robinhood-toolkitCAUTION
Build on Robinhood Chain and Robinhood Crypto: verified network constants, a chain SDK, a read-only MCP server, runnable examples, and 64 build prompts.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
robinhood-toolkit
Build on Robinhood Chain and Robinhood Crypto. Tools, runnable examples, and 64 build prompts.
Quick start · Build prompts · Examples · Networks · Deploy
Robinhood opened up to developers on two fronts: Robinhood Chain, an Arbitrum Orbit L2 that went to public mainnet on 2026-07-01 with permissionless contract deploys, and the Robinhood Crypto REST API for programmatic trading. A third front, agentic trading over MCP, currently covers equities and options with crypto support announced as rolling out.
This repository is the practical layer on top of all three: network constants you can trust, code that runs as written, and a prompt library you can hand to a coding agent to build any piece of it.
Why this exists
The official documentation tells you what the endpoints are. It does not tell you how to wire a datafeed into a candlestick chart, how to structure a strategy loop that will not liquidate you at 4am on a 24/7 venue, or how to get the same codebase onto five different hosts. That gap is what this fills.
Every fact here was verified against a live source. Network parameters were confirmed by direct RPC calls rather than copied from documentation. Anything that could not be verified is labeled UNVERIFIED inline with instructions for checking it yourself.
Network parameters
9d358a95a896OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add robinhood-chain-mcp --env ROBINHOOD_MAINNET_RPC_URL=${ROBINHOOD_MAINNET_RPC_URL} --env ROBINHOOD_TESTNET_RPC_URL=${ROBINHOOD_TESTNET_RPC_URL} -- npx -y [email protected]Exposed tools (22)
14 read · 8 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
cancel_crypto_order | write | |
cancel_order | write | Cancel an open order. |
estimate_order_cost | write | |
get_accounts | read | List brokerage accounts. |
get_balance | read | |
get_chain_info | read | |
get_order_status | write | |
get_portfolio | read | |
get_positions | read | List current equity positions. |
get_quote | read | |
get_token_balance | read | |
get_token_info | read | |
get_transaction | read | |
list_orders | read | List recent orders. |
list_trading_pairs | read | |
place_crypto_order | write | |
place_equity_order | write | Submit an equity order. |
read_contract | read | |
review_crypto_order | write | |
review_equity_order | write | Simulate an order and return pre-trade warnings. |
search_pairs | read | |
verify_token_address | read |
Trust audit
CAUTIONgrade D · trust 68/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (3 observation(s))
- Network
- declared (11 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
echo "== deploying Beacon =="
forge create src/Beacon.sol:Beacon \
BEACON=$(jq -r .deployedTo deploy.json)
echo "BEACON=$BEACON"
CODESIZE=$(cast code "$BEACON" --rpc-url "$RH_TESTNET_RPC" | wc -c)
_setChainWithDefaultRpcUrl("anvil", ChainData("Anvil", 31337, "http://127.0.0.1:8545"));apiKey: 'rh-api-6148effc-c0b1-486c-8940-a1d099456be6',
apiKey: 'rh-api-6148effc-c0b1-486c-8940-a1d099456be6',
rpc-console.js
.gitmodules
.gcloudignore
.nojekyll
console.log(` ${mark} ${token.address}`)console.log(` name ${JSON.stringify(token.name)}`)console.log(` symbol ${JSON.stringify(token.symbol)}`)console.log(` decimals ${token.decimals}`)console.log(` supply ${formatToken(token.totalSupply, token.decimals)}`)import { addChainParams } from '../../packages/network/src/wallet-config.js';const outPath = resolve(here, '../../../reports/bridge-tokens.json')
const DEFAULT_POLICY_PATH = fileURLToPath(new URL('../../config/agent-policy.json', import.meta.url));import { DEFAULT_PAIR } from '../../src/dexscreener.js'import { bySeverity, unverified } from '../../../packages/risk/src/assumptions.js'Connected to fork at http://127.0.0.1:8545 (chain 4663)
const FORK_RPC = process.env.FORK_RPC || 'http://127.0.0.1:8545'
-X POST http://127.0.0.1:8545 -H 'content-type: application/json' \
Gates applied: no_behavioural_pass.
9d358a95a896full audit observations/trust-audit/mcp-server/nirholas__robinhood-toolkit.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 9d358a95a896 | CAUTION | D | 68 | first audit |
Questions
What is the robinhood-toolkit MCP server?
Build on Robinhood Chain and Robinhood Crypto: verified network constants, a chain SDK, a read-only MCP server, runnable examples, and 64 build prompts.
What tools does robinhood-toolkit expose?
22 in total: 14 read-only, 8 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is robinhood-toolkit safe to connect to an agent?
With care. The audit graded it D (68/100) and found 25 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does robinhood-toolkit need?
It reads ALCHEMY_API_KEY, PRIVATE_KEY, RH_API_KEY, RH_DEPLOYER_KEY, RH_PRIVATE_KEY, ROBINHOOD_MAINNET_RPC_URL and ROBINHOOD_TESTNET_RPC_URL from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does robinhood-toolkit run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @robinhood-toolkit/site at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (9d358a95a896), read on 2026-10-10. The repository is watched and re-audited when it changes.