JustLend MCP
Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology
- Install20/20
- Handshake30/30
- Maintenance25/25
- Docs15/15
- License10/10
Tested npm @justlend/mcp-server-justlend 1.1.3 (MIT; repo justlend/mcp-server-justlend, 3 GitHub stars when checked). Stdio, 104 tools for the JustLend DAO lending protocol on TRON. Real read calls on mainnet with no wallet: get_supported_markets, get_protocol_summary and get_proposal_list returned data (the first proposal-list attempt hit HTTP 429 from the public API and passed on a rerun about a minute later). get_network is a self-check. Many tools move funds (supply, borrow, repay, transfer, vote) once a wallet is configured; none were called and no wallet was set.
Tool-call test (2026-11-11, direct MCP stdio client, no LLM): pass. 3 of 3 read function calls passed (plus 1 self-check). Fund-moving tools not called; no wallet configured. Evidence: local test run, Nov 11, 2026.
Transport (tested 2026-11-11): stdio
Token cost (estimate): approx. 17553 tokens, cl100k estimate (104 tools, measured 2026-11-11, version 1.1.3). This is an estimate from our testing of the tool names, descriptions and input schemas, counted with cl100k_base.
Permissions: 63 read, 41 write (state-changing), 0 unclassified · Auth: none · Rate limit: unknown · Pricing unit: unknown
Auth: none. Rate limit: unknown. Pricing unit: unknown.
approve_jst_for_voting— write (state-changing)approve_liquidator_token— write (state-changing)approve_moolah_proxy— write (state-changing)approve_moolah_vault— write (state-changing)approve_underlying— write (state-changing)borrow— write (state-changing)buy_energy_direct— write (state-changing)calculate_energy_rental_price— readcast_vote— write (state-changing)check_allowance— readcheck_jst_allowance_for_voting— readcheck_strx_withdrawal_eligibility— readclaim_moolah_mining_period— write (state-changing)claim_rewards— write (state-changing)claim_strx_rewards— write (state-changing)claim_v1_mining_period— write (state-changing)connect_browser_wallet— write (state-changing)deposit_jst_for_votes— write (state-changing)enter_market— write (state-changing)estimate_lending_energy— readestimate_moolah_energy— readexit_market— write (state-changing)get_account_summary— readget_all_markets— readget_claimable_rewards— readget_energy_payment_risk— readget_energy_purchase_config— readget_energy_purchase_history— readget_energy_purchase_order— readget_energy_rent_info— readget_energy_rental_dashboard— readget_energy_rental_params— readget_energy_rental_rate— readget_energy_rental_records— readget_lending_records— readget_liquidation_records— readget_locked_votes— readget_market_data— readget_mining_rewards— readget_moolah_dashboard— readget_moolah_history— readget_moolah_liquidation_quote— readget_moolah_liquidation_records— readget_moolah_market— readget_moolah_market_history— readget_moolah_markets— readget_moolah_mining_accruing— readget_moolah_mining_resolver— readget_moolah_pending_liquidations— readget_moolah_pending_mining_periods— readget_moolah_records— readget_moolah_user_position— readget_moolah_vault— readget_moolah_vault_history— readget_moolah_vault_mining_apy— readget_moolah_vaults— readget_network— readget_proposal_list— readget_protocol_summary— readget_return_rental_info— readget_strx_account— readget_strx_balance— readget_strx_dashboard— readget_strx_records— readget_supported_markets— readget_supported_networks— readget_token_balance— readget_trx_balance— readget_usdd_mining_config— readget_user_energy_rental_orders— readget_user_vote_status— readget_vote_info— readget_vote_records— readget_wallet_address— readget_wallet_balances— readget_wallet_mode— readget_wbtc_mining_config— readlist_wallets— readmoolah_borrow— write (state-changing)moolah_liquidate— write (state-changing)moolah_repay— write (state-changing)moolah_supply_collateral— write (state-changing)moolah_vault_deposit— write (state-changing)moolah_vault_redeem— write (state-changing)moolah_vault_withdraw— write (state-changing)moolah_withdraw_collateral— write (state-changing)quote_energy_purchase— readrent_energy— write (state-changing)repay— write (state-changing)return_energy_rental— write (state-changing)set_active_wallet— write (state-changing)set_network— write (state-changing)set_wallet_mode— write (state-changing)stake_trx_to_strx— write (state-changing)supply— write (state-changing)transfer_trc20— write (state-changing)transfer_trx— write (state-changing)unstake_strx— write (state-changing)unwrap_trx— write (state-changing)withdraw— write (state-changing)withdraw_all— write (state-changing)withdraw_votes_from_proposal— write (state-changing)withdraw_votes_to_jst— write (state-changing)wrap_trx— write (state-changing)
handshake and tools listed without a recorded key or OAuth
Score 100/100 · Tools 104 · Token cost approx. 17,553 tokens · Compare · Last tested 2026-11-11 · Version tested 1.1.3 · Package @justlend/mcp-server-justlend · Repo justlend/mcp-server-justlend
Summary: JustLend MCP completed an MCP handshake without credentials and exposed 104 tools.
Evidence summary
- Handshake
- pass
- Tools listed
- 104
- Context cost
- approx. 17553 tokens, cl100k estimate (104 tools, measured 2026-11-11, version 1.1.3; an estimate) ranking · add up your servers' context cost
- API key
- No key needed for the tools we called
- Tested
- 2026-11-11
Test results
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | npm install @justlend/mcp-server-justlend (Node 20, Linux) succeeded in 5s. |
| handshake | pass | 30 | MCP initialize + tools/list over stdio succeeded with no credentials; 104 tools listed in 3.4s. |
| maintenance | pass | 25 | Repo pushed 19 days before test; 3 GitHub stars. |
| docs | pass | 15 | README over 3,000 chars; install instructions present; mcpServers config example present. Check of the package's own README (README shipped in npm package). |
| license | pass | 10 | MIT (OSI-approved). |
Local-model readiness
Token cost (estimate): approx. 17553 tokens, cl100k estimate for 104 tools · about 214% of an 8k context. This is an estimate from our testing (counted with cl100k_base).
Small-model friendly (schema heuristic, not a model result): unknown.
Not tested
Small-model task runs: Not yet tested.
What we tested and what we didn't
Tested on 2026-11-11
- Install from the registry
- We connected with no credentials and asked for its tool list: it listed 104 tools (Method details: MCP
initializethentools/list) - Maintenance signals (last push, archived/deprecated status)
- Docs (README length, install and config example)
- License (OSI-approved or not)
- Token cost (estimate)
Not tested
- Security: not audited (no code review, no permission or data-flow analysis)
- Real tasks (no functional task runs yet)
- Behaviour with real credentials or a real account
- Performance, rate limits or load
- Correctness of results beyond the listed tasks
Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.
Known security issues
Checked on 2026-11-11 for version 1.1.3 against OSV, GitHub advisories, GitHub repository advisories. Scope: the package itself; dependencies not scanned.
No published advisories found in OSV and GitHub advisories for @justlend/mcp-server-justlend 1.1.3 as of 2026-11-11. This is not a security audit.
Monthly roundup: MCP security issues, October 2026.
Tool list changes
Baseline recorded from the 2026-11-11 test run; changes appear after the next test.
Snapshot hash (fingerprint of the tool list)
e3e4cf62a34f: SHA-256 of the canonical tool names, descriptions and input schemas. If it changes, the tool list changed.
Raw test record (JSON)
{
"name": "@justlend/mcp-server-justlend",
"version": "1.1.3",
"registry": "npm",
"status": "working",
"tested": "2026-11-11",
"tools_count": 104,
"deprecated": false,
"archived": false,
"tests": {
"install": [
"pass",
20,
"`npm install @justlend/mcp-server-justlend` (Node 20, Linux) succeeded in 5s."
],
"handshake": [
"pass",
30,
"MCP `initialize` + `tools/list` over stdio succeeded with no credentials; 104 tools listed in 3.4s."
],
"maintenance": [
"pass",
25,
"Repo pushed 19 days before test; 3 GitHub stars."
],
"docs": [
"pass",
15,
"README over 3,000 chars; install instructions present; `mcpServers` config example present. Check of the package's own README (README shipped in npm package)."
],
"license": [
"pass",
10,
"MIT (OSI-approved)."
]
}
}Install
npx -y @justlend/mcp-server-justlend
Pin the version we tested
npx -y @justlend/mcp-server-justlend@1.1.3
tested 2026-11-11. Newer versions may differ and were not tested by us.
{
"mcpServers": {
"justlend-mcp": {
"command": "npx",
"args": [
"-y",
"@justlend/mcp-server-justlend@1.1.3"
]
}
}
}Tools listed
approve_jst_for_voting, approve_liquidator_token, approve_moolah_proxy, approve_moolah_vault, approve_underlying, borrow, buy_energy_direct, calculate_energy_rental_price, cast_vote, check_allowance, check_jst_allowance_for_voting, check_strx_withdrawal_eligibility, claim_moolah_mining_period, claim_rewards, claim_strx_rewards, claim_v1_mining_period, connect_browser_wallet, deposit_jst_for_votes, enter_market, estimate_lending_energy, estimate_moolah_energy, exit_market, get_account_summary, get_all_markets, get_claimable_rewards, get_energy_payment_risk, get_energy_purchase_config, get_energy_purchase_history, get_energy_purchase_order, get_energy_rent_info, get_energy_rental_dashboard, get_energy_rental_params, get_energy_rental_rate, get_energy_rental_records, get_lending_records, get_liquidation_records, get_locked_votes, get_market_data, get_mining_rewards, get_moolah_dashboard
Tool history: captured Nov 11, 2026. All tool history.
Quick config
{
"mcpServers": {
"justlend-mcp": {
"command": "npx",
"args": [
"-y",
"@justlend/mcp-server-justlend"
]
}
}
}Add to config Opens the config generator with this server selected.
Setup
- Install. Run
npm install @justlend/mcp-server-justlend(Node 20). This is the exact command we ran on 2026-11-11. - Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools (104 in our test).
{
"mcpServers": {
"justlend-mcp": {
"command": "npx",
"args": [
"-y",
"@justlend/mcp-server-justlend"
]
}
}
}Test history
- 2026-11-11: New
FAQ
Is JustLend MCP deprecated?
No. @justlend/mcp-server-justlend was not deprecated or archived when we last tested it on 2026-11-11.
What replaces JustLend MCP?
Nothing; JustLend MCP is not deprecated as of 2026-11-11.
Does JustLend MCP need an API key?
No. It completed an MCP handshake with no credentials and listed 104 tools.
Embed the badge
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.