360 Secure SkillHub
360 安全技能中心

Etherscan Mcp Skill

该 Skill 指导通过 uxc 命令调用 Etherscan MCP 服务,完成地址余额与持仓、代币持有人分布、交易明细以及合约 ABI/源码查询。流程包含凭据绑定、先用 -h 查看操作 schema、优先只读操作并解析 JSON 结果信封;部分工具受订阅等级限制,源码验证类操作需用户确认。

jolestar
jolestar
热度 64.83
最近更新 2026-05-11 17:29:28
分类:数据依赖:MCP 服务 / 第三方 API / 代码执行应用场景:研究 / 数据处理 / 财务

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add etherscan-mcp-skill
Metadata
name
etherscan-mcp-skill
description
Use Etherscan MCP through UXC for address balance checks, token holder analysis, transaction inspection, and contract lookup tasks. Use when tasks need Etherscan MCP tools for onchain investigation with help-first schema inspection, bearer-key auth, and tier-aware read-first handling.

Etherscan MCP Skill

Use this skill to run Etherscan MCP operations through uxc.

Reuse the uxc skill for shared protocol discovery, output parsing, and generic auth/binding flows.

Prerequisites

  • uxc is installed and available in PATH.
  • Network access to https://mcp.etherscan.io/mcp.
  • An Etherscan API key is available for authenticated calls.

Core Workflow

  1. Confirm endpoint and protocol with help-first probing:
    • uxc https://mcp.etherscan.io/mcp -h
    • expected unauthenticated behavior today: 401 Unauthorized
  2. Configure credential/binding for repeatable auth:
    • uxc auth credential set etherscan-mcp --auth-type bearer --secret-env ETHERSCAN_API_KEY
    • uxc auth credential set etherscan-mcp --auth-type bearer --secret-op op://Engineering/etherscan/api-key
    • uxc auth binding add --id etherscan-mcp --host mcp.etherscan.io --path-prefix /mcp --scheme https --credential etherscan-mcp --priority 100
  3. Use fixed link command by default:
    • command -v etherscan-mcp-cli
    • If missing, create it: uxc link etherscan-mcp-cli https://mcp.etherscan.io/mcp
    • etherscan-mcp-cli -h
  4. Inspect operation schema before execution:
    • etherscan-mcp-cli balance -h
    • etherscan-mcp-cli tokenTopHolders -h
    • etherscan-mcp-cli getContractAbi -h
    • etherscan-mcp-cli transaction -h
  5. Prefer read operations first, then any workflow that could trigger heavy data pulls or follow-up automation.

Capability Map

  • Address investigation:
    • balance
    • tokenHoldings
    • fundedBy
    • getAddressMetadata
  • Token holder analysis:
    • balanceERC20
    • balanceERC20Historical
    • tokenTopHolders
    • getTokenInfo
  • Transaction investigation:
    • txList
    • internalTxsByAddress
    • erc20Transfers
    • erc721Transfers
    • erc1155Transfers
    • transaction
    • checkTransaction
  • Contract research:
    • getContractAbi
    • getContractSourceCode
    • getContractCreation
  • Verification:
    • verifySourceCode
    • checkVerifyStatus

Inspect etherscan-mcp-cli -h after auth setup for the current full tool list. Etherscan can expand MCP tools independently of this wrapper skill.

Recommended Usage Pattern

  1. Start from a read-only investigation goal:
    • balance or holdings for an address
    • holder concentration for a token
    • transaction inspection for a hash
    • source/metadata lookup for a contract
  2. Run -h on the specific tool before the first real call.
  3. Prefer one chain/address/token at a time before broadening the scope.
  4. Parse the JSON envelope first, then inspect data.

Guardrails

  • Keep automation on JSON output envelope; do not rely on --text.
  • Parse stable fields first: ok, kind, protocol, data, error.
  • Use etherscan-mcp-cli as default command path.
  • etherscan-mcp-cli <operation> ... is equivalent to uxc https://mcp.etherscan.io/mcp <operation> ....
  • If unauthenticated probe or runtime call returns 401 Unauthorized:
    • confirm auth binding matches endpoint with uxc auth binding match https://mcp.etherscan.io/mcp
    • confirm credential shape with uxc auth credential info etherscan-mcp
    • reset credential as bearer if needed: uxc auth credential set etherscan-mcp --auth-type bearer --secret-env ETHERSCAN_API_KEY
  • Use key=value only for simple scalar inputs.
  • Prefer positional JSON when an operation accepts nested objects, arrays, or optional flags that may evolve.
  • Do not assume tool argument names from memory; inspect <operation> -h first because Etherscan may revise MCP schemas independently of this skill.
  • Some MCP tools are tier-gated by Etherscan plan. Today getTokenInfo can return NOTOK with an API Pro upgrade message on non-Pro keys.
  • Treat verifySourceCode as a write-like action requiring explicit user confirmation.

References

  • Invocation patterns:
    • references/usage-patterns.md