mcp-serverBLOCK
Hyperliquid trading intelligence for AI agents — 106 available MCP tools: builder analytics (revenue, retention, audience overlap, user journey), cohort analytics, position lifecycles, liquidation heatmaps, trader profiling, HIP-4 outcome contracts, and live market data. Hosted connector at mcp.coin
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Crypto intelligence for AI agents. Query the full Hyperliquid wallet universe, indexed trade history with PnL attribution, behavioral cohorts, and live market data through any MCP-compatible client. Call pulse_global_stats to see exact current coverage (tracked wallets, indexed trades, volume, PnL, data window).
Now with HIP-4 outcome contracts and builder dex support — inspect prediction-market style outcome contracts, settlements, commodities (gold, silver, oil), stocks (TSLA, AAPL), and perps across 8 dexes and 369+ markets.
What's new in 0.12.0
L4 order book tools and dataset coverage. Five more tools, and full parity with the hosted connector at https://mcp.coinversa.ai/mcp.
Tool count: 103 → 107 registered, 106 advertised (see below).
Also in 0.12.0:
- `builder_heatmap` is withheld by default. Its upstream cannot answer inside the client timeout until the hourly rollup is backfilled, so advertising it only produced timeouts. It is still built in: set
COINVERSAA_HIDDEN_TOOLS=(explicitly empty) to advertise everything, or name a different comma-separated list to withhold other tools. Leaving the variable unset withholdsbuilder_heatmap. - `pulse_market_overview` removed. It was a deprecated alias for
list_markets, whi
5cee48accf6dOBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp-server --env COINVERSAA_API_KEY=${COINVERSAA_API_KEY} -- npx -y @coinversaa/[email protected]Exposed tools (107)
106 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
book_levels | read | |
book_stop_map | write | |
book_summary | read | |
book_whales | read | |
builder_cohorts | read | |
builder_fills | read | |
builder_heatmap | read | |
builder_journey | read | |
builder_leaderboard | read | |
builder_lifecycle | read | |
builder_orders | read | |
builder_overlap | read | |
builder_profile | read | |
builder_retention | read | |
builder_traders | read | |
data_coverage | read | |
hip4_cross_product_overlap | read | |
hip4_daily_volume | read | |
hip4_most_active | read | |
hip4_outcome | read | |
hip4_outcome_recent_trades | read | |
hip4_outcome_summary | read | |
hip4_outcomes | read | |
hip4_perp_position_context | read | |
hip4_questions | read | |
hip4_recent_settlements | read | |
hip4_top_traders | read | |
hip4_trader_outcomes | read | |
list_asset | read | |
list_assets | read | |
list_markets | read | |
live_cohort_bias | read | |
live_cohort_bias_history | read | |
live_coin_risk_history | read | |
live_coin_risk_snapshot | read | |
live_liquidation_heatmap | read | |
live_liquidation_summary | read | |
live_long_short_ratio | read | |
live_mark_dislocations | read | |
live_official_oi | read | |
live_oi_history | read | |
live_recent_liquidations | read | |
live_risk_overview | read | |
market_historical_oi | read | |
market_orderbook | read | |
market_positions | read | |
market_price | read | |
market_recent_candles | read | |
pulse_active_traders | read | |
pulse_anti_survivors | read | |
pulse_backstop_events | read | |
pulse_biggest_trades | read | |
pulse_capital_titans | read | |
pulse_cohort_bias_history | read | |
pulse_cohort_history | read | |
pulse_cohort_performance_daily | read | |
pulse_cohort_positions | read | |
pulse_cohort_recent_alpha_concentration | read | |
pulse_cohort_recent_lifecycle_stats | read | |
pulse_cohort_recent_positions | read | |
pulse_cohort_recent_top_positions | read | |
pulse_cohort_recent_trades | read | |
pulse_cohort_summary | read | |
pulse_cohort_trades | read | |
pulse_coin_alpha_map | read | |
pulse_coin_kings | read | |
pulse_compare | read | |
pulse_cross_market_asset | read | |
pulse_entity_leaderboard | read | |
pulse_entity_profile | read | |
pulse_exchange_oi | read | |
pulse_exchange_positions | read | |
pulse_exchange_volume | read | |
pulse_global_stats | read | |
pulse_hidden_gems | read | |
pulse_hour_profitability | read | |
pulse_leaderboard | read | |
pulse_lethal_coins | read | |
pulse_lifecycle | read | |
pulse_lifecycles_recent | read | |
pulse_market_concentration | read | |
pulse_max_pain_events | read | |
pulse_most_traded_coins | read | |
pulse_my_plan | read | |
pulse_newcomer_whales | read | |
pulse_one_month_wonders | read | |
pulse_perfect_exits | read | |
pulse_persistent_winners | read | |
pulse_pnl_leaders | read | |
pulse_recent_closed_positions | read | |
pulse_recent_trades | read | |
pulse_style_distribution | read | |
pulse_survivors | read | |
pulse_token_leaderboard | read | |
pulse_top_liquidators | read | |
pulse_trader_closed_position_stats | read | |
pulse_trader_closed_positions | read | |
pulse_trader_daily_stats | read | |
pulse_trader_demo | read | |
pulse_trader_lifecycle_summary | read | |
pulse_trader_lifecycles | read | |
pulse_trader_performance | read | |
pulse_trader_profile | read | |
pulse_trader_token_stats | read | |
pulse_trader_trades | read | |
pulse_wallet_drawdown_curve | read | |
trader_builders | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (5)
Streamable HTTP, stateless (`POST /mcp`). Authentication is OAuth 2.1 with PKCE and dynamic client registration only — paste the URL, leave auth/header fields empty, and the client opens a Coinversa a
@modelcontextprotocol/sdk, @toon-format/toon, zod, @types/node, ts-node, typescript
| `/mcp` | `POST` | MCP Streamable HTTP endpoint (requires a valid OAuth access token) |
| `/token` | `POST` | Token endpoint (`authorization_code` + PKCE, `refresh_token`) |
1. The client `POST`s to `/mcp` without a token, gets `401` with a `WWW-Authenticate` header pointing at the protected-resource metadata, and discovers the authorization server from there.
Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.
5cee48accf6dfull audit observations/trust-audit/mcp-server/coinversaa__mcp-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 5cee48accf6d | BLOCK | D | 69 | first audit |
Questions
What is the mcp-server MCP server?
Hyperliquid trading intelligence for AI agents — 106 available MCP tools: builder analytics (revenue, retention, audience overlap, user journey), cohort analytics, position lifecycles, liquidation heatmaps, trader profiling, HIP-4 outcome contracts, and live market data. Hosted connector at mcp.coin
What tools does mcp-server expose?
107 in total: 106 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is mcp-server safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does mcp-server need?
It reads COINVERSAA_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does mcp-server run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @coinversaa/mcp-server at 0.12.0.
How current is this page?
The grade is for one exact copy of the source (5cee48accf6d), read on 2026-10-10. The repository is watched and re-audited when it changes.