Skip to content

cc.accrue/mcp

by accrue.cc · remote · no sign-in to list tools · v2.0.0 · published by cc.accrue

Stablecoin Yield Index (SYX) and live USDC vault APYs across Ethereum, Base, Arbitrum.

Changes · 5
CompareRegistry entry

19 tools: 5 change things and 14 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http accrue https://accrue.cc/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

19 tools

Changes things 5Claude Code: ask
  • build_user_operationSecond step of the USDC-gas path.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Second step of the USDC-gas path. Pass back the draft from prepare_transaction unchanged. For usdc_path, add permit_signature (EIP-712 signature of the returned permit). For either path, add authorization_signature (EIP-7702) if prepare asked for one. Returns the final user operation plus its EIP-712 typed data and hash for you to sign. Nothing is sent.

    Annotations the server declares

    • title: Build USDC-Gas Operation
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • calculate_yieldProject compound returns for a USDC deposit into any ACCRUE vault or model portfolio over a given holding period.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Project compound returns for a USDC deposit into any ACCRUE vault or model portfolio over a given holding period. Uses live APY data and applies the ACCRUE platform fee, which is charged on PRINCIPAL (0.25%/yr direct, 0.50%/yr managed falling to 0.25% above $1M) and never on yield. Returns gross yield, platform fee, net yield and final balance. Because the fee is on principal, net yield can be negative over a short horizon — net_is_negative flags that. Use this when the user asks "how much would I earn" or "what would my $X grow to".

    Annotations the server declares

    • title: Calculate Projected Yield
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • prepare_transactionPrepare a deposit into or withdrawal from an ACCRUE vault for the calling agent's own wallet.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Prepare a deposit into or withdrawal from an ACCRUE vault for the calling agent's own wallet. Nothing is signed or sent. Returns (1) eth_path: ordinary unsigned transactions to send in order from the account, paying gas in ETH — ALWAYS returned; and (2) usdc_path: when available, the account can instead pay gas in USDC and hold no ETH at all — sign the returned USDC permit (and, on first use on the chain, the EIP-7702 authorisation, which keeps your address), then call build_user_operation. Prefer usdc_path when the account holds no ETH; eth_path always works. The USDC path shows a gas ceiling: the most the operation can cost; the actual charge is lower. Every precondition is checked first (allowlist, minimum deposit, balance, withdrawable liquidity), so a failure is reported before you sign anything. Amounts are in USDC, e.g. "25" or "12.5"; for a full withdrawal use amount "all".

    Annotations the server declares

    • title: Prepare Deposit or Withdrawal
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • recommend_strategyRecommend a vault or model portfolio for a user based on their risk profile and chain preference.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Recommend a vault or model portfolio for a user based on their risk profile and chain preference. Uses live APY data to choose the best current option. Returns a recommendation with reasoning. Use this when the user describes what they want ("I want safe yield on Base", "maximise returns on Ethereum") rather than asking about a specific vault. Always reminds users this is informational, not financial advice.

    Annotations the server declares

    • title: Recommend Yield Strategy
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • submit_user_operationFinal step of the USDC-gas path.Reads text others writeNo findings

    Why it is in this group

    • The name "submit_user_operation" says "submit": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Final step of the USDC-gas path. Pass user_operation from build_user_operation and your signature over its typed data (or hash). ACCRUE checks that the operation is an ACCRUE deposit or withdrawal for this account, paid through Circle's paymaster in USDC, and that you signed it — then relays it to the bundler. Returns user_op_hash; follow up with get_transaction_status. ACCRUE cannot alter a signed operation.

    Annotations the server declares

    • title: Submit USDC-Gas Operation
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 14Claude Code: allow
  • compare_vaultsCompare two or more ACCRUE vaults side by side.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "compare_vaults" says "compare": a word for reading.

    What it can reach

    • private-dataThe name "compare_vaults" says "compare" and "vault": it reads secrets.
    • private-dataThe description's first sentence says "compare" and "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Compare two or more ACCRUE vaults side by side. Returns each vault's live APYs, TVL, chain, and risk tier, plus a comparison summary highlighting the highest yield, highest TVL, and whether the vaults share a risk tier. Use this for "compare X and Y" or "is Aave or Compound better right now" type questions.

    Annotations the server declares

    • title: Compare Vaults
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_platform_infoGet high-level facts about the ACCRUE platform: fee structure, custody model, supported chains, wallets, KYC requirements, withdrawal terms, and AI agent integration status.No findings

    Why it is in this group

    • The name "get_platform_info" says "get": a word for reading.
    Description, as the server wrote it
    Get high-level facts about the ACCRUE platform: fee structure, custody model, supported chains, wallets, KYC requirements, withdrawal terms, and AI agent integration status. Use this when the user asks "what is ACCRUE", "how does ACCRUE work", "what are the fees", or anything about the platform itself rather than a specific vault.

    Annotations the server declares

    • title: Get Platform Info
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_portfolio_detailsGet full details on a single model portfolio: its underlying vault allocations, the live APY of each underlying vault, and the blended portfolio APY.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_portfolio_details" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get full details on a single model portfolio: its underlying vault allocations, the live APY of each underlying vault, and the blended portfolio APY. Use this when the user asks about a specific portfolio like "what is in Core on Ethereum" or "how does Foundation on Base work".

    Annotations the server declares

    • title: Get Portfolio Details
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_syx_componentsList the current SYX components with their live weights, APYs, and total value locked.Reads text others writeNo findings

    Why it is in this group

    • The name "get_syx_components" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List the current SYX components with their live weights, APYs, and total value locked. SYX is composed of 8 onchain USDC supply markets: Aave v3 (Ethereum, Base, Arbitrum), Compound v3 (Ethereum), and Morpho v2 Prime USDC vaults from Steakhouse Financial and Gauntlet (Ethereum, Base). Use this when the user asks what is inside SYX, or wants to see the per-component breakdown.

    Annotations the server declares

    • title: Get SYX Components
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_syx_historyGet historical SYX index readings.Reads text others writeNo findings

    Why it is in this group

    • The name "get_syx_history" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get historical SYX index readings. Use this when the user asks how SYX has moved over time, wants a chart of recent readings, or wants to compare current SYX to its recent trend. Returns time-series data points.

    Annotations the server declares

    • title: Get SYX History
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_syx_methodologyGet the full SYX methodology — how the index is constructed, which onchain components are included, how weights are calculated, the measurement windows, and the exclusion rules.Reads text others writeNo findings

    Why it is in this group

    • The name "get_syx_methodology" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get the full SYX methodology — how the index is constructed, which onchain components are included, how weights are calculated, the measurement windows, and the exclusion rules. Use this when the user asks "how is SYX calculated" or "what does SYX measure" or "what protocols does SYX include".

    Annotations the server declares

    • title: Get SYX Methodology
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_syx_valueGet the current Stablecoin Yield Index (SYX) value and rolling averages (7-day, 30-day, 90-day).Reads text others writeNo findings

    Why it is in this group

    • The name "get_syx_value" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get the current Stablecoin Yield Index (SYX) value and rolling averages (7-day, 30-day, 90-day). SYX is a TVL-weighted benchmark for conservative USDC yield, calculated directly from canonical onchain contracts on Ethereum, Base, and Arbitrum — not aggregated from third-party APIs. Use this when the user asks "what is the current stablecoin yield" or "what is SYX right now" or any benchmark/reference-rate question about USDC yield.

    Annotations the server declares

    • title: Get Current SYX Value
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_transaction_statusStatus of a submitted operation: pending, success or reverted, the transaction hash and explorer link, and what the account paid for the network fee (the exact USDC Circle charged)…Reads text others writeNo findings

    Why it is in this group

    • The name "get_transaction_status" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Status of a submitted operation: pending, success or reverted, the transaction hash and explorer link, and what the account paid for the network fee (the exact USDC Circle charged).

    Annotations the server declares

    • title: Get Transaction Status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_vault_detailsGet full details on a single ACCRUE yield vault by ID or name.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_vault_details" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_vault_details" says "get" and "vault": it reads secrets.
    • private-dataThe description's first sentence says "get" and "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get full details on a single ACCRUE yield vault by ID or name. Returns the live spot APY, 7-day realized APY, 30-day realized APY, TVL, chain, risk tier, underlying protocol, and metadata. Use this when the user asks about a specific vault like "tell me about Steakhouse Prime on Ethereum" or "how is the Aave Base vault doing".

    Annotations the server declares

    • title: Get Vault Details
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • list_model_portfoliosList all model portfolios on ACCRUE, organised per chain.Reads text others writeNo findings

    Why it is in this group

    • The name "list_model_portfolios" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List all model portfolios on ACCRUE, organised per chain. Each portfolio is a pre-built blend of underlying vaults sized to a risk profile. Returns each portfolio with its live blended APY computed from underlying vault yields. Use this when the user asks "what portfolios are available" or wants a one-click diversified option.

    Annotations the server declares

    • title: List Model Portfolios
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • list_vault_contractsList the ACCRUE vault and model-portfolio CONTRACTS an agent can deposit into on one chain, read live from the ACCRUE Registry (registry.approvedVaults()).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "list_vault_contracts" says "list": a word for reading.

    What it can reach

    • private-dataThe name "list_vault_contracts" says "list" and "vault": it reads secrets.
    • private-dataThe description's first sentence says "list" and "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List the ACCRUE vault and model-portfolio CONTRACTS an agent can deposit into on one chain, read live from the ACCRUE Registry (registry.approvedVaults()). Returns address, on-chain symbol and name, whether it is a portfolio, the minimum deposit, and — if you pass your account — whether you are allowlisted and your current share balance. Vault addresses differ between chains and three of them name DIFFERENT markets on Ethereum and Base: always use the address returned for the chain you transact on. During guarded testing, deposits require the account to be allowlisted.

    Annotations the server declares

    • title: List Vault Contracts
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • list_vaultsList all stablecoin yield vaults available on ACCRUE with their current live APYs, risk tiers, chains, and underlying protocols.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "list_vaults" says "list": a word for reading.

    What it can reach

    • private-dataThe name "list_vaults" says "list" and "vault": it reads secrets.
    • private-dataThe description's first sentence says "list" and "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List all stablecoin yield vaults available on ACCRUE with their current live APYs, risk tiers, chains, and underlying protocols. Returns spot, 7-day realized, and 30-day realized APYs for each vault. Use this when the user asks "what vaults are available", "what strategies does ACCRUE offer", or wants to browse options.

    Annotations the server declares

    • title: List All Yield Vaults
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • search_vaultsFilter ACCRUE vaults by chain, risk tier, protocol, and/or minimum APY.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "search_vaults" says "search": a word for reading.

    What it can reach

    • private-dataThe name "search_vaults" says "search" and "vault": it reads secrets.
    • private-dataThe description's first sentence says "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Filter ACCRUE vaults by chain, risk tier, protocol, and/or minimum APY. Returns the matching vaults with live APY data. Use this when the user wants to narrow down by criteria like "Base vaults only", "highest yield on Arbitrum", or "show me conservative options above 4%".

    Annotations the server declares

    • title: Search and Filter Vaults
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data7
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write18
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 2.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http accrue https://accrue.cc/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__accrue__get_syx_value",
      "mcp__accrue__get_syx_methodology",
      "mcp__accrue__get_syx_components",
      "mcp__accrue__get_syx_history",
      "mcp__accrue__list_vaults",
      "mcp__accrue__get_vault_details",
      "mcp__accrue__compare_vaults",
      "mcp__accrue__search_vaults",
      "mcp__accrue__list_model_portfolios",
      "mcp__accrue__get_portfolio_details",
      "mcp__accrue__get_platform_info",
      "mcp__accrue__search",
      "mcp__accrue__list_vault_contracts",
      "mcp__accrue__get_transaction_status"
    ],
    "ask": [
      "mcp__accrue__recommend_strategy",
      "mcp__accrue__calculate_yield",
      "mcp__accrue__prepare_transaction",
      "mcp__accrue__build_user_operation",
      "mcp__accrue__submit_user_operation"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as accrue. Review it before you use it.

Capability tags behind 18 rules
  • mcp__accrue__get_syx_value untrusted-input
  • mcp__accrue__get_syx_methodology untrusted-input
  • mcp__accrue__get_syx_components untrusted-input
  • mcp__accrue__get_syx_history untrusted-input
  • mcp__accrue__list_vaults private-data, untrusted-input
  • mcp__accrue__get_vault_details private-data, untrusted-input
  • mcp__accrue__compare_vaults private-data, untrusted-input
  • mcp__accrue__search_vaults private-data, untrusted-input
  • mcp__accrue__list_model_portfolios untrusted-input
  • mcp__accrue__get_portfolio_details private-data, untrusted-input
  • mcp__accrue__recommend_strategy untrusted-input
  • mcp__accrue__calculate_yield untrusted-input
  • mcp__accrue__search private-data, untrusted-input
  • mcp__accrue__list_vault_contracts private-data, untrusted-input
  • mcp__accrue__prepare_transaction untrusted-input
  • mcp__accrue__build_user_operation untrusted-input
  • mcp__accrue__submit_user_operation untrusted-input
  • mcp__accrue__get_transaction_status untrusted-input