io. github. LiquiHog/ hogswap-mcp
by LiquiHog · remote · local (npm) · no sign-in to list tools · v0.4.0 · published by GitHub user LiquiHog
Pay any Algorand x402 invoice with any asset, plus DEX swap quotes and unsigned builds.
12 tools: 1 can delete or cancel things, 1 do something that can't be undone, 6 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things6Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http hogswap https://hogswap-v1.liquihog.dev/mcp/Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
12 tools
Deletes or cancels 1Claude Code: deny
delete_watchDelete one of your watches by its client_key.No findings
Why it is in this group
- The name "delete_watch" says "delete": a word for removing or ending something.
Description, as the server wrote it Delete one of your watches by its client_key.
Can't be undone 1Claude Code: ask
pay_x402_invoicePay ANY Algorand-settled x402 invoice with any 1-4 routable assets you hold, even holding none of the demanded asset.No findings
Why it is in this group
- The name "pay_x402_invoice" says "pay": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Pay ANY Algorand-settled x402 invoice with any 1-4 routable assets you hold, even holding none of the demanded asset. Pass the `accepts` entry you picked as `invoice` (keep its note!) plus your inputs (single input with no amount = minimum solved). Returns UNSIGNED groups — sign all in one pass, submit IN ORDER (swap first; its on-chain floor guarantees the payment is funded; holding the asset already = one direct payment). HOGSWAP credit top-up offers feed this verbatim. EVM invoices unsupported (no bridge). NEVER pass mnemonics or private keys to any tool — signing happens in YOUR wallet, never here.
Changes things 6Claude Code: ask
build_swapUnsigned transaction group for a get_quote quote_id.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Unsigned transaction group for a get_quote quote_id. Sign every txn with your own wallet and submit as one group. NEVER pass mnemonics or private keys to any tool — signing happens in YOUR wallet, never here.
get_credit_offerCreate a credit top-up and get the x402 offer (HTTP 402 IS the payment instruction, not an error).No findings
Why it is in this group
- The name "get_credit_offer" says "get": a word for reading.
- The description's first verb is "create": a word for a change.
Description, as the server wrote it Create a credit top-up and get the x402 offer (HTTP 402 IS the payment instruction, not an error). Feed accepts[0] straight into pay_x402_invoice (keep the note nonce) to pay with any asset. Credits land ~1 block after payment.
register_agentSelf-service HOGSWAP API key, step 1 of 2 — zero human.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Self-service HOGSWAP API key, step 1 of 2 — zero human. Returns a challenge; sign its exact bytes with the address's key in YOUR wallet tooling, then call verify_registration. NEVER pass mnemonics or private keys to any tool — signing happens in YOUR wallet, never here.
set_watchRegister a standing server-side watch (FREE, needs a key; idempotent upsert by client_key — re-registering replaces the watch and resets arming).No findings
Why it is in this group
- The name "set_watch" says "set": a word for a change.
Description, as the server wrote it Register a standing server-side watch (FREE, needs a key; idempotent upsert by client_key — re-registering replaces the watch and resets arming). kind='price': advisory µUSD threshold (asset_id, op gte/lte, threshold_usd_micro). kind='target': size-aware surrogate — would swapping amount_in of asset_in→asset_out deliver ≥ min_out? (margin_bps haircut, default 30; NO quote is run). Edge-triggered one-shot; re-arms after rearm_bps retreat + cooldown_s; ttl_s auto-expiry (default 86400) — refresh by re-upserting. Fires are numbers-only HINTS: re-quote with get_quote. Events push over SSE at GET /watches/stream (outside MCP); from MCP, poll list_watches.
value_lp_tokenValue a liquidity-provider position.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Value a liquidity-provider position. Give the LP token's asset id (free, no key) and optionally `amount` in LP BASE units — what the wallet holds — for its USD value and the redeemable amount of each underlying. Also identifies the issuing pool/DEX (and STAMM tier). Per-unit figures are per WHOLE LP token. Values are a proportional-share redemption at analytics prices: no slippage, no exit fee, NOT a market quote — fields are null rather than guessed when supply or a price is missing, so check before reporting a number.
verify_registrationSelf-service key issuance, step 2 of 2.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Self-service key issuance, step 2 of 2. Returns your hsk_ key ONCE — store it yourself; it is not recoverable and this server does not keep it. Send it on later calls as Authorization: Bearer, X-API-Key, or the api_key argument.
Only reads 4Claude Code: allow
get_balanceCurrent HOGSWAP credit balance for your API key.No findings
Why it is in this group
- The name "get_balance" says "get": a word for reading.
Description, as the server wrote it Current HOGSWAP credit balance for your API key.
get_quoteHOGSWAP swap quote across every Algorand DEX.No findings
Why it is in this group
- The name "get_quote" says "get": a word for reading.
Description, as the server wrote it HOGSWAP swap quote across every Algorand DEX. Give amount (exact input) OR amount_out (exact output — minimum input is solved). Base units (µ); asset 0 = ALGO. Returns expected_out, route legs, and a quote_id for build_swap. expected_out is NET of the 5 bps routing fee; passing sender also returns router_fee_* fields and the wallet's HOG discount (hog_discount_pct, 100 = fully waived at 100 HOG). Optional sender enables HOG-holding fee discounts. Optional max_legs (1-16) caps TOTAL route legs, splits included — slightly worse price at size, 404 if nothing fits; forward (amount) quotes only.
list_payable_assetsAssets accepted as payment inputs for pay_x402_invoice and credit top-ups (price-confidence gated; ALGO and USDC always included).No findings
Why it is in this group
- The name "list_payable_assets" says "list": a word for reading.
Description, as the server wrote it Assets accepted as payment inputs for pay_x402_invoice and credit top-ups (price-confidence gated; ALGO and USDC always included).
list_watchesList your key's active watches (spec + arming/fired state), quota, and latest event seq.No findings
Why it is in this group
- The name "list_watches" says "list": a word for reading.
Description, as the server wrote it List your key's active watches (spec + arming/fired state), quota, and latest event seq. Poll this from MCP to see fires; SSE at GET /watches/stream is the push alternative outside MCP.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.4.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http hogswap https://hogswap-v1.liquihog.dev/mcp/Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__hogswap__list_payable_assets",
"mcp__hogswap__get_quote",
"mcp__hogswap__get_balance",
"mcp__hogswap__list_watches"
],
"ask": [
"mcp__hogswap__build_swap",
"mcp__hogswap__pay_x402_invoice",
"mcp__hogswap__register_agent",
"mcp__hogswap__verify_registration",
"mcp__hogswap__get_credit_offer",
"mcp__hogswap__value_lp_token",
"mcp__hogswap__set_watch"
],
"deny": [
"mcp__hogswap__delete_watch"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hogswap. Review it before you use it.
