Sardine: Kalshi crypto settlement history

info.sardine/sardinesardine.infostreamable-httpv0.1.1Scanned 42 minutes ago

How often Kalshi BTC/ETH/XRP contracts settled YES, counted not forecast, with a public record

7 tools: 2 change things and 5 only read.

Reads private data · 2
Reads text others write · 7
Can send data out · 0
1 finding

Anlyon alternative

2 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

7 tools

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

backtest_ruleWould this rule have made money?Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Would this rule have made money? Replays recorded Kalshi quotes, second by second. Describe a rule for Kalshi's 15-minute crypto up/down contracts: which side to buy, when (minutes left), at what prices (cents), and optionally only when Sardine's history beats Kalshi's ask plus fee by `min_gap_cents` (side BEST picks whichever side has the larger gap). Sardine replays its per-second recordings of Kalshi's order book: one trade per window, a limit order at the ask landing after `latency_seconds`, filled only up to the size resting there, Kalshi's real fee, and Kalshi's official settlement. Returns profit per contract after fees with a 95% interval, win rate, fill behaviour, a zero-latency comparison (exposes stale-quote illusions), a first-half/second-half stability check, breakdowns by minutes left and price, and warnings. Results only; no raw data. Dates are UTC YYYY-MM-DD. Present results as what happened historically, never as a forecast.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
get_live_boardOpen Kalshi contracts right now, each with Kalshi's price beside Sardine's count.Reads text others write1 finding
Why it is in this group
- The name "get_live_board" says "get": a word for reading.
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_live_board" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_live_board" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Open Kalshi contracts right now, each with Kalshi's price beside Sardine's count. Optionally filter to one market. Each row has the contract, Kalshi's ask and fee, the historical settlement rate with its interval and sample size, and a plain-English sentence describing the comparison.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true

Only reads 5Looks things up and changes nothing.Show 5 read-only tools

get_rate_tableThe full lookup table behind every Sardine number for one series.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_rate_table" says "get": a word for reading.
What it can reach
- private-dataThe name "get_rate_table" says "get" and "table": it reads databases.
- private-dataThe description's first sentence says "table": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The full lookup table behind every Sardine number for one series. Each row is a (distance-from-strike, time-left) bucket: distance in volatility units, seconds left, the share that settled YES, its 95% interval, and the number of independent windows counted.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
get_settlement_rateHow often has a contract like this one settled in favour of `side`?Reads text others writeNo findings
Why it is in this group
- The name "get_settlement_rate" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
How often has a contract like this one settled in favour of `side`? Uses the asset's live spot price. Give the contract's strike (target price), the minutes left until it settles, and optionally Kalshi's ask in dollars (0.01-0.99) to get Kalshi's fee and all-in price on the same line. Returns the historical settlement rate, its 95% interval and the number of past windows counted. A small `windows_counted` means a weak answer.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
get_track_recordHow accurate Sardine's published numbers have been, scored against settlements.Reads text others writeNo findings
Why it is in this group
- The name "get_track_record" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
How accurate Sardine's published numbers have been, scored against settlements. For each series and probability bucket: what Sardine said, what actually settled, and the miss in points. Use this before relying on any number.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
list_datasetsDownloadable CSV history files, with row counts, date ranges and URLs.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_datasets" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Downloadable CSV history files, with row counts, date ranges and URLs. Files open directly in Excel, pandas or any CSV reader. Credit "Sardine (sardine.info)" when you use them.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
list_marketsList the Kalshi series Sardine covers, and whether each is currently served.Reads text others writeNo findings
Why it is in this group
- The name "list_markets" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the Kalshi series Sardine covers, and whether each is currently served. Each entry gives the Sardine key (e.g. "BTC-15M"), the Kalshi series ticker, the window length, and the latest calibration check: the largest gap, in probability points, between what Sardine published and what then settled.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_rate_table
list_datasets
Reads text others write7: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; backtest_rule
get_live_board
get_rate_table
get_settlement_rate
get_track_record
list_datasets
list_markets
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnget_live_board
The server marks "get_live_board" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_live_board" says "get": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http sardine https://sardine.info/mcp

claude mcp add --transport http sardine https://sardine.info/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__sardine__list_markets",
      "mcp__sardine__get_settlement_rate",
      "mcp__sardine__get_rate_table",
      "mcp__sardine__get_track_record",
      "mcp__sardine__list_datasets"
    ],
    "ask": [
      "mcp__sardine__get_live_board",
      "mcp__sardine__backtest_rule"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sardine. Review it before you use it.

Capability tags behind 7 rules

mcp__sardine__list_markets untrusted-input
mcp__sardine__get_settlement_rate untrusted-input
mcp__sardine__get_live_board untrusted-input
mcp__sardine__get_rate_table private-data, untrusted-input
mcp__sardine__get_track_record untrusted-input
mcp__sardine__list_datasets private-data, untrusted-input
mcp__sardine__backtest_rule untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/info.sardine/sardine/verify?hash=7e96734b514a5087bf1da94baafa14d8f1a1c0eecd8f3ddfdb20ec942f9d0147" | jq -e '.changed == false'

Pinned hash 7e96734b514a, from Oct 26, 2026, 19:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/info.sardine/sardine/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/info.sardine/sardine.svg)](https://anlyon.dev/servers/info.sardine/sardine)

Source: MCP Registry. Synced Oct 26, 2026, 19:19 UTC.