Fivebar Trading

io.github.fivebar-xyz/fivebarfivebar-xyzstreamable-httpv0.2.0Scanned 42 minutes ago

Trading tools for AI agents: token risk checks, swap quotes, unsigned swaps, holdings on 5 chains.

13 tools: 11 change things and 2 only read.

Reads private data · 0
Reads text others write · 13
Can send data out · 0
No findings

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

13 tools

Changes things 11Creates or changes something that can be changed back.Claude Code: ask

check_sellerBefore paying an x402 seller on Robinhood Chain, check its address against Fivebar's wash screen: whether it's among the sellers whose payments passed in the last 24 hours, its buy…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Before paying an x402 seller on Robinhood Chain, check its address against Fivebar's wash screen: whether it's among the sellers whose payments passed in the last 24 hours, its buyers and volume, and its agent record if it's a registered agent.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
eth_priceETH price in USD on Robinhood Chain (Chainlink feed, or the deepest WETH/USDG pool if the feed is unavailable).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
ETH price in USD on Robinhood Chain (Chainlink feed, or the deepest WETH/USDG pool if the feed is unavailable).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
perp_quoteOne Hyperliquid perpetual market by coin (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One Hyperliquid perpetual market by coin (e.g. BTC, ETH, HYPE): mark and oracle price, 24h change, funding, open interest, volume and max leverage.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
perps_marketsPerpetual futures markets on Hyperliquid: mark price, 24h change, funding (hourly and yearly), open interest, 24h volume and max leverage.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Perpetual futures markets on Hyperliquid: mark price, 24h change, funding (hourly and yearly), open interest, 24h volume and max leverage. Sort by volume, open interest or funding; filter by coin.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
stock_quotePrice of a Robinhood stock token on Robinhood Chain, by symbol (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Price of a Robinhood stock token on Robinhood Chain, by symbol (e.g. AAPL) or token address: the Chainlink feed price per token (dividends and splits included through the multiplier), how fresh it is, the on-chain DEX price where a Uniswap pool exists, and which sessions it trades in. Equity feeds follow US market hours 24/5 and hold their last price when markets are closed.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
swap_buildBuild a swap for your own wallet to sign and send, on Robinhood Chain, Base, Ethereum, Arbitrum or Solana.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Build a swap for your own wallet to sign and send, on Robinhood Chain, Base, Ethereum, Arbitrum or Solana. Returns a firm quote (amount out, minimum, every fee) and the unsigned transactions in order. EVM chains: an exact-amount approval when needed, then the swap. Solana: one versioned transaction (base64) your wallet pays for and signs. Fivebar's 0.5% fee is paid inside the swap; Fivebar never sees your keys or holds your funds. Wallets on the US sanctions list are refused. xStocks are coming soon.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
swap_quoteWhat swapping one token for another would give right now, on Robinhood Chain (default), Solana (SOL, USDC, USDT and memecoins by mint address; picked automatically for those), Base…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
What swapping one token for another would give right now, on Robinhood Chain (default), Solana (SOL, USDC, USDT and memecoins by mint address; picked automatically for those), Base, Ethereum or Arbitrum (ETH, WETH, USDC, USDT or a token address; pass chain). EVM chains: the best route across Uniswap v2/v3/v4, PancakeSwap, SushiSwap, Aerodrome, Curve and other DEXes. Solana: the best route across Solana DEXes. Routed by 0x, with the amount out and the minimum after slippage, the USD value, and every fee shown separately (Fivebar's 0.5%, the router's fee where it applies, and network gas). Flags token taxes and, if you pass your wallet as taker, a missing balance or approval. xStocks are coming soon: use stock_quote for their prices. Quote only: nothing is signed or sent; to swap, use swap_build.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
token_quotePrice and market cap of any token by its contract address.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Price and market cap of any token by its contract address. A 0x address is read on Robinhood Chain by default (Uniswap v3 and v4 pools; when the best pool is thin, under $2,000 in range, or missing, the price comes from a $10 buy routed by 0x and a warning says so); pass chain base, ethereum or arbitrum for those chains. A Solana mint is priced from a small USDC buy routed across Solana DEXes.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
token_riskWhat could go wrong buying a token, by contract address, on Solana, Robinhood Chain, Base, Ethereum or Arbitrum.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
What could go wrong buying a token, by contract address, on Solana, Robinhood Chain, Base, Ethereum or Arbitrum. Solana: whether someone can still mint more or freeze holders, Token-2022 traps (transfer fees, a permanent delegate, transfer hooks), and how concentrated the top holders are. EVM: buy and sell taxes and whether the contract still has an owner. Both: a $100 buy-then-sell test through the router (can you sell it, and what's lost). Returns a verdict (high, caution or low) and the reasons. Not a guarantee.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
wallet_holdingsEvery token a wallet holds, with USD values, across Robinhood Chain, Base, Arbitrum and Ethereum for a 0x address (or one chain with chain), or on Solana for a Solana address.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Every token a wallet holds, with USD values, across Robinhood Chain, Base, Arbitrum and Ethereum for a 0x address (or one chain with chain), or on Solana for a Solana address. Includes ETH or SOL, stablecoins, Robinhood stock tokens and memecoins. Values: $1 for stablecoins, the ETH price for ETH and WETH, Chainlink for stock tokens, Uniswap pools on Robinhood Chain (a router buy when the pool is thin), a small buy routed by 0x elsewhere. The biggest positions carry a quick risk verdict (run token_risk for the full check). Tokens that look like airdropped spam are hidden and counted; tokens with no route to sell are listed apart.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
x402_statsFivebar's index of x402 payments (USDG transferWithAuthorization) on Robinhood Chain: the last 24 hours and recent days, screened before they count.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Fivebar's index of x402 payments (USDG transferWithAuthorization) on Robinhood Chain: the last 24 hours and recent days, screened before they count. Volume that doesn't pass is split two ways: flaggedUsd shows a wash pattern (a seller paying itself, circular payments, two wallets paying 90%+ of a seller); tooFewBuyersUsd only went to sellers with under 10 distinct buyers, which isn't evidence of washing, just not enough to judge yet. topSellers lists sellers that passed. Updated every 3 hours.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

Only reads 2Looks things up and changes nothing.Show 2 read-only tools

agent_lookupLook up an AI agent on Robinhood Chain by ERC-8004 agent ID, wallet address or name: its owner and agent wallet, Fivebar Score (as a seller: how many independent operators pay it, …Reads text others writeNo findings
Why it is in this group
- The name "agent_lookup" says "lookup": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Look up an AI agent on Robinhood Chain by ERC-8004 agent ID, wallet address or name: its owner and agent wallet, Fivebar Score (as a seller: how many independent operators pay it, with bundled buyer wallets counted once; as a buyer: how many real sellers it pays; 'not scored yet' with progress when the evidence is thin, never a 0), screened x402 record (passed, not counted yet, removed for wash patterns), flags and clusters. Use before paying or trusting an agent.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
stocks_listList the tokenized stocks Robinhood issues on Robinhood Chain (about 100: AAPL, TSLA, NVDA...): symbol, name, token address, shares-per-token multiplier, which trading sessions the…Reads text others writeNo findings
Why it is in this group
- The name "stocks_list" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "issue": it reads issues, which other people can write.
Description, as the server wrote it
List the tokenized stocks Robinhood issues on Robinhood Chain (about 100: AAPL, TSLA, NVDA...): symbol, name, token address, shares-per-token multiplier, which trading sessions they trade in, and whether a Chainlink price feed exists. Filter with query (symbol or name).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write13: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; agent_lookup
check_seller
eth_price
perp_quote
perps_markets
stock_quote
stocks_list
swap_build
swap_quote
token_quote
token_risk
wallet_holdings
and 1 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http fivebar https://fivebar.xyz/mcp

claude mcp add --transport http fivebar https://fivebar.xyz/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__fivebar__stocks_list",
      "mcp__fivebar__agent_lookup"
    ],
    "ask": [
      "mcp__fivebar__stock_quote",
      "mcp__fivebar__token_quote",
      "mcp__fivebar__swap_quote",
      "mcp__fivebar__token_risk",
      "mcp__fivebar__swap_build",
      "mcp__fivebar__eth_price",
      "mcp__fivebar__wallet_holdings",
      "mcp__fivebar__perps_markets",
      "mcp__fivebar__perp_quote",
      "mcp__fivebar__x402_stats",
      "mcp__fivebar__check_seller"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as fivebar. Review it before you use it.

Capability tags behind 13 rules

mcp__fivebar__stocks_list untrusted-input
mcp__fivebar__stock_quote untrusted-input
mcp__fivebar__token_quote untrusted-input
mcp__fivebar__swap_quote untrusted-input
mcp__fivebar__token_risk untrusted-input
mcp__fivebar__swap_build untrusted-input
mcp__fivebar__eth_price untrusted-input
mcp__fivebar__wallet_holdings untrusted-input
mcp__fivebar__perps_markets untrusted-input
mcp__fivebar__perp_quote untrusted-input
mcp__fivebar__x402_stats untrusted-input
mcp__fivebar__agent_lookup untrusted-input
mcp__fivebar__check_seller untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.fivebar-xyz/fivebar/verify?hash=65f9d0909d34a2149ec44a6a8f86cd6a36ec3234f4f572ac30939b8946b0e9fe" | jq -e '.changed == false'

Pinned hash 65f9d0909d34, from Oct 31, 2026, 17:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.fivebar-xyz/fivebar/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.fivebar-xyz/fivebar.svg)](https://anlyon.dev/servers/io.github.fivebar-xyz/fivebar)

Source: MCP Registry · repository. Synced Oct 31, 2026, 17:18 UTC.