alchemy-mcp
Warn
Audited by Snyk on Jun 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill exposes a full Alchemy MCP RPC/Data toolset for blockchains (100+ chains) including Standard EVM RPC, ERC-4337 account-abstraction tools, Solana RPC, transaction simulation/tracing, token balances/allowances and portfolio/NFT APIs. It requires selecting an app which caches an API key for RPC/Data tools, enabling on-chain JSON-RPC operations. Those RPC capabilities are explicitly crypto/blockchain-oriented and enable submitting or managing on-chain transactions (signing/send/operation submission flows via ERC‑4337 and standard RPC). This is direct crypto financial execution capability.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata