Penumbra MCP Server
The Penumbra MCP Server enables privacy-preserving interactions with the Penumbra blockchain, providing tools for querying public blockchain data and state:
Query Validator Set: Retrieve current validator set information
Check Chain Status: Get current chain height and chain ID
Fetch Transaction Details: Look up specific transactions by hash
Monitor DEX State: Retrieve current DEX state including latest batch auction results
List Governance Proposals: Get active governance proposals with optional status filtering
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Penumbra MCP Servershow me the current validator set"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Penumbra MCP Server
An MCP server providing tools for interacting with the Penumbra blockchain. This server enables privacy-preserving interactions with Penumbra's core features including transaction queries, validator set information, DEX state, and governance proposals.
Features
Current Tools
get_validator_set: Get the current validator set informationget_chain_status: Get current chain status including block height and chain IDget_transaction: Get details of a specific transactionget_dex_state: Get current DEX state including latest batch auction resultsget_governance_proposals: Get active governance proposals
Planned Features
Transaction submission
Private staking operations
DEX trading (sealed-bid batch auctions)
Private governance voting
Liquidity position management
Related MCP server: Beeper MCP
Installation
You can install the package via npm:
npm install @timeheater/penumbra-mcpOr using yarn:
yarn add @timeheater/penumbra-mcpSetup
Local Development from Source
Install dependencies:
npm installBuild the server:
npm run buildRun in development mode:
npm run watchClaude Desktop Integration
To integrate with Claude desktop, add the following configuration to your Claude desktop settings file (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"penumbra-mcp": {
"command": "node",
"args": ["/Users/barton/infinity-topos/penumbra-mcp/build/index.js"],
"env": {
"PENUMBRA_NODE_URL": "https://rpc.penumbra.zone",
"PENUMBRA_NETWORK": "mainnet",
"PENUMBRA_CHAIN_ID": "penumbra-1",
"PENUMBRA_REQUEST_TIMEOUT": "30000",
"PENUMBRA_REQUEST_RETRIES": "5",
"PENUMBRA_BLOCK_TIME": "6000",
"PENUMBRA_EPOCH_DURATION": "100",
"PENUMBRA_DEX_BATCH_INTERVAL": "60000",
"PENUMBRA_DEX_MIN_LIQUIDITY": "1000",
"PENUMBRA_DEX_MAX_PRICE_IMPACT": "0.05",
"PENUMBRA_GOVERNANCE_VOTING_PERIOD": "1209600000",
"PENUMBRA_GOVERNANCE_MIN_DEPOSIT": "100000"
}
}
}
}Replace /path/to/penumbra-mcp with the actual path where you've installed the server.
Using the MCP Server
Once configured, you can interact with Penumbra through Claude using the following tools:
Query validator set:
Tell Claude: "Show me the current Penumbra validator set"Check chain status:
Tell Claude: "What's the current status of the Penumbra chain?"Get transaction details:
Tell Claude: "Look up Penumbra transaction [HASH]"View DEX state:
Tell Claude: "Show me the current Penumbra DEX state"List governance proposals:
Tell Claude: "List active Penumbra governance proposals"Development
npm run watch: Watch mode for developmentnpm run inspector: Run MCP inspector for testingnpm test: Run test suite
Environment Variables
Node Configuration
PENUMBRA_NODE_URL: URL of the Penumbra node (default: https://rpc.penumbra.zone)PENUMBRA_REQUEST_TIMEOUT: HTTP request timeout in milliseconds (default: 30000)PENUMBRA_REQUEST_RETRIES: Number of request retries (default: 5)
Chain Configuration
PENUMBRA_NETWORK: Network to connect to (default: mainnet)PENUMBRA_CHAIN_ID: Chain ID (default: penumbra-1)PENUMBRA_BLOCK_TIME: Block time in milliseconds (default: 6000)PENUMBRA_EPOCH_DURATION: Number of blocks per epoch (default: 100)
DEX Configuration
PENUMBRA_DEX_BATCH_INTERVAL: Batch auction interval in milliseconds (default: 60000)PENUMBRA_DEX_MIN_LIQUIDITY: Minimum liquidity amount (default: 1000)PENUMBRA_DEX_MAX_PRICE_IMPACT: Maximum price impact as decimal (default: 0.05)
Governance Configuration
PENUMBRA_GOVERNANCE_VOTING_PERIOD: Voting period duration in milliseconds (default: 1209600000 - 14 days)PENUMBRA_GOVERNANCE_MIN_DEPOSIT: Minimum proposal deposit amount (default: 100000)
Architecture
The server is built using TypeScript and implements the Model Context Protocol (MCP) for standardized tool interfaces. It currently provides mock implementations for core functionality, with plans to integrate directly with Penumbra's client libraries and node API endpoints.
Privacy Considerations
All interactions respect Penumbra's privacy-preserving design:
Shielded transactions
Private staking operations
Sealed-bid batch auctions
Anonymous governance voting
Contributing
Contributions are welcome! Please feel free to submit a Pull Request.
License
ISC
Available Tools
5 toolsget_chain_statusB
Get current chain status including block height and chain ID
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the tool retrieves information ('Get'), implying a read-only operation, but doesn't clarify aspects like whether it requires authentication, has rate limits, returns real-time or cached data, or what happens on errors. For a tool with zero annotation coverage, this is a significant gap in transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the purpose ('Get current chain status') and adds specifics ('including block height and chain ID'). There is no wasted verbiage or redundancy, making it highly concise and well-structured for quick comprehension.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (0 parameters, no annotations, no output schema), the description is adequate for a basic read operation. It specifies what information is retrieved, which helps the agent understand the output. However, without annotations or an output schema, it lacks details on behavioral traits (e.g., error handling) and return format, leaving some gaps in completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has 0 parameters, and schema description coverage is 100%, so there are no parameters to document. The description doesn't need to add parameter semantics, but it correctly indicates no inputs are required. Baseline is 4 for zero parameters, as the description aligns with the schema's lack of inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Get') and the resource ('current chain status'), specifying what information is included ('block height and chain ID'). It distinguishes from siblings like get_dex_state or get_transaction by focusing on chain-level metadata rather than DEX data, governance, or specific transactions. However, it doesn't explicitly contrast with all siblings (e.g., get_validator_set).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance is provided on when to use this tool versus alternatives. The description implies usage for retrieving chain metadata, but it doesn't state when to prefer this over other tools (e.g., for checking chain health vs. querying transactions) or mention any prerequisites. This leaves the agent to infer context from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_dex_stateB
Get current DEX state including latest batch auction results
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the tool retrieves data ('Get'), implying a read-only operation, but doesn't specify whether it requires authentication, has rate limits, or what format the results are in. This leaves significant gaps for a tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core purpose without any wasted words. It's appropriately sized for a zero-parameter tool and earns its place by clearly stating what the tool does.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (0 parameters, no output schema, no annotations), the description is adequate but has clear gaps. It explains what data is retrieved but doesn't cover behavioral aspects like authentication or result format, making it minimally viable for this context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has 0 parameters, and the schema description coverage is 100%, so there's no need for parameter documentation in the description. The baseline for this scenario is 4, as the description appropriately avoids redundant parameter details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with a specific verb ('Get') and resource ('current DEX state including latest batch auction results'), making it immediately understandable. However, it doesn't explicitly differentiate from sibling tools like get_chain_status or get_governance_proposals, which prevents a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like get_chain_status or get_transaction. It lacks explicit context about use cases, prerequisites, or exclusions, leaving the agent to infer usage based on the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_governance_proposalsC
Get active governance proposals
| Name | Required | Description | Default |
|---|---|---|---|
| status | No | Filter proposals by status | active |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. While 'Get' implies a read operation, it doesn't specify whether this requires authentication, has rate limits, returns paginated results, or what format the output takes. The description is minimal and lacks essential operational details for a tool that likely interacts with governance systems.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise—just three words—and front-loaded with the core action. There is zero wasted language, making it efficient for quick comprehension. However, this conciseness comes at the cost of completeness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations and output schema, the description is insufficient for a governance tool. It doesn't explain what 'governance proposals' entail, what data is returned, or any behavioral traits. For a tool that likely returns structured governance data, more context is needed to guide effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 100%, with the single parameter 'status' fully documented in the schema (including enum values and default). The description mentions 'active' proposals, which aligns with the default value but doesn't add any semantic context beyond what the schema provides. Baseline 3 is appropriate when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Get') and resource ('active governance proposals'), making the purpose immediately understandable. It specifies the scope ('active') which helps distinguish it from other governance-related tools that might exist, though no direct siblings exist in the provided list. However, it doesn't explicitly differentiate from hypothetical alternatives like 'get_all_governance_proposals' or 'get_proposal_details'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention any prerequisites, dependencies, or scenarios where this tool is preferred over others. With no sibling tools directly overlapping in function, this is less critical, but still a gap in usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_transactionC
Get details of a specific transaction
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | Transaction hash |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It states the tool retrieves details but doesn't disclose behavioral traits like error handling, rate limits, authentication needs, or what 'details' include (e.g., status, timestamps). This leaves significant gaps for agent understanding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with zero waste. It's appropriately sized and front-loaded, directly stating the tool's purpose without unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations and no output schema, the description is incomplete. It doesn't explain what 'details' entail or potential behavioral aspects, making it inadequate for a tool that likely returns complex transaction data, leaving the agent with insufficient context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description doesn't add meaning beyond the input schema, which has 100% coverage and clearly documents the 'hash' parameter. With high schema coverage, the baseline is 3, as the schema adequately handles parameter semantics without extra description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Get') and resource ('details of a specific transaction'), making the purpose understandable. However, it doesn't differentiate this tool from potential sibling tools that might also retrieve transaction data, as none are listed among the siblings provided.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites, context, or exclusions, such as whether it's for confirmed transactions only or if other tools handle batch queries.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_validator_setB
Get the current validator set information
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It states it 'gets' information (implying a read operation) but doesn't specify whether this requires authentication, has rate limits, returns real-time or cached data, or what format the information comes in. For a tool with zero annotation coverage, this leaves significant behavioral gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that communicates the core purpose without any wasted words. It's appropriately sized for a simple read operation and is front-loaded with the essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations and output schema, the description is insufficiently complete. It doesn't explain what 'validator set information' includes, whether it's paginated, how current 'current' is, or what the return format looks like. For a tool that presumably returns structured data about validators, more context is needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has 0 parameters with 100% schema description coverage, so the schema already fully documents the parameter situation. The description appropriately doesn't mention parameters since none exist, which is correct. Baseline would be 4 for 0-parameter tools that don't mislead about parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Get') and the resource ('current validator set information'), making the purpose immediately understandable. It doesn't distinguish from sibling tools like get_chain_status or get_governance_proposals, but the verb+resource combination is specific enough for basic understanding.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like get_chain_status or get_dex_state. There's no mention of context, prerequisites, or exclusions, leaving the agent to infer usage based on tool names alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v1.0.0- First observed
get_chain_status - First observed
get_dex_state - First observed
get_governance_proposals - First observed
get_transaction - First observed
get_validator_set
TDQS
Each tool has a clearly distinct purpose targeting different resources: chain status, DEX state, governance proposals, transactions, and validator set. There is no overlap or ambiguity between them, making it easy for an agent to select the correct tool.
All tool names follow a consistent verb_noun pattern with 'get_' prefix and snake_case, such as get_chain_status and get_dex_state. This predictability enhances readability and usability for agents.
With 5 tools, the server is well-scoped for its apparent blockchain/DeFi domain. Each tool earns its place by covering key aspects like status, DEX, governance, transactions, and validators without being too sparse or bloated.
The toolset provides read-only access to various blockchain data, but there are notable gaps for a full DeFi lifecycle, such as creating transactions, voting on proposals, or interacting with the DEX. Agents can retrieve information but may struggle with write operations.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Read-only THORChain swap quotes, liquidity pools, and network status.
Hosted MCP server for live Bittensor chain reads and self-custodial on-chain writes.
Safety-first EVM and Bitcoin RPC tools for balances, contracts, blocks, and transactions
Tenzro Network MCP server: wallet, identity, payments, inference, staking, bridges, verification.
Related MCP Servers
- AlicenseBqualityDmaintenanceProvides access to Mina blockchain data, enabling queries for events, actions, and network state information through a standardized interface.319MIT
- FlicenseNot gradedqualityDmaintenanceEnables blockchain transactions on BSC including balance checks, transfers, token swaps, and reward claims.3-
- FlicenseNot gradedqualityDmaintenanceEnables read and write access to the Celo blockchain including balance checks, token transfers, swaps, agent identity (ERC-8004), and x402 micropayments, returning unsigned transactions for user signing.-
- AlicenseNot gradedqualityCmaintenanceEnables interaction with Kaspa blockchain nodes via RPC, providing tools for querying node info, block data, addresses, balances, UTXOs, and mempool transactions.1MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/bmorphism/penumbra-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server