Skip to content

Basis Protocol

by basis-protocol · remote · no sign-in to list tools · v1.0.0 · published by GitHub user basis-protocol

Attested risk scores for stablecoins, DeFi protocols and wallets, with receipts.

Changes · 4
CompareRegistry entry

7 tools: 4 change things and 3 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http basis https://basisprotocol.xyz/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Changes things 4Claude Code: ask
  • basis_answerAsk the Basis Agent a question about attested risk state.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Ask the Basis Agent a question about attested risk state. Answers cite attestation hashes; ungroundable queries are refused. Never recommends positions or forecasts. Pass your hub API key (x-api-key header or ?apikey=) to attribute reads. Multi-turn: pass the envelope's session_id back as session_id. Parameters: query: The question (max 4000 chars). session_id: Session UUID from a previous envelope (optional).
  • basis_dataMarket, governance and risk data in one tool.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Market, governance and risk data in one tool. Pick a kind: liquidity_depth (entity=coin id), yield_data (entity=protocol, optional), governance_activity (entity=protocol slug; window=days, 90), bridge_flows (entity=bridge id, optional), exchange_health (entity=exchange id, optional), volatility (entity=asset id), incidents (entity=entity id, optional), peg_monitor (summary of latest deviation + status per coin; detail=true with entity returns that coin's 5-minute series, window=hours, 24), venue_shift (entity=operator slug, optional), asset_footprint (entity=token or symbol), divergence (capital-flow vs quality signals; severity=notable|alert|critical, limit=20, window=hours 24), treasury_events (entity=wallet, optional), riskiest_wallets (limit=20), scoring_backlog (limit=20). Responses are capped near 12 KB; an unknown kind returns the list of kinds.
  • receipt_verifyVerify a receipt or citation hash from an envelope (basis_answer, entity_read).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a receipt or citation hash from an envelope (basis_answer, entity_read). Resolves it against the attestation tables and returns what it attests to, or that it is unknown. ``source`` optionally restricts the table.
  • score_historyDaily SII score history for a stablecoin: a list of {date, score, grade} only.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Daily SII score history for a stablecoin: a list of {date, score, grade} only. Parameters: coin: symbol, slug or contract address (resolved like entity_read) days: lookback window, 1-365 (default 30)
Only reads 3Claude Code: allow
  • entity_readLook up any entity by symbol, slug, contract/wallet address, operator or vault name.No findings

    Why it is in this group

    • The name "entity_read" says "read": a word for reading.
    Description, as the server wrote it
    Look up any entity by symbol, slug, contract/wallet address, operator or vault name. Returns {entity_type, id, score, grade, confidence, receipt_hash, links}. When nothing resolves returns {match: null, did_you_mean: [up to 5 candidates]} rather than an error.
  • get_methodologyThe Basis methodology.No findings

    Why it is in this group

    • The name "get_methodology" says "get": a word for reading.
    Description, as the server wrote it
    The Basis methodology. mode="summary" (default): index list, versions, component counts. mode="full": the complete SII formula, weights and component specifications (large).
  • get_stablecoin_scoresCurrent SII scores (0-100) for scored stablecoins.No findings

    Why it is in this group

    • The name "get_stablecoin_scores" says "get": a word for reading.
    Description, as the server wrote it
    Current SII scores (0-100) for scored stablecoins. Use before any decision involving stablecoins. Parameters: limit: max coins returned (default 25, max 500) fields: columns to return per coin (default id, symbol, name, issuer, score, grade, confidence, stale, computed_at); name "categories" for category scores sort_by: "score_desc" (default), "score_asc", or "symbol" One coin's detail: entity_read(query).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http basis https://basisprotocol.xyz/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__basis__get_stablecoin_scores",
      "mcp__basis__get_methodology",
      "mcp__basis__entity_read"
    ],
    "ask": [
      "mcp__basis__basis_data",
      "mcp__basis__basis_answer",
      "mcp__basis__receipt_verify",
      "mcp__basis__score_history"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as basis. Review it before you use it.