Skip to content
anlyon.devby Anlyon

Ironflow: Hyperliquid data

io.github.ironflowsh/hyperliquidironflowshstreamable-httpv0.11.2Scanned

Read-only Hyperliquid data for AI agents: fills, candles, funding, liquidations, wallet analytics.

36 tools: 3 change things and 33 only read.

Tools: 0 delete, 0 irreversible, 3 write, 33 read.
  • Reads private data · 7
  • Reads text others write · 36
  • Can send data out · 0
  • 3 findings

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

36 tools

Changes things 3Claude Code: ask
  • get_user_stateOpen positions and unrealized PnL for a Hyperliquid wallet right now, across native and HIP-3 perps.Reads text others write1 finding

    Why it is in this group

    • The name "get_user_state" says "get": a word for reading.
    • The description's first verb is "open": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "get_user_state" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_user_state" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Open positions and unrealized PnL for a Hyperliquid wallet right now, across native and HIP-3 perps. Use it for questions like 'is this wallet long or short?'

    Annotations the server declares

    • title: Wallet positions
    • readOnlyHint: true
    • openWorldHint: true
  • get_wallet_labelsLabels for notable Hyperliquid wallets: top whales by 24h volume, top traders by 30-day realized PnL, vaults and vault leaders.Reads private dataReads text others write1 finding

    Why it is in this group

    • The name "get_wallet_labels" says "get": a word for reading.
    • The description's first verb is "label": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • private-dataThe description's first sentence says "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "get_wallet_labels" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_wallet_labels" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Labels for notable Hyperliquid wallets: top whales by 24h volume, top traders by 30-day realized PnL, vaults and vault leaders. Pass addresses to check specific wallets; without them it lists the whales and smart money.

    Annotations the server declares

    • title: Wallet labels
    • readOnlyHint: true
    • openWorldHint: true
  • run_queryRun one read-only ClickHouse SELECT over Ironflow's Hyperliquid tables (hl.fills, hl.wallet_daily, hl.wallet_behavior, hl.funding, hl.mark_prices, hl.oracle_prices, hl.open_interes…Reads private dataReads text others write1 finding

    Why it is in this group

    • The name "run_query" says "run": a word for a change.
    • The input takes a statement or command to run (input.sql), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • private-dataThe name says "run" and the input takes a statement (input.sql): it reads databases.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "run_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "run_query" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run one read-only ClickHouse SELECT over Ironflow's Hyperliquid tables (hl.fills, hl.wallet_daily, hl.wallet_behavior, hl.funding, hl.mark_prices, hl.oracle_prices, hl.open_interest, hl.liquidations, hl.builder_fills, hl.transfers, hl.vault_operations). Aggregate in SQL: results are capped (1,000 rows keyless). Keyless: last 24 hours, 5 s per query, 60 query seconds per hour per IP; a free key from https://ironflow.sh/key gives 30 days of history.

    Annotations the server declares

    • title: Run SQL query
    • readOnlyHint: true
    • openWorldHint: true
Only reads 33Show 33 read-only tools
  • describe_dataReturns the SQL tables of Ironflow's Hyperliquid data (every fill, per-wallet daily totals, wallet behaviour labels, funding, mark and oracle prices, open interest, liquidations, b…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "describe_data" says "describe": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "return" and "sql": it reads databases.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Returns the SQL tables of Ironflow's Hyperliquid data (every fill, per-wallet daily totals, wallet behaviour labels, funding, mark and oracle prices, open interest, liquidations, builder-code fills, transfers, vault flows), their columns, how far back each goes, query tips, worked examples and your own limits.

    Annotations the server declares

    • title: Describe SQL tables
    • readOnlyHint: true
    • openWorldHint: true
  • get_candlesOHLCV candles for a Hyperliquid market, computed from tick-level trades.Reads text others writeNo findings

    Why it is in this group

    • The name "get_candles" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    OHLCV candles for a Hyperliquid market, computed from tick-level trades.

    Annotations the server declares

    • title: Candles (OHLCV)
    • readOnlyHint: true
    • openWorldHint: true
  • get_cohort_addressesWallet addresses in one named wallet cohort.Reads text others writeNo findings

    Why it is in this group

    • The name "get_cohort_addresses" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Wallet addresses in one named wallet cohort.

    Annotations the server declares

    • title: Cohort addresses
    • readOnlyHint: true
    • openWorldHint: true
  • get_early_moversWallets whose large orders (at least $10k) on a Hyperliquid market were followed by a price move in their direction within 30 minutes.Reads text others writeNo findings

    Why it is in this group

    • The name "get_early_movers" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Wallets whose large orders (at least $10k) on a Hyperliquid market were followed by a price move in their direction within 30 minutes. Returns a lead score in basis points and a hit rate per wallet. Past activity does not predict future results.

    Annotations the server declares

    • title: Early movers
    • readOnlyHint: true
    • openWorldHint: true
  • get_fillsEvery fill for one Hyperliquid wallet, optionally for one market, from indexed history: price, size, side, fee and realized PnL.Reads text others writeNo findings

    Why it is in this group

    • The name "get_fills" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Every fill for one Hyperliquid wallet, optionally for one market, from indexed history: price, size, side, fee and realized PnL. Hyperliquid's own userFills endpoints stop at the 10,000 most recent fills.

    Annotations the server declares

    • title: Wallet fills
    • readOnlyHint: true
    • openWorldHint: true
  • get_funding_ratesHourly funding rate history for a Hyperliquid perp, including HIP-3 builder perps.Reads text others writeNo findings

    Why it is in this group

    • The name "get_funding_rates" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hourly funding rate history for a Hyperliquid perp, including HIP-3 builder perps. A positive rate means longs pay shorts.

    Annotations the server declares

    • title: Funding rate history
    • readOnlyHint: true
    • openWorldHint: true
  • get_funding_statsFunding statistics per time bucket for a Hyperliquid perp: average, minimum, maximum and annualized rate.Reads text others writeNo findings

    Why it is in this group

    • The name "get_funding_stats" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Funding statistics per time bucket for a Hyperliquid perp: average, minimum, maximum and annualized rate.

    Annotations the server declares

    • title: Funding statistics
    • readOnlyHint: true
    • openWorldHint: true
  • get_liquidation_levelsLiquidated notional on a Hyperliquid perp bucketed by price: where longs and shorts were wiped out.Reads text others writeNo findings

    Why it is in this group

    • The name "get_liquidation_levels" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Liquidated notional on a Hyperliquid perp bucketed by price: where longs and shorts were wiped out. Needs a Builder or Enterprise key; keyless and free-key calls return 403.

    Annotations the server declares

    • title: Liquidation levels
    • readOnlyHint: true
    • openWorldHint: true
  • get_liquidation_summaryLiquidations across every Hyperliquid market (or one market) over the last N minutes, totalled: count, notional, longs vs shorts liquidated, the top markets and the largest single …Reads text others writeNo findings

    Why it is in this group

    • The name "get_liquidation_summary" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Liquidations across every Hyperliquid market (or one market) over the last N minutes, totalled: count, notional, longs vs shorts liquidated, the top markets and the largest single liquidation. Use it for 'who got liquidated in the last hour?'. Keyless calls can look back 60 minutes, keyed calls up to 240.

    Annotations the server declares

    • title: Liquidation summary
    • readOnlyHint: true
    • openWorldHint: true
  • get_liquidationsLiquidations on a Hyperliquid perp, read from our own nodes: price, size, side and the liquidated wallet.Reads text others writeNo findings

    Why it is in this group

    • The name "get_liquidations" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Liquidations on a Hyperliquid perp, read from our own nodes: price, size, side and the liquidated wallet. Hyperliquid's public API has no liquidation feed.

    Annotations the server declares

    • title: Liquidations
    • readOnlyHint: true
    • openWorldHint: true
  • get_mark_pricesLatest mark price, oracle price and hourly funding rate of a Hyperliquid perp.Reads text others writeNo findings

    Why it is in this group

    • The name "get_mark_prices" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest mark price, oracle price and hourly funding rate of a Hyperliquid perp.

    Annotations the server declares

    • title: Mark and oracle price
    • readOnlyHint: true
    • openWorldHint: true
  • get_market_leadersThe best traders on one Hyperliquid market, ranked by profit factor then win rate, among wallets with at least 5 closed trades there.Reads text others writeNo findings

    Why it is in this group

    • The name "get_market_leaders" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The best traders on one Hyperliquid market, ranked by profit factor then win rate, among wallets with at least 5 closed trades there.

    Annotations the server declares

    • title: Market leaders
    • readOnlyHint: true
    • openWorldHint: true
  • get_market_top_walletsTop wallets on one Hyperliquid market by volume or realized PnL, up to 200 rows.Reads text others writeNo findings

    Why it is in this group

    • The name "get_market_top_wallets" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Top wallets on one Hyperliquid market by volume or realized PnL, up to 200 rows.

    Annotations the server declares

    • title: Top wallets in a market
    • readOnlyHint: true
    • openWorldHint: true
  • get_markets_snapshotActive Hyperliquid markets ranked in one call: mark price, 24h change, 24h volume, open interest and current hourly funding.Reads text others writeNo findings

    Why it is in this group

    • The name "get_markets_snapshot" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Active Hyperliquid markets ranked in one call: mark price, 24h change, 24h volume, open interest and current hourly funding. Sort by abs_funding for the most extreme funding, abs_change_24h for the biggest movers, or volume (default). Use min_volume_usd to skip illiquid markets. Returns the top 25 unless limit is set.

    Annotations the server declares

    • title: Markets snapshot
    • readOnlyHint: true
    • openWorldHint: true
  • get_open_interestLatest open interest of a Hyperliquid perp, in base units, with its 24h volume in USD.Reads text others writeNo findings

    Why it is in this group

    • The name "get_open_interest" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest open interest of a Hyperliquid perp, in base units, with its 24h volume in USD.

    Annotations the server declares

    • title: Open interest
    • readOnlyHint: true
    • openWorldHint: true
  • get_pnl_leaderboardEvery Hyperliquid wallet ranked by realized PnL, biggest losses or volume over a window.Reads text others writeNo findings

    Why it is in this group

    • The name "get_pnl_leaderboard" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Every Hyperliquid wallet ranked by realized PnL, biggest losses or volume over a window. Wallets with fewer than 5 fills in the window are left out.

    Annotations the server declares

    • title: PnL leaderboard
    • readOnlyHint: true
    • openWorldHint: true
  • get_priceLatest mark price of a Hyperliquid market: native perps, HIP-3 builder perps (e.g.Reads text others writeNo findings

    Why it is in this group

    • The name "get_price" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest mark price of a Hyperliquid market: native perps, HIP-3 builder perps (e.g. xyz:NVDA-PERP) and spot.

    Annotations the server declares

    • title: Market price
    • readOnlyHint: true
    • openWorldHint: true
  • get_recent_tradesLatest tick-level trades on a Hyperliquid market from our own nodes: price, size, side and block time.Reads text others writeNo findings

    Why it is in this group

    • The name "get_recent_trades" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Latest tick-level trades on a Hyperliquid market from our own nodes: price, size, side and block time. Covers native perps, HIP-3 builder markets, HIP-4 outcomes and spot.

    Annotations the server declares

    • title: Recent trades
    • readOnlyHint: true
    • openWorldHint: true
  • get_statusIronflow service status right now: overall state, data freshness per venue and component health.Reads text others writeNo findings

    Why it is in this group

    • The name "get_status" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Ironflow service status right now: overall state, data freshness per venue and component health.

    Annotations the server declares

    • title: API status
    • readOnlyHint: true
    • openWorldHint: true
  • get_status_historyIronflow uptime and data freshness per hour over the last 24 hours (default) or 7 days.Reads text others writeNo findings

    Why it is in this group

    • The name "get_status_history" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Ironflow uptime and data freshness per hour over the last 24 hours (default) or 7 days.

    Annotations the server declares

    • title: API uptime history
    • readOnlyHint: true
    • openWorldHint: true
  • get_status_metricsIronflow performance over rolling windows: API latency and error rate, ingestion lag and synthetic probe timings.Reads text others writeNo findings

    Why it is in this group

    • The name "get_status_metrics" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Ironflow performance over rolling windows: API latency and error rate, ingestion lag and synthetic probe timings.

    Annotations the server declares

    • title: API performance metrics
    • readOnlyHint: true
    • openWorldHint: true
  • get_top_tradersHyperliquid traders ranked across all markets by results over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and best markets.Reads text others writeNo findings

    Why it is in this group

    • The name "get_top_traders" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hyperliquid traders ranked across all markets by results over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and best markets. sort=top ranks by realized PnL, lowrisk by smallest max drawdown, new by most recently first seen.

    Annotations the server declares

    • title: Top traders
    • readOnlyHint: true
    • openWorldHint: true
  • get_trader_profileA Hyperliquid wallet's trading record over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and its best markets.Reads text others writeNo findings

    Why it is in this group

    • The name "get_trader_profile" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    A Hyperliquid wallet's trading record over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and its best markets.

    Annotations the server declares

    • title: Trader profile
    • readOnlyHint: true
    • openWorldHint: true
  • get_user_fundingFunding a Hyperliquid wallet paid or received, per market per bucket.Reads text others writeNo findings

    Why it is in this group

    • The name "get_user_funding" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Funding a Hyperliquid wallet paid or received, per market per bucket. Positive means received, negative means paid. bucket=1d gives daily totals, 1h the raw hourly payments.

    Annotations the server declares

    • title: Wallet funding payments
    • readOnlyHint: true
    • openWorldHint: true
  • get_user_ledgerVault deposits, withdrawals and transfers for a Hyperliquid wallet.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_user_ledger" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Vault deposits, withdrawals and transfers for a Hyperliquid wallet. Positive amounts go into the account. Account deposits and withdrawals are recorded only up to 2026-06-06.

    Annotations the server declares

    • title: Wallet ledger
    • readOnlyHint: true
    • openWorldHint: true
  • get_user_maker_takerMaker vs taker breakdown of a Hyperliquid wallet's fills per market: volume, fees and rebates.Reads text others writeNo findings

    Why it is in this group

    • The name "get_user_maker_taker" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Maker vs taker breakdown of a Hyperliquid wallet's fills per market: volume, fees and rebates. A high maker share with negative maker fees marks a market maker.

    Annotations the server declares

    • title: Wallet maker/taker split
    • readOnlyHint: true
    • openWorldHint: true
  • get_user_pnl_seriesRealized PnL curve of a Hyperliquid wallet over time, bucketed (for example hourly or daily).Reads text others writeNo findings

    Why it is in this group

    • The name "get_user_pnl_series" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Realized PnL curve of a Hyperliquid wallet over time, bucketed (for example hourly or daily).

    Annotations the server declares

    • title: Wallet PnL curve
    • readOnlyHint: true
    • openWorldHint: true
  • get_user_summaryOne Hyperliquid wallet's stats over a window: volume, realized PnL, fill count, win rate, maker share and markets traded.Reads text others writeNo findings

    Why it is in this group

    • The name "get_user_summary" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One Hyperliquid wallet's stats over a window: volume, realized PnL, fill count, win rate, maker share and markets traded.

    Annotations the server declares

    • title: Wallet summary
    • readOnlyHint: true
    • openWorldHint: true
  • get_vault_leaderboardHyperliquid vaults ranked by net deposits (deposits minus withdrawals) over the last 7 days, with depositor counts.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_vault_leaderboard" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_vault_leaderboard" says "get" and "vault": it reads secrets.
    • private-dataThe description's first sentence says "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hyperliquid vaults ranked by net deposits (deposits minus withdrawals) over the last 7 days, with depositor counts. Keyless calls see the last 24 hours; a free key from https://ironflow.sh/key gives the full 7 days.

    Annotations the server declares

    • title: Vault leaderboard
    • readOnlyHint: true
    • openWorldHint: true
  • get_vault_operationsDeposits into and withdrawals from one Hyperliquid vault or one depositor.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_vault_operations" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_vault_operations" says "get" and "vault": it reads secrets.
    • private-dataThe description's first sentence says "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Deposits into and withdrawals from one Hyperliquid vault or one depositor. Pass vault, address, or both; at least one is required (HLP is 0xdfc24b077bc1425ad1dea75bcb6f8158e10df303).

    Annotations the server declares

    • title: Vault deposits and withdrawals
    • readOnlyHint: true
    • openWorldHint: true
  • get_wallet_behaviorHow Hyperliquid wallets trade, from their last 30 days: labels (market_maker, high_frequency, whale, directional, consistent_winner, big_loser, revenge_sizing, often_liquidated, hi…Reads text others writeNo findings

    Why it is in this group

    • The name "get_wallet_behavior" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    How Hyperliquid wallets trade, from their last 30 days: labels (market_maker, high_frequency, whale, directional, consistent_winner, big_loser, revenge_sizing, often_liquidated, hip3_trader, spot_trader, prediction_trader) and the numbers behind them (maker share, buy/sell imbalance, fills per day, green-day share, profit factor, liquidations). Look up specific addresses, or list wallets with one label.

    Annotations the server declares

    • title: Wallet behavior labels
    • readOnlyHint: true
    • openWorldHint: true
  • list_cohortsList available address cohorts: six predefined groups (top_pnl_30d, high_volume_30d, whale_fills, net_withdrawers_7d, liquidation_prone, vault_whales) plus any custom cohorts the c…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "list_cohorts" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "vault": it reads secrets.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List available address cohorts: six predefined groups (top_pnl_30d, high_volume_30d, whale_fills, net_withdrawers_7d, liquidation_prone, vault_whales) plus any custom cohorts the caller has created

    Annotations the server declares

    • title: List cohorts
    • readOnlyHint: true
    • openWorldHint: true
  • list_marketsFind how a Hyperliquid market is named: perps (native and HIP-3), spot and live HIP-4 outcomes, with symbol, class, issuer, base asset and Hyperliquid coin.Reads text others writeNo findings

    Why it is in this group

    • The name "list_markets" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Find how a Hyperliquid market is named: perps (native and HIP-3), spot and live HIP-4 outcomes, with symbol, class, issuer, base asset and Hyperliquid coin. Search with q (q=nvda finds xyz:NVDA-PERP and the other NVDA perps). Pages of up to 100 rows; pass pagination.next_cursor as cursor for the next page.

    Annotations the server declares

    • title: List markets
    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data7
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write36
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • Warnrun_query

    The server marks "run_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "run_query" says "run": a word for a change.

    What this check looks for
  • Warnget_user_state

    The server marks "get_user_state" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_user_state" says "get": a word for reading.

    What this check looks for
  • Warnget_wallet_labels

    The server marks "get_wallet_labels" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_wallet_labels" says "get": a word for reading.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.11.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http hyperliquid https://mcp.ironflow.sh/mcp
claude mcp add --transport http hyperliquid https://mcp.ironflow.sh/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__hyperliquid__describe_data",
      "mcp__hyperliquid__get_wallet_behavior",
      "mcp__hyperliquid__get_price",
      "mcp__hyperliquid__get_recent_trades",
      "mcp__hyperliquid__get_candles",
      "mcp__hyperliquid__get_funding_rates",
      "mcp__hyperliquid__get_open_interest",
      "mcp__hyperliquid__get_liquidations",
      "mcp__hyperliquid__get_liquidation_summary",
      "mcp__hyperliquid__get_fills",
      "mcp__hyperliquid__get_mark_prices",
      "mcp__hyperliquid__get_vault_operations",
      "mcp__hyperliquid__get_liquidation_levels",
      "mcp__hyperliquid__get_vault_leaderboard",
      "mcp__hyperliquid__get_funding_stats",
      "mcp__hyperliquid__get_user_funding",
      "mcp__hyperliquid__get_user_maker_taker",
      "mcp__hyperliquid__get_user_ledger",
      "mcp__hyperliquid__get_pnl_leaderboard",
      "mcp__hyperliquid__get_market_top_wallets",
      "mcp__hyperliquid__get_markets_snapshot",
      "mcp__hyperliquid__get_user_summary",
      "mcp__hyperliquid__get_user_pnl_series",
      "mcp__hyperliquid__get_top_traders",
      "mcp__hyperliquid__get_market_leaders",
      "mcp__hyperliquid__get_early_movers",
      "mcp__hyperliquid__get_trader_profile",
      "mcp__hyperliquid__list_cohorts",
      "mcp__hyperliquid__get_cohort_addresses",
      "mcp__hyperliquid__get_status",
      "mcp__hyperliquid__get_status_metrics",
      "mcp__hyperliquid__get_status_history",
      "mcp__hyperliquid__list_markets"
    ],
    "ask": [
      "mcp__hyperliquid__run_query",
      "mcp__hyperliquid__get_user_state",
      "mcp__hyperliquid__get_wallet_labels"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as hyperliquid. Review it before you use it.

Capability tags behind 36 rules
  • mcp__hyperliquid__describe_data private-data, untrusted-input
  • mcp__hyperliquid__run_query private-data, untrusted-input
  • mcp__hyperliquid__get_wallet_behavior untrusted-input
  • mcp__hyperliquid__get_price untrusted-input
  • mcp__hyperliquid__get_recent_trades untrusted-input
  • mcp__hyperliquid__get_candles untrusted-input
  • mcp__hyperliquid__get_funding_rates untrusted-input
  • mcp__hyperliquid__get_open_interest untrusted-input
  • mcp__hyperliquid__get_liquidations untrusted-input
  • mcp__hyperliquid__get_liquidation_summary untrusted-input
  • mcp__hyperliquid__get_fills untrusted-input
  • mcp__hyperliquid__get_mark_prices untrusted-input
  • mcp__hyperliquid__get_vault_operations private-data, untrusted-input
  • mcp__hyperliquid__get_liquidation_levels untrusted-input
  • mcp__hyperliquid__get_vault_leaderboard private-data, untrusted-input
  • mcp__hyperliquid__get_funding_stats untrusted-input
  • mcp__hyperliquid__get_user_state untrusted-input
  • mcp__hyperliquid__get_user_funding untrusted-input
  • mcp__hyperliquid__get_user_maker_taker untrusted-input
  • mcp__hyperliquid__get_user_ledger private-data, untrusted-input
  • mcp__hyperliquid__get_pnl_leaderboard untrusted-input
  • mcp__hyperliquid__get_market_top_wallets untrusted-input
  • mcp__hyperliquid__get_markets_snapshot untrusted-input
  • mcp__hyperliquid__get_user_summary untrusted-input
  • mcp__hyperliquid__get_wallet_labels private-data, untrusted-input
  • mcp__hyperliquid__get_user_pnl_series untrusted-input
  • mcp__hyperliquid__get_top_traders untrusted-input
  • mcp__hyperliquid__get_market_leaders untrusted-input
  • mcp__hyperliquid__get_early_movers untrusted-input
  • mcp__hyperliquid__get_trader_profile untrusted-input
  • mcp__hyperliquid__list_cohorts private-data, untrusted-input
  • mcp__hyperliquid__get_cohort_addresses untrusted-input
  • mcp__hyperliquid__get_status untrusted-input
  • mcp__hyperliquid__get_status_metrics untrusted-input
  • mcp__hyperliquid__get_status_history untrusted-input
  • mcp__hyperliquid__list_markets untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.ironflowsh/hyperliquid/verify?hash=4251ecf91d07f6074d38189b665050182170ce9f7863c7167bad75bd07f3377e" | jq -e '.changed == false'

Pinned hash 4251ecf91d07, from Nov 3, 2026, 10:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.ironflowsh/hyperliquid/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.ironflowsh/hyperliquid
[![anlyon.dev](https://anlyon.dev/badge/io.github.ironflowsh/hyperliquid.svg)](https://anlyon.dev/servers/io.github.ironflowsh/hyperliquid)

Source: MCP Registry · repository. Synced Nov 3, 2026, 10:17 UTC.