BinanceBLOCK
Unofficial tools and server implementation for Binance's Model Context Protocol (MCP). Designed to support developers building crypto trading AI Agents.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://pypi.org/project/binance-mcp-server/) [](https://www.cursor.store/mcp/AnalyticAce/BinanceMCPServer) [](https://github.com/AnalyticAce/binance-mcp-server/actions/workflows/deploy-docs.yml) [](https://github.com/AnalyticAce/binance-mcp-server/actions/workflows/publish-package.yml) [](https://www.python.org/downloads/) [](https://opensource.org/licenses/MIT)
A powerful Model Context Protocol (MCP) server that enables AI agents to interact seamlessly with the Binance cryptocurrency exchange. This server provides a comprehensive suite of trading tools, market data access, and account management capabilities through the standardized MCP interface.
🌟 What is this?
This tool acts as a bridge between AI Assistants (like Claude, Cursor AI, or ChatGPT) and your Binance Account.
Instead of manually navigating the Binance website or app, you can ask your AI to:
- "Check the current price of Bitcoin"
- "Show me my account balance"
- "Buy 0.1 ETH at the current market price"
The AI sends the request to this server, which securely executes it on Binance and returns the result to your AI.
🚀 Quick Start
1️⃣ Installation
The easiest way to install is using pip or uv:
# using pip pip install binance-mcp-server # using uv uv add binance-mcp-server
2️⃣ Configuration
You need your Binance API Keys to allow this tool to access your account.
- Log in
4c296e193115OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add binance-mcp-server --env BINANCE_API_KEY=${BINANCE_API_KEY} --env BINANCE_API_SECRET=${BINANCE_API_SECRET} -- uvx binance-mcp-server{
"mcpServers": {
"binance-mcp-server": {
"command": "uvx",
"args": [
"binance-mcp-server"
],
"env": {
"BINANCE_API_KEY": "${BINANCE_API_KEY}",
"BINANCE_API_SECRET": "${BINANCE_API_SECRET}"
}
}
}
}Exposed tools (15)
13 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
create_order | write | |
get_account_snapshot | read | |
get_available_assets | read | |
get_balance | read | |
get_deposit_address | read | |
get_deposit_history | read | |
get_fee_info | read | |
get_liquidation_history | read | |
get_order_book | write | |
get_orders | read | |
get_pnl | read | |
get_position_info | read | |
get_ticker | read | |
get_ticker_price | read | |
get_withdraw_history | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- declared (1 observation(s))
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (6)
'eval(', 'exec(', 'system(', 'shell_exec',fa-brands-400.eot
fa-regular-400.eot
fa-solid-900.eot
.pre-commit-config.yaml
The server will automatically load the `.env` file using `python-dotenv`.
Gates applied: no_behavioural_pass.
4c296e193115full audit observations/trust-audit/mcp-server/analyticace__binance-3.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 4c296e193115 | BLOCK | D | 69 | first audit |
Questions
What is the Binance MCP server?
Unofficial tools and server implementation for Binance's Model Context Protocol (MCP). Designed to support developers building crypto trading AI Agents.
What tools does Binance expose?
15 in total: 13 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Binance safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Binance need?
It reads BINANCE_API_KEY and BINANCE_API_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Binance run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as binance-mcp-server.
How current is this page?
The grade is for one exact copy of the source (4c296e193115), read on 2026-10-08. The repository is watched and re-audited when it changes.