GoTRON MCP

by fbsobreira · remote · local (oci) · no sign-in to list tools · v0.4.1 · published by GitHub user fbsobreira

TRON blockchain: accounts, TRC20 tokens, staking, contracts, resources and transaction builders

Deletes · 44

Compare Registry entry

44 tools: 44 can delete or cancel things.

Scanned Oct 21, 2026

Deletes or cancels44Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things0Claude Code: ask
Only reads0Claude Code: allow

29 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http gotron https://mcp.gotron.sh/mcp

Findings

Matches of fixed checks, with the text they matched.

29 warn

Warnanalyze_account
The server marks "analyze_account" destructive (destructiveHint: true), and its name says "analyze", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "analyze_account" says "analyze": a word for reading.
What this check looks for
Warnanalyze_transfer_cost
The server marks "analyze_transfer_cost" destructive (destructiveHint: true), and its name says "analyze", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "analyze_transfer_cost" says "analyze": a word for reading.
What this check looks for
Warnget_account
The server marks "get_account" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_account" says "get": a word for reading.
What this check looks for
Warnget_account_permissions
The server marks "get_account_permissions" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_account_permissions" says "get": a word for reading.
What this check looks for
Warnget_account_resources
The server marks "get_account_resources" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_account_resources" says "get": a word for reading.
What this check looks for
Warnget_bandwidth_prices
The server marks "get_bandwidth_prices" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_bandwidth_prices" says "get": a word for reading.
What this check looks for

Show 23 more findings

Warnget_block
The server marks "get_block" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_block" says "get": a word for reading.
What this check looks for
Warnget_chain_parameters
The server marks "get_chain_parameters" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_chain_parameters" says "get": a word for reading.
What this check looks for
Warnget_contract_abi
The server marks "get_contract_abi" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_contract_abi" says "get": a word for reading.
What this check looks for
Warnget_contract_events
The server marks "get_contract_events" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_contract_events" says "get": a word for reading.
What this check looks for
Warnget_delegatable_amount
The server marks "get_delegatable_amount" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_delegatable_amount" says "get": a word for reading.
What this check looks for
Warnget_delegated_resources
The server marks "get_delegated_resources" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_delegated_resources" says "get": a word for reading.
What this check looks for
Warnget_energy_prices
The server marks "get_energy_prices" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_energy_prices" says "get": a word for reading.
What this check looks for
Warnget_network
The server marks "get_network" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_network" says "get": a word for reading.
What this check looks for
Warnget_pending_by_address
The server marks "get_pending_by_address" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_pending_by_address" says "get": a word for reading.
What this check looks for
Warnget_pending_transactions
The server marks "get_pending_transactions" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_pending_transactions" says "get": a word for reading.
What this check looks for
Warnget_pq_capabilities
The server marks "get_pq_capabilities" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_pq_capabilities" says "get": a word for reading.
What this check looks for
Warnget_proposal
The server marks "get_proposal" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_proposal" says "get": a word for reading.
What this check looks for
Warnget_token_price
The server marks "get_token_price" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_token_price" says "get": a word for reading.
What this check looks for
Warnget_transaction
The server marks "get_transaction" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_transaction" says "get": a word for reading.
What this check looks for
Warnget_transaction_history
The server marks "get_transaction_history" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_transaction_history" says "get": a word for reading.
What this check looks for
Warnget_trc20_allowance
The server marks "get_trc20_allowance" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_allowance" says "get": a word for reading.
What this check looks for
Warnget_trc20_balance
The server marks "get_trc20_balance" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_balance" says "get": a word for reading.
What this check looks for
Warnget_trc20_token_info
The server marks "get_trc20_token_info" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_token_info" says "get": a word for reading.
What this check looks for
Warnget_trc20_transfers
The server marks "get_trc20_transfers" destructive (destructiveHint: true), and its name says "get", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_transfers" says "get": a word for reading.
What this check looks for
Warnlist_contract_methods
The server marks "list_contract_methods" destructive (destructiveHint: true), and its name says "list", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "list_contract_methods" says "list": a word for reading.
What this check looks for
Warnlist_proposals
The server marks "list_proposals" destructive (destructiveHint: true), and its name says "list", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "list_proposals" says "list": a word for reading.
What this check looks for
Warnlist_witnesses
The server marks "list_witnesses" destructive (destructiveHint: true), and its name says "list", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "list_witnesses" says "list": a word for reading.
What this check looks for
Warnvalidate_address
The server marks "validate_address" destructive (destructiveHint: true), and its name says "validate", a word for reading.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "validate_address" says "validate": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

44 tools

Deletes or cancels 44Removes, cancels or revokes something.Claude Code: deny

analyze_accountComprehensive account overview: balance, resources, staking, voting, permissions, and delegations in a single callReads text others write1 finding
Why it is in this group
- The name "analyze_account" says "analyze": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "analyze_account" destructive (destructiveHint: true), and its name says "analyze", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "analyze_account" says "analyze": a word for reading.
  What this check looks for
Description, as the server wrote it
Comprehensive account overview: balance, resources, staking, voting, permissions, and delegations in a single call
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
analyze_transfer_costEstimate the cost of a TRX or TRC20 transfer: energy, bandwidth, and TRX burn optionsReads text others write1 finding
Why it is in this group
- The name "analyze_transfer_cost" says "analyze": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "analyze_transfer_cost" destructive (destructiveHint: true), and its name says "analyze", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "analyze_transfer_cost" says "analyze": a word for reading.
  What this check looks for
Description, as the server wrote it
Estimate the cost of a TRX or TRC20 transfer: energy, bandwidth, and TRX burn options
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
decode_abi_outputDecode ABI-encoded output hex from a contract call.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Decode ABI-encoded output hex from a contract call. Handles return values, revert reasons (Error(string)), and panic codes (Panic(uint256)).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
delegate_resourceDelegate energy or bandwidth to another address (Stake 2.0).Reads text others writeNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Delegate energy or bandwidth to another address (Stake 2.0). Returns unsigned transaction hex for signing.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
estimate_energyEstimate energy cost for a smart contract call.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Estimate energy cost for a smart contract call. Requires a full node with vm.supportConstant=true and vm.estimateEnergy=true; falls back to secondary node if primary does not support it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
estimate_trc20_energyEstimate energy cost for a TRC20 transfer without creating a transaction.Reads text others writeNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Estimate energy cost for a TRC20 transfer without creating a transaction. Dry-runs the transfer to check energy requirements.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
freeze_balanceStake TRX for energy or bandwidth (Stake 2.0).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Stake TRX for energy or bandwidth (Stake 2.0). Returns unsigned transaction hex for signing.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_accountGet TRON account balance and details including TRX balance, bandwidth, energy, frozen resources, and account typeReads text others write1 finding
Why it is in this group
- The name "get_account" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_account" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_account" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get TRON account balance and details including TRX balance, bandwidth, energy, frozen resources, and account type
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_account_permissionsGet the permission structure of a TRON account including owner, active, and witness permissions with multi-sig keys and thresholdsReads text others write1 finding
Why it is in this group
- The name "get_account_permissions" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_account_permissions" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_account_permissions" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get the permission structure of a TRON account including owner, active, and witness permissions with multi-sig keys and thresholds
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_account_resourcesGet energy and bandwidth usage and limits for a TRON accountReads text others write1 finding
Why it is in this group
- The name "get_account_resources" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_account_resources" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_account_resources" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get energy and bandwidth usage and limits for a TRON account
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_bandwidth_pricesGet current and historical bandwidth prices on the TRON networkReads text others write1 finding
Why it is in this group
- The name "get_bandwidth_prices" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_bandwidth_prices" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_bandwidth_prices" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get current and historical bandwidth prices on the TRON network
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_blockGet a TRON block by number or latest.Reads text others write1 finding
Why it is in this group
- The name "get_block" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_block" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_block" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get a TRON block by number or latest. Use include_transactions to get transaction details with decoded contract data (sender, receiver, amounts) and pagination.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_chain_parametersGet TRON network node info and current energy/bandwidth pricesReads text others write1 finding
Why it is in this group
- The name "get_chain_parameters" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_chain_parameters" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_chain_parameters" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get TRON network node info and current energy/bandwidth prices
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_contract_abiGet the ABI of a smart contract on TRON.Reads text others write1 finding
Why it is in this group
- The name "get_contract_abi" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_contract_abi" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_contract_abi" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get the ABI of a smart contract on TRON. Automatically resolves proxy contracts (ERC-1967). Note: many TRON contracts are deployed without on-chain ABI — if empty, check TronScan for verified source code.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_contract_eventsGet decoded events emitted by a smart contract via TronGrid REST API.Reads text others write1 finding
Why it is in this group
- The name "get_contract_events" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_contract_events" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_contract_events" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get decoded events emitted by a smart contract via TronGrid REST API. Returns a compact summary per event. Use a small limit and paginate with fingerprint to control response size
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_delegatable_amountGet the maximum amount of energy or bandwidth an account can still delegateReads text others write1 finding
Why it is in this group
- The name "get_delegatable_amount" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_delegatable_amount" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_delegatable_amount" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get the maximum amount of energy or bandwidth an account can still delegate
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_delegated_resourcesGet resources delegated to and from an account (Stake 2.0 delegation info)Reads text others write1 finding
Why it is in this group
- The name "get_delegated_resources" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_delegated_resources" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_delegated_resources" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get resources delegated to and from an account (Stake 2.0 delegation info)
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_energy_pricesGet current and historical energy prices on the TRON networkReads text others write1 finding
Why it is in this group
- The name "get_energy_prices" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_energy_prices" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_energy_prices" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get current and historical energy prices on the TRON network
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_networkGet current MCP server connection info: network name, node address, and latest blockReads text others write1 finding
Why it is in this group
- The name "get_network" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_network" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_network" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get current MCP server connection info: network name, node address, and latest block
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_pending_by_addressGet pending transactions for a specific address from the mempoolReads text others write1 finding
Why it is in this group
- The name "get_pending_by_address" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_pending_by_address" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_pending_by_address" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get pending transactions for a specific address from the mempool
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_pending_transactionsList pending transaction IDs and pool size from the mempoolReads text others write1 finding
Why it is in this group
- The name "get_pending_transactions" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_pending_transactions" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_pending_transactions" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
List pending transaction IDs and pool size from the mempool
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_pq_capabilitiesReport which TIP-899 post-quantum signature schemes the connected node enables and this build can sign (FN-DSA-512 needs the gotron-mcp-pq build).Reads text others write1 finding
Why it is in this group
- The name "get_pq_capabilities" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
Findings
- Warn
  The server marks "get_pq_capabilities" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_pq_capabilities" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Report which TIP-899 post-quantum signature schemes the connected node enables and this build can sign (FN-DSA-512 needs the gotron-mcp-pq build). TIP-899 is a draft live only on Nile. can_sign reflects the node and this build; signing also needs local mode with a keystore.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_proposalGet full details of a governance proposal by ID, including the complete list of approval addresses.Reads text others write1 finding
Why it is in this group
- The name "get_proposal" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_proposal" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_proposal" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get full details of a governance proposal by ID, including the complete list of approval addresses.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_token_priceGet the current USD price of TRX or a TRC20 token.Reads text others write1 finding
Why it is in this group
- The name "get_token_price" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_token_price" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_token_price" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get the current USD price of TRX or a TRC20 token. Uses CoinGecko with caching.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_transactionGet transaction details by transaction IDReads text others write1 finding
Why it is in this group
- The name "get_transaction" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_transaction" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_transaction" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get transaction details by transaction ID
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_transaction_historyGet transaction history for a TRON address via TronGrid REST API.Reads text others write1 finding
Why it is in this group
- The name "get_transaction_history" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_transaction_history" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_transaction_history" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get transaction history for a TRON address via TronGrid REST API. Returns a compact summary per transaction. Use a small limit and paginate with fingerprint to control response size
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_trc20_allowanceQuery how many tokens a spender is approved to transfer on behalf of the owner.Reads text others write1 finding
Why it is in this group
- The name "get_trc20_allowance" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_trc20_allowance" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_allowance" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Query how many tokens a spender is approved to transfer on behalf of the owner. Flags unlimited approvals as high risk.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_trc20_balanceGet TRC20 token balance for an accountReads text others write1 finding
Why it is in this group
- The name "get_trc20_balance" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_trc20_balance" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_balance" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get TRC20 token balance for an account
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_trc20_token_infoGet TRC20 token metadata (name, symbol, decimals, total supply)Reads text others write1 finding
Why it is in this group
- The name "get_trc20_token_info" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_trc20_token_info" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_token_info" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get TRC20 token metadata (name, symbol, decimals, total supply)
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
get_trc20_transfersGet TRC20 token transfer history for a TRON address via TronGrid REST API.Reads text others write1 finding
Why it is in this group
- The name "get_trc20_transfers" says "get": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_trc20_transfers" destructive (destructiveHint: true), and its name says "get", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "get_trc20_transfers" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Get TRC20 token transfer history for a TRON address via TronGrid REST API. Returns a compact summary per transfer with token info. Use a small limit and paginate with fingerprint to control response size
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
is_transaction_pendingCheck if a specific transaction is still in the pending pool (mempool)Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check if a specific transaction is still in the pending pool (mempool)
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
list_contract_methodsGet a human-readable summary of a smart contract's methods with signatures, inputs, outputs, and mutability.Reads text others write1 finding
Why it is in this group
- The name "list_contract_methods" says "list": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "list_contract_methods" destructive (destructiveHint: true), and its name says "list", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "list_contract_methods" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
Get a human-readable summary of a smart contract's methods with signatures, inputs, outputs, and mutability. Auto-resolves proxy contracts.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
list_proposalsList governance proposals on the TRON network with pagination support.Reads text others write1 finding
Why it is in this group
- The name "list_proposals" says "list": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "list_proposals" destructive (destructiveHint: true), and its name says "list", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "list_proposals" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
List governance proposals on the TRON network with pagination support. Returns a compact summary per proposal (use get_proposal for full details including approval addresses). Newest first by default.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
list_witnessesList super representatives (witnesses) on the TRON network with pagination support.Reads text others write1 finding
Why it is in this group
- The name "list_witnesses" says "list": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "list_witnesses" destructive (destructiveHint: true), and its name says "list", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "list_witnesses" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
List super representatives (witnesses) on the TRON network with pagination support.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
revoke_approvalBuild unsigned transaction to revoke a TRC20 token approval (sets allowance to 0)Reads text others writeNo findings
Why it is in this group
- The name "revoke_approval" says "revoke": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Build unsigned transaction to revoke a TRC20 token approval (sets allowance to 0)
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
transfer_trc20Create an unsigned TRC20 token transfer transaction.Reads text others writeNo findings
Why it is in this group
- The name "transfer_trc20" says "transfer": a word for a change that another call does not undo.
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Create an unsigned TRC20 token transfer transaction. Returns transaction hex for signing.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
transfer_trxCreate an unsigned TRX transfer transaction.Reads text others writeNo findings
Why it is in this group
- The name "transfer_trx" says "transfer": a word for a change that another call does not undo.
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Create an unsigned TRX transfer transaction. Returns transaction hex for signing.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
trigger_constant_contractCall a read-only (view/pure) smart contract method.Reads text others writeNo findings
Why it is in this group
- The name "trigger_constant_contract" says "trigger": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Call a read-only (view/pure) smart contract method. No transaction created, no fees. Returns decoded result. Provide either method+params OR data (pre-packed calldata).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
trigger_contractCall a smart contract method.Reads text others writeNo findings
Why it is in this group
- The name "trigger_contract" says "trigger": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Call a smart contract method. Returns unsigned transaction hex for signing. Provide either method+params OR data (pre-packed calldata).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
undelegate_resourceReclaim previously delegated energy or bandwidth (Stake 2.0).Reads text others writeNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Reclaim previously delegated energy or bandwidth (Stake 2.0). Returns unsigned transaction hex for signing.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
unfreeze_balanceUnstake TRX (Stake 2.0).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Unstake TRX (Stake 2.0). Returns unsigned transaction hex for signing. Note: unstaked TRX has a 14-day withdrawal period.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
validate_addressValidate a TRON address and convert supported inputs to TRON base58/hex.Reads text others write1 finding
Why it is in this group
- The name "validate_address" says "validate": a word for reading.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "validate_address" destructive (destructiveHint: true), and its name says "validate", a word for reading.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":true,"idempotentHint":false,"openWorldHint":true}; The name "validate_address" says "validate": a word for reading.
  What this check looks for
Description, as the server wrote it
Validate a TRON address and convert supported inputs to TRON base58/hex. Accepts base58 (T...), TRON hex (41...), or Ethereum/EVM format (0x...).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
vote_witnessVote for super representatives.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Vote for super representatives. Returns unsigned transaction hex for signing. Requires staked TRX (1 TRX staked = 1 vote).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
withdraw_expire_unfreezeWithdraw TRX that has completed the 14-day unstaking period (Stake 2.0).Reads text others writeNo findings
Why it is in this group
- The name "withdraw_expire_unfreeze" says "withdraw": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Withdraw TRX that has completed the 14-day unstaking period (Stake 2.0). Returns unsigned transaction hex for signing.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write44: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; analyze_account
analyze_transfer_cost
decode_abi_output
delegate_resource
estimate_energy
estimate_trc20_energy
freeze_balance
get_account
get_account_permissions
get_account_resources
get_bandwidth_prices
get_block
and 32 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:59 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 44
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: none
Authorization servers: none
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

HighThe whole server
The endpoint served tools/list without credentials, and the list has 44 tools that change things (44 destructive). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://mcp.gotron.sh/mcp: tools/list returned 44 tools to an anonymous client, including analyze_account (destructive), analyze_transfer_cost (destructive), decode_abi_output (destructive), delegate_resource (destructive), estimate_energy (destructive) and 39 more
What this check looks for

Install

Pinned to version 0.4.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http gotron https://mcp.gotron.sh/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [],
    "ask": [],
    "deny": [
      "mcp__gotron__analyze_account",
      "mcp__gotron__analyze_transfer_cost",
      "mcp__gotron__decode_abi_output",
      "mcp__gotron__delegate_resource",
      "mcp__gotron__estimate_energy",
      "mcp__gotron__estimate_trc20_energy",
      "mcp__gotron__freeze_balance",
      "mcp__gotron__get_account",
      "mcp__gotron__get_account_permissions",
      "mcp__gotron__get_account_resources",
      "mcp__gotron__get_bandwidth_prices",
      "mcp__gotron__get_block",
      "mcp__gotron__get_chain_parameters",
      "mcp__gotron__get_contract_abi",
      "mcp__gotron__get_contract_events",
      "mcp__gotron__get_delegatable_amount",
      "mcp__gotron__get_delegated_resources",
      "mcp__gotron__get_energy_prices",
      "mcp__gotron__get_network",
      "mcp__gotron__get_pending_by_address",
      "mcp__gotron__get_pending_transactions",
      "mcp__gotron__get_pq_capabilities",
      "mcp__gotron__get_proposal",
      "mcp__gotron__get_token_price",
      "mcp__gotron__get_transaction",
      "mcp__gotron__get_transaction_history",
      "mcp__gotron__get_trc20_allowance",
      "mcp__gotron__get_trc20_balance",
      "mcp__gotron__get_trc20_token_info",
      "mcp__gotron__get_trc20_transfers",
      "mcp__gotron__is_transaction_pending",
      "mcp__gotron__list_contract_methods",
      "mcp__gotron__list_proposals",
      "mcp__gotron__list_witnesses",
      "mcp__gotron__revoke_approval",
      "mcp__gotron__transfer_trc20",
      "mcp__gotron__transfer_trx",
      "mcp__gotron__trigger_constant_contract",
      "mcp__gotron__trigger_contract",
      "mcp__gotron__undelegate_resource",
      "mcp__gotron__unfreeze_balance",
      "mcp__gotron__validate_address",
      "mcp__gotron__vote_witness",
      "mcp__gotron__withdraw_expire_unfreeze"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as gotron. Review it before you use it.

Capability tags behind 44 rules

mcp__gotron__analyze_account untrusted-input
mcp__gotron__analyze_transfer_cost untrusted-input
mcp__gotron__decode_abi_output untrusted-input
mcp__gotron__delegate_resource untrusted-input
mcp__gotron__estimate_energy untrusted-input
mcp__gotron__estimate_trc20_energy untrusted-input
mcp__gotron__freeze_balance untrusted-input
mcp__gotron__get_account untrusted-input
mcp__gotron__get_account_permissions untrusted-input
mcp__gotron__get_account_resources untrusted-input
mcp__gotron__get_bandwidth_prices untrusted-input
mcp__gotron__get_block untrusted-input
mcp__gotron__get_chain_parameters untrusted-input
mcp__gotron__get_contract_abi untrusted-input
mcp__gotron__get_contract_events untrusted-input
mcp__gotron__get_delegatable_amount untrusted-input
mcp__gotron__get_delegated_resources untrusted-input
mcp__gotron__get_energy_prices untrusted-input
mcp__gotron__get_network untrusted-input
mcp__gotron__get_pending_by_address untrusted-input
mcp__gotron__get_pending_transactions untrusted-input
mcp__gotron__get_pq_capabilities untrusted-input
mcp__gotron__get_proposal untrusted-input
mcp__gotron__get_token_price untrusted-input
mcp__gotron__get_transaction untrusted-input
mcp__gotron__get_transaction_history untrusted-input
mcp__gotron__get_trc20_allowance untrusted-input
mcp__gotron__get_trc20_balance untrusted-input
mcp__gotron__get_trc20_token_info untrusted-input
mcp__gotron__get_trc20_transfers untrusted-input
mcp__gotron__is_transaction_pending untrusted-input
mcp__gotron__list_contract_methods untrusted-input
mcp__gotron__list_proposals untrusted-input
mcp__gotron__list_witnesses untrusted-input
mcp__gotron__revoke_approval untrusted-input
mcp__gotron__transfer_trc20 untrusted-input
mcp__gotron__transfer_trx untrusted-input
mcp__gotron__trigger_constant_contract untrusted-input
mcp__gotron__trigger_contract untrusted-input
mcp__gotron__undelegate_resource untrusted-input
mcp__gotron__unfreeze_balance untrusted-input
mcp__gotron__validate_address untrusted-input
mcp__gotron__vote_witness untrusted-input
mcp__gotron__withdraw_expire_unfreeze untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.fbsobreira/gotron-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

44 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:34 UTC.

For agents: Markdown · JSON · report this listing