICScan MCP Server provides API functionalities for assessing blockchain address risks and retrieving asset information.
Risk Scoring: Get risk scores (0-100) for crypto addresses, domain names (ENS, CNS, KNS), or hostnames. Higher scores indicate higher risk.
Asset Information: Retrieve detailed asset holdings for crypto addresses, including EOA, CA, ENS, CNS, and KNS.
Real-time Data: Perform real-time scans using the BICScan API for up-to-date information.
Multi-platform Support: Run the server using
uv,docker, oruvxbased on your environment.
Supports containerized deployment of the BICScan MCP Server, enabling easy setup and isolation of the server environment.
Used for obtaining the BICScan MCP Server source code repository.
Hosts the BICScan MCP Server repository, allowing users to clone the source code.
Provides a build automation tool for creating the Docker image of the BICScan MCP Server.
Runtime environment for the BICScan MCP Server when not using Docker.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@BICScan MCP Servercheck risk score for 0x742d35Cc6634C0532925a3b844Bc9e0fE43F9Da9"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
BICScan MCP Server
A powerful and efficient Blockchain address risk scoring API MCP Server, leveraging the BICScan API to provide comprehensive risk assessments and asset information for blockchain addresses, domains, and decentralized applications (dApps).
Key Features
Risk Scoring: Obtain risk scores for various blockchain entities, including crypto addresses, domain names, and decentralized application URLs, with scores ranging from 0 to 100, where 100 indicates high risk.
Asset Information: Retrieve detailed asset holdings for specified crypto addresses, including cryptocurrencies and tokens, with support for multiple blockchain networks.
Real-time Scanning: Utilize the BICScan API to perform real-time scans and receive up-to-date information on potential risks and asset holdings.
Secure and Reliable: Built with robust error handling and logging to ensure secure and reliable operations.
Related MCP server: onchain-forensics
Example Output
How to use.
You con either use Python with uv or docker depending on your preference.
Depending on your environment, you can choose to use either uv, docker, or uvx.
1. Running with uv
1-1. Requirements
Python 3.10 or higher
uv 0.6.x
git
1.2. Clone the repository
git clone https://github.com/ahnlabio/bicscan-mcp1.3. Config claude_desktop_config.json
Append following to claude_desktop_config.json.
Make sure to replace:
YOUR_BICSCAN_REPO_DIR_HERE: to something likeC:\\Users\\ABC\\repo\\bicscan-mcpor/home/abc/repo/bicscan-mcpsimilarly.YOUR_BICSCAN_API_KEY_HERE: to free API key can be obtained from https://bicscan.io (details below)
{
"mcpServers": {
... some other mcp servers ...,
"bicscan": {
"command": "uv",
"args": [
"--directory",
"YOUR_BICSCAN_REPO_DIR_HERE",
"run",
"bicscan-mcp"
],
"env": {
"BICSCAN_API_KEY": "YOUR_BICSCAN_API_KEY_HERE"
}
}
}
}2. Running with Docker
2.1. Requirements
Docker environment
2.2. Clone the repository
git clone https://github.com/ahnlabio/bicscan-mcp2.3. Build Docker image.
Just run make in the repository directory to build docker image.
2.4. Config
Append following to claude_desktop_config.json
Make sure to replace:
YOUR_BICSCAN_API_KEY_HEREto API key obtained from https://bicscan.io (details below)
{
"mcpServers": {
... some other mcp servers ...,
"bicscan": {
"command": "docker",
"args": [
"run",
"--rm",
"--interactive",
"--env", "BICSCAN_API_KEY=YOUR_BICSCAN_API_KEY_HERE",
"bicscan-mcp"
]
}
}
}3. Running with uvx
3.1. Requirements
Python 3.10 or higher
uv 0.6.x
git
3.2. Config claude_desktop_config.json
Append following to claude_desktop_config.json.
Make sure to replace:
YOUR_BICSCAN_API_KEY_HERE: to free API key can be obtained from https://bicscan.io (details below)
{
"mcpServers": {
... some other mcp servers ...,
"bicscan": {
"command": "uvx",
"args": [
"--from",
"git+https://github.com/ahnlabio/bicscan-mcp",
"bicscan-mcp"
],
"env": {
"BICSCAN_API_KEY": "YOUR_BICSCAN_API_KEY_HERE"
}
}
}
}How to obtain Free BICScan API Key?
Visit
https://bicscan.ioand register.Go to profile and create "Create App"
Enter name and description on your choice.
Replace
YOUR_BICSCAN_API_KEY_HEREpart from above config to your newly obtained key.restart the Claude Desktop.
Available Tools
2 toolsget_assetsB
Get Assets holdings by CryptoAddress
Args:
address: EOA, CA, ENS, CNS, KNS.
Returns:
Dict: where assets is a list of assets
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states this is a 'Get' operation which implies read-only behavior, but doesn't disclose any behavioral traits like rate limits, authentication requirements, error conditions, or what happens with invalid addresses. The description mentions the return format ('Dict: where assets is a list of assets') but provides minimal detail about the response structure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and well-structured with clear sections for Args and Returns. The main purpose is stated upfront, followed by parameter details and return information. There's minimal wasted text, though the formatting could be slightly cleaner (e.g., consistent capitalization in the Returns section).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (single parameter with multiple formats), no annotations, and no output schema, the description is minimally adequate. It covers the basic purpose and parameter semantics well, but lacks behavioral context and usage guidance. For a tool that presumably queries blockchain data, more information about limitations, data freshness, or error handling would be beneficial.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds significant value beyond the input schema, which has 0% description coverage. It explains that the 'address' parameter accepts multiple formats: 'EOA, CA, ENS, CNS, KNS' (presumably Externally Owned Account, Contract Address, Ethereum Name Service, etc.). This semantic clarification is crucial for proper tool invocation and compensates well for the schema's lack of documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Get Assets holdings by CryptoAddress' specifies both the action (get) and the resource (assets holdings). It distinguishes from the sibling tool 'get_risk_score' by focusing on asset holdings rather than risk assessment. However, it doesn't fully differentiate from potential other asset-related tools beyond the single sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. There's no mention of when this tool is appropriate, what scenarios it's designed for, or any prerequisites for its use. The single sibling tool 'get_risk_score' is not referenced, leaving the agent with no comparative context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_risk_scoreB
Get Risk Score for Crypto, Domain Name, ENS, CNS, KNS or even Hostname Address
Args:
address: EOA, CA, ENS, CNS, KNS or even HostName
Returns:
Dict: where summary.bicscan_score is from 0 to 100. 100 is high risk.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It adds some context by explaining the return format and risk score range (0-100, where 100 is high risk), which is useful beyond basic functionality. However, it lacks details on error handling, rate limits, or authentication needs, leaving gaps in behavioral understanding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and front-loaded, with the purpose stated first, followed by parameter and return details. It avoids unnecessary fluff, but the formatting with 'Args:' and 'Returns:' could be more integrated for better flow.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (risk scoring with various address types), no annotations, and no output schema, the description is moderately complete. It covers purpose, parameter semantics, and return format, but lacks usage guidelines, error details, or behavioral traits like rate limits, making it adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 0%, so the description must compensate. It adds meaning by listing examples of address types (EOA, CA, ENS, CNS, KNS, HostName), which clarifies the parameter's semantics beyond the schema's generic 'string' type. This significantly enhances understanding, though it could be more detailed on format constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Get Risk Score for Crypto, Domain Name, ENS, CNS, KNS or even Hostname Address.' It specifies the verb 'Get' and the resource 'Risk Score,' with explicit examples of address types. However, it doesn't differentiate from the sibling tool 'get_assets,' which might have overlapping functionality, preventing a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, such as the sibling tool 'get_assets.' It lists address types but doesn't specify contexts or exclusions for usage, leaving the agent without clear direction on tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
The two tools have clearly distinct purposes: get_assets retrieves asset holdings, while get_risk_score calculates risk scores. There is no overlap in functionality, and an agent can easily differentiate between them based on their names and descriptions.
Both tools follow a consistent verb_noun pattern with get_assets and get_risk_score. The naming is predictable and readable, using snake_case throughout without any deviations or mixed conventions.
With only 2 tools, the server feels thin for a BICScan MCP Server, which suggests a domain involving crypto and risk analysis. This limited set may not cover essential operations like querying transactions, checking contract details, or updating data, making it borderline inadequate for the apparent scope.
The tool surface has significant gaps for a crypto/risk analysis domain. While it includes asset retrieval and risk scoring, it lacks basic operations such as querying transaction histories, verifying contract addresses, or performing deeper analytics. This incompleteness could lead to agent failures when handling common tasks in this domain.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Pre-transaction risk screening for Ethereum addresses: signed score, sanctions, audit trail.
Free crypto AML/KYT screening for BTC/ETH/BSC/TRON — risk score, sanctions, source of funds.
Solana address risk grades and token scans for AI agents. Pay-per-call via x402 (USDC on Base).
AML/CFT compliance oracle: wallet screening, sanctions, PEPs, jurisdiction risk.
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceProvides counterparty risk checks for any EVM address, returning malicious-history flags, tiered risk scoring, and plain-language summaries via x402 payment.
- AlicenseBqualityBmaintenanceProvides on-chain forensic checks for evaluating transaction risks, including token verification, rug-pull detection, and fund tracing, using public blockchain endpoints.1214MIT
- AlicenseNot gradedqualityCmaintenanceEnables AML screening of blockchain addresses against OFAC SDN lists and chain heuristics, returning risk scores and flags.MIT

traql MCP serverofficial
AlicenseAqualityAmaintenanceEnables AI agents to perform AML and compliance risk scoring for crypto addresses and transactions on Ethereum, BSC, TRON, TON, and Bitcoin, returning 0–100 risk scores, bands, flags, and detailed signals.2306MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ahnlabio/bicscan-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server