santyvv-data — market & on-chain data
by santyvv.com · remote · local (npm) · no sign-in to list tools · v1.0.1 · published by com.santyvv
Market and on-chain crypto data for AI agents. Pay per call in USDC on Base (x402).
8 tools: 8 change things.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things8Claude Code: ask: see these tools
- Only reads0Claude Code: allow
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http tienda https://mcp.santyvv.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnficha_token
The input schema at properties.tokens.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.tokens.description: "...up to 10. Example: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
- Warnsaldo
The input schema at properties.token.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.token.description: "...ract (USDC on Base: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Changes things 8Claude Code: ask
catalogoWhat can be ordered, at what price and under what name.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What can be ordered, at what price and under what name. Includes this MCP server's tools and the equivalent HTTP routes. Free.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
estado_fuentesLive probe of every public source behind the data (response, HTTP status and latency).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Live probe of every public source behind the data (response, HTTP status and latency). Free: use it to decide whether a paid call is worth it, and to see where a number came from.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
ficha_tokenWhat a token is and what it is worth: name, symbol, decimals, supply, contract address and price per token.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The input schema at properties.tokens.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.tokens.description: "...up to 10. Example: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
Description, as the server wrote it What a token is and what it is worth: name, symbol, decimals, supply, contract address and price per token. Use it to confirm that an address is a real contract and what it represents. Cuesta $0.03 por llamada, en USDC sobre Base (protocolo x402).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
mercadoThe big picture: total market cap, Bitcoin dominance, 24 h change, the coins by market cap and the top movers.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it The big picture: total market cap, Bitcoin dominance, 24 h change, the coins by market cap and the top movers. This is the context question, not the one about a single asset. Cuesta $0.03 por llamada, en USDC sobre Base (protocolo x402).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
precioWhat an asset is worth right now, in USD, as a MEDIAN across several venues with its spread - not a single exchange's last trade.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What an asset is worth right now, in USD, as a MEDIAN across several venues with its spread - not a single exchange's last trade. Use it to quote, to compare venues or to spot a dislocated market. Cuesta $0.02 por llamada, en USDC sobre Base (protocolo x402).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
saldoWhat an address holds: the native balance of the network and, if you pass a token, that ERC-20 balance with its decimals.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The input schema at properties.token.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.token.description: "...ract (USDC on Base: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)."
Description, as the server wrote it What an address holds: the native balance of the network and, if you pass a token, that ERC-20 balance with its decimals. Use it to verify a payment or a holding without opening a block explorer. Cuesta $0.03 por llamada, en USDC sobre Base (protocolo x402).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
tvl_protocoloHow much money is deposited in a DeFi protocol (TVL in USD) with its 24 h and 7 day change.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it How much money is deposited in a DeFi protocol (TVL in USD) with its 24 h and 7 day change. The measure of a protocol's size and health before you interact with it. Cuesta $0.01 por llamada, en USDC sobre Base (protocolo x402).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
velasRecent candles for a trading pair at the interval you ask for (1m to 1d).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Recent candles for a trading pair at the interval you ask for (1m to 1d). What you need to compute trend or volatility, or to draw a chart without an exchange API key. Cuesta $0.01 por llamada, en USDC sobre Base (protocolo x402).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http tienda https://mcp.santyvv.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [],
"ask": [
"mcp__tienda__catalogo",
"mcp__tienda__estado_fuentes",
"mcp__tienda__precio",
"mcp__tienda__ficha_token",
"mcp__tienda__velas",
"mcp__tienda__mercado",
"mcp__tienda__tvl_protocolo",
"mcp__tienda__saldo"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as tienda. Review it before you use it.