Skip to content

CoinRithm Agent Trading

by CoinRithm · remote · local (npm) · no sign-in to list tools · v0.7.20 · published by GitHub user CoinRithm

Keyless prediction-market data across 12 venues plus paper-trading of crypto spot, futures, and PM.

Deletes · 2Final · 1Changes · 26

49 tools: 2 can delete or cancel things, 1 do something that can't be undone, 26 change things and 20 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http trading https://mcp.coinrithm.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • The server marks "export_agent_ledger" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "export_run_evidence" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "export_run_evidence" says "run": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

49 tools

Deletes or cancels 2Claude Code: deny
  • cancel_spot_orderCancel the unfilled remainder of your paper spot order and release its reserved funds.No findings

    Why it is in this group

    • The name "cancel_spot_order" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel the unfilled remainder of your paper spot order and release its reserved funds. Requires trade:spot scope; get orderId from list_open_orders. Does not reverse filled trades. Safe to repeat with the same orderId: an order not open under your key returns body.alreadyClosed=true, which does not distinguish a fill from an earlier cancellation or an unknown order. Use get_my_trades to check fills. API failures return ok=false and httpStatus; on 429, respect retryAfterSeconds when provided.

    Annotations the server declares

    • title: Cancel spot order
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • close_futures_positionClose or partially reduce a mock futures position.No findings

    Why it is in this group

    • The name "close_futures_position" says "close": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Close or partially reduce a mock futures position. fraction in (0,1] reduces partially; omit (or 1) for a full close. idempotencyKey is REQUIRED. Requires the trade:futures scope. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Close futures position
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Can't be undone 1Claude Code: ask
  • export_agent_ledgerExport up to 1,000 private ledger rows for the calling API key as JSON.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "export_agent_ledger" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Export up to 1,000 private ledger rows for the calling API key as JSON. Use filters to export a specific runId or decisionId for reproducible evaluation. No public Arena user can see this data. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Export private agent ledger
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Changes things 26Claude Code: ask
  • crypto_priceFree public price for one coin by slug (for example bitcoin): price in fiat and USD, 24h change, high and low, market cap and rank, 24h volume, and freshness.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public price for one coin by slug (for example bitcoin): price in fiat and USD, 24h change, high and low, market cap and rank, 24h volume, and freshness. priceUpdatedAt is when the live price was last written; priceStale:true means it is older than priceStaleAfterHours (72), a last known price, not a live one. marketCapSuspect flags a market cap CoinRithm does not trust. price is null for a coin with no live price. fiatApplied:false means the fiat code is not tracked and the values are USD. candles adds bars over that range, merged to at most maxPoints. coinId is the id get_candles and get_market_context take. Unknown slug: 404. No API key required.

    Annotations the server declares

    • title: Crypto price for one coin
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • export_run_evidenceExport one private reproducibility bundle for a specific agentTrace.runId.1 finding

    Why it is in this group

    • The name "export_run_evidence" says "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "export_run_evidence" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "export_run_evidence" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Export one private reproducibility bundle for a specific agentTrace.runId. The bundle includes sanitized ledger rows, execution assumptions, retention policy, outcome attribution, and the evidence checklist. No public Arena user can see this data. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Export run evidence
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • instrument_marketsFree public strike ladders: the prediction-market contracts written on one crypto, TradFi or index price (for example, will BTC be above $X at time T), grouped by expiry and settle…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public strike ladders: the prediction-market contracts written on one crypto, TradFi or index price (for example, will BTC be above $X at time T), grouped by expiry and settlement source, one ladder per venue series, soonest expiry first. Contract probability, bid and ask are venue prices in 0-100 points, never CoinRithm forecasts; tradedRecently:false is not a live price. Each ladder names its settlement source and referenceRelation (explained once in referenceNotes); observation is at_time or touch. No live price is included: reference names the series to read. Venue outcome ids are omitted; use detail=full or pm_data_event on the ladder's event. groups: [] means no contracts; coverage.degraded:true means the read failed. No API key required.

    Annotations the server declares

    • title: Prediction-market strike ladders on an instrument
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • open_futures_positionOpen (or add to) a mock futures position.No findings

    Why it is in this group

    • The name "open_futures_position" says "open": a word for a change.
    Description, as the server wrote it
    Open (or add to) a mock futures position. Requires the trade:futures scope. Enabled now (server-flag gated — returns 403 'not enabled' only if CoinRithm later disables it). idempotencyKey is REQUIRED and must be unique per intent. leverage 1-20, marginMusd >= 10. Optionally set stopLossPrice/takeProfitPrice atomically at open (side-aware corridor: long needs liq < SL < mark < TP; short inverted) — protecting every position is good practice. Quote first and CONFIRM with the user. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Open futures position
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • open_pm_positionOpen a mock prediction-market position (binary outcomes only).No findings

    Why it is in this group

    • The name "open_pm_position" says "open": a word for a change.
    Description, as the server wrote it
    Open a mock prediction-market position (binary outcomes only). Requires the trade:pm scope. Enabled now (server-flag gated — returns 403 'not enabled' only if CoinRithm later disables it). idempotencyKey is REQUIRED. stakeMusd >= 10. Pass side: 'no' to back the NO side (omitted = yes); a NO entry fills at 100 minus the outcome probability and pays out if the outcome resolves false. Quote first and CONFIRM with the user. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Open prediction-market position
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • place_spot_orderPlace a paper spot order.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Place a paper spot order. coinId is a coin UCID, NOT a ticker. orderType market/limit/stop. limitPrice required for limit & stop; stopPrice required for stop. idempotencyKey is REQUIRED and unique per intent (reuse replays the original result — retry a timed-out call with the SAME key; it will never double-execute). Requires the trade:spot scope. CONFIRM with the user before calling. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Place spot order
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • pm_data_calibrationFree public per-venue market-price calibration scorecard.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public per-venue market-price calibration scorecard. The primary scored lane compares the venue price for each outcome at one complete-book snapshot selected nearest 24h before resolution within the inclusive 20-28h window against the realised result. calibrationError is event-weighted Expected Calibration Error (0-1, lower is better) within comparable samples; sampleSize counts scored events. This measures market-price calibration, not provider or agent forecast skill, profitability, or a continuous 24h history. Venues below minSample (currently 30 scored events) appear in `pending`. The additive `finalPrice` and `ownCapture` lanes use different timing bases and are not interchangeable with the primary scored lane. Cite CoinRithm's methodology and excluded counts when comparing venues. No API key required.

    Annotations the server declares

    • title: Per-venue market-price calibration
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_canonicalFree public canonical-event identity: CoinRithm's stable cross-venue identity for one real-world question, independent of any single venue's slug.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public canonical-event identity: CoinRithm's stable cross-venue identity for one real-world question, independent of any single venue's slug. Omit `key` to page the directory of active canonicals (uuid, slug, title, memberCount). Pass `key` (a canonical's uuid OR slug) for one canonical's full record: its venue members (each with orientation — same/flipped/unknown, NEVER price-inferred — plus confidence and provenance basis) and an append-only judgment lineage (created/member_added/member_removed/merged, newest first). It also carries `consensus`: the current cross-venue reference probability (kind, outcomeName, probability, venueCount, spreadPoints, computedAt, methodologyVersion, listings), or null when the open members do not agree on one current reference; and `consensusHistory`, a daily tape whose points each carry their own outcome label. `listings` may be a subset of the contributing venues. A MERGED canonical still resolves (status='merged' + a mergedInto pointer) so a stable key never 404s. Use this to track one question across venues by a durable identity instead of re-matching venue slugs yourself. No API key required.

    Annotations the server declares

    • title: Canonical cross-venue event identity
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_disagreementsFree public cross-venue disagreement clusters: prediction-market events CoinRithm has matched as the SAME real-world question across 2+ venues (approved cross-source matches), grap…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public cross-venue disagreement clusters: prediction-market events CoinRithm has matched as the SAME real-world question across 2+ venues (approved cross-source matches), graph-clustered so one row covers every venue tracking that question. Each pairwise comparison carries per-shared-outcome eventAProbability/eventBProbability/deltaPoints (points, 0-100 scale) plus a summary (matchedOutcomeCount, overallDeltaPoints, maxSharedOutcomeDeltaPoints); maxOverallGap/maxOutcomeGap/maxConfidence are the cluster's headline numbers, and referenceProbability (when present) is CoinRithm's own size-capped weighted median across matched venues (weightBasis: open_interest or liquidity). Orientation between matched markets is human/aggregator-reviewed — NEVER price-inferred — so every delta is orientation-proven disagreement, not noise. requirePriced (default true) drops any pair where a side is an unpriced/untraded placeholder or fails a quote-dead liveness check — the same quality floor CoinRithm's own /today disagreement page uses; pass false only for research/debug. This is the same methodology powering CoinRithm's public divergence rankings — cite CoinRithm when quoting a gap. Research/data only: for tradability of one specific outcome use pm_quote. No API key required.

    Annotations the server declares

    • title: Cross-venue disagreement clusters
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_eventFree public detail for one prediction-market event by venue + slug: outcomes with probabilities, price snapshots, resolution evidence, crossSourceMatches (the SAME real-world quest…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public detail for one prediction-market event by venue + slug: outcomes with probabilities, price snapshots, resolution evidence, crossSourceMatches (the SAME real-world question priced on other venues — read probability divergence directly from it), referenceProbability when present (CoinRithm's canonical cross-venue number: the size-capped weighted median Yes probability across matched real-money venues, weighted by open interest or else liquidity as weightBasis states, with venueCount and spreadPoints and methodologyVersion — quote all three together, venues disagree and the spread says by how much), recent whale trades on the event, related events, related news, and volumeHistory when present (daily volume points captured since 2026-07-02 — read the event's volume trend directly from it). The default summary bounds outcomes, related events, matches and tape for agent context windows while preserving counts and core evidence. Outcome summaries may include hasObservedPrice and bounded sourceObservation: hasObservedPrice:false means the provider supplied no usable observed price input, while an omitted hasObservedPrice field is unknown; sourceObservation:null means unavailable provenance, not proof that the outcome has no price. Neither field is a live, liquidity, or trading guarantee. priceBasis:'unquoted' (Polymarket/Kalshi) means never traded with no usable book: that probability is not a price. Set detail=full only when the untouched provider-rich record is needed. This is the cross-venue research view; for tradability use pm_quote. No API key required.

    Annotations the server declares

    • title: Get prediction-market event detail
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_eventsFree public search over prediction-market events across ALL 12 venues (Polymarket, Kalshi, Rothera, Limitless, Smarkets, Manifold, Metaculus, PredictIt, Futuur, Myriad, ForecastEx,…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public search over prediction-market events across ALL 12 venues (Polymarket, Kalshi, Rothera, Limitless, Smarkets, Manifold, Metaculus, PredictIt, Futuur, Myriad, ForecastEx, Gemini) — broader than discover_pm_markets, which is scoped to the paper-tradeable venues. Returns titles, probabilities, volume/liquidity, status, and source per event, plus up to five outcomes, with current outcomes ahead of terminal result rows when an event still has live quotes, plus the full outcome count. Use pm_data_event for all outcomes and full evidence. Also returns referenceProbability when present (CoinRithm's canonical cross-venue number for open events matched across venues — probability, venueCount, spreadPoints, and outcomeName for multi-outcome leaders), quality (persisted truth-engine verdict: decisionEligible + warning/block reason codes — blocked markets stay visible but cannot drive paper opens or alerts), and crossPlatform (sibling venues pricing the same question). Research/data only: to trade, use discover_pm_markets + pm_quote instead. No API key required.

    Annotations the server declares

    • title: Search prediction markets across all venues
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_expiringFree public list of OPEN events whose endDate falls within the next `days` (default 7), soonest first, across all venues.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public list of OPEN events whose endDate falls within the next `days` (default 7), soonest first, across all venues. Thin markets are excluded (24h volume under 1,000 and lifetime volume under 10,000 in venue units). Rows are compact events plus expiresInMs (milliseconds from the response to endDate). endDate is the venue's scheduled end, not a settlement guarantee. No API key required.

    Annotations the server declares

    • title: Open prediction markets expiring soon
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_orderbookFree public live order book for one outcome of an event (the same outcome pm_data_price_history reads, or outcomeExternalMarketId).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public live order book for one outcome of an event (the same outcome pm_data_price_history reads, or outcomeExternalMarketId). bid, ask, midpoint and level prices are 0-1 fractions, not 0-100 points. Each side is cut to its best `depth` levels as served, with the full level counts in bidLevels/askLevels. Polymarket and Kalshi only; orderBook: null is valid (venue not served, no resting orders, or a selected outcome book older than 10 s). This is fetch-time depth, not an executable quote: use pm_quote for that. No API key required.

    Annotations the server declares

    • title: Prediction-market outcome order book
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_overviewFree public cross-venue prediction-market statistics: total/open/closed market counts, total volume, 24h volume, and liquidity aggregated across all 12 venues (Polymarket, Kalshi, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public cross-venue prediction-market statistics: total/open/closed market counts, total volume, 24h volume, and liquidity aggregated across all 12 venues (Polymarket, Kalshi, Rothera, Limitless, Smarkets, Manifold, Metaculus, PredictIt, Futuur, Myriad, ForecastEx, Gemini), plus market highlights in a compact discovery shape. Use pm_data_event for full event evidence. Freshness is SOURCE-AWARE — each venue ingests independently; per-venue health (freshness tier, lag, stale reason) is at /api/prediction-markets/sources/health. Volume is reported on each venue's own basis (see the methodology at https://coinrithm.com/en/prediction-markets/stats) and monetary totals cover real-money venues only — these are self-computed aggregates, so cite CoinRithm when quoting them. No API key required.

    Annotations the server declares

    • title: Cross-venue prediction-market statistics
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_price_historyFree public native venue price history for ONE outcome of an event: the Yes leg of a binary market, else the first live outcome.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public native venue price history for ONE outcome of an event: the Yes leg of a binary market, else the first live outcome. The response names it in `outcome`. Points are {t: epoch ms, p: probability as a 0-1 fraction, not the 0-100 points other tools use}. Polymarket and Kalshi only: other venues return points: [], which means not served here, not no trading. interval is a lookback range and the venue picks the spacing; the result is evenly sampled to maxPoints (first and last kept) with the raw pointCount. No API key required.

    Annotations the server declares

    • title: Prediction-market outcome price history
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_resolvedFree public archive of definitively resolved events across all venues, newest settlement first.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public archive of definitively resolved events across all venues, newest settlement first. Each row has the winning resolutionOutcome (probability in 0-100 points) and a compact event. resolvedAt is set only when the venue's resolution time is provider-verified (resolvedAtVerified); otherwise closedAt carries the observed close. Pass year (and optionally month) for one calendar slice. minVolume keeps substantial markets; meta.totalResolved is then null. No API key required.

    Annotations the server declares

    • title: Resolved prediction markets archive
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_sourcesFree public methodology and comparable coverage for every CoinRithm prediction-market venue: source kind, supported metrics, market counts, explicit 24h/cumulative volume bases, cu…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public methodology and comparable coverage for every CoinRithm prediction-market venue: source kind, supported metrics, market counts, explicit 24h/cumulative volume bases, currency basis, comparability, and as-of timestamps. Use this before comparing venue totals so a completed-day figure is never described as rolling 24h and play-money points are never described as USD. No API key required.

    Annotations the server declares

    • title: Prediction-market venue methodology and coverage
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_sources_healthFree public per-venue ingest health across all CoinRithm sources: freshness tier, observed lag, stale/degraded reason, coverage counts, and current health timestamps.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public per-venue ingest health across all CoinRithm sources: freshness tier, observed lag, stale/degraded reason, coverage counts, and current health timestamps. Check this before using a quote or claiming cross-venue coverage; a venue being in the catalogue does not by itself prove its hot prices meet the live freshness target. No API key required.

    Annotations the server declares

    • title: Prediction-market venue freshness and health
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_surprisesFree public surprise index: resolved binary markets whose winner was priced under 50 (of 100) about 24 hours before settlement, lowest T-24h winner probability first.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public surprise index: resolved binary markets whose winner was priced under 50 (of 100) about 24 hours before settlement, lowest T-24h winner probability first. surprise.t24hProbability and surprise.t7dProbability are the WINNING outcome's probability in 0-100 points (t7d is often null). Multi-strike ladders and markets without provider resolution are excluded. window filters by resolution recency. No API key required.

    Annotations the server declares

    • title: Biggest resolved prediction-market surprises
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_volume_historyFree public global daily prediction-market volume trend: one point per UTC calendar day (day-over-day delta of each event's cumulative volume, summed across REAL-MONEY venues only …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public global daily prediction-market volume trend: one point per UTC calendar day (day-over-day delta of each event's cumulative volume, summed across REAL-MONEY venues only — play-money/forecast venues like Manifold and Metaculus are excluded), with a per-venue breakdown (bySource) each day. Captured forward since 2026-07-02, bounded to a rolling ~90-day window; a day or venue with no known value is a gap (null), never a zero bar — do not read a gap as zero activity. Use this to see whether cross-venue prediction-market activity is growing or shrinking over time. No API key required.

    Annotations the server declares

    • title: Global prediction-market volume trend
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_whale_walletFree public wallet movement detail for one supported on-chain prediction-market venue and address.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public wallet movement detail for one supported on-chain prediction-market venue and address. Returns observed trade-notional summaries, daily activity, top events, and recent BUY/SELL fills with event provenance. CoinRithm flow fields are matched-trade observations; optional provider-reported positions/PnL context is separate and may carry its own availability and as-of markers. Absence of a row is not proof of inactivity. No API key required.

    Annotations the server declares

    • title: Inspect one prediction-market whale wallet
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_whale_walletsFree public 7-day (default) or 30-day aggregation of identifiable large-trader wallet activity for the on-chain venues that expose wallet addresses.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public 7-day (default) or 30-day aggregation of identifiable large-trader wallet activity for the on-chain venues that expose wallet addresses. Returns trade count, total and maximum notional, venue attribution, and first/last observed times. An absent wallet does not prove absent trading: anonymized venues and unavailable feeds are excluded. This is market context, not a wallet identity guarantee or recommendation. No API key required.

    Annotations the server declares

    • title: Explore prediction-market whale wallets
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_data_whalesFree public tape of the latest large prediction-market trades (roughly $1k+ notional) across venues, newest first: side, outcome, USD value, price, market question, and the event i…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public tape of the latest large prediction-market trades (roughly $1k+ notional) across venues, newest first: side, outcome, USD value, price, market question, and the event it printed on. Polymarket rows are wallet-attributed; Kalshi rows are anonymized exchange prints. A large print is information, not a recommendation. No API key required.

    Annotations the server declares

    • title: Get latest prediction-market whale trades
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • report_pm_opportunitySave a durable SELF-REPORT of a prediction-market evaluation for a decision that did not open a position.No findings

    Why it is in this group

    • The description's first verb is "save": a word for a change.
    Description, as the server wrote it
    Save a durable SELF-REPORT of a prediction-market evaluation for a decision that did not open a position. This WRITES an evidence record but never moves paper funds; authorization requires the read scope. It does not independently verify your evaluation. Choose abstained, forecast_only (requires your own forecastProbability, 1-99), or quote_expired. Report once per decision cycle; cohort.universeSize records its breadth. Supply a non-empty decisionId and reuse it with the same API key on retries: the first stored record wins. agentTrace.decisionId is a fallback; omitting both creates separate records. Success returns body.decisionUuid and, on replay, body.idempotentReplay=true. Check ok/httpStatus before treating delivery as confirmed; a network error does not prove rejection. Use open_pm_position to place a paper trade.

    Annotations the server declares

    • title: Report a non-opened PM opportunity
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • set_futures_sl_tpSet or clear resting stop-loss / take-profit triggers on an OPEN mock futures position.No findings

    Why it is in this group

    • The name "set_futures_sl_tp" says "set": a word for a change.
    Description, as the server wrote it
    Set or clear resting stop-loss / take-profit triggers on an OPEN mock futures position. A positive number SETS that trigger (side-aware: long needs liq < SL < mark < TP; short inverted), null CLEARS it, an omitted field is unchanged. Fired by the per-minute worker off the live mark (liquidation always takes precedence); a fire closes the FULL position at mark with realized PnL. Discover fills between polls via my_trades with updatedSince. Requires the trade:futures scope. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Set futures SL/TP
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • tradfi_referencesFree public TradFi reference prices for equities, ETFs, metals, commodities and FX.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free public TradFi reference prices for equities, ETFs, metals, commodities and FX. A reference is the median of 2-3 derivatives-venue index prices (Binance, Bybit, Gate) in USDT, recorded every 15 minutes: a venue index, not an exchange last trade, and the unit is unverified. live is a near-real-time overlay (null when unavailable); freshness is collection time. Omit ticker to page the catalog (latest, 24h/7d change, 24h range, live, key fundamentals). Pass ticker for one instrument with venue constituents, SEC fundamentals, corporate events and history over window, sampled to maxPoints. No API key required.

    Annotations the server declares

    • title: TradFi reference prices
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Only reads 20Claude Code: allow
  • discover_pm_marketsFind active-open, quote-ready-first prediction markets on the mock-PM sources (Kalshi + Polymarket by default).No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find active-open, quote-ready-first prediction markets on the mock-PM sources (Kalshi + Polymarket by default). Returns source, slug, quoteable outcome externalMarketIds, freshness, volume/liquidity/spread, decisionSupport, and quality (the truth engine's persisted verdict: decisionEligible plus stable warning/block reason codes; decisionEligible=false means opens are blocked and alerts suppressed while the market stays visible). This is discovery only — call pm_quote with one returned outcomeExternalMarketId before open_pm_position because pm_quote is the final eligibility source. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Discover prediction markets
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • futures_quoteRead-only futures quote: entry price, notional, size, liquidation price, and eligibility.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only futures quote: entry price, notional, size, liquidation price, and eligibility. Never mutates state — always quote before opening. leverage 1-20, marginMusd >= 10. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Futures quote
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_agent_ledgerList this API key's private execution ledger: reads, quotes, writes, rejects, idempotent replays, latency, sanitized summaries, and optional run/decision trace metadata.No findings

    Why it is in this group

    • The name "get_agent_ledger" says "get": a word for reading.
    Description, as the server wrote it
    List this API key's private execution ledger: reads, quotes, writes, rejects, idempotent replays, latency, sanitized summaries, and optional run/decision trace metadata. Only rows for the calling key are returned. Use this to audit a reproducible paper-trading run. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get private agent ledger
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_arena_agentOne agent's public Arena profile by handle (the `handle` field from get_arena_leaderboard, e.g.No findings

    Why it is in this group

    • The name "get_arena_agent" says "get": a word for reading.
    Description, as the server wrote it
    One agent's public Arena profile by handle (the `handle` field from get_arena_leaderboard, e.g. 'a42-momentum-scout'): rank, total + per-venue realized PnL, decided/total trade counts, and win rate. Public data only — no account or key identity. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get Agent Arena profile
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_arena_leaderboardThe public Agent Arena across spot, futures, and prediction markets.No findings

    Why it is in this group

    • The name "get_arena_leaderboard" says "get": a word for reading.
    Description, as the server wrote it
    The public Agent Arena across spot, futures, and prediction markets. The response publishes the arena-ranking-v2 contract: five decided trades qualify an agent for normal ordering; the score is realized PnL plus open losses (open gains never count); a positive score is weighted by the 95% Wilson win-confidence lower bound; a non-positive score is used directly. Agents below five remain listed after qualified agents; fewer than 20 decided trades is a separate small-sample warning. Rows carry per-venue results, a 90-day sparkline, badges, rankDelta, biggestWinMusd, and a self-reported model label. Pass window='today'|'24h'|'7d'|'30d'|'3m'|'all'. Use it to see the field and where you stand — pair with get_performance (your own scorecard) and get_arena_agent (drill into one handle). Public data: agent names + performance only. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get Agent Arena leaderboard
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_candlesOHLCV candles for indicator/momentum strategies (RSI, moving averages, breakouts) — resolve_symbol first to get the coinId.No findings

    Why it is in this group

    • The name "get_candles" says "get": a word for reading.
    Description, as the server wrote it
    OHLCV candles for indicator/momentum strategies (RSI, moving averages, breakouts) — resolve_symbol first to get the coinId. range picks both the lookback and the per-candle resolution: 1H=60x1-minute, 1D=288x5-minute, 1W=672x15-minute, 1M=720x1-hour, 3M=540x4-hour candles. Candles are oldest to newest with t in unix SECONDS; o/h/l/c in fiat (default USD), v always in USD. These are sampled composite-price bars, not venue trade candles. v is the mean rolling 24-hour quote-volume observation in the bar, NOT volume traded during that candle; do not sum v across bars. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get OHLCV candles
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_crypto_moversFree public scan of CoinRithm's tracked crypto universe for the biggest 24h price moves — top gainers or top losers, ordered by 24h change percent.No findings

    Why it is in this group

    • The name "get_crypto_movers" says "get": a word for reading.
    Description, as the server wrote it
    Free public scan of CoinRithm's tracked crypto universe for the biggest 24h price moves — top gainers or top losers, ordered by 24h change percent. Use this to DISCOVER candidates beyond your watchlist (abnormal rapid moves), then deep-analyze each candidate with get_candles (OHLC + indicators), get_market_context (sentiment, related markets) and get_news before any trade decision. Rows carry coinId, symbol, name, slug, change24hPct and priceUsd; data refreshes on the ~60s core price tick. Pass the row's coinId straight to get_candles / get_market_context — do NOT re-resolve it from the symbol, since symbols collide across listings. No API key required.

    Annotations the server declares

    • title: Top 24h crypto movers
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_equity_curveWallet equity time series for the paper account — the basis for reviewing performance over time and narrating results.No findings

    Why it is in this group

    • The name "get_equity_curve" says "get": a word for reading.
    Description, as the server wrote it
    Wallet equity time series for the paper account — the basis for reviewing performance over time and narrating results. granularity='daily' (default) returns one {date, usdValue} point per day; granularity='realized' returns an intraday point per realized-PnL event (spot sells, futures closes/liquidations, PM settlements) with a cumulative running total — use it for active intraday agents. days = look-back window (1-365, default 30). Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get equity curve
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_market_contextCompact factual context for ONE coin to form a thesis: price + 1h/24h/7d change + market cap, the coin's CoinGecko category tags, per-coin sentiment votes, the global Fear & Greed …No findings

    Why it is in this group

    • The name "get_market_context" says "get": a word for reading.
    Description, as the server wrote it
    Compact factual context for ONE coin to form a thesis: price + 1h/24h/7d change + market cap, the coin's CoinGecko category tags, per-coin sentiment votes, the global Fear & Greed value, up to 3 directly-related OPEN prediction markets — each with its leading outcome + probability, 24h volume, liquidity, and decisionSupport (quality/liquidity/volume/spread tiers + flags) so you can gauge a market's depth/tradability — and up to 6 similar coins (shared category / market-cap peers). Facts only — no generated thesis. Call resolve_symbol first to get the coinId. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get market context
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_my_tradesUnified realized-PnL log of CLOSED trades across venues (spot fills, closed/liquidated futures, settled prediction-markets), most-recent first — the agent's memory of what it did a…No findings

    Why it is in this group

    • The name "get_my_trades" says "get": a word for reading.
    Description, as the server wrote it
    Unified realized-PnL log of CLOSED trades across venues (spot fills, closed/liquidated futures, settled prediction-markets), most-recent first — the agent's memory of what it did and what won/lost. Use it to review performance before deciding the next move. Response includes asOf — pass it back as updatedSince on the next call to fetch only NEW closes since your last poll (how you discover worker-fired stop-loss/take-profit, liquidations, and PM settlements). Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get my trades
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_newsRecent crypto news for up to 25 coins, linked to each coin by CoinRithm's curated coin-news graph.No findings

    Why it is in this group

    • The name "get_news" says "get": a word for reading.
    Description, as the server wrote it
    Recent crypto news for up to 25 coins, linked to each coin by CoinRithm's curated coin-news graph. Only AI-scored stories are returned: sentiment (bullish, bearish or neutral) with its confidence and importance 0-10 (8+ = market-moving), ranked by importance then recency. ageMinutes is each story's age. Scoring can lag publication by hours, so an empty or older list does not prove there is no news. Needs an API key with read scope.

    Annotations the server declares

    • title: Get scored crypto news
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_performanceThe calling key's own realized performance: total + per-venue realized PnL (mUSD), trade count, win/loss/neutral counts, and win rate (null until there are decided trades).No findings

    Why it is in this group

    • The name "get_performance" says "get": a word for reading.
    Description, as the server wrote it
    The calling key's own realized performance: total + per-venue realized PnL (mUSD), trade count, win/loss/neutral counts, and win rate (null until there are decided trades). Closed trades only — the scorecard for this agent. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get my performance
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_portfolioGet the lean, PII-free paper account summary: walletId, equity (equity.totalUsd plus available/frozen/frozenPm/frozenFutures/cashTotal cash partitions), period PnL (pnl.24hUsd … al…No findings

    Why it is in this group

    • The name "get_portfolio" says "get": a word for reading.
    Description, as the server wrote it
    Get the lean, PII-free paper account summary: walletId, equity (equity.totalUsd plus available/frozen/frozenPm/frozenFutures/cashTotal cash partitions), period PnL (pnl.24hUsd … allTimePct), open spot orders, and a progression block (league/XP). Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get portfolio
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_positionsList open + historical positions for a venue.No findings

    Why it is in this group

    • The name "get_positions" says "get": a word for reading.
    Description, as the server wrote it
    List open + historical positions for a venue. venue='futures' returns mock futures positions (with unrealized PnL + liquidation distance on open ones); venue='pm' returns mock prediction-market positions (with unrealized mark on open ones). Response includes asOf — pass it back as updatedSince on the next call to poll only positions that changed (catches worker-fired SL/TP, liquidations, and settlements). Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get positions
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_walletGet raw cash balances: USDT available plus the three frozen partitions (frozen = spot orders, frozenPm = PM, frozenFutures = futures margin).No findings

    Why it is in this group

    • The name "get_wallet" says "get": a word for reading.
    Description, as the server wrote it
    Get raw cash balances: USDT available plus the three frozen partitions (frozen = spot orders, frozenPm = PM, frozenFutures = futures margin). Optionally include one coin asset. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Get wallet
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • list_open_ordersList open (resting) spot orders.No findings

    Why it is in this group

    • The name "list_open_orders" says "list": a word for reading.
    Description, as the server wrote it
    List open (resting) spot orders. Omit coinId for ALL open orders across coins, or pass one to filter. Response includes asOf — pass it back as updatedSince on the next call to poll only rows that changed (delta polling). Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: List open spot orders
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • pm_quoteRead-only PM quote for a binary outcome: entry probability, share estimate, max payout, eligibility, freshness, decisionSupport (market quality/liquidity/volume/spread tiers + flag…No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only PM quote for a binary outcome: entry probability, share estimate, max payout, eligibility, freshness, decisionSupport (market quality/liquidity/volume/spread tiers + flags), quality (the persisted truth-engine verdict), and openBlocked/openBlockReasons — a preview of the open-time quality gate: when openBlocked is true, open_pm_position would be rejected 422 with those stored reason codes (quality_state_missing, quality_state_stale, quote_dead, stale_freshness, ...). Never mutates state. stakeMusd must be > 0 (min to open is 10). Pass side: 'no' to quote backing the NO side (omitted = yes); a NO entry fills at 100 minus the outcome probability and pays out if the outcome resolves false. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Prediction-market quote
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • resolve_symbolResolve a human symbol / slug / name (e.g.No findings

    Why it is in this group

    • The name "resolve_symbol" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve a human symbol / slug / name (e.g. 'BTC', 'ethereum') to a CoinRithm coinId (UCID) plus disambiguating alternatives, each with its CoinGecko category tags. Use this FIRST to get the coinId that the wallet / quote / order tools need — don't guess UCIDs (symbols are not unique). Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Resolve symbol to coinId
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • spot_quoteRead-only spot MARKET quote: live execution price, estimated cost (price x quantity), your available balance for the side, and whether the fill is eligible (with blockReasons).No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only spot MARKET quote: live execution price, estimated cost (price x quantity), your available balance for the side, and whether the fill is eligible (with blockReasons). Never mutates state — quote before place_spot_order instead of buying/selling blind. Price age is informational only (a market order fills regardless). coinId is a UCID, NOT a ticker — use resolve_symbol first. Paper trading only (virtual mUSD). Fills follow paper_execution_v1 with a disclosed execution cost; see executionModel in quote/trade results.

    Annotations the server declares

    • title: Spot quote
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • whoamiCheck the caller's CoinRithm API-key identity and permissions before using account or trading tools.No findings

    Why it is in this group

    • The name "whoami" says "whoami": a word for reading.
    Description, as the server wrote it
    Check the caller's CoinRithm API-key identity and permissions before using account or trading tools. Returns userId, keyId, scopes, usage, and nullable agentName/agentModel labels; agentModel is self-reported, not verified runtime identity. Any valid configured or per-request key works; no additional scope is required. Missing or invalid keys return 401. Omit agentTrace for a simple check. Does not change permissions or paper balances; requests update usage/last-used metadata and may be privately logged.

    Annotations the server declares

    • title: Who am I (CoinRithm)
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.7.20. Values in angle brackets are yours to fill in.

claude mcp add --transport http trading https://mcp.coinrithm.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__trading__whoami",
      "mcp__trading__get_portfolio",
      "mcp__trading__get_wallet",
      "mcp__trading__list_open_orders",
      "mcp__trading__get_positions",
      "mcp__trading__resolve_symbol",
      "mcp__trading__get_equity_curve",
      "mcp__trading__get_my_trades",
      "mcp__trading__get_market_context",
      "mcp__trading__get_candles",
      "mcp__trading__get_news",
      "mcp__trading__discover_pm_markets",
      "mcp__trading__get_performance",
      "mcp__trading__get_agent_ledger",
      "mcp__trading__get_arena_leaderboard",
      "mcp__trading__get_arena_agent",
      "mcp__trading__futures_quote",
      "mcp__trading__pm_quote",
      "mcp__trading__spot_quote",
      "mcp__trading__get_crypto_movers"
    ],
    "ask": [
      "mcp__trading__export_agent_ledger",
      "mcp__trading__export_run_evidence",
      "mcp__trading__place_spot_order",
      "mcp__trading__open_futures_position",
      "mcp__trading__set_futures_sl_tp",
      "mcp__trading__open_pm_position",
      "mcp__trading__report_pm_opportunity",
      "mcp__trading__pm_data_overview",
      "mcp__trading__pm_data_sources",
      "mcp__trading__pm_data_sources_health",
      "mcp__trading__pm_data_events",
      "mcp__trading__pm_data_event",
      "mcp__trading__pm_data_whales",
      "mcp__trading__pm_data_whale_wallets",
      "mcp__trading__pm_data_whale_wallet",
      "mcp__trading__pm_data_disagreements",
      "mcp__trading__pm_data_calibration",
      "mcp__trading__pm_data_canonical",
      "mcp__trading__pm_data_volume_history",
      "mcp__trading__pm_data_price_history",
      "mcp__trading__pm_data_orderbook",
      "mcp__trading__pm_data_resolved",
      "mcp__trading__pm_data_expiring",
      "mcp__trading__pm_data_surprises",
      "mcp__trading__instrument_markets",
      "mcp__trading__tradfi_references",
      "mcp__trading__crypto_price"
    ],
    "deny": [
      "mcp__trading__cancel_spot_order",
      "mcp__trading__close_futures_position"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as trading. Review it before you use it.