io. github. ironflowsh/ mcp
by ironflowsh · remote · local (npm) · no sign-in to list tools · v0.9.0 · published by GitHub user ironflowsh
Read-only Hyperliquid data for AI agents: fills, candles, funding, liquidations, wallet analytics.
36 tools: 5 change things and 31 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things5Claude Code: ask: see these tools
- Only reads31Claude Code: allow: see these tools
5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http ironflowsh https://mcp.ironflow.sh/mcpFindings
Matches of fixed checks, with the text they matched.
- Warndescribe_data
The server marks "describe_data" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "describe_data" says "describe": a word for reading.
- Warnrun_query
The server marks "run_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "run_query" says "run": a word for a change.
- Warnget_mark_prices
The server marks "get_mark_prices" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_mark_prices" says "get": a word for reading.
- Warnget_user_state
The server marks "get_user_state" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_user_state" says "get": a word for reading.
The server marks "get_wallet_labels" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_wallet_labels" says "get": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
36 tools
Changes things 5Claude Code: ask
describe_dataStart here for any Hyperliquid question the other tools do not answer directly.1 finding
Why it is in this group
- The name "describe_data" says "describe": a word for reading.
- The description's first verb is "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "describe_data" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "describe_data" says "describe": a word for reading.
Description, as the server wrote it Start here for any Hyperliquid question the other tools do not answer directly. Returns the SQL tables you can query with run_query (every fill, per-wallet daily totals, wallet behaviour labels, funding, mark and oracle prices, open interest, liquidations, builder-code fills, transfers, vault flows), their columns, how far back each goes, query tips, worked examples and your own limits.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_mark_pricesMark price and oracle price series for a Hyperliquid perp.1 finding
Why it is in this group
- The name "get_mark_prices" says "get": a word for reading.
- The description's first verb is "mark": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "get_mark_prices" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_mark_prices" says "get": a word for reading.
Description, as the server wrote it Mark price and oracle price series for a Hyperliquid perp.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_user_stateOpen positions and unrealized PnL for a Hyperliquid wallet right now, across native and HIP-3 perps.1 finding
Why it is in this group
- The name "get_user_state" says "get": a word for reading.
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "get_user_state" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_user_state" says "get": a word for reading.
Description, as the server wrote it Open positions and unrealized PnL for a Hyperliquid wallet right now, across native and HIP-3 perps. Use it for questions like 'is this wallet long or short?'
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_wallet_labelsLabels for notable Hyperliquid wallets: top whales by 24h volume, top traders by 30-day realized PnL, vaults and vault leaders.1 finding
Why it is in this group
- The name "get_wallet_labels" says "get": a word for reading.
- The description's first verb is "label": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "get_wallet_labels" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_wallet_labels" says "get": a word for reading.
Description, as the server wrote it Labels for notable Hyperliquid wallets: top whales by 24h volume, top traders by 30-day realized PnL, vaults and vault leaders. Pass addresses to check specific wallets; without them it lists the whales and smart money.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
run_queryRun one read-only ClickHouse SELECT over Ironflow's Hyperliquid tables (hl.fills, hl.wallet_daily, hl.wallet_behavior, hl.funding, hl.mark_prices, hl.oracle_prices, hl.open_interes…1 finding
Why it is in this group
- The name "run_query" says "run": a word for a change.
- The input takes a statement or command to run (input.sql), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "run_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "run_query" says "run": a word for a change.
Description, as the server wrote it Run one read-only ClickHouse SELECT over Ironflow's Hyperliquid tables (hl.fills, hl.wallet_daily, hl.wallet_behavior, hl.funding, hl.mark_prices, hl.oracle_prices, hl.open_interest, hl.liquidations, hl.builder_fills, hl.transfers, hl.vault_operations). Call describe_data first for columns and examples. Aggregate in SQL: results are capped (1,000 rows keyless). Keyless: last 24 hours, 5 s per query, 60 query seconds per hour per IP; a free key from https://ironflow.sh/key gives 30 days of history.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Only reads 31Claude Code: allow
get_candlesOHLCV candles for a Hyperliquid market, computed from tick-level trades.No findings
Why it is in this group
- The name "get_candles" says "get": a word for reading.
Description, as the server wrote it OHLCV candles for a Hyperliquid market, computed from tick-level trades.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_cohort_addressesGet the wallet addresses in a specific cohortNo findings
Why it is in this group
- The name "get_cohort_addresses" says "get": a word for reading.
Description, as the server wrote it Get the wallet addresses in a specific cohort
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_early_moversWallets whose large orders (at least $10k) on a Hyperliquid market were followed by a price move in their direction within 30 minutes.No findings
Why it is in this group
- The name "get_early_movers" says "get": a word for reading.
Description, as the server wrote it Wallets whose large orders (at least $10k) on a Hyperliquid market were followed by a price move in their direction within 30 minutes. Returns a lead score in basis points and a hit rate per wallet. Past activity does not predict future results.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_fillsEvery fill for one Hyperliquid wallet, optionally for one market, from indexed history: price, size, side, fee and realized PnL.No findings
Why it is in this group
- The name "get_fills" says "get": a word for reading.
Description, as the server wrote it Every fill for one Hyperliquid wallet, optionally for one market, from indexed history: price, size, side, fee and realized PnL. Hyperliquid's own userFills endpoints stop at the 10,000 most recent fills.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_funding_ratesHourly funding rate history for a Hyperliquid perp, including HIP-3 builder perps.No findings
Why it is in this group
- The name "get_funding_rates" says "get": a word for reading.
Description, as the server wrote it Hourly funding rate history for a Hyperliquid perp, including HIP-3 builder perps. A positive rate means longs pay shorts.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_funding_statsFunding statistics per time bucket for a Hyperliquid perp: average, minimum, maximum and annualized rate.No findings
Why it is in this group
- The name "get_funding_stats" says "get": a word for reading.
Description, as the server wrote it Funding statistics per time bucket for a Hyperliquid perp: average, minimum, maximum and annualized rate.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_liquidation_levelsLiquidated notional on a Hyperliquid perp bucketed by price: where longs and shorts were wiped out.No findings
Why it is in this group
- The name "get_liquidation_levels" says "get": a word for reading.
Description, as the server wrote it Liquidated notional on a Hyperliquid perp bucketed by price: where longs and shorts were wiped out. Needs a Builder or Enterprise key; keyless and free-key calls return 403.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_liquidation_summaryLiquidations across every Hyperliquid market (or one market) over the last N minutes, totalled: count, notional, longs vs shorts liquidated, the top markets and the largest single …No findings
Why it is in this group
- The name "get_liquidation_summary" says "get": a word for reading.
Description, as the server wrote it Liquidations across every Hyperliquid market (or one market) over the last N minutes, totalled: count, notional, longs vs shorts liquidated, the top markets and the largest single liquidation. Use it for 'who got liquidated in the last hour?'. Keyless calls can look back 60 minutes, keyed calls up to 240.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_liquidationsLiquidations on a Hyperliquid perp, read from our own nodes: price, size, side and the liquidated wallet.No findings
Why it is in this group
- The name "get_liquidations" says "get": a word for reading.
Description, as the server wrote it Liquidations on a Hyperliquid perp, read from our own nodes: price, size, side and the liquidated wallet. Hyperliquid's public API has no liquidation feed.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_market_leadersThe best traders on one Hyperliquid market, ranked by profit factor then win rate, among wallets with at least 5 closed trades there.No findings
Why it is in this group
- The name "get_market_leaders" says "get": a word for reading.
Description, as the server wrote it The best traders on one Hyperliquid market, ranked by profit factor then win rate, among wallets with at least 5 closed trades there.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_market_top_walletsTop wallets on one Hyperliquid market by volume or realized PnL, up to 200 rows.No findings
Why it is in this group
- The name "get_market_top_wallets" says "get": a word for reading.
Description, as the server wrote it Top wallets on one Hyperliquid market by volume or realized PnL, up to 200 rows.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_markets_snapshotActive Hyperliquid markets ranked in one call: mark price, 24h change, 24h volume, open interest and current hourly funding.No findings
Why it is in this group
- The name "get_markets_snapshot" says "get": a word for reading.
Description, as the server wrote it Active Hyperliquid markets ranked in one call: mark price, 24h change, 24h volume, open interest and current hourly funding. Sort by abs_funding for the most extreme funding, abs_change_24h for the biggest movers, or volume (default). Use min_volume_usd to skip illiquid markets. Returns the top 25 unless limit is set.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_open_interestLatest open interest for a Hyperliquid perp.No findings
Why it is in this group
- The name "get_open_interest" says "get": a word for reading.
Description, as the server wrote it Latest open interest for a Hyperliquid perp.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_pnl_leaderboardEvery Hyperliquid wallet ranked by realized PnL, biggest losses or volume over a window.No findings
Why it is in this group
- The name "get_pnl_leaderboard" says "get": a word for reading.
Description, as the server wrote it Every Hyperliquid wallet ranked by realized PnL, biggest losses or volume over a window. Wallets with fewer than 5 fills in the window are left out.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_priceLatest mark price of a Hyperliquid market: native perps, HIP-3 builder perps (e.g.No findings
Why it is in this group
- The name "get_price" says "get": a word for reading.
Description, as the server wrote it Latest mark price of a Hyperliquid market: native perps, HIP-3 builder perps (e.g. xyz:NVDA-PERP) and spot.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_recent_tradesLatest tick-level trades on a Hyperliquid market from our own nodes: price, size, side and block time.No findings
Why it is in this group
- The name "get_recent_trades" says "get": a word for reading.
Description, as the server wrote it Latest tick-level trades on a Hyperliquid market from our own nodes: price, size, side and block time. Covers native perps, HIP-3 builder markets, HIP-4 outcomes and spot.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_statusGet system status, data freshness, and venue health (unauthenticated)No findings
Why it is in this group
- The name "get_status" says "get": a word for reading.
Description, as the server wrote it Get system status, data freshness, and venue health (unauthenticated)
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_status_historyGet an uptime / freshness timeline.No findings
Why it is in this group
- The name "get_status_history" says "get": a word for reading.
Description, as the server wrote it Get an uptime / freshness timeline. period: '24h' (default) or '7d' (unauthenticated)
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_status_metricsGet rolling-window API + pipeline + synthetic performance metrics (unauthenticated)No findings
Why it is in this group
- The name "get_status_metrics" says "get": a word for reading.
Description, as the server wrote it Get rolling-window API + pipeline + synthetic performance metrics (unauthenticated)
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_top_tradersHyperliquid traders ranked across all markets by results over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and best markets.No findings
Why it is in this group
- The name "get_top_traders" says "get": a word for reading.
Description, as the server wrote it Hyperliquid traders ranked across all markets by results over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and best markets. sort=top ranks by realized PnL, lowrisk by smallest max drawdown, new by most recently first seen.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_trader_profileA Hyperliquid wallet's trading record over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and its best markets.No findings
Why it is in this group
- The name "get_trader_profile" says "get": a word for reading.
Description, as the server wrote it A Hyperliquid wallet's trading record over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and its best markets.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_user_fundingFunding a Hyperliquid wallet paid or received, per market per bucket.No findings
Why it is in this group
- The name "get_user_funding" says "get": a word for reading.
Description, as the server wrote it Funding a Hyperliquid wallet paid or received, per market per bucket. Positive means received, negative means paid. bucket=1d gives daily totals, 1h the raw hourly payments.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_user_ledgerVault deposits, withdrawals and transfers for a Hyperliquid wallet.No findings
Why it is in this group
- The name "get_user_ledger" says "get": a word for reading.
Description, as the server wrote it Vault deposits, withdrawals and transfers for a Hyperliquid wallet. Positive amounts go into the account. Account deposits and withdrawals are recorded only up to 2026-06-06.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_user_maker_takerMaker vs taker breakdown of a Hyperliquid wallet's fills per market: volume, fees and rebates.No findings
Why it is in this group
- The name "get_user_maker_taker" says "get": a word for reading.
Description, as the server wrote it Maker vs taker breakdown of a Hyperliquid wallet's fills per market: volume, fees and rebates. A high maker share with negative maker fees marks a market maker.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_user_pnl_seriesRealized PnL curve of a Hyperliquid wallet over time, bucketed (for example hourly or daily).No findings
Why it is in this group
- The name "get_user_pnl_series" says "get": a word for reading.
Description, as the server wrote it Realized PnL curve of a Hyperliquid wallet over time, bucketed (for example hourly or daily).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_user_summaryOne Hyperliquid wallet's stats over a window: volume, realized PnL, fill count, win rate, maker share and markets traded.No findings
Why it is in this group
- The name "get_user_summary" says "get": a word for reading.
Description, as the server wrote it One Hyperliquid wallet's stats over a window: volume, realized PnL, fill count, win rate, maker share and markets traded.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_vault_leaderboardHyperliquid vaults ranked by net deposits (deposits minus withdrawals) over the last 7 days, with depositor counts.No findings
Why it is in this group
- The name "get_vault_leaderboard" says "get": a word for reading.
Description, as the server wrote it Hyperliquid vaults ranked by net deposits (deposits minus withdrawals) over the last 7 days, with depositor counts. Keyless calls see the last 24 hours; a free key from https://ironflow.sh/key gives the full 7 days.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_vault_operationsDeposits into and withdrawals from one Hyperliquid vault or one depositor.No findings
Why it is in this group
- The name "get_vault_operations" says "get": a word for reading.
Description, as the server wrote it Deposits into and withdrawals from one Hyperliquid vault or one depositor. Pass vault, address, or both; at least one is required (HLP is 0xdfc24b077bc1425ad1dea75bcb6f8158e10df303). For flows across all vaults use get_vault_leaderboard.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_wallet_behaviorHow Hyperliquid wallets trade, from their last 30 days: labels (market_maker, high_frequency, whale, directional, consistent_winner, big_loser, revenge_sizing, often_liquidated, hi…No findings
Why it is in this group
- The name "get_wallet_behavior" says "get": a word for reading.
Description, as the server wrote it How Hyperliquid wallets trade, from their last 30 days: labels (market_maker, high_frequency, whale, directional, consistent_winner, big_loser, revenge_sizing, often_liquidated, hip3_trader, spot_trader, prediction_trader) and the numbers behind them (maker share, buy/sell imbalance, fills per day, green-day share, profit factor, liquidations). Look up specific addresses, or list wallets with one label.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_cohortsList available address cohorts: six predefined groups (top_pnl_30d, high_volume_30d, whale_fills, net_withdrawers_7d, liquidation_prone, vault_whales) plus any custom cohorts the c…No findings
Why it is in this group
- The name "list_cohorts" says "list": a word for reading.
Description, as the server wrote it List available address cohorts: six predefined groups (top_pnl_30d, high_volume_30d, whale_fills, net_withdrawers_7d, liquidation_prone, vault_whales) plus any custom cohorts the caller has created
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_marketsActive Hyperliquid markets with display symbol, class (perp, spot, prediction), HIP-3 issuer and base asset.No findings
Why it is in this group
- The name "list_markets" says "list": a word for reading.
Description, as the server wrote it Active Hyperliquid markets with display symbol, class (perp, spot, prediction), HIP-3 issuer and base asset. Use search to find how a market is named (e.g. search 'nvda' finds xyz:NVDA-PERP).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.9.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http ironflowsh https://mcp.ironflow.sh/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__ironflowsh__get_wallet_behavior",
"mcp__ironflowsh__get_price",
"mcp__ironflowsh__get_recent_trades",
"mcp__ironflowsh__get_candles",
"mcp__ironflowsh__get_funding_rates",
"mcp__ironflowsh__get_open_interest",
"mcp__ironflowsh__get_liquidations",
"mcp__ironflowsh__get_liquidation_summary",
"mcp__ironflowsh__get_fills",
"mcp__ironflowsh__get_vault_operations",
"mcp__ironflowsh__get_liquidation_levels",
"mcp__ironflowsh__get_vault_leaderboard",
"mcp__ironflowsh__get_funding_stats",
"mcp__ironflowsh__get_user_funding",
"mcp__ironflowsh__get_user_maker_taker",
"mcp__ironflowsh__get_user_ledger",
"mcp__ironflowsh__get_pnl_leaderboard",
"mcp__ironflowsh__get_market_top_wallets",
"mcp__ironflowsh__get_markets_snapshot",
"mcp__ironflowsh__get_user_summary",
"mcp__ironflowsh__get_user_pnl_series",
"mcp__ironflowsh__get_top_traders",
"mcp__ironflowsh__get_market_leaders",
"mcp__ironflowsh__get_early_movers",
"mcp__ironflowsh__get_trader_profile",
"mcp__ironflowsh__list_cohorts",
"mcp__ironflowsh__get_cohort_addresses",
"mcp__ironflowsh__get_status",
"mcp__ironflowsh__get_status_metrics",
"mcp__ironflowsh__get_status_history",
"mcp__ironflowsh__list_markets"
],
"ask": [
"mcp__ironflowsh__describe_data",
"mcp__ironflowsh__run_query",
"mcp__ironflowsh__get_mark_prices",
"mcp__ironflowsh__get_user_state",
"mcp__ironflowsh__get_wallet_labels"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ironflowsh. Review it before you use it.
