Alpaca Trading API integration for Model Context Protocol (MCP)
Nothing to run from here
TronSave is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
93/100
tool-list score
29
tools declared
remote
at its publisher
—
calls last 7d
What it does
Buy, sell and extend TRON Energy/Bandwidth on the TronSave market. Quotes need no login.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http tronsave-mcp https://mcp.tronsave.io/mcp
# 2 — ask your agent for something these tools do
# tronsave_get_internal_account, tronsave_get_deposit_address, tronsave_internal_order_history and 26 more
TronSave costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
TRAll 1 server
tronsave1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http tronsave-mcp https://mcp.tronsave.io/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
29 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Retrieve the TronSave internal account profile for the current session: represent address, deposit address, and balance (SUN). Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API
No parameter schema on file.
Fetches the specific deposit address for the TronSave internal account. Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, while api-key sessions reuse the valida
| Parameter | Type | Required | Notes |
|---|---|---|---|
| amountTrx | number | yes | Amount of TRX to deposit |
List paginated order history for the internal account linked to the API key, newest first. Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, while api-key sessio
| Parameter | Type | Required | Notes |
|---|---|---|---|
| page | integer | no | Page index, 0-based. Omit for first page (default 0). |
| pageSize | integer | no | Orders per page. Default 10 when omitted. Typical range 1–100. |
Fetch full details for one internal-account order by order ID. Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, while api-key sessions reuse the validated key f
| Parameter | Type | Required | Notes |
|---|---|---|---|
| orderId | string | yes | TronSave order ID (hex string), e.g. value returned in internal.order.create response data.orderId. |
Return the current TronSave market depth/price tiers for ENERGY or BANDWIDTH via the api-key REST endpoint. Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, whi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | no | Optional TRON base58 address filter for the receiver. |
| resourceType | string | no | Resource type. Default ENERGY when omitted. |
| minDelegateAmount | number | no | Minimum resource amount per offer level to include (resource units, not SUN). |
| durationSec | integer | no | Delegation duration window in seconds for the quote. |
Estimate the TRX cost and availability for a buy order before submitting it (api-key internal account). Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, while a
| Parameter | Type | Required | Notes |
|---|---|---|---|
| resourceType | string | no | Resource type. Default ENERGY when omitted. |
| resourceAmount | number | yes | Amount of resource to purchase (resource units). |
| receiver | string | no | TRON base58 address that will receive the resource. |
| requester | string | no | TRON base58 requester; defaults to the API key account when omitted. |
| durationSec | integer | no | Delegation duration in seconds. Default 259200 (3 days) when omitted. |
| unitPrice | no | Pricing: FAST | MEDIUM | SLOW strategy, or exact unit price in SUN per resource unit. Default MEDIUM when omitted. | |
| options | object | no | Optional flags that affect matching behavior for the estimate. |
Place a new buy order for ENERGY or BANDWIDTH on TronSave, paid from the internal account balance. Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, while api-ke
| Parameter | Type | Required | Notes |
|---|---|---|---|
| resourceType | string | no | Resource type. Default ENERGY when omitted. |
| resourceAmount | number | yes | Amount of resource to purchase (resource units). |
| receiver | string | yes | TRON base58 address that will receive the resource. |
| durationSec | integer | no | Delegation duration in seconds. Default 259200 (3 days) when omitted. |
| unitPrice | no | Pricing: FAST | MEDIUM | SLOW strategy, or exact unit price in SUN per resource unit. Default MEDIUM when omitted. | |
| sponsor | string | no | Optional sponsor or referral code. |
| options | object | no | Optional execution guards and fill behavior. |
Return extendable delegations for a receiver plus an extendData payload for the extension flow. Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, while api-key
| Parameter | Type | Required | Notes |
|---|---|---|---|
| receiver | string | yes | TRON base58 address of the account that receives the delegated resource. |
| extendTo | integer | yes | Target end time as Unix epoch milliseconds (UTC) for the extended delegation. |
| resourceType | string | no | Resource type. Default ENERGY when omitted. |
| maxPriceAccepted | number | no | Maximum unit price in SUN you are willing to pay for the extension. |
| requester | string | no | TRON base58 requester; defaults to the API key account when omitted. |
Submit an extension request for existing delegated resources on TronSave, paid from the internal account. Requires a logged-in MCP session created by the tronsave_login tool: include mcp-session-id: <sessionId> returned by tronsave_login on subsequent MCP requests. Internal tools never accept API keys via tool arguments; signature sessions resolve the latest internal API key on demand, while
| Parameter | Type | Required | Notes |
|---|---|---|---|
| receiver | string | yes | TRON base58 address of the account that receives the delegated resource. |
| extendData | array | yes | Rows copied from extendData returned by tronsave_internal_extend_delegates. |
| resourceType | string | no | Resource type. Default ENERGY when omitted. |
Issue a wallet-signable timestamp message helper for signature login. Returns { message, timestamp }: sign message exactly client-side, then submit <signature>_<timestamp> to tronsave_login (signature mode). Optional helper only — clients may also sign their own timestamp payload directly as long as it matches the signature_timestamp format expected by tronsave_login.
No parameter schema on file.
Authenticate with TronSave and create a server session. Returns { sessionId, walletAddress?, expiresAt } — pass sessionId as the mcp-session-id header on every subsequent MCP request. walletAddress is set only for signature-mode logins. Two modes: (1) wallet signature (preferred for platform tools) — call this tool with signature_timestamp formatted as <signature>_<timestamp>, where `<
| Parameter | Type | Required | Notes |
|---|---|---|---|
| apiKey | string | no | Raw API key for internal-tools login. Provide EXACTLY ONE of apiKey or signature. |
| signature | string | no | Signature token in signature_timestamp format (timestamp is the signed message). Provide EXACTLY ONE of apiKey or signature. |
Read the current authenticated user's profile and linked TronSave internal account. Returns { caller, address, balance (SUN string), info, internalAccount } — info carries referral/contact metadata and may be null; internalAccount is null when the wallet has not provisioned a TronSave internal balance yet. Requires a signature session from tronsave_login and mcp-session-id. Read-only and
No parameter schema on file.
Read the current user's auto-sell configuration (autoSettings). Returns the full autoSettings object — call this before tronsave_register_auto_sell or tronsave_update_auto_sell_setting to avoid overwriting fields you do not intend to change. Requires a signature session and mcp-session-id. Read-only and idempotent.
No parameter schema on file.
Read the enabled permission operations (autoSettings.permitOperations) for the authenticated user. Returns { permitOperations: string[] } — use it before mutating auto-sell or auto-buy rules to confirm the action is allowed for the wallet. Requires a signature session and mcp-session-id. Read-only and idempotent.
No parameter schema on file.
Quote price and availability for buying ENERGY or BANDWIDTH for a receiver address before placing an order. Returns estimated unitPrice (SUN per resource unit), paymentAmount, and availability fields used to populate tronsave_create_order inputs (orderUnitPrice, paymentPaymentAmount). Read-only and safe to call repeatedly; no session is required, but backend rate limits apply. FRESHNESS:
| Parameter | Type | Required | Notes |
|---|---|---|---|
| resourceType | string | no | Resource type to buy. Default ENERGY |
| receiver | string | no | receiver address. |
| buyResourceAmount | number | no | Amount of resource to buy. Default 100000 for ENERGY and 1000 for BANDWIDTH |
| unitPrice | number | no | Unit price in SUN. |
| durationSec | number | no | Duration of the order in seconds. Default 15 minutes |
| allowPartialFill | boolean | no | Allow partial fill of the order. |
| minResourceDelegateRequiredAmount | number | no | Minimum amount of resource to delegate. |
Read one order by id and return its full snapshot for NORMAL, FAST, or EXTEND order types. Use this as the source of truth before tronsave_update_order, tronsave_sell_order_manual, or tronsave_cancel_order to avoid acting on stale state. FRESHNESS: order state can change within seconds as the market matches — re-read immediately before each mutation instead of reusing an earlier snapshot.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | Target order id (MObjectId) to inspect. Use this to confirm current status/price before update, sell, or cancel actions. |
Query the order list with paging. Returns { orders: [{ id, requester?.address, receiver.address, resourceType, resourceAmount, remainAmount, durationSec, unitPrice (SUN), isOwner, isMatching, apy, createdAt, typeOrder (NORMAL|FAST|EXTEND) }] }. Filter status maps to GraphQL isFulfilled: ACTIVE → UNFULFILLED, COMPLETED → FULFILLED. Set onlyMyOrder=true (requires signature login + `m
| Parameter | Type | Required | Notes |
|---|---|---|---|
| offset | integer | no | Zero-based row offset for page N (skip first offset matches). Omit when starting from the first page. |
| limit | integer | no | Maximum rows to return in one call. Prefer modest limits to avoid huge payloads; page with offset. |
| status | string | no | Lifecycle filter mapped to GraphQL isFulfilled: ACTIVE → UNFULFILLED (not yet fulfilled), COMPLETED → FULFILLED. |
| resourceType | string | no | Restrict to ENERGY or BANDWIDTH orders; omit for both. |
| isOnlyMyOrder | boolean | no | When true, only orders whose requester is the wallet from the signature session; include mcp-session-id. Api-key-only sessions have no wallet address and cannot use this filter. When false or |
Read market depth buckets for ENERGY or BANDWIDTH. Returns price buckets { min, max, value } optionally scoped by viewer address, minimum delegate amount, and duration. No login required; read-only and idempotent. FRESHNESS: live market depth — buckets can shift roughly every 3 seconds; re-read immediately before acting on a price. Use this to estimate market ranges before create/update deci
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | no | Optional viewer/requester wallet context. |
| resourceType | string | yes | Order-book side to query (ENERGY or BANDWIDTH). |
| minDelegateAmount | number | no | Optional minimum delegate amount floor for bucket filtering. |
| durationSec | number | no | Optional delegation duration filter in seconds. |
Quote the minimum unit price for a buy. Returns { minPrice } (SUN per resource unit) from GraphQL market.estimateMinPrice for the given resourceType, buyAmount, and durationSec. Optional address scopes context when the API supports it. No login required; an optional session forwards auth like tronsave_list_order_books. Read-only and idempotent. FRESHNESS: live market data — `minPrice
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | no | Optional TRON base58 address (TronAddress). When omitted, the server uses anonymous/global market context. |
| resourceType | string | no | Market leg: ENERGY or BANDWIDTH. Default ENERGY |
| buyAmount | number | no | Resource amount to price (same units as order book / delegate amounts for that resource type). Default 100000 for ENERGY and 1000 for BANDWIDTH |
| durationSec | number | no | Delegation window in seconds; must match the duration you plan to use on a real order for comparable quotes. Default 15 minutes |
List extendable delegate candidates for a receiver and resourceType (ENERGY|BANDWIDTH). Optional suggestData scores an extend-and-buy scenario for planning purposes. Read-only; does NOT create orders or change on-chain state. Works without mcp-session-id; when a session is present, auth is forwarded so results can reflect the logged-in account where supported. NOTE: this is GraphQL market
| Parameter | Type | Required | Notes |
|---|---|---|---|
| requester | string | no | Optional TRON base58 address of the viewing/requesting party. When an MCP session is active, the server may still derive identity from auth headers; use this when the API expects an explicit requester |
| receiver | string | yes | TRON base58 address (typically starts with T) that currently receives or will receive the delegated resource. This is the primary filter: the response describes delegates relevant to extending that |
| resourceType | string | yes | Which resource market leg to query: ENERGY for contract execution headroom, BANDWIDTH for transaction bandwidth. Must match how you plan to extend or buy. |
| suggestData | object | no | Optional nested scenario for extend-and-buy suggestion scoring. If omitted, the query returns delegate rows without that hypothetical. If provided, supply all four fields together; partial objects are |
Create a new buy order on the TronSave market. Key inputs: orderResourceType (ENERGY|BANDWIDTH), orderReceiver (TRON base58), orderUnitPrice in SUN (NOT TRX), orderDurationSec, orderResourceAmount, and paymentMethod: (1) onchain — requires a signed payment tx in paymentSignedTx; (2) internal — deducts from internal balance. Side effect: creates a live order matchable by the marke
| Parameter | Type | Required | Notes |
|---|---|---|---|
| orderResourceType | string | yes | Resource to buy: ENERGY (smart contracts) or BANDWIDTH (transactions). Must match tronsave_estimate_buy_resource. |
| orderReceiver | string | yes | TRON base58 address (starts with T) that receives delegated resource. Same as receiver passed to tronsave_estimate_buy_resource. |
| orderUnitPrice | number | yes | Unit price in SUN. Prefer aligning with minResourcePrice or buyResourcePrice from the latest tronsave_estimate_buy_resource for the same receiver, amount, and duration. |
| orderDurationSec | number | yes | Delegation duration in seconds. Must match the durationSec used in tronsave_estimate_buy_resource. |
| orderResourceAmount | number | yes | Amount of ENERGY or BANDWIDTH units to purchase. Same as buyResourceAmount in estimate when applicable. |
| paymentMethod | string | yes | Payment method for this order: onchain (wallet signed tx) or internal (internal balance). |
| paymentPaymentAmount | number | yes | Payment amount in SUN. Prefer deriving from tronsave_estimate_buy_resource; if converting to TRX, divide SUN by 1e6. |
| paymentSignedTx | object | no | Required when paymentMethod=onchain. TronWeb-shaped signed TRON transaction ({ txID, raw_data, raw_data_hex, signature[] }). Must be produced client-side by the user's wallet; never fabricate or h |
Manually execute seller-side fulfillment of an existing order with a wallet signedTx. Returns the updated order payload after sell. Side effect: broadcasts a market/delegation transaction and may consume balances/resources; not idempotent — each call re-executes. Backend requires a signature session and mcp-session-id; the MCP gate is public to allow anonymous read-fallthrough, but the Graph
| Parameter | Type | Required | Notes |
|---|---|---|---|
| orderId | string | yes | Target order id (MObjectId) to manually fulfill. Should be an order eligible for seller-side manual execution. |
| signedTx | object | yes | Required wallet-signed transaction payload (TronWeb shape: { txID, raw_data, raw_data_hex, signature[] }). Must come from client-side signing; never fabricate. |
| paymentAddress | string | no | Optional payout/payment address override when settlement flow requires it. |
Cancel an open order by orderId. Returns the cancelled order payload after the status flip. Side effect: marks the order non-matchable and refunds locked balance per backend rules; effectively destructive on the live order. Idempotent — cancelling an already-cancelled order is a no-op success. Fails for fulfilled orders or unauthorized callers. Requires a signature session and mcp-session-id.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| orderId | string | yes | Target order id (MObjectId) to cancel. Must be an active order owned/authorized by the current session; already-fulfilled or already-cancelled orders are expected to fail. |
Update an open order by orderId with partial fields (receiver, newPrice). Returns the updated order payload. Side effect: overwrites live order parameters; not idempotent — each call with a different newPrice produces a new state. Backend requires a signature session and mcp-session-id; the MCP gate is public to allow anonymous read-fallthrough, but the GraphQL helper rejects api-key-o
| Parameter | Type | Required | Notes |
|---|---|---|---|
| orderId | string | yes | Target order id (MObjectId) to update. Order must still be open and editable. |
| receiver | string | no | Optional replacement receiver TRON address. |
| newPrice | number | no | Optional replacement unit price in SUN. |
Create the initial auto-sell configuration for the authenticated user. Returns the persisted autoSettings payload. Side effect: persists automation settings that affect future delegation/sell behavior; not idempotent — calling twice may reset fields. Requires a signature session and mcp-session-id. Use for FIRST-TIME setup only; for subsequent edits use tronsave_update_auto_sell_setting, and
| Parameter | Type | Required | Notes |
|---|---|---|---|
| paymentConfig | object | no | — |
| poolSetting | object | no | — |
| addOnFeature | object | no | — |
Update the existing auto-sell configuration with partial fields. Returns the updated autoSettings payload. Side effect: overwrites stored automation settings for the current user; not idempotent across different field sets. Requires a signature session and mcp-session-id. Use for INCREMENTAL changes after registration; read the baseline via tronsave_get_user_auto_setting to avoid accidental
| Parameter | Type | Required | Notes |
|---|---|---|---|
| paymentConfig | object | no | — |
| poolSetting | object | no | — |
| addOnFeature | object | no | — |
Generate a new internal API key credential for the current user. Returns data containing the issued key — store it securely and pass it to tronsave_login (apiKey mode) for internal-tool access. Side effect: issues secret material; not idempotent — each call mints a fresh key. If a previous key existed, treat it as rotated and stop using the old key once the new one is wired up. Requires a si
No parameter schema on file.
Revoke the caller's current internal API key. Side effect: any future request using the previous key is rejected. Existing in-flight sessions cached by the server may continue serving until their TTL expires — treat the effect as 'best-effort immediate' rather than guaranteed instantaneous cutoff. Idempotent — revoking an already-revoked key returns success. Requires a signature session and `mcp-s
No parameter schema on file.
Permanently delete one auto-buy rule by id (MObjectId). Side effect: stops all future executions matching that rule; the rule cannot be restored. Idempotent — deleting a non-existent or already-removed id returns success. Requires a signature session and mcp-session-id. Use tronsave_get_user_auto_setting to list current rules first; prefer disabling/updating instead when reversibility is d
| Parameter | Type | Required | Notes |
|---|---|---|---|
| id | string | yes | Auto-buy setting id (MObjectId) to delete. |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install TronSave or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 93 / 100
Release 1.2.0 · scanned 30 Oct 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score93
Findings0 threat · 1 capability
Capabilitymoderate
Coveragemanifest
Verificationnot in this report
Surface digestcfc55343bce39617e224201d38db69c9dbcc5cf34e640e891971e87477260a68
Score vectorthreat 100 → client 93
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| tronsave_get_internal_account | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_get_deposit_address | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_internal_order_history | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_internal_order_details | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_internal_order_book | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_internal_order_estimate | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_internal_order_create | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tronsave_internal_extend_delegates | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_internal_create_extend_request | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tronsave_get_sign_message | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_login | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tronsave_get_user_info | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_get_user_auto_setting | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_get_user_permissions | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_estimate_buy_resource | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_get_order | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_list_orders | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_list_order_books | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_get_min_price | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_list_extendable_delegates | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tronsave_create_order | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tronsave_sell_order_manual | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| tronsave_cancel_order | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| tronsave_update_order | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tronsave_register_auto_sell | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tronsave_update_auto_sell_setting | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tronsave_generate_api_key | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| tronsave_revoke_api_key | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| tronsave_delete_auto_buy_setting | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
flow-1
Untrusted input can drive an external action even though no sensitive source is exposed.
Supply chain and provenance
Integrityfirst-seen
Surface digestcfc55343bce39617
Scanned2026-10-30
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.2.0.
1.2.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish TronSave can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.