alchemy-mcp

Warn

Audited by Snyk on Jun 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill exposes a full Alchemy MCP RPC/Data toolset for blockchains (100+ chains) including Standard EVM RPC, ERC-4337 account-abstraction tools, Solana RPC, transaction simulation/tracing, token balances/allowances and portfolio/NFT APIs. It requires selecting an app which caches an API key for RPC/Data tools, enabling on-chain JSON-RPC operations. Those RPC capabilities are explicitly crypto/blockchain-oriented and enable submitting or managing on-chain transactions (signing/send/operation submission flows via ERC‑4337 and standard RPC). This is direct crypto financial execution capability.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 18, 2026, 10:30 AM
Issues
1
Security Audit — snyk — alchemy-mcp