CCXTSAFE
High-performance CCXT MCP server for cryptocurrency exchange integration
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://www.modelcontextprotocol.org/) [](https://github.com/ccxt/ccxt) [](https://smithery.ai/server/@doggybee/mcp-server-ccxt)
High-performance cryptocurrency exchange integration using MCP (Model Context Protocol) and CCXT.
Features
- 🚀 Exchange Support: Connects to 20+ cryptocurrency exchanges
- 🔃 Market Types: Supports spot, futures, swap markets and more
- 🔧 Proxy Configuration: Options for accessing exchanges through proxies
- 📊 Fast & Reliable: Optimized caching and rate limiting
- 🌐 MCP Standard: Compatible with LLMs like Claude and GPT via MCP
CCXT MCP Server Integration Architecture
The CCXT MCP Server connects language models to cryptocurrency exchanges through the Model Context Protocol. It serves as a bridge that allows LLMs to access real-time market data and execute trading operations across multiple exchanges through a unified API.
The architecture includes:
- LLM clients (Claude and other MCP-compatible models) that send requests
- The Model Context Protocol (MCP) that standardizes communication
- The CCXT MCP Server that processes requests and manages exchange interactions
- The CCXT Library that provides unified access to exchange APIs
- Connections to multiple cryptocurrency exchanges
CCXT MCP Server Code Architecture
The server is organized into three main modules for better maintainability and extensibility:
- Exchange: Manages exchange instances, credentials, and symbol validation
- Utils: Provide
5fb86a7aea78OBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp-server-ccxt --env PROXY_PASSWORD=${PROXY_PASSWORD} -- npx -y @mcpfun/[email protected]{
"mcpServers": {
"mcp-server-ccxt": {
"command": "npx",
"args": [
"-y",
"@mcpfun/[email protected]"
],
"env": {
"PROXY_PASSWORD": "${PROXY_PASSWORD}"
}
}
}
}Exposed tools (24)
14 read · 8 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
account-balance | read | Get your account balance from a crypto exchange |
batch-get-tickers | read | Get ticker information for multiple trading pairs at once |
cache-stats | read | Get CCXT cache statistics |
clear-cache | destructive | Clear CCXT cache |
clear-exchange-cache | destructive | Clear exchange instance cache to apply configuration changes |
get-exchange-info | read | Get exchange information and status |
get-funding-rates | read | Get current funding rates for perpetual contracts |
get-leverage-tiers | read | Get futures leverage tiers for trading pairs |
get-market-types | read | Get market types supported by an exchange |
get-markets | read | Get all available markets for an exchange |
get-ohlcv | read | Get OHLCV candlestick data for a trading pair |
get-orderbook | write | Get market order book for a trading pair |
get-proxy-config | read | Get the current proxy configuration |
get-ticker | read | Get current ticker information for a trading pair |
get-trades | read | Get recent trades for a trading pair |
list-exchanges | read | List all available cryptocurrency exchanges |
place-futures-market-order | write | Place a futures market order |
place-market-order | write | Place a market order on an exchange |
set-leverage | write | Set leverage for futures trading |
set-log-level | write | Set logging level |
set-margin-mode | write | Set margin mode for futures trading |
set-market-type | write | Set default market type for all exchanges |
set-proxy-config | write | Configure proxy settings for all exchanges |
test-proxy-connection | read | Test the proxy connection with a specified exchange |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
clear-cache, clear-exchange-cache
@modelcontextprotocol/sdk, ccxt, dotenv, lru-cache, p-queue, rxjs, zod, @types/node
Gates applied: no_behavioural_pass.
5fb86a7aea78full audit observations/trust-audit/mcp-server/doggybee__ccxt-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 5fb86a7aea78 | SAFE | B | 89 | first audit |
Questions
What is the CCXT MCP server?
High-performance CCXT MCP server for cryptocurrency exchange integration
What tools does CCXT expose?
24 in total: 14 read-only, 8 that write, and 2 that can delete or overwrite (clear-cache, clear-exchange-cache). Every one is listed on this page with its risk.
Is CCXT safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does CCXT need?
It reads PROXY_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does CCXT run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @mcpfun/mcp-server-ccxt at 1.2.2.
How current is this page?
The grade is for one exact copy of the source (5fb86a7aea78), read on 2026-10-07. The repository is watched and re-audited when it changes.