This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Summary
AI summaryEstimated network fees are now shown before pre‑sign checks.
Full changelog
Highlights
- Pre-sign UX — estimated network fee surfaced before pre-sign checks (#648); SCOPE + AGENT BEHAVIOR clauses on data-surfacing tools (#646); Safe API key visible in
get_vaultpilot_config_status(#644). - Bug fixes —
read_contractEXECUTOR_ROLE hash typo corrected (#634); Safe STS submit errors enriched with diagnostic read probe (#635); skill-pin bumped to v15 (#653). - Docs — AGENTS.md Step 0 reframed as hard refusal gate (#642); Step 2 restructured as per-client router (#643).
- Tooling — per-conversation MCP static-surface token-cost benchmark (#647).
Included PRs
- #634 fix(read_contract): correct EXECUTOR_ROLE hash in description and test fixture
- #635 fix(safe): enrich opaque STS submit errors with diagnostic read probe
- #642 docs(agents): reframe Step 0 as hard refusal gate (MUST / MUST NOT)
- #643 docs(agents): restructure Step 2 as per-client router with heading-anchored subsections
- #644 feat(diagnostics): surface Safe API key in get_vaultpilot_config_status
- #646 Add SCOPE + AGENT BEHAVIOR clauses to data-surfacing tools (#599)
- #647 feat(bench): measure per-conversation MCP tool static-surface token cost
- #648 feat(prepare): surface estimated network fee before pre-sign checks
- #653 fix(skill-pin): bump to v15
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About szhygulin/recon-crypto-mcp
Self-custodial crypto portfolio for AI agents. Reads EVM wallet balances, ENS, token prices, and DeFi positions across Ethereum/Arbitrum/Polygon/Base (Aave V3, Compound V3, Morpho Blue, Uniswap V3 LP, Lido, EigenLayer), surfaces health-factor alerts and protocol risk scores, then prepares unsigned transactions (supply, borrow, repay, withdraw, stake, send, LiFi swap/bridge) signed on Ledger via WalletConnect — private keys never leave the hardware wallet.
Related context
Beta — feedback welcome: [email protected]