LayerHop

by layerhop.com · remote · local (npm) · no sign-in to list tools · v0.5.0 · published by com.layerhop

Best-price cross-chain swap quotes across 70 chains (EVM + Solana). Holds no keys, never signs.

Deletes · 1Final · 2Changes · 5

Compare Registry entry

15 tools: 1 can delete or cancel things, 2 do something that can't be undone, 5 change things and 7 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone2Claude Code: ask: see these tools
Changes things5Claude Code: ask: see these tools
Only reads7Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http layerhop https://mcp.layerhop.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnget_swap_link
The server marks "get_swap_link" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "get_swap_link" says "get": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

15 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

disable_deposit_addressDisable a deposit address: LayerHop stops tracking it (no more orders or webhooks for it).No findings
Why it is in this group
- The name "disable_deposit_address" says "disable": a word for a change.
- The description says "Cannot be undone".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Disable a deposit address: LayerHop stops tracking it (no more orders or webhooks for it). The provider may still process funds sent to it later, so the user must stop using it. Cannot be undone. Confirm with the user first. Needs a LayerHop API key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Can't be undone 2Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

create_deposit_addressCreate an address the user sends tokens to; every deposit is swapped/bridged and delivered as toToken on toChain to recipient.No findings
Why it is in this group
- The name "create_deposit_address" says "create": a word for a change.
- The input addresses people (input.recipient): what it sends cannot be taken back.
Description, as the server wrote it
Create an address the user sends tokens to; every deposit is swapped/bridged and delivered as toToken on toChain to recipient. No wallet connection or signing needed. Non-custodial: the address belongs to the liquidity provider (Relay), LayerHop never holds funds. Tell the user: send ONLY srcToken on srcChain to the address (other tokens or chains may be lost for good), at least $1 worth; refundTo must be the user's own address on srcChain, never an exchange (CEX) deposit address. Needs a LayerHop API key; test keys (lh_test_) give a fake sandbox address that must never receive real funds. The LayerHop MCP server holds no private keys and never signs or broadcasts transactions.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_swap_linkCreate a https://layerhop.com/swap link prefilled with the swap, which the user opens to review the live quote and fees and sign in their own wallet.1 finding
Why it is in this group
- The name "get_swap_link" says "get": a word for reading.
- The description's first verb is "create": a word for a change.
- The input addresses people (input.recipient): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "get_swap_link" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "get_swap_link" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Create a https://layerhop.com/swap link prefilled with the swap, which the user opens to review the live quote and fees and sign in their own wallet. This is the default, safest way to execute a swap. The LayerHop MCP server holds no private keys and never signs or broadcasts transactions. The amount is in human units.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

build_transactionTurn a quoteId from get_quote into the UNSIGNED transaction the user's own wallet must sign: EVM {chainId, to, data, value in wei, optional ERC-20 approval to send first} or Solana…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Turn a quoteId from get_quote into the UNSIGNED transaction the user's own wallet must sign: EVM {chainId, to, data, value in wei, optional ERC-20 approval to send first} or Solana {serializedTx base64}. Includes plain-language signing steps. The LayerHop MCP server holds no private keys and never signs or broadcasts transactions. Only use this when the user has their own signer and explicitly wants raw transaction data, after they confirmed the quote; otherwise give them the swap link.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
refresh_deposit_addressAsk LayerHop to check a deposit address for new deposits right away (instead of waiting for the next scheduled check).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Ask LayerHop to check a deposit address for new deposits right away (instead of waiting for the next scheduled check). Call it when the user says they sent funds, then call get_deposit_address after ~15-30 s. Needs a LayerHop API key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
report_submittedTell LayerHop that the user's wallet broadcast the transaction for a quoteId, so the order is tracked (status, webhooks).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Tell LayerHop that the user's wallet broadcast the transaction for a quoteId, so the order is tracked (status, webhooks). Call this once after broadcasting, with the EVM tx hash (0x + 64 hex) or Solana signature. Idempotent. Does not sign or send anything.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
simulate_depositTEST MODE ONLY (lh_test_ key and a test deposit address): record a fake deposit so the integration can be tested end to end; it becomes a test order that settles with webhooks.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
TEST MODE ONLY (lh_test_ key and a test deposit address): record a fake deposit so the integration can be tested end to end; it becomes a test order that settles with webhooks. The amount decides the outcome: base units ending in 4001 -> refunded, 4002 -> failed, anything else -> filled. Moves no real funds. Fails with a live key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
simulate_transactionBuild the transaction for a quoteId and dry-run it on-chain (EVM eth_call + gas estimate from the sender; Solana simulateTransaction) without sending anything or recording an order…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Build the transaction for a quoteId and dry-run it on-chain (EVM eth_call + gas estimate from the sender; Solana simulateTransaction) without sending anything or recording an order. Reports whether it would succeed, gas / compute units, whether an ERC-20 approval is still needed, and the error if it would fail. Read-only: The LayerHop MCP server holds no private keys and never signs or broadcasts transactions.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

Only reads 7Looks things up and changes nothing.Claude Code: allow

get_deposit_addressGet one deposit address with its 20 most recent deposits (orders, quoteId starting with dep_): amount deposited and delivered, status (submitted, pending, filled, refunded, failed)…No findings
Why it is in this group
- The name "get_deposit_address" says "get": a word for reading.
Description, as the server wrote it
Get one deposit address with its 20 most recent deposits (orders, quoteId starting with dep_): amount deposited and delivered, status (submitted, pending, filled, refunded, failed) and tx hashes. Tell the user: send ONLY srcToken on srcChain to the address (other tokens or chains may be lost for good), at least $1 worth; refundTo must be the user's own address on srcChain, never an exchange (CEX) deposit address. Needs a LayerHop API key; test keys (lh_test_) give a fake sandbox address that must never receive real funds. Read-only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_order_statusCheck the status of a swap or bridge after the source transaction was sent: pending, filled (funds delivered), refunded, failed, or unknown (some same-chain providers; check the tx…No findings
Why it is in this group
- The name "get_order_status" says "get": a word for reading.
Description, as the server wrote it
Check the status of a swap or bridge after the source transaction was sent: pending, filled (funds delivered), refunded, failed, or unknown (some same-chain providers; check the tx on an explorer). Read-only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_quoteGet the best price to swap or bridge tokens, within one chain or across chains (EVM <-> Solana).No findings
Why it is in this group
- The name "get_quote" says "get": a word for reading.
Description, as the server wrote it
Get the best price to swap or bridge tokens, within one chain or across chains (EVM <-> Solana). Asks every liquidity provider and returns the best quote plus alternatives with human-readable amounts, minimum received after slippage, fees (LayerHop fee, partner fee, provider fee, gas) and ETA. Returns a quoteId (valid until expiresAt) and a layerhop.com swapLink a human can open to review and sign. Read-only: The LayerHop MCP server holds no private keys and never signs or broadcasts transactions. Always show the user the fees and output and get confirmation before proceeding.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_chainsList every blockchain LayerHop can swap from or to: slug, numeric chain id, name, VM type (evm or svm = Solana) and native coin.No findings
Why it is in this group
- The name "list_chains" says "list": a word for reading.
Description, as the server wrote it
List every blockchain LayerHop can swap from or to: slug, numeric chain id, name, VM type (evm or svm = Solana) and native coin. Read-only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_deposit_addressesList the deposit addresses of the API key's account and mode (live or test), newest first: address, route, status, deposit count.No findings
Why it is in this group
- The name "list_deposit_addresses" says "list": a word for reading.
Description, as the server wrote it
List the deposit addresses of the API key's account and mode (live or test), newest first: address, route, status, deposit count. Needs a LayerHop API key. Read-only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_ordersList LayerHop orders (swaps built or submitted through LayerHop) where the address is the sender or recipient, newest first, with status.No findings
Why it is in this group
- The name "list_orders" says "list": a word for reading.
Description, as the server wrote it
List LayerHop orders (swaps built or submitted through LayerHop) where the address is the sender or recipient, newest first, with status. Public data (addresses only). Read-only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_tokensList LayerHop's built-in tokens on one chain (symbol, contract address or mint, decimals).No findings
Why it is in this group
- The name "list_tokens" says "list": a word for reading.
Description, as the server wrote it
List LayerHop's built-in tokens on one chain (symbol, contract address or mint, decimals). Symbols can be used directly in get_quote; other tokens can be quoted by address. Read-only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.5.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http layerhop https://mcp.layerhop.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__layerhop__list_chains",
      "mcp__layerhop__list_tokens",
      "mcp__layerhop__get_quote",
      "mcp__layerhop__get_order_status",
      "mcp__layerhop__list_orders",
      "mcp__layerhop__list_deposit_addresses",
      "mcp__layerhop__get_deposit_address"
    ],
    "ask": [
      "mcp__layerhop__build_transaction",
      "mcp__layerhop__simulate_transaction",
      "mcp__layerhop__report_submitted",
      "mcp__layerhop__get_swap_link",
      "mcp__layerhop__create_deposit_address",
      "mcp__layerhop__refresh_deposit_address",
      "mcp__layerhop__simulate_deposit"
    ],
    "deny": [
      "mcp__layerhop__disable_deposit_address"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as layerhop. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.layerhop/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:58 UTC.

For agents: Markdown · JSON · report this listing