// SCAN REPORT

EVM MCP Server

36 tools. 15 can modify or destroy data without limits.

10 destructive tools with no built-in limits. Policy required.

Last updated: 5 Jul 2026

15 can modify or destroy data

21 read-only

36 tools total

Community server · catalogue entry checked 05/07/2026

How to control EVM MCP Server ↓

TOOL MAP

What EVM MCP Server exposes to your agents

Read (21) Write / Execute (5) Destructive / Financial (10)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous EVM MCP Server tools

Financial · Critical transfer_erc1155 This tool transfers blockchain-based tokens (ERC1155 standard) to other addresses, which constitutes movement of financial assets. Financial · Critical transfer_erc20 Transferring ERC20 tokens constitutes direct movement of financial assets and creates irreversible blockchain transactions. Financial · Critical transfer_eth This tool irreversibly transfers blockchain native tokens (ETH, MATIC, etc.) to specified addresses, committing financial obligations and moving monetary value. Financial · High transfer_nft Transferring an NFT is a financial operation as it moves a potentially valuable digital asset (NFT) between addresses on the blockchain.

15 of EVM MCP Server's 36 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control EVM MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and EVM MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "add_liquidity": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Rate limit write operations

{
  "approve_token_spending": {
    "limits": [
      {
        "counter": "approve_token_spending_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check_nft_ownership": {
    "limits": [
      {
        "counter": "check_nft_ownership_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register EVM MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON EVM →

Instant setup, no code required.

FULL CATALOGUE

All 36 EVM MCP Server tools

FINANCIAL 10 tools

Financial add_liquidity Add ETH and token liquidity to create or increase a Uniswap/PancakeSwap liquidity pool position Financial buy_usdt_from_wallet Buy USDT using PancakeSwap Financial deploy_tax_token Deploy a new ERC20 token with tax functionality on buy/sell transactions Financial lock_lp_token Lock LP tokens in the UniswapV2Lock contract to demonstrate locked liquidity Financial sell_usdt_from_wallet Sell USDT for ETH using PancakeSwap Financial transfer_erc1155 Transfer ERC1155 tokens to another address. ERC1155 is a multi-token standard that can represent both fungible Financial transfer_erc20 Transfer ERC20 tokens to another address Financial transfer_eth Transfer native tokens (ETH, MATIC, etc.) to an address Financial transfer_nft Transfer an NFT (ERC721 token) from one address to another. Requires the private key of the current owner for Financial transfer_token Transfer ERC20 tokens to an address

EXECUTE 4 tools

Execute deploy_token Deploy a new ERC20 token contract with the specified name and symbol Execute enable_trading Enable trading for a tax token contract with specified parameters Execute set_swap_and_liquify_enabled Enable or disable swap and liquify functionality for a tax token Execute write_contract Write data to a smart contract by calling a state-changing function. This modifies blockchain state and requir

WRITE 1 tools

Write approve_token_spending Approve another address (like a DeFi protocol or exchange) to spend your ERC20 tokens. This is often required

READ 21 tools

Read check_nft_ownership Check if an address owns a specific NFT Read estimate_gas Estimate the gas cost for a transaction Read get_address_from_private_key Get the EVM address derived from a private key Read get_balance Get the native token balance (ETH, MATIC, etc.) for an address Read get_block_by_number Get a block by its block number Read get_chain_info Get information about an EVM network Read get_erc1155_balance Get the balance of a specific ERC1155 token ID owned by an address. ERC1155 allows multiple tokens of the same Read get_erc1155_token_uri Get the metadata URI for an ERC1155 token (multi-token standard used for both fungible and non-fungible tokens Read get_erc20_balance Get the ERC20 token balance of an Ethereum address Read get_latest_block Get the latest block from the EVM Read get_nft_balance Get the total number of NFTs owned by an address from a specific collection. This returns the count of NFTs, n Read get_nft_info Get detailed information about a specific NFT (ERC721 token), including collection name, symbol, token URI, an Read get_supported_networks Get a list of supported EVM networks Read get_token_balance Get the balance of an ERC20 token for an address Read get_token_balance_erc20 Get ERC20 token balance for an address Read get_token_info Get comprehensive information about an ERC20 token including name, symbol, decimals, total supply, and other m Read get_transaction Get detailed information about a specific transaction by its hash. Includes sender, recipient, value, data, an Read get_transaction_receipt Get a transaction receipt by its hash Read is_contract Check if an address is a smart contract or an externally owned account (EOA) Read read_contract Read data from a smart contract by calling a view/pure function. This doesn Read resolve_ens Resolve an ENS name to an Ethereum address

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about EVM MCP Server

Can an AI agent move money through the EVM MCP Server MCP server? +

Yes. The EVM MCP Server server exposes 10 financial tools including add_liquidity, buy_usdt_from_wallet, deploy_tax_token. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

How do I prevent bulk modifications through EVM MCP Server? +

The EVM MCP Server server has 1 write tools including approve_token_spending. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach EVM MCP Server.

How many tools does the EVM MCP Server MCP server expose? +

36 tools across 4 categories: Execute, Financial, Read, Write. 21 are read-only. 15 can modify, create, or delete data.

How do I enforce a policy on EVM MCP Server? +

Register the EVM MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every EVM MCP Server tool call.

Deterministic rules across all 36 EVM MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON EVM →

Instant setup, no code required.

36 EVM MCP Server tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from EVM MCP Server's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →