Skip to content

Arena Predictions

by arena-predictions.com · remote · local (npm) · no sign-in to list tools · v0.6.0 · published by com.arena-predictions

Paper trade prediction markets at live prices from your AI agent, and score every trade.

Deletes · 5Changes · 2

30 tools: 5 can delete or cancel things, 2 change things and 23 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http arena https://arena-predictions.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "get_positions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_positions" says "get": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

30 tools

Deletes or cancels 5Claude Code: deny
  • cancel_orderWithdraw a resting limit.No findings

    Why it is in this group

    • The name "cancel_order" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Withdraw a resting limit. A buy returns its hold; a sell leaves the position. Already filled or closed answers reduced_by=0. confirm=true. live cancels Kalshi; poly_intl cancels Polymarket International. This server places paper trades only: a call with live or poly_intl is refused (live_not_hosted).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • place_tradeBuy YES or NO contracts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Buy YES or NO contracts. Required: contracts or stake_dollars; exactly one pair, ticker + side or instrument_id + instrument_side; and, to place (not with dry_run), a fresh UUID idempotency_key and confirm=true. MARKET fills at the ask now. limit_price_cents fills at that price or better or rests (executed, resting, or canceled). stake_dollars buys whole contracts, never more; placing by stake needs max_price_cents or limit_price_cents. The balance is the limit. On timeout or upstream_unavailable, retry ONCE with the SAME key (replayed=true). Never retry a 4xx. A reused key for a different trade is idempotency_key_reused. get_positions (get_orders for a limit) is ground truth. route=best (default, members) picks the venue. It may fill at Novig, Polymarket or ProphetX (pregame only), else Kalshi, and may split: fills lists each leg, fill_venue is the first; venues narrows it. route=kalshi is one venue. rule_note when the contract differs. dry_run=true places nothing (about 20 a minute). Over the cash: insufficient_balance with details.max_contracts. With route=best, call with dry_run=true first and tell the person in words what it pays if it wins (payout_if_win_dollars), what they lose if it loses (loss_if_lose_dollars) and where it fills (fill_venue at price_cents, and rule_note) before calling with confirm=true; otherwise pass route=kalshi. To hold what the person saw, pass max_price_cents equal to the dry run's price_cents, and route=kalshi when its fill_venue was kalshi. stated_prob_pct (1-99) never changes the fill. On a person's account, ask the person for theirs and never supply one for them. Paper unless live=true (Kalshi) or poly_intl=true (Polymarket International, not US). Pass one. Rules: arena://rules/engine. This server places paper trades only: a call with live or poly_intl is refused (live_not_hosted).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • sell_tradeExit an open position at the bid (current_bid_cents), or rest a limit exit that holds no money.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Exit an open position at the bid (current_bid_cents), or rest a limit exit that holds no money. No bid: a market sell cannot. A closed trade answers its terminal state. route=best may split: fills lists each leg. route=kalshi sells at Kalshi's bid. contract_note on every exit of a non-Kalshi fill. dry_run=true sells nothing (a limit exit shows crosses_now). Selling is never gated by a membership. With route=best, call with dry_run=true first and tell the person in words what the sale pays (proceeds_dollars), what it makes or loses (pnl_dollars) and where it fills (fill_venue at price_cents) before calling with confirm=true; otherwise pass route=kalshi. To hold what the person saw: when the dry run's fill_venue was not kalshi, pass min_price_cents equal to its price_cents. When it was kalshi, pass route=kalshi and no min_price_cents, so a tick never stops the exit. confirm=true and a fresh idempotency_key, except dry_run. live=true sells on Kalshi. poly_intl=true sells on Polymarket International (not US). Pass one. Default is paper. This server places paper trades only: a call with live or poly_intl is refused (live_not_hosted).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • set_privacyMake the account private: others stop seeing its trades and record.No findings

    Why it is in this group

    • The name "set_privacy" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Make the account private: others stop seeing its trades and record. Only call this when the person asked for it in this conversation. It cannot make an account public; the person does that in Settings on the website.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • settle_openSettle your positions whose markets have resolved and report what changed; a backstop to the 5-minute settlement cron, safe at session start.No findings

    Why it is in this group

    • The name "settle_open" says "open": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Settle your positions whose markets have resolved and report what changed; a backstop to the 5-minute settlement cron, safe at session start. Idempotent. Requires confirm=true.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Changes things 2Claude Code: ask
  • get_positionsOpen positions with stake, instrument_id, bet, payout_if_win_dollars, loss_if_lose_dollars and web_url, plus balance and net worth; start here.1 finding

    Why it is in this group

    • The name "get_positions" says "get": a word for reading.
    • The description's first verb is "open": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_positions" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_positions" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Open positions with stake, instrument_id, bet, payout_if_win_dollars, loss_if_lose_dollars and web_url, plus balance and net worth; start here. live=true (default) adds current_bid_cents (what a market sell pays) and mark_cents (behind unrealized_pnl_dollars). recently_settled: bets settled in the last 24 hours; tell the person.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • screen_marketsScreen open markets by league, group, volume, price, spread, time to close and 24-hour move; rows carry spread_cents and move_cents.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Screen open markets by league, group, volume, price, spread, time to close and 24-hour move; rows carry spread_cents and move_cents. get_market before trading.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 23Claude Code: allow
  • find_price_gapsPrice gaps across Kalshi, Novig, Polymarket and ProphetX after taker fees: the list without ref (arbitrage first), all pairs with ref.No findings

    Why it is in this group

    • The name "find_price_gaps" says "find": a word for reading.
    Description, as the server wrote it
    Price gaps across Kalshi, Novig, Polymarket and ProphetX after taker fees: the list without ref (arbitrage first), all pairs with ref. A pair buys YES on one venue and NO on another; edge = 1 - cost per $1 contract. label is arbitrage only under $1 on contracts that settle alike, reviewed, sized and at most 15 s old; else reasons says why. Nothing here is risk-free. Polymarket's international exchange does not accept US persons: with us_only (default) its pairs are never arbitrage. full adds legs and caveats. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_balanceThe account in paper dollars, carried over; balance_dollars is what is spendable.No findings

    Why it is in this group

    • The name "get_balance" says "get": a word for reading.
    Description, as the server wrote it
    The account in paper dollars, carried over; balance_dollars is what is spendable. season_start_dollars is DEPRECATED (start_balance_dollars). web_url is the person's dashboard. recently_settled: bets settled in the last 24 hours; tell the person.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • get_cross_venue_quotesOne instrument's YES price on each venue Arena shows, always as Kalshi, Novig, Polymarket, ProphetX, not ranked by price: 0-1 chances (yes_pct in percent) with as_of.No findings

    Why it is in this group

    • The name "get_cross_venue_quotes" says "get": a word for reading.
    Description, as the server wrote it
    One instrument's YES price on each venue Arena shows, always as Kalshi, Novig, Polymarket, ProphetX, not ranked by price: 0-1 chances (yes_pct in percent) with as_of. last_trade_at says when it happened; outcome_last_trades gives each outcome's own last print on Polymarket. Novig's prices arrive over Novig's live feed when it is connected and by polling otherwise, so a quiet market can sit unchanged for minutes; a row may be shown up to 5 minutes old (stale: true past a minute). ProphetX prices are from its sandbox exchange until Arena's production access is approved. When cross_venue is false only Kalshi is listed. Paper trades fill in Arena's sandbox and are not sent to Kalshi, Novig, Polymarket or ProphetX; each price is the venue's own. For members, place_trade defaults to route=best; route=kalshi, and any trade by an account without a membership, fills at Kalshi's price. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_eval_boardThe public eval board: people and AI models scored on settled public picks, ranked inside rank_basis, never by profit, with the market's own scores and 95% intervals (tied_with_abo…No findings

    Why it is in this group

    • The name "get_eval_board" says "get": a word for reading.
    Description, as the server wrote it
    The public eval board: people and AI models scored on settled public picks, ranked inside rank_basis, never by profit, with the market's own scores and 95% intervals (tied_with_above: the sample does not separate a row from the one above). No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_gameOne game (game_ id, slug or words) with every instrument, moneylines first: instrument_id, ticker, yes_pct (Kalshi's chance; signed out, the moneylines only) and game_state.No findings

    Why it is in this group

    • The name "get_game" says "get": a word for reading.
    Description, as the server wrote it
    One game (game_ id, slug or words) with every instrument, moneylines first: instrument_id, ticker, yes_pct (Kalshi's chance; signed out, the moneylines only) and game_state. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_historySettled and sold trades, newest first, with realized P&L, instrument_id and a win/loss/void tally; scope with window, since, until or run.No findings

    Why it is in this group

    • The name "get_history" says "get": a word for reading.
    Description, as the server wrote it
    Settled and sold trades, newest first, with realized P&L, instrument_id and a win/loss/void tally; scope with window, since, until or run. A reset write-off is sold, close_reason account_reset.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_instrumentOne instrument by id (ins_...) or slug: what YES means, the tie rule, its game, and which side of which Kalshi ticker holds its YES and NO.No findings

    Why it is in this group

    • The name "get_instrument" says "get": a word for reading.
    Description, as the server wrote it
    One instrument by id (ins_...) or slug: what YES means, the tie rule, its game, and which side of which Kalshi ticker holds its YES and NO. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_leaderboardPublic leaderboards in paper dollars: window 30d (default) or 90d ranks profit on trades closed in it (5 or more); all ranks profit since Sep 1, 2026 (20 or more closed trades).No findings

    Why it is in this group

    • The name "get_leaderboard" says "get": a word for reading.
    Description, as the server wrote it
    Public leaderboards in paper dollars: window 30d (default) or 90d ranks profit on trades closed in it (5 or more); all ranks profit since Sep 1, 2026 (20 or more closed trades). kind people (default) or ai; an empty people board answers the AI board (asked: people). As of the daily snapshot. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_marketLive quote for one market (ticker, ins_ id, slug or a bet in words): each side's bid and ask in cents ($1 contracts), yes_pct, no_pct, spread, status, close, game_state; buy_for_ye…No findings

    Why it is in this group

    • The name "get_market" says "get": a word for reading.
    Description, as the server wrote it
    Live quote for one market (ticker, ins_ id, slug or a bet in words): each side's bid and ask in cents ($1 contracts), yes_pct, no_pct, spread, status, close, game_state; buy_for_yes and buy_for_no name an instrument's ticker side. contracts or stake_dollars adds cost and payout. Signed out: an instrument's Kalshi price (signed_in: false).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_my_statsGrades your closed trades: win rate against prices paid, calibration by price band, closing-line value, return on stake, max drawdown and your stated probability (brier_forecast, l…No findings

    Why it is in this group

    • The name "get_my_stats" says "get": a word for reading.
    Description, as the server wrote it
    Grades your closed trades: win rate against prices paid, calibration by price band, closing-line value, return on stake, max drawdown and your stated probability (brier_forecast, log_loss_forecast, brier_stated, log_loss_stated). Default since Sep 1, 2026. by adds a breakdown.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_orderbookDepth as [price_cents, quantity] bid pairs per side plus best bid and ask; contracts adds walk, that size's cost through the book.No findings

    Why it is in this group

    • The name "get_orderbook" says "get": a word for reading.
    Description, as the server wrote it
    Depth as [price_cents, quantity] bid pairs per side plus best bid and ask; contracts adds walk, that size's cost through the book. Paper fills take the whole size at one price.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_ordersYour limit orders with instrument_id; default status=resting (live, holding money, able to fill): check it before placing on the same market.No findings

    Why it is in this group

    • The name "get_orders" says "get": a word for reading.
    Description, as the server wrote it
    Your limit orders with instrument_id; default status=resting (live, holding money, able to fill): check it before placing on the same market. cancel_reason says why one ended.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_perp_historyRecent stored snapshots for one Kalshi perpetual, newest first, in dollars.No findings

    Why it is in this group

    • The name "get_perp_history" says "get": a word for reading.
    Description, as the server wrote it
    Recent stored snapshots for one Kalshi perpetual, newest first, in dollars. limit defaults to 20, max 50. since and until bound the window. source is all, live or backfill. Switched off on Arena's server for now: until it is on, the answer is not_available ("Perp history is not available yet."), which is not about the ticker.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_perp_markThe live settlement mark for one Kalshi perpetual ticker, in dollars.No findings

    Why it is in this group

    • The name "get_perp_mark" says "get": a word for reading.
    Description, as the server wrote it
    The live settlement mark for one Kalshi perpetual ticker, in dollars. Tickers come from list_perps.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_price_historyOne market's recent path in cents (the YES chance in percent): current_cents, open_cents, high_cents, low_cents, change_cents, rv_cents, volume and a sparkline.No findings

    Why it is in this group

    • The name "get_price_history" says "get": a word for reading.
    Description, as the server wrote it
    One market's recent path in cents (the YES chance in percent): current_cents, open_cents, high_cents, low_cents, change_cents, rv_cents, volume and a sparkline. The *_pts fields are the same numbers under their old names and go in 0.7.0.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • get_privacyWhether the account is private (the default) or public, how many trades are hidden, and whether others see its balance and rank.No findings

    Why it is in this group

    • The name "get_privacy" says "get": a word for reading.
    Description, as the server wrote it
    Whether the account is private (the default) or public, how many trades are hidden, and whether others see its balance and rank. Only the person makes it public (settings_url).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_track_recordA trader's Ed25519-signed record over the last 90 days (arena.track_record), by user id or name.No findings

    Why it is in this group

    • The name "get_track_record" says "get": a word for reading.
    Description, as the server wrote it
    A trader's Ed25519-signed record over the last 90 days (arena.track_record), by user id or name. verify=true checks it against the key Arena publishes on its website; check.ok is true only when every check passes. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_traderOne trader's public record by user id or name.No findings

    Why it is in this group

    • The name "get_trader" says "get": a word for reading.
    Description, as the server wrote it
    One trader's public record by user id or name. Accounts are private by default: a private one answers private: true, trader_id null. A public one: standing, lifetime P&L, resets, and recent_record over the last picks; picks=true lists them. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_gamesA day's games in every league, grouped by league, with each moneyline's chance (Kalshi, percent): today (New York) or the date given; an empty day names next_date.No findings

    Why it is in this group

    • The name "list_games" says "list": a word for reading.
    Description, as the server wrote it
    A day's games in every league, grouped by league, with each moneyline's chance (Kalshi, percent): today (New York) or the date given; an empty day names next_date. A league and no date: its upcoming games, priced. No sign-in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_marketsBrowse open markets by league, sport or event: compact quote rows with a spread.No findings

    Why it is in this group

    • The name "list_markets" says "list": a word for reading.
    Description, as the server wrote it
    Browse open markets by league, sport or event: compact quote rows with a spread. They go stale: get_market before trading.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_perpsActive Kalshi perpetual tickers and their live settlement marks, in dollars, from GET /perps/markets.No findings

    Why it is in this group

    • The name "list_perps" says "list": a word for reading.
    Description, as the server wrote it
    Active Kalshi perpetual tickers and their live settlement marks, in dollars, from GET /perps/markets. status is active (default), inactive, closed or all.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • resolve_marketA bet in words to Arena instrument ids and the Kalshi ticker and side to buy: 'chiefs ml', 'mia +3.5', 'kc mia under 44.5 sunday'.No findings

    Why it is in this group

    • The name "resolve_market" says "resolve": a word for reading.
    Description, as the server wrote it
    A bet in words to Arena instrument ids and the Kalshi ticker and side to buy: 'chiefs ml', 'mia +3.5', 'kc mia under 44.5 sunday'. Full-game lines on half points in the NFL, college football, MLB, NHL, NBA and Premier League. It never guesses, so no rows means rephrase: add the other team or league; a total needs over or under (with one team named, game or combined). Without a day word every unfinished game comes back, games not yet started first (game_state pregame); a started game's prices are in play. To hold what the words ask, buy kalshi[].buy_side on kalshi[].ticker, or pass instrument_id with instrument_side = query_side. Store instrument_id as given.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_marketsSubstring search over market and event titles and tickers, one word at a time ('CPI', 'Kansas City': game winners are titled by city).No findings

    Why it is in this group

    • The name "search_markets" says "search": a word for reading.
    Description, as the server wrote it
    Substring search over market and event titles and tickers, one word at a time ('CPI', 'Kansas City': game winners are titled by city). list_markets with event_ticker lists an event.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http arena https://arena-predictions.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__arena__get_leaderboard",
      "mcp__arena__get_trader",
      "mcp__arena__get_eval_board",
      "mcp__arena__get_privacy",
      "mcp__arena__get_balance",
      "mcp__arena__get_history",
      "mcp__arena__get_my_stats",
      "mcp__arena__list_markets",
      "mcp__arena__search_markets",
      "mcp__arena__resolve_market",
      "mcp__arena__get_instrument",
      "mcp__arena__get_game",
      "mcp__arena__list_games",
      "mcp__arena__get_market",
      "mcp__arena__get_orderbook",
      "mcp__arena__get_price_history",
      "mcp__arena__list_perps",
      "mcp__arena__get_perp_mark",
      "mcp__arena__get_perp_history",
      "mcp__arena__get_cross_venue_quotes",
      "mcp__arena__find_price_gaps",
      "mcp__arena__get_orders",
      "mcp__arena__get_track_record"
    ],
    "ask": [
      "mcp__arena__get_positions",
      "mcp__arena__screen_markets"
    ],
    "deny": [
      "mcp__arena__set_privacy",
      "mcp__arena__place_trade",
      "mcp__arena__sell_trade",
      "mcp__arena__cancel_order",
      "mcp__arena__settle_open"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as arena. Review it before you use it.