Skip to content

The Spice Melange Trading Desk: DeepBook market data connector

by SajanMelcher · remote · no sign-in to list tools · v0.3.3 · published by GitHub user SajanMelcher

A Mentat's eye on Sui DeepBook v3: read-only market data plus desk template tools. No keys.

Deletes · 1Final · 2Changes · 11
CompareRegistry entry

31 tools: 1 can delete or cancel things, 2 do something that can't be undone, 11 change things and 17 only read.

Scanned Oct 21, 2026

7 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http plumbline https://plumbline-mcp.fly.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

7 warn
  • Warnget_bm_fills

    The server marks "get_bm_fills" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_bm_fills" says "get": a word for reading.

    What this check looks for
  • Warnbuild_swap_tx

    The server marks "build_swap_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • Warnbuild_create_balance_manager_tx

    The server marks "build_create_balance_manager_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_create_balance_manager_tx" says "create": a word for a change.

    What this check looks for
  • Warnbuild_bm_withdraw_tx

    The server marks "build_bm_withdraw_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_bm_withdraw_tx" says "withdraw": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • Warnbuild_cancel_order_tx

    The server marks "build_cancel_order_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_cancel_order_tx" says "cancel": a word for removing or ending something.

    What this check looks for
  • Warnbuild_cancel_order_tx

    The server marks "build_cancel_order_tx" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_cancel_order_tx" says "cancel": a word for removing or ending something.

    What this check looks for
Show 1 more finding
  • Warnwalrus_store_guide

    The server marks "walrus_store_guide" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "walrus_store_guide" says "store": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

31 tools

Deletes or cancels 1Claude Code: deny
  • build_cancel_order_txCancel one order (order_id) or all your orders in a pool, and withdraw settled amounts into your BalanceManager.2 findings

    Why it is in this group

    • The name "build_cancel_order_tx" says "cancel": a word for removing or ending something.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "build_cancel_order_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_cancel_order_tx" says "cancel": a word for removing or ending something.

      What this check looks for
    • Warn

      The server marks "build_cancel_order_tx" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_cancel_order_tx" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel one order (order_id) or all your orders in a pool, and withdraw settled amounts into your BalanceManager. Returns UNSIGNED tx bytes (simulated against mainnet). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Build: cancel DeepBook order(s)
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Can't be undone 2Claude Code: ask
  • build_bm_withdraw_txWithdraw a coin from your own BalanceManager back to your address (always to the owner).1 finding

    Why it is in this group

    • The name "build_bm_withdraw_tx" says "withdraw": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "build_bm_withdraw_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_bm_withdraw_tx" says "withdraw": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Withdraw a coin from your own BalanceManager back to your address (always to the owner). Returns UNSIGNED tx bytes (simulated against mainnet). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Build: withdraw from my BalanceManager
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • build_swap_txBuild base64 UNSIGNED Sui transaction bytes for a swap on the chosen venue, with the sender set to your address and an on-chain minimum-out from slippage_bps.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "build_swap_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Build base64 UNSIGNED Sui transaction bytes for a swap on the chosen venue, with the sender set to your address and an on-chain minimum-out from slippage_bps. The bytes are simulated against mainnet before return. You sign locally and submit yourself; nothing is executed by the desk. Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Build unsigned swap tx
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 11Claude Code: ask
  • build_bm_deposit_txDeposit a coin from your wallet into your own BalanceManager.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Deposit a coin from your wallet into your own BalanceManager. Returns UNSIGNED tx bytes (simulated against mainnet). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Build: deposit into my BalanceManager
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • build_create_balance_manager_txCreate and share a DeepBook v3 BalanceManager owned by your address (needed for limit orders).1 finding

    Why it is in this group

    • The name "build_create_balance_manager_tx" says "create": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "build_create_balance_manager_tx" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "build_create_balance_manager_tx" says "create": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Create and share a DeepBook v3 BalanceManager owned by your address (needed for limit orders). Returns UNSIGNED tx bytes (simulated against mainnet). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Build: create my DeepBook BalanceManager
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • build_limit_order_txPlace a spot limit order on a DeepBook v3 pool from your BalanceManager (fees in the input coin, no DEEP needed).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Place a spot limit order on a DeepBook v3 pool from your BalanceManager (fees in the input coin, no DEEP needed). Validates tick/lot/min size. Optional deposit_first funds it in the same tx. No leverage. Returns UNSIGNED tx bytes (simulated against mainnet). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Build: DeepBook limit order
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • build_walrus_register_txEncode your public text (receipt/note) and build the Walrus register-blob tx paid in WAL by you; returns the blob_id.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Encode your public text (receipt/note) and build the Walrus register-blob tx paid in WAL by you; returns the blob_id. Then upload+certify locally (see walrus_store_guide). Refuses content that looks like a secret. Returns UNSIGNED tx bytes (simulated against mainnet). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Build: Walrus register blob
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • check_holderCheck on chain (Sui mainnet) whether an address holds the The Secret Journals license token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check on chain (Sui mainnet) whether an address holds the The Secret Journals license token. Holders unlock extra read-only education tools (golden_path_market_read). Non-holders keep every basic tool. Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Holder check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • check_template_orderWith a digest: verify your on-chain payment for an order and get the signed download link (plus add-ons).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    With a digest: verify your on-chain payment for an order and get the signed download link (plus add-ons). Without: return the order's status (and a fresh link once paid). The token is sent only to the store, in a header, and is never stored. Educational templates, not financial advice; no returns promised. All sales final, except where the law requires otherwise. You pay from your own wallet; this connector never holds keys or funds.

    Annotations the server declares

    • title: Verify payment / get download
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • create_template_orderCreate a store order for one template.No findings

    Why it is in this group

    • The name "create_template_order" says "create": a word for a change.
    Description, as the server wrote it
    Create a store order for one template. Returns the order id, a PRIVATE order token (shown once; keep it secret), the payee and the EXACT Sui USDC amount to send from your own wallet before the expiry. Nothing is charged by this call. Limited to a few orders per client per hour. Educational templates, not financial advice; no returns promised. All sales final, except where the law requires otherwise. You pay from your own wallet; this connector never holds keys or funds.

    Annotations the server declares

    • title: Create a template order
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • estimate_feesEstimated DeepBook fee for a fill of qty at price as maker or taker, paid in the input token (rate x 1.25) versus in DEEP (base rate), using the live on-chain fee rates and the DEE…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Estimated DeepBook fee for a fill of qty at price as maker or taker, paid in the input token (rate x 1.25) versus in DEEP (base rate), using the live on-chain fee rates and the DEEP_USDC mid. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Fee estimate
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_bm_fillsFills (OrderFilled) where a given DeepBook BalanceManager was the maker or the taker in one pool, newest first: time, its side, price, qty, fee, tx.1 finding

    Why it is in this group

    • The name "get_bm_fills" says "get": a word for reading.
    • The description's first verb is "fill": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_bm_fills" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_bm_fills" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Fills (OrderFilled) where a given DeepBook BalanceManager was the maker or the taker in one pool, newest first: time, its side, price, qty, fee, tx. Public data; no keys. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Fill history for a balance manager
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • wallet_setup_guideExact steps and @mysten/sui code for an agent to create its OWN Sui Ed25519 keypair locally, fund it with SUI (gas) and USDC, and sign/submit transactions itself.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Exact steps and @mysten/sui code for an agent to create its OWN Sui Ed25519 keypair locally, fund it with SUI (gas) and USDC, and sign/submit transactions itself. Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Wallet setup guide
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • walrus_store_guideHow to store a PUBLIC trade receipt or strategy note on Walrus mainnet with your own key (receipt schema + @mysten/walrus code).1 finding

    Why it is in this group

    • The name "walrus_store_guide" says "store": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "walrus_store_guide" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "walrus_store_guide" says "store": a word for a change.

      What this check looks for
    Description, as the server wrote it
    How to store a PUBLIC trade receipt or strategy note on Walrus mainnet with your own key (receipt schema + @mysten/walrus code). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Walrus guide
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 17Claude Code: allow
  • get_book_depthLevel-2 depth around mid read on chain from a DeepBook v3 pool (bids/asks [price, qty]).No findings

    Why it is in this group

    • The name "get_book_depth" says "get": a word for reading.
    Description, as the server wrote it
    Level-2 depth around mid read on chain from a DeepBook v3 pool (bids/asks [price, qty]). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: DeepBook depth
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_cetus_poolRead-only Cetus CLMM pool state (coins, fee rate, tick spacing, liquidity, current tick, price) by pool_id, or discover the Cetus pools on the current from->to route.No findings

    Why it is in this group

    • The name "get_cetus_pool" says "get": a word for reading.
    Description, as the server wrote it
    Read-only Cetus CLMM pool state (coins, fee rate, tick spacing, liquidity, current tick, price) by pool_id, or discover the Cetus pools on the current from->to route. Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Cetus pool
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_desk_rhythmThe desk's weekly rhythm from https://thespicemelange.org/rhythm.json: focus pools, ladder windows, rung guidance, rebalance ranges, projects and lessons.No findings

    Why it is in this group

    • The name "get_desk_rhythm" says "get": a word for reading.
    Description, as the server wrote it
    The desk's weekly rhythm from https://thespicemelange.org/rhythm.json: focus pools, ladder windows, rung guidance, rebalance ranges, projects and lessons. The ed25519 signature is verified against the pinned release key, and the call fails closed if it doesn't match. Guidance only: no orders, no sizes in money, no promised returns. Not financial advice.

    Annotations the server declares

    • title: Desk rhythm
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_indexer_statusHealth and freshness of the public DeepBook indexer (status, latest checkpoint, server time).No findings

    Why it is in this group

    • The name "get_indexer_status" says "get": a word for reading.
    Description, as the server wrote it
    Health and freshness of the public DeepBook indexer (status, latest checkpoint, server time). Use when data looks stale. Education/information only; not financial advice. Read-only public data, may be delayed or wrong.

    Annotations the server declares

    • title: Data source health
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_mid_priceBest bid, best ask, mid price and spread (abs and bps) for a DeepBook pool, plus last trade price.No findings

    Why it is in this group

    • The name "get_mid_price" says "get": a word for reading.
    Description, as the server wrote it
    Best bid, best ask, mid price and spread (abs and bps) for a DeepBook pool, plus last trade price. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Mid price
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_ohlcvOHLCV candles for a DeepBook pool (oldest first).No findings

    Why it is in this group

    • The name "get_ohlcv" says "get": a word for reading.
    Description, as the server wrote it
    OHLCV candles for a DeepBook pool (oldest first). Intervals: 1m, 5m, 15m, 30m, 1h, 4h, 1d, 1w. Volume is in the base asset. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: OHLCV candles
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_order_bookOrder book for a DeepBook pool: top N price levels per side and cumulative liquidity (base qty and quote notional) within ±X% of mid.No findings

    Why it is in this group

    • The name "get_order_book" says "get": a word for reading.
    Description, as the server wrote it
    Order book for a DeepBook pool: top N price levels per side and cumulative liquidity (base qty and quote notional) within ±X% of mid. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Order book depth
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_pool_paramsTaker/maker fees, DEEP stake required, tick/lot/min size, whitelist/stable flags and vault balances for a DeepBook pool.No findings

    Why it is in this group

    • The name "get_pool_params" says "get": a word for reading.
    Description, as the server wrote it
    Taker/maker fees, DEEP stake required, tick/lot/min size, whitelist/stable flags and vault balances for a DeepBook pool. Reads the live on-chain Pool object via Sui GraphQL; falls back to indexer pool-creation values if GraphQL is unavailable. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Fees and pool parameters
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_pool_statsScorecard-style stats for one pool over the last N hours: trade count, taker buy/sell split, base/quote volume, VWAP, average trade size, price range, current spread.No findings

    Why it is in this group

    • The name "get_pool_stats" says "get": a word for reading.
    Description, as the server wrote it
    Scorecard-style stats for one pool over the last N hours: trade count, taker buy/sell split, base/quote volume, VWAP, average trade size, price range, current spread. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Pool scorecard stats
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_recent_tradesMost recent fills in a DeepBook pool (newest first): time, taker side, price, base and quote size.No findings

    Why it is in this group

    • The name "get_recent_trades" says "get": a word for reading.
    Description, as the server wrote it
    Most recent fills in a DeepBook pool (newest first): time, taker side, price, base and quote size. Optional time range. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Recent trades
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_swap_quoteQuote a spot swap between SUI/USDC/WAL/DEEP/CETUS and compare DeepBook v3 pools directly (direct or 2-hop) with the Cetus aggregator.No findings

    Why it is in this group

    • The name "get_swap_quote" says "get": a word for reading.
    Description, as the server wrote it
    Quote a spot swap between SUI/USDC/WAL/DEEP/CETUS and compare DeepBook v3 pools directly (direct or 2-hop) with the Cetus aggregator. Returns the best route, expected output, price impact and fees. Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Swap quote
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_swing_range1h/4h/24h high-low range and realized volatility from hourly candles, a regime (CALM < 2%, ELEVATED 2-4%, HIGH_VOL > 4% 4h range) and a suggested ladder rung count (3/4/5).No findings

    Why it is in this group

    • The name "get_swing_range" says "get": a word for reading.
    Description, as the server wrote it
    1h/4h/24h high-low range and realized volatility from hourly candles, a regime (CALM < 2%, ELEVATED 2-4%, HIGH_VOL > 4% 4h range) and a suggested ladder rung count (3/4/5). Information only, not a trading instruction. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Swing / range signal
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_volume24h volume, high/low, last price and % change for one DeepBook pool, or the top pools by 24h quote volume if no pool is given.No findings

    Why it is in this group

    • The name "get_volume" says "get": a word for reading.
    Description, as the server wrote it
    24h volume, high/low, last price and % change for one DeepBook pool, or the top pools by 24h quote volume if no pool is given. Set window_hours for a custom trailing window (single pool). Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: Trading volume
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • golden_path_market_readFor The Secret Journals holders (checked on chain from 'address'): a compact market read across SUI, WAL and DEEP on DeepBook (mid, spread, 24h volume, 1h/4h/24h range and regime) …No findings

    Why it is in this group

    • The name "golden_path_market_read" says "read": a word for reading.
    Description, as the server wrote it
    For The Secret Journals holders (checked on chain from 'address'): a compact market read across SUI, WAL and DEEP on DeepBook (mid, spread, 24h volume, 1h/4h/24h range and regime) plus the Golden Path pre-trade checklist. Education only, not a signal to buy or sell, no return claims. Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Golden Path market read
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • list_poolsList Sui DeepBook v3 spot pools with base/quote assets and trading params (tick, lot, min size in human units).No findings

    Why it is in this group

    • The name "list_pools" says "list": a word for reading.
    Description, as the server wrote it
    List Sui DeepBook v3 spot pools with base/quote assets and trading params (tick, lot, min size in human units). Optional filter by asset symbol. Education/information only; not financial advice. Read-only public data, may be delayed or wrong. Free: 100 calls/day per client, then 0.002 USDC per call on Sui mainnet, prepaid in batches of about 0.01 USDC (the payment-required response gives an exact amount and a payment_token).

    Annotations the server declares

    • title: List DeepBook pools
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_templatesList The Spice Melange Golden Path Grok Bot templates with prices in Sui USDC, versions and the no-checkout agent buying flow (from https://thespicemelange.org/store/catalog.json).No findings

    Why it is in this group

    • The name "list_templates" says "list": a word for reading.
    Description, as the server wrote it
    List The Spice Melange Golden Path Grok Bot templates with prices in Sui USDC, versions and the no-checkout agent buying flow (from https://thespicemelange.org/store/catalog.json). Educational templates, not financial advice; no returns promised. All sales final, except where the law requires otherwise. You pay from your own wallet; this connector never holds keys or funds.

    Annotations the server declares

    • title: List desk templates
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • read_walrus_blobRead a public Walrus mainnet blob by id via the public aggregator (text, or base64 preview if binary; max 64 KB).No findings

    Why it is in this group

    • The name "read_walrus_blob" says "read": a word for reading.
    Description, as the server wrote it
    Read a public Walrus mainnet blob by id via the public aggregator (text, or base64 preview if binary; max 64 KB). Non-custodial: the desk never sees or holds keys and never moves funds; it returns quotes and UNSIGNED transactions only. Spot only, no leverage. Education only, not financial advice.

    Annotations the server declares

    • title: Read Walrus blob
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http plumbline https://plumbline-mcp.fly.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__plumbline__list_pools",
      "mcp__plumbline__get_mid_price",
      "mcp__plumbline__get_order_book",
      "mcp__plumbline__get_volume",
      "mcp__plumbline__get_pool_params",
      "mcp__plumbline__get_recent_trades",
      "mcp__plumbline__get_ohlcv",
      "mcp__plumbline__get_indexer_status",
      "mcp__plumbline__get_swing_range",
      "mcp__plumbline__get_pool_stats",
      "mcp__plumbline__list_templates",
      "mcp__plumbline__get_desk_rhythm",
      "mcp__plumbline__get_swap_quote",
      "mcp__plumbline__golden_path_market_read",
      "mcp__plumbline__get_book_depth",
      "mcp__plumbline__get_cetus_pool",
      "mcp__plumbline__read_walrus_blob"
    ],
    "ask": [
      "mcp__plumbline__get_bm_fills",
      "mcp__plumbline__estimate_fees",
      "mcp__plumbline__create_template_order",
      "mcp__plumbline__check_template_order",
      "mcp__plumbline__wallet_setup_guide",
      "mcp__plumbline__build_swap_tx",
      "mcp__plumbline__check_holder",
      "mcp__plumbline__build_create_balance_manager_tx",
      "mcp__plumbline__build_bm_deposit_tx",
      "mcp__plumbline__build_bm_withdraw_tx",
      "mcp__plumbline__build_limit_order_tx",
      "mcp__plumbline__walrus_store_guide",
      "mcp__plumbline__build_walrus_register_tx"
    ],
    "deny": [
      "mcp__plumbline__build_cancel_order_tx"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as plumbline. Review it before you use it.