BICScan MCP Server
Servidor MCP de BICScan
Un servidor MCP API de puntuación de riesgo de direcciones de blockchain potente y eficiente, que aprovecha la API BICScan para proporcionar evaluaciones de riesgo integrales e información de activos para direcciones de blockchain, dominios y aplicaciones descentralizadas (dApps).
🎉 Estamos listados en https://github.com/modelcontextprotocol/servers para integración oficial 🎉
https://github.com/user-attachments/assets/f9425429-1cb1-4508-b962-81351075258b
Características principales
Puntuación de riesgo : obtenga puntuaciones de riesgo para varias entidades blockchain, incluidas direcciones de criptomonedas, nombres de dominio y URL de aplicaciones descentralizadas, con puntuaciones que van de 0 a 100, donde 100 indica un alto riesgo.
Información de activos : recupere tenencias de activos detalladas para direcciones criptográficas específicas, incluidas criptomonedas y tokens, con soporte para múltiples redes blockchain.
Escaneo en tiempo real : utilice la API de BICScan para realizar escaneos en tiempo real y recibir información actualizada sobre riesgos potenciales y tenencias de activos.
Seguro y confiable : construido con manejo y registro de errores robustos para garantizar operaciones seguras y confiables.
Related MCP server: hive-mcp-aml-screen
Ejemplo de salida
Modo de empleo.
Puede utilizar Python con uv o docker según su preferencia.
Dependiendo de su entorno, puede elegir utilizar uv , docker o uvx .
1. Corriendo con uv
1-1. Requisitos
Python 3.10 o superior
ultravioleta 0.6.x
git
1.2. Clonar el repositorio
git clone https://github.com/ahnlabio/bicscan-mcp1.3. Configuración claude_desktop_config.json
Agregue lo siguiente a claude_desktop_config.json .
Asegúrese de reemplazar:
YOUR_BICSCAN_REPO_DIR_HERE: a algo comoC:\\Users\\ABC\\repo\\bicscan-mcpo/home/abc/repo/bicscan-mcpde manera similar.YOUR_BICSCAN_API_KEY_HERE: puede obtener una clave API gratuita en https://bicscan.io (detalles a continuación)
{
"mcpServers": {
... some other mcp servers ...,
"bicscan": {
"command": "uv",
"args": [
"--directory",
"YOUR_BICSCAN_REPO_DIR_HERE",
"run",
"bicscan-mcp"
],
"env": {
"BICSCAN_API_KEY": "YOUR_BICSCAN_API_KEY_HERE"
}
}
}
}2. Ejecución con Docker
2.1. Requisitos
Entorno Docker
2.2. Clonar el repositorio
git clone https://github.com/ahnlabio/bicscan-mcp2.3. Construir imagen de Docker.
Simplemente ejecute make en el directorio del repositorio para crear una imagen de Docker.
2.4. Configuración
Agregue lo siguiente a claude_desktop_config.json
Asegúrese de reemplazar:
YOUR_BICSCAN_API_KEY_HEREa la clave API obtenida de https://bicscan.io (detalles a continuación)
{
"mcpServers": {
... some other mcp servers ...,
"bicscan": {
"command": "docker",
"args": [
"run",
"--rm",
"--interactive",
"--env", "BICSCAN_API_KEY=YOUR_BICSCAN_API_KEY_HERE",
"bicscan-mcp"
]
}
}
}3. Correr con uvx
3.1. Requisitos
Python 3.10 o superior
ultravioleta 0.6.x
git
3.2. Configuración claude_desktop_config.json
Agregue lo siguiente a claude_desktop_config.json .
Asegúrese de reemplazar:
YOUR_BICSCAN_API_KEY_HERE: puede obtener una clave API gratuita en https://bicscan.io (detalles a continuación)
{
"mcpServers": {
... some other mcp servers ...,
"bicscan": {
"command": "uvx",
"args": [
"--from",
"git+https://github.com/ahnlabio/bicscan-mcp",
"bicscan-mcp"
],
"env": {
"BICSCAN_API_KEY": "YOUR_BICSCAN_API_KEY_HERE"
}
}
}
}¿Cómo obtener una clave API de BICScan gratuita?
Visita
https://bicscan.ioy regístrate.Vaya al perfil y cree "Crear aplicación"
Ingrese el nombre y la descripción de su elección.
Reemplace la parte
YOUR_BICSCAN_API_KEY_HEREde la configuración anterior por la clave recién obtenida.reinicie el escritorio Claude.
Available Tools
2 toolsget_assetsB
Get Assets holdings by CryptoAddress
Args:
address: EOA, CA, ENS, CNS, KNS.
Returns:
Dict: where assets is a list of assets
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states this is a 'Get' operation which implies read-only behavior, but doesn't disclose any behavioral traits like rate limits, authentication requirements, error conditions, or what happens with invalid addresses. The description mentions the return format ('Dict: where assets is a list of assets') but provides minimal detail about the response structure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and well-structured with clear sections for Args and Returns. The main purpose is stated upfront, followed by parameter details and return information. There's minimal wasted text, though the formatting could be slightly cleaner (e.g., consistent capitalization in the Returns section).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (single parameter with multiple formats), no annotations, and no output schema, the description is minimally adequate. It covers the basic purpose and parameter semantics well, but lacks behavioral context and usage guidance. For a tool that presumably queries blockchain data, more information about limitations, data freshness, or error handling would be beneficial.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds significant value beyond the input schema, which has 0% description coverage. It explains that the 'address' parameter accepts multiple formats: 'EOA, CA, ENS, CNS, KNS' (presumably Externally Owned Account, Contract Address, Ethereum Name Service, etc.). This semantic clarification is crucial for proper tool invocation and compensates well for the schema's lack of documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Get Assets holdings by CryptoAddress' specifies both the action (get) and the resource (assets holdings). It distinguishes from the sibling tool 'get_risk_score' by focusing on asset holdings rather than risk assessment. However, it doesn't fully differentiate from potential other asset-related tools beyond the single sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. There's no mention of when this tool is appropriate, what scenarios it's designed for, or any prerequisites for its use. The single sibling tool 'get_risk_score' is not referenced, leaving the agent with no comparative context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_risk_scoreB
Get Risk Score for Crypto, Domain Name, ENS, CNS, KNS or even Hostname Address
Args:
address: EOA, CA, ENS, CNS, KNS or even HostName
Returns:
Dict: where summary.bicscan_score is from 0 to 100. 100 is high risk.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It adds some context by explaining the return format and risk score range (0-100, where 100 is high risk), which is useful beyond basic functionality. However, it lacks details on error handling, rate limits, or authentication needs, leaving gaps in behavioral understanding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and front-loaded, with the purpose stated first, followed by parameter and return details. It avoids unnecessary fluff, but the formatting with 'Args:' and 'Returns:' could be more integrated for better flow.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (risk scoring with various address types), no annotations, and no output schema, the description is moderately complete. It covers purpose, parameter semantics, and return format, but lacks usage guidelines, error details, or behavioral traits like rate limits, making it adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 0%, so the description must compensate. It adds meaning by listing examples of address types (EOA, CA, ENS, CNS, KNS, HostName), which clarifies the parameter's semantics beyond the schema's generic 'string' type. This significantly enhances understanding, though it could be more detailed on format constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Get Risk Score for Crypto, Domain Name, ENS, CNS, KNS or even Hostname Address.' It specifies the verb 'Get' and the resource 'Risk Score,' with explicit examples of address types. However, it doesn't differentiate from the sibling tool 'get_assets,' which might have overlapping functionality, preventing a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, such as the sibling tool 'get_assets.' It lists address types but doesn't specify contexts or exclusions for usage, leaving the agent without clear direction on tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- First observed
get_assets - First observed
get_risk_score
TDQS
Scored across 2 tools
The two tools have clearly distinct purposes: get_assets retrieves asset holdings, while get_risk_score calculates risk scores. There is no overlap in functionality, and an agent can easily differentiate between them based on their names and descriptions.
Both tools follow a consistent verb_noun pattern with get_assets and get_risk_score. The naming is predictable and readable, using snake_case throughout without any deviations or mixed conventions.
With only 2 tools, the server feels thin for a BICScan MCP Server, which suggests a domain involving crypto and risk analysis. This limited set may not cover essential operations like querying transactions, checking contract details, or updating data, making it borderline inadequate for the apparent scope.
The tool surface has significant gaps for a crypto/risk analysis domain. While it includes asset retrieval and risk scoring, it lacks basic operations such as querying transaction histories, verifying contract addresses, or performing deeper analytics. This incompleteness could lead to agent failures when handling common tasks in this domain.
Maintenance
Related MCP Connectors
Pre-transaction risk screening for Ethereum addresses: signed score, sanctions, audit trail.
Crypto security, honeypot detection, wallet analysis, and token risk scoring across 31 blockchains.
Free crypto AML/KYT screening for BTC/ETH/BSC/TRON — risk score, sanctions, source of funds.
Crypto transaction safety tool — screens addresses and transactions for scam risk.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceProvides counterparty risk checks for any EVM address, returning malicious-history flags, tiered risk scoring, and plain-language summaries via x402 payment.-
- AlicenseNot gradedqualityCmaintenanceEnables AML screening of blockchain addresses against OFAC SDN lists and chain heuristics, returning risk scores and flags.MIT

traql MCP serverofficial
AlicenseAqualityAmaintenanceEnables AI agents to perform AML and compliance risk scoring for crypto addresses and transactions on Ethereum, BSC, TRON, TON, and Bitcoin, returning 0–100 risk scores, bands, flags, and detailed signals.250 npmMIT- AlicenseAqualityBmaintenanceEnables AI assistants to assess the risk of crypto wallets, tokens, and smart contracts by providing read-only on-chain analysis, 0-100 risk scoring with explanations, fund tracing, and contract inspection before interaction.6MIT