This release includes 5 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
Summary
AI summaryProject renamed from recon-crypto-mcp to vaultpilot-mcp requiring migration of config dir, env vars, and CLI binaries.
Full changelog
Highlights
Renamed from recon-crypto-mcp to vaultpilot-mcp.
- npm package:
recon-crypto-mcp→vaultpilot-mcp - CLI binaries:
recon-crypto-mcp/recon-crypto-mcp-setup→vaultpilot-mcp/vaultpilot-mcp-setup - MCP name:
io.github.szhygulin/recon-crypto-mcp→io.github.szhygulin/vaultpilot-mcp - GitHub repo renamed (old URLs redirect automatically)
Migration
- User config dir:
~/.recon-crypto-mcp→~/.vaultpilot-mcp. On first run, the new code reads the legacy dir if the new one doesn't exist; on first write it copies the legacy dir to the new location. Existing WalletConnect pairing state (walletconnect.db) carries over untouched. - Env vars:
RECON_*→VAULTPILOT_*(RECON_ALLOW_INSECURE_RPC,RECON_FEEDBACK_ENDPOINT,RECON_FEEDBACK_STATE_FILE). Old names are still honored for one release. - Claude Desktop config: update
command/mcpServerskey fromrecon-crypto-mcptovaultpilot-mcp, thennpm install -g vaultpilot-mcp.
Included PRs
- #26 Rename project to vaultpilot-mcp
- #27 Bump version to 0.4.0
Functional feature parity with v0.3.1 — no new tools, no protocol changes. TRON Phase 3 (USB HID Ledger signing) ships next in v0.4.1 via #25.
Breaking Changes
- Package name changed from `recon-crypto-mcp` to `vaultpilot-mcp` in npm
- CLI binaries renamed: `recon-crypto-mcp` → `vaultpilot-mcp`, `recon-crypto-mcp-setup` → `vaultpilot-mcp-setup`
- MCP name updated from `io.github.szhygulin/recon-crypto-mcp` to `io.github.szhygulin/vaultpilot-mcp`
- User config directory migrated from `~/.recon-crypto-mcp` to `~/.vaultpilot-mcp`
- Environment variables renamed from `RECON_*` to `VAULTPILOT_*` (legacy names honored only for one release)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About szhygulin/recon-crypto-mcp
Self-custodial crypto portfolio for AI agents. Reads EVM wallet balances, ENS, token prices, and DeFi positions across Ethereum/Arbitrum/Polygon/Base (Aave V3, Compound V3, Morpho Blue, Uniswap V3 LP, Lido, EigenLayer), surfaces health-factor alerts and protocol risk scores, then prepares unsigned transactions (supply, borrow, repay, withdraw, stake, send, LiFi swap/bridge) signed on Ledger via WalletConnect — private keys never leave the hardware wallet.
Related context
Beta — feedback welcome: [email protected]