360 Secure SkillHub
360 安全技能中心

GoldRush MCP Skill

核心功能:支持查询多链钱包余额、交易记录、NFT持有、代币授权、链元数据及历史投资组合价值等。典型场景:跨链资产盘点、NFT归属验证、钱包交易溯源。输入需结合GoldRush API密钥,通过uxc调用指定npx命令;输出为结构化JSON数据。依赖uxc、Node.js,首次运行可能因下载包耗时久,需先配置认证凭证。

jolestar
jolestar
热度 59.09
最近更新 2026-05-11 17:32:41
分类:开发依赖:代码执行 / MCP 服务 / 第三方 API应用场景:API 集成 / 数据处理 / 个人理财

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add goldrush-mcp-skill
Metadata
name
goldrush-mcp-skill
description
Use GoldRush MCP through UXC for multichain wallet balances, transfers, portfolio history, NFT ownership, token approvals, prices, and chain metadata via stdio MCP with injected API-key auth.

GoldRush MCP Skill

Use this skill to run GoldRush MCP operations through uxc using a fixed stdio endpoint.

Reuse the uxc skill for generic protocol discovery, output parsing, and auth/error handling rules.

Prerequisites

  • uxc is installed and available in PATH.
  • npx is available in PATH (Node.js installed).
  • Network access for first-time @covalenthq/goldrush-mcp-server package fetch.
  • A GoldRush API key is available.

Core Workflow

Endpoint candidate inputs before finalizing:

  • Raw package form from docs: npx @covalenthq/goldrush-mcp-server@latest
  • Reliable non-interactive form: npx -y @covalenthq/goldrush-mcp-server@latest
  • This skill defaults to:
    • npx -y @covalenthq/goldrush-mcp-server@latest
  1. Verify protocol/path from official source and probe:
    • Official source: https://goldrush.dev/docs/goldrush-mcp-server
    • probe candidate endpoint with:
      • uxc --inject-env GOLDRUSH_API_KEY=$GOLDRUSH_API_KEY "npx -y @covalenthq/goldrush-mcp-server@latest" -h
    • cold start can take longer on first run because npx may need to download the package
  2. Configure credential for repeatable auth:
    • uxc auth credential set goldrush-mcp --auth-type bearer --secret-env GOLDRUSH_API_KEY
    • uxc auth credential set goldrush-mcp --auth-type bearer --secret-op op://Engineering/goldrush/api-key
  3. Use fixed link command by default:
    • command -v goldrush-mcp-cli
    • If missing, create it:
      • uxc link goldrush-mcp-cli "npx -y @covalenthq/goldrush-mcp-server@latest" --credential goldrush-mcp --inject-env GOLDRUSH_API_KEY={{secret}}
    • goldrush-mcp-cli -h
  4. Inspect operation schema before execution:
    • goldrush-mcp-cli getAllChains -h
    • goldrush-mcp-cli multichain_balances -h
    • goldrush-mcp-cli transactions_for_address -h
    • goldrush-mcp-cli historical_portfolio_value -h
  5. Prefer read-only discovery first, then expand into broader wallet-history or NFT scans.

Capability Map

  • Cross-chain overview:
    • getAllChains
    • multichain_address_activity
    • multichain_balances
    • multichain_transactions
  • Wallet balances and portfolio:
    • token_balances
    • historical_token_balances
    • native_token_balance
    • historical_portfolio_value
    • historical_token_prices
  • Transfers and transactions:
    • erc20_token_transfers
    • transaction
    • transaction_summary
    • transactions_for_address
    • transactions_for_block
  • NFT and security:
    • nft_for_address
    • nft_check_ownership
    • token_approvals
  • Utility:
    • gas_prices
    • log_events_by_address
    • log_events_by_topic
    • block
    • block_heights

GoldRush also exposes MCP resources such as config://supported-chains, config://quote-currencies, and status://all-chains. Inspect the live server after auth setup for the current full tool and resource list.

Recommended Usage Pattern

  1. Start with one focused read goal:
    • multichain balances for a wallet
    • recent transfers for an address
    • historical portfolio value over time
    • NFT ownership or token approval review
  2. Run -h on the specific tool before the first real call.
  3. Prefer a single wallet and chain first before running wide history scans.
  4. Parse the JSON envelope first, then inspect data.

Guardrails

  • Keep automation on JSON output envelope; do not rely on --text.
  • Parse stable fields first: ok, kind, protocol, data, error.
  • Use goldrush-mcp-cli as default command path.
  • goldrush-mcp-cli <operation> ... is equivalent to uxc --auth goldrush-mcp --inject-env GOLDRUSH_API_KEY={{secret}} "npx -y @covalenthq/goldrush-mcp-server@latest" <operation> ... when the link is created as documented above.
  • GoldRush uses a stdio MCP server started through npx, not a hosted HTTPS MCP endpoint. Expect slower cold starts on the first run.
  • If help or the first call times out during initialization:
    • rerun the same command after the package download finishes
    • confirm npx is available in PATH
    • confirm the key is being injected as GOLDRUSH_API_KEY
  • The skill docs use bearer credential storage only as a secret container for --inject-env; GoldRush auth actually happens through the child environment variable, not an HTTP bearer header.
  • Prefer wallet-scoped reads before wide transaction or log scans because some tools can produce large result sets.
  • Do not assume tool argument names from memory; inspect <operation> -h first because GoldRush may revise MCP schemas independently of this skill.

References

  • Invocation patterns:
    • references/usage-patterns.md