Evm MCP Server

AWS/GCP KMS-based Ethereum signer for viem with enterprise-grade security. Sign transactions and messages using keys stored in AWS or GCP KMS without

Local serverstdioTypeScript

What is the Evm MCP Server?

AWS/GCP KMS-based Ethereum signer for viem with enterprise-grade security. Sign transactions and messages using keys stored in AWS or GCP KMS without exposing

What it actually does

A TypeScript library that integrates AWS/GCP KMS (Key Management Service) with viem to create secure Ethereum signers. This allows you to sign Ethereum transactions and messages using keys stored in AWS or GCP KMS, providing enterprise-grade security for your Ethereum operations.

  • AWS KMS Integration — Sign Ethereum transactions using keys securely stored in AWS KMS
  • GCP KMS Support — Also supports Google Cloud Platform KMS for multi-cloud deployments
  • Full EIP Compliance — Supports EIP-191 (personal messages), EIP-712 (typed data), EIP-155 (replay protection), EIP-2 (signature normalization)
  • Type-Safe — Built with TypeScript in strict mode with comprehensive type definitions
  • viem Compatible — Seamlessly integrates with viem's Account system via toAccount
  • DER Signature Parsing — Automatically converts AWS/GCP KMS DER-encoded signatures to Ethereum format

Configuration

  1. Create an ECC Key in AWS KMS: - Go to AWS KMS Console - Click "Create key" - Choose "Asymmetric" key type - Select "Sign and verify" key usage - Choose ECC_SECG_P256K1 as the key spec (this is secp256k1, Ethereum's curve) - Complete the key creation process 2. Grant Permissions: Ensure your AWS credentials have the following permissions: - kms:GetPublicKey - kms:Sign 3. **Note

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the Evm MCP Server

{
  "mcpServers": {
    "evm-signer": {
      "command": "npx",
      "args": ["-y", "evm-kms-signer"],
      "env": {
        "KMS_KEY_ID": "your-value",
        "AWS_ACCESS_KEY_ID": "your-value",
        "AWS_SECRET_ACCESS_KEY": "your-value",
        "KEYRING_ID": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

  1. Create an ECC Key in AWS KMS: - Go to AWS KMS Console - Click "Create key" - Choose "Asymmetric" key type - Select "Sign and verify" key usage - Choose ECC_SECG_P256K1 as the key spec (this is secp256k1, Ethereum's curve) - Complete the key creation process 2. Grant Permissions: Ensure your AWS credentials have the following permissions: - kms:GetPublicKey - kms:Sign 3. **Note
VariableDescriptionRequired
KMS_KEY_IDCredential the server authenticates with.Yes
AWS_ACCESS_KEY_IDCredential the server authenticates with.Yes
AWS_SECRET_ACCESS_KEYCredential the server authenticates with.Yes
KEYRING_IDCredential the server authenticates with.Yes

Example prompts to try

  • “Use Evm to Prerequisites.”
  • “Use Evm to KmsSigner.”
  • “Use Evm to Constructor.”

Frequently asked questions

AWS/GCP KMS-based Ethereum signer for viem with enterprise-grade security. Sign transactions and messages using keys stored in AWS or GCP KMS without exposing Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.