Skip to content

io.github.ironflowsh/mcp

by ironflowsh · remote · local (npm) · no sign-in to list tools · v0.9.0 · published by GitHub user ironflowsh

Read-only Hyperliquid data for AI agents: fills, candles, funding, liquidations, wallet analytics.

Changes · 5

36 tools: 5 change things and 31 only read.

Scanned Oct 21, 2026

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http ironflowsh https://mcp.ironflow.sh/mcp

Findings

Matches of fixed checks, with the text they matched.

5 warn
  • The server marks "describe_data" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "describe_data" says "describe": a word for reading.

    What this check looks for
  • The server marks "run_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "run_query" says "run": a word for a change.

    What this check looks for
  • The server marks "get_mark_prices" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_mark_prices" says "get": a word for reading.

    What this check looks for
  • The server marks "get_user_state" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_user_state" says "get": a word for reading.

    What this check looks for
  • The server marks "get_wallet_labels" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_wallet_labels" says "get": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

36 tools

Changes things 5Claude Code: ask
  • describe_dataStart here for any Hyperliquid question the other tools do not answer directly.1 finding

    Why it is in this group

    • The name "describe_data" says "describe": a word for reading.
    • The description's first verb is "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "describe_data" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "describe_data" says "describe": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Start here for any Hyperliquid question the other tools do not answer directly. Returns the SQL tables you can query with run_query (every fill, per-wallet daily totals, wallet behaviour labels, funding, mark and oracle prices, open interest, liquidations, builder-code fills, transfers, vault flows), their columns, how far back each goes, query tips, worked examples and your own limits.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_mark_pricesMark price and oracle price series for a Hyperliquid perp.1 finding

    Why it is in this group

    • The name "get_mark_prices" says "get": a word for reading.
    • The description's first verb is "mark": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_mark_prices" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_mark_prices" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Mark price and oracle price series for a Hyperliquid perp.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_user_stateOpen positions and unrealized PnL for a Hyperliquid wallet right now, across native and HIP-3 perps.1 finding

    Why it is in this group

    • The name "get_user_state" says "get": a word for reading.
    • The description's first verb is "open": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_user_state" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_user_state" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Open positions and unrealized PnL for a Hyperliquid wallet right now, across native and HIP-3 perps. Use it for questions like 'is this wallet long or short?'

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_wallet_labelsLabels for notable Hyperliquid wallets: top whales by 24h volume, top traders by 30-day realized PnL, vaults and vault leaders.1 finding

    Why it is in this group

    • The name "get_wallet_labels" says "get": a word for reading.
    • The description's first verb is "label": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_wallet_labels" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_wallet_labels" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Labels for notable Hyperliquid wallets: top whales by 24h volume, top traders by 30-day realized PnL, vaults and vault leaders. Pass addresses to check specific wallets; without them it lists the whales and smart money.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • run_queryRun one read-only ClickHouse SELECT over Ironflow's Hyperliquid tables (hl.fills, hl.wallet_daily, hl.wallet_behavior, hl.funding, hl.mark_prices, hl.oracle_prices, hl.open_interes…1 finding

    Why it is in this group

    • The name "run_query" says "run": a word for a change.
    • The input takes a statement or command to run (input.sql), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "run_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "run_query" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run one read-only ClickHouse SELECT over Ironflow's Hyperliquid tables (hl.fills, hl.wallet_daily, hl.wallet_behavior, hl.funding, hl.mark_prices, hl.oracle_prices, hl.open_interest, hl.liquidations, hl.builder_fills, hl.transfers, hl.vault_operations). Call describe_data first for columns and examples. Aggregate in SQL: results are capped (1,000 rows keyless). Keyless: last 24 hours, 5 s per query, 60 query seconds per hour per IP; a free key from https://ironflow.sh/key gives 30 days of history.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 31Claude Code: allow
  • get_candlesOHLCV candles for a Hyperliquid market, computed from tick-level trades.No findings

    Why it is in this group

    • The name "get_candles" says "get": a word for reading.
    Description, as the server wrote it
    OHLCV candles for a Hyperliquid market, computed from tick-level trades.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_cohort_addressesGet the wallet addresses in a specific cohortNo findings

    Why it is in this group

    • The name "get_cohort_addresses" says "get": a word for reading.
    Description, as the server wrote it
    Get the wallet addresses in a specific cohort

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_early_moversWallets whose large orders (at least $10k) on a Hyperliquid market were followed by a price move in their direction within 30 minutes.No findings

    Why it is in this group

    • The name "get_early_movers" says "get": a word for reading.
    Description, as the server wrote it
    Wallets whose large orders (at least $10k) on a Hyperliquid market were followed by a price move in their direction within 30 minutes. Returns a lead score in basis points and a hit rate per wallet. Past activity does not predict future results.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_fillsEvery fill for one Hyperliquid wallet, optionally for one market, from indexed history: price, size, side, fee and realized PnL.No findings

    Why it is in this group

    • The name "get_fills" says "get": a word for reading.
    Description, as the server wrote it
    Every fill for one Hyperliquid wallet, optionally for one market, from indexed history: price, size, side, fee and realized PnL. Hyperliquid's own userFills endpoints stop at the 10,000 most recent fills.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_funding_ratesHourly funding rate history for a Hyperliquid perp, including HIP-3 builder perps.No findings

    Why it is in this group

    • The name "get_funding_rates" says "get": a word for reading.
    Description, as the server wrote it
    Hourly funding rate history for a Hyperliquid perp, including HIP-3 builder perps. A positive rate means longs pay shorts.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_funding_statsFunding statistics per time bucket for a Hyperliquid perp: average, minimum, maximum and annualized rate.No findings

    Why it is in this group

    • The name "get_funding_stats" says "get": a word for reading.
    Description, as the server wrote it
    Funding statistics per time bucket for a Hyperliquid perp: average, minimum, maximum and annualized rate.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_liquidation_levelsLiquidated notional on a Hyperliquid perp bucketed by price: where longs and shorts were wiped out.No findings

    Why it is in this group

    • The name "get_liquidation_levels" says "get": a word for reading.
    Description, as the server wrote it
    Liquidated notional on a Hyperliquid perp bucketed by price: where longs and shorts were wiped out. Needs a Builder or Enterprise key; keyless and free-key calls return 403.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_liquidation_summaryLiquidations across every Hyperliquid market (or one market) over the last N minutes, totalled: count, notional, longs vs shorts liquidated, the top markets and the largest single …No findings

    Why it is in this group

    • The name "get_liquidation_summary" says "get": a word for reading.
    Description, as the server wrote it
    Liquidations across every Hyperliquid market (or one market) over the last N minutes, totalled: count, notional, longs vs shorts liquidated, the top markets and the largest single liquidation. Use it for 'who got liquidated in the last hour?'. Keyless calls can look back 60 minutes, keyed calls up to 240.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_liquidationsLiquidations on a Hyperliquid perp, read from our own nodes: price, size, side and the liquidated wallet.No findings

    Why it is in this group

    • The name "get_liquidations" says "get": a word for reading.
    Description, as the server wrote it
    Liquidations on a Hyperliquid perp, read from our own nodes: price, size, side and the liquidated wallet. Hyperliquid's public API has no liquidation feed.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_market_leadersThe best traders on one Hyperliquid market, ranked by profit factor then win rate, among wallets with at least 5 closed trades there.No findings

    Why it is in this group

    • The name "get_market_leaders" says "get": a word for reading.
    Description, as the server wrote it
    The best traders on one Hyperliquid market, ranked by profit factor then win rate, among wallets with at least 5 closed trades there.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_market_top_walletsTop wallets on one Hyperliquid market by volume or realized PnL, up to 200 rows.No findings

    Why it is in this group

    • The name "get_market_top_wallets" says "get": a word for reading.
    Description, as the server wrote it
    Top wallets on one Hyperliquid market by volume or realized PnL, up to 200 rows.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_markets_snapshotActive Hyperliquid markets ranked in one call: mark price, 24h change, 24h volume, open interest and current hourly funding.No findings

    Why it is in this group

    • The name "get_markets_snapshot" says "get": a word for reading.
    Description, as the server wrote it
    Active Hyperliquid markets ranked in one call: mark price, 24h change, 24h volume, open interest and current hourly funding. Sort by abs_funding for the most extreme funding, abs_change_24h for the biggest movers, or volume (default). Use min_volume_usd to skip illiquid markets. Returns the top 25 unless limit is set.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_open_interestLatest open interest for a Hyperliquid perp.No findings

    Why it is in this group

    • The name "get_open_interest" says "get": a word for reading.
    Description, as the server wrote it
    Latest open interest for a Hyperliquid perp.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_pnl_leaderboardEvery Hyperliquid wallet ranked by realized PnL, biggest losses or volume over a window.No findings

    Why it is in this group

    • The name "get_pnl_leaderboard" says "get": a word for reading.
    Description, as the server wrote it
    Every Hyperliquid wallet ranked by realized PnL, biggest losses or volume over a window. Wallets with fewer than 5 fills in the window are left out.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_priceLatest mark price of a Hyperliquid market: native perps, HIP-3 builder perps (e.g.No findings

    Why it is in this group

    • The name "get_price" says "get": a word for reading.
    Description, as the server wrote it
    Latest mark price of a Hyperliquid market: native perps, HIP-3 builder perps (e.g. xyz:NVDA-PERP) and spot.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_recent_tradesLatest tick-level trades on a Hyperliquid market from our own nodes: price, size, side and block time.No findings

    Why it is in this group

    • The name "get_recent_trades" says "get": a word for reading.
    Description, as the server wrote it
    Latest tick-level trades on a Hyperliquid market from our own nodes: price, size, side and block time. Covers native perps, HIP-3 builder markets, HIP-4 outcomes and spot.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_statusGet system status, data freshness, and venue health (unauthenticated)No findings

    Why it is in this group

    • The name "get_status" says "get": a word for reading.
    Description, as the server wrote it
    Get system status, data freshness, and venue health (unauthenticated)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_status_historyGet an uptime / freshness timeline.No findings

    Why it is in this group

    • The name "get_status_history" says "get": a word for reading.
    Description, as the server wrote it
    Get an uptime / freshness timeline. period: '24h' (default) or '7d' (unauthenticated)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_status_metricsGet rolling-window API + pipeline + synthetic performance metrics (unauthenticated)No findings

    Why it is in this group

    • The name "get_status_metrics" says "get": a word for reading.
    Description, as the server wrote it
    Get rolling-window API + pipeline + synthetic performance metrics (unauthenticated)

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_top_tradersHyperliquid traders ranked across all markets by results over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and best markets.No findings

    Why it is in this group

    • The name "get_top_traders" says "get": a word for reading.
    Description, as the server wrote it
    Hyperliquid traders ranked across all markets by results over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and best markets. sort=top ranks by realized PnL, lowrisk by smallest max drawdown, new by most recently first seen.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_trader_profileA Hyperliquid wallet's trading record over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and its best markets.No findings

    Why it is in this group

    • The name "get_trader_profile" says "get": a word for reading.
    Description, as the server wrote it
    A Hyperliquid wallet's trading record over 7, 30 or 90 days: win rate, profit factor, realized PnL, max drawdown and its best markets.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_user_fundingFunding a Hyperliquid wallet paid or received, per market per bucket.No findings

    Why it is in this group

    • The name "get_user_funding" says "get": a word for reading.
    Description, as the server wrote it
    Funding a Hyperliquid wallet paid or received, per market per bucket. Positive means received, negative means paid. bucket=1d gives daily totals, 1h the raw hourly payments.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_user_ledgerVault deposits, withdrawals and transfers for a Hyperliquid wallet.No findings

    Why it is in this group

    • The name "get_user_ledger" says "get": a word for reading.
    Description, as the server wrote it
    Vault deposits, withdrawals and transfers for a Hyperliquid wallet. Positive amounts go into the account. Account deposits and withdrawals are recorded only up to 2026-06-06.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_user_maker_takerMaker vs taker breakdown of a Hyperliquid wallet's fills per market: volume, fees and rebates.No findings

    Why it is in this group

    • The name "get_user_maker_taker" says "get": a word for reading.
    Description, as the server wrote it
    Maker vs taker breakdown of a Hyperliquid wallet's fills per market: volume, fees and rebates. A high maker share with negative maker fees marks a market maker.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_user_pnl_seriesRealized PnL curve of a Hyperliquid wallet over time, bucketed (for example hourly or daily).No findings

    Why it is in this group

    • The name "get_user_pnl_series" says "get": a word for reading.
    Description, as the server wrote it
    Realized PnL curve of a Hyperliquid wallet over time, bucketed (for example hourly or daily).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_user_summaryOne Hyperliquid wallet's stats over a window: volume, realized PnL, fill count, win rate, maker share and markets traded.No findings

    Why it is in this group

    • The name "get_user_summary" says "get": a word for reading.
    Description, as the server wrote it
    One Hyperliquid wallet's stats over a window: volume, realized PnL, fill count, win rate, maker share and markets traded.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_vault_leaderboardHyperliquid vaults ranked by net deposits (deposits minus withdrawals) over the last 7 days, with depositor counts.No findings

    Why it is in this group

    • The name "get_vault_leaderboard" says "get": a word for reading.
    Description, as the server wrote it
    Hyperliquid vaults ranked by net deposits (deposits minus withdrawals) over the last 7 days, with depositor counts. Keyless calls see the last 24 hours; a free key from https://ironflow.sh/key gives the full 7 days.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_vault_operationsDeposits into and withdrawals from one Hyperliquid vault or one depositor.No findings

    Why it is in this group

    • The name "get_vault_operations" says "get": a word for reading.
    Description, as the server wrote it
    Deposits into and withdrawals from one Hyperliquid vault or one depositor. Pass vault, address, or both; at least one is required (HLP is 0xdfc24b077bc1425ad1dea75bcb6f8158e10df303). For flows across all vaults use get_vault_leaderboard.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_wallet_behaviorHow Hyperliquid wallets trade, from their last 30 days: labels (market_maker, high_frequency, whale, directional, consistent_winner, big_loser, revenge_sizing, often_liquidated, hi…No findings

    Why it is in this group

    • The name "get_wallet_behavior" says "get": a word for reading.
    Description, as the server wrote it
    How Hyperliquid wallets trade, from their last 30 days: labels (market_maker, high_frequency, whale, directional, consistent_winner, big_loser, revenge_sizing, often_liquidated, hip3_trader, spot_trader, prediction_trader) and the numbers behind them (maker share, buy/sell imbalance, fills per day, green-day share, profit factor, liquidations). Look up specific addresses, or list wallets with one label.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • list_cohortsList available address cohorts: six predefined groups (top_pnl_30d, high_volume_30d, whale_fills, net_withdrawers_7d, liquidation_prone, vault_whales) plus any custom cohorts the c…No findings

    Why it is in this group

    • The name "list_cohorts" says "list": a word for reading.
    Description, as the server wrote it
    List available address cohorts: six predefined groups (top_pnl_30d, high_volume_30d, whale_fills, net_withdrawers_7d, liquidation_prone, vault_whales) plus any custom cohorts the caller has created

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • list_marketsActive Hyperliquid markets with display symbol, class (perp, spot, prediction), HIP-3 issuer and base asset.No findings

    Why it is in this group

    • The name "list_markets" says "list": a word for reading.
    Description, as the server wrote it
    Active Hyperliquid markets with display symbol, class (perp, spot, prediction), HIP-3 issuer and base asset. Use search to find how a market is named (e.g. search 'nvda' finds xyz:NVDA-PERP).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.9.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ironflowsh https://mcp.ironflow.sh/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__ironflowsh__get_wallet_behavior",
      "mcp__ironflowsh__get_price",
      "mcp__ironflowsh__get_recent_trades",
      "mcp__ironflowsh__get_candles",
      "mcp__ironflowsh__get_funding_rates",
      "mcp__ironflowsh__get_open_interest",
      "mcp__ironflowsh__get_liquidations",
      "mcp__ironflowsh__get_liquidation_summary",
      "mcp__ironflowsh__get_fills",
      "mcp__ironflowsh__get_vault_operations",
      "mcp__ironflowsh__get_liquidation_levels",
      "mcp__ironflowsh__get_vault_leaderboard",
      "mcp__ironflowsh__get_funding_stats",
      "mcp__ironflowsh__get_user_funding",
      "mcp__ironflowsh__get_user_maker_taker",
      "mcp__ironflowsh__get_user_ledger",
      "mcp__ironflowsh__get_pnl_leaderboard",
      "mcp__ironflowsh__get_market_top_wallets",
      "mcp__ironflowsh__get_markets_snapshot",
      "mcp__ironflowsh__get_user_summary",
      "mcp__ironflowsh__get_user_pnl_series",
      "mcp__ironflowsh__get_top_traders",
      "mcp__ironflowsh__get_market_leaders",
      "mcp__ironflowsh__get_early_movers",
      "mcp__ironflowsh__get_trader_profile",
      "mcp__ironflowsh__list_cohorts",
      "mcp__ironflowsh__get_cohort_addresses",
      "mcp__ironflowsh__get_status",
      "mcp__ironflowsh__get_status_metrics",
      "mcp__ironflowsh__get_status_history",
      "mcp__ironflowsh__list_markets"
    ],
    "ask": [
      "mcp__ironflowsh__describe_data",
      "mcp__ironflowsh__run_query",
      "mcp__ironflowsh__get_mark_prices",
      "mcp__ironflowsh__get_user_state",
      "mcp__ironflowsh__get_wallet_labels"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ironflowsh. Review it before you use it.