# io.github.0x-devc/novai-mcp-server (npm · novai-mcp-server)

Read-only MCP server for querying the live NOVAI blockchain over its public JSON-RPC endpoint.

- Trust score: 69/100 (medium)
- Change this week: +43
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `novai-mcp-server`: 69/100 (this document), [markdown](https://verifymcp.io/servers/0x-devc-novai-mcp-server/novai-mcp-server.md), [page](https://verifymcp.io/servers/0x-devc-novai-mcp-server/novai-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `novai-mcp-server`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 86/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 47 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1229 tokens (~102/item across 12 items; 12 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add 0x-devc-novai-mcp-server -- npx -y novai-mcp-server
```

### Codex

```bash
codex mcp add 0x-devc-novai-mcp-server -- npx -y novai-mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "0x-devc-novai-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "novai-mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add 0x-devc-novai-mcp-server --command npx --arg -y --arg novai-mcp-server
```

### Hermes

```yaml
mcp_servers:
  0x-devc-novai-mcp-server:
    command: "npx"
    args: ["-y", "novai-mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "0x-devc-novai-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "novai-mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 69, +33)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional] Licence: MIT

### 2026-07-31 (score 36, +30)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −74)

- [security regression] Known CVEs: partial → unverified
- [security regression] Malware scan: pass → unverified
- [security regression] Provenance: fail → unverified
- [security regression] Install scripts: pass → unverified
- [functional regression] License: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Dependency health: partial → unverified
- [functional regression] Maintenance: pass → unverified
- [functional] Licence: MIT

### 2026-07-28 (score 80, +54)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] License: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: pass
- [functional] First check of Schema quality: excellent
- [functional] First check of Schema quality: fail
- [functional] Licence: MIT

### 2026-07-27 (score 26)

First indexed and scored.

## MCP tools (12)

### `novai_get_chain_status` (~69 tokens)

NOVAI chain status

Return the latest committed block of the live NOVAI chain: its height, block hash, round, transaction count, state root, and parent hash. Use this to verify the chain is live and advancing, and to learn the current tip height before requesting a specific block. Takes no parameters.

### `novai_get_block` (~140 tokens)

NOVAI block by height or hash

Fetch a single committed block by height or by hash. Provide exactly one of height or hash. Returns the block height, block hash, parent hash, round, state root, and transaction count, or null if no such block is known. Note: the endpoint retains a bounded recent window of blocks by height, so very old heights can return null even though they were valid blocks. Lookups by hash work for any block the node still indexes.

Input parameters:

- `hash` (string): Block hash, 64 hex characters. Provide either height or hash, not both.
- `height` (integer): Block height. Provide either height or hash, not both.

### `novai_get_transaction` (~62 tokens)

NOVAI transaction by id

Fetch a confirmed transaction by its transaction id. Returns the block height, transaction index, sender address, nonce, fee, and payload length, or null if the transaction is not found.

Input parameters:

- `txid` (string, required): Transaction id, 64 hex characters.

### `novai_get_ai_entity` (~81 tokens)

NOVAI AI entity by id

Fetch an on-chain AI entity (agent) by its entity id. Returns the entity record including code hash, creator, autonomy mode, capability bits, economic and stake balances, reputation score, transaction count, and activity timestamps, or null if no entity exists for that id.

Input parameters:

- `entity_id` (string, required): Entity id, 64 hex characters.

### `novai_get_balance` (~51 tokens)

NOVAI account balance

Fetch the balance and nonce for an account or entity address. The balance is returned as a decimal string to preserve full precision.

Input parameters:

- `address` (string, required): Account or entity address, 64 hex characters.

### `novai_get_signals_by_height` (~67 tokens)

NOVAI signals at a block height

List the signal commitments recorded at a specific block height. Each entry has a commitment hash, a numeric signal type, the height, and the issuer. Use this to see which signals were committed in a given block.

Input parameters:

- `height` (integer, required): Block height to query.

### `novai_get_signals_by_issuer` (~91 tokens)

NOVAI signals by issuer

List the signal commitments issued by a given entity within a block height range. Returns commitment hash, signal type, height, and issuer for each.

Input parameters:

- `end_height` (integer, required): Last block height in the range, inclusive.
- `issuer` (string, required): Issuer entity id, 64 hex characters.
- `start_height` (integer, required): First block height in the range, inclusive.

### `novai_get_signals_by_type` (~137 tokens)

NOVAI signals by type

List the signal commitments of a given type within a block height range. The endpoint currently accepts these signal type codes: 0 Anomaly, 1 Optimization, 2 Prediction, 3 RiskScore, 4 AuditReport, 5 SpamRisk, 6 CongestionForecast. Returns commitment hash, signal type, height, and issuer for each.

Input parameters:

- `end_height` (integer, required): Last block height in the range, inclusive.
- `signal_type` (integer, required): Signal type code. The endpoint currently accepts 0 through 6.
- `start_height` (integer, required): First block height in the range, inclusive.

### `novai_get_oracle_anchor` (~70 tokens)

NOVAI oracle anchor by signal hash

Fetch a single oracle anchor by its signal hash. Returns the issuer entity, data hash, external timestamp, source hash, expiry and anchor heights, and data tag, or null if no anchor exists for that hash.

Input parameters:

- `signal_hash` (string, required): Signal hash, 64 hex characters.

### `novai_get_oracle_anchors_by_entity` (~138 tokens)

NOVAI oracle anchors by issuer entity

List oracle anchors issued by a given entity within a block height range, optionally filtered by an external timestamp range. Returns issuer entity, data hash, external timestamp, source hash, expiry and anchor heights, and data tag for each.

Input parameters:

- `end_height` (integer, required): Last block height in the range, inclusive.
- `entity_id` (string, required): Issuer entity id, 64 hex characters.
- `start_height` (integer, required): First block height in the range, inclusive.
- `ts_max` (integer): Optional highest external timestamp to include.
- `ts_min` (integer): Optional lowest external timestamp to include.

### `novai_get_oracle_anchors_by_tag` (~133 tokens)

NOVAI oracle anchors by data tag

List oracle anchors carrying a given data tag within a block height range, optionally filtered by an external timestamp range. Returns issuer entity, data hash, external timestamp, source hash, expiry and anchor heights, and data tag for each.

Input parameters:

- `data_tag` (string, required): Data tag to match.
- `end_height` (integer, required): Last block height in the range, inclusive.
- `start_height` (integer, required): First block height in the range, inclusive.
- `ts_max` (integer): Optional highest external timestamp to include.
- `ts_min` (integer): Optional lowest external timestamp to include.

### `novai_get_memory_objects` (~149 tokens)

NOVAI memory objects by entity

List the on-chain memory objects owned by an entity. Each object has an object id, a numeric object type, owner, creation and update heights, and hex encoded data. Object type codes: 0 ChainSummary, 1 LabelIndex, 2 EmbeddingCommitment, 3 AnomalyLog, 4 StatisticsSnapshot, 5 ReputationEvent, 6 Rating, 7 SignalCatalog, 8 CompositionGraph, 9 VerificationRecord, 10 DelegationGrant, 11 Subscription, 12 ServiceDescriptor, 13 VkRegistration, 14 SlaAgreement, 15 PaymentChannel.

Input parameters:

- `entity_id` (string, required): Owner entity id, 64 hex characters.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/0x-devc-novai-mcp-server/novai-mcp-server#diagnostics

## Score history

- 2026-08-03: 69
- 2026-08-02: 69
- 2026-08-01: 36
- 2026-07-31: 36
- 2026-07-30: 6
- 2026-07-29: 80
- 2026-07-28: 80
- 2026-07-27: 26

## Links

- npm package: https://www.npmjs.com/package/novai-mcp-server
- Socket report: https://socket.dev/npm/package/novai-mcp-server
- Repository: https://github.com/0x-devc/novai-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/0x-devc-novai-mcp-server/novai-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/0x-devc-novai-mcp-server/novai-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/0x-devc-novai-mcp-server/novai-mcp-server