AgentZ

by jafrancis021-max · remote · no sign-in to list tools · v2.3.1 · published by GitHub user jafrancis021-max

Daily 8 long calls on Hyperliquid, wallet health checks, order building and risk sizing.

Changes · 11

Compare Registry entry

17 tools: 11 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things11Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agentz https://agent-z.app/api/public/mcp?src=registry

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnget_owner_brief
The server marks "get_owner_brief" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_owner_brief" says "get": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

17 tools

Changes things 11Creates or changes something that can be changed back.Claude Code: ask

agent_health_checkFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. A factual review of any wallet's public Hyperliquid perp trading over the last 30 days: volume, realised P&L, win rate, fees in bps, holding time, weekend vs weekday results, largest fill vs market volume, and builder-code share. Describes and compares only; not advice.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
ask_agentzAsk the AgentZ assistant a question (record, prices, risk, integration).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Ask the AgentZ assistant a question (record, prices, risk, integration). Free and open; pass wallet.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
build_orderFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Returns a ready-to-sign Hyperliquid order for your own wallet or API wallet: entry (limit-first post-only at the best price, with a market fallback, or market), optional protective stop, and leverage action, all carrying AgentZ's 5 bps builder code. Also checks whether the wallet has approved the builder fee. AgentZ never holds your keys.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_positioningFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Funding (per 8 hours and annualised) and open interest for a crypto coin across Hyperliquid, Bybit, OKX and Binance.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
event_calendarFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Scheduled releases that move markets: Fed decisions, US CPI, jobs report, PPI, JOLTS, and EIA oil and gas reports. Optionally filtered to what affects one market.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_owner_briefFree.1 finding
Why it is in this group
- The name "get_owner_brief" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "get_owner_brief" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_owner_brief" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Free. A short factual summary for the agent's human owner: what AgentZ is, price, record, risks and how to revoke. Pass wallet to record it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
request_capabilityFree.No findings
Why it is in this group
- The name "request_capability" says "request": a word for a change.
Description, as the server wrote it
Free. Tell AgentZ what market data, analysis or trading tool you need that is not in this list (any market or venue). Requests decide what is built next.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
risk_checkFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Describes a proposed trade against your Hyperliquid account and the market: risk in USD and % of equity at the stop, margin needed vs free margin, and the order as a share of the market's 24-hour volume, compared with AgentZ's own limits. Factual, not advice.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
trade_conditionsFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. When a Hyperliquid market trades most and least (UTC hours), volatility by hour, weekend vs weekday volume, and the spread right now.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
wallet_intel_menuFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Headlines on how ~7-8k tracked Hyperliquid wallets are positioned in the biggest markets, plus the paid wallet answers (smart-money, liquidation-map, wallet-profile) with their x402 URLs and price ($0.02 USDC on Base).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
weekend_gapFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. A tokenized stock, index or commodity on Hyperliquid vs its Hyperliquid price at the last Friday US close: gap %, range since, and hours to the next US open.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

Only reads 6Looks things up and changes nothing.Claude Code: allow

get_access_messageFree.No findings
Why it is in this group
- The name "get_access_message" says "get": a word for reading.
Description, as the server wrote it
Free. Returns a message for your wallet to sign (valid 24h). Signing costs nothing and cannot move funds.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_daily_8Today's assigned AgentZ basket as execution-ready Hyperliquid orders: symbol, entry reference, stop, exit time and max size in USD for your wallet.No findings
Why it is in this group
- The name "get_daily_8" says "get": a word for reading.
Description, as the server wrote it
Today's assigned AgentZ basket as execution-ready Hyperliquid orders: symbol, entry reference, stop, exit time and max size in USD for your wallet. 8 calls on normal days, 4 on defensive days. Pass your wallet: if it has approved AgentZ's builder fee, no signature is needed; otherwise sign the access message (first day free). Without either it returns the free preview.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_daily_8_previewFree, no wallet or signature needed.No findings
Why it is in this group
- The name "get_daily_8_preview" says "get": a word for reading.
Description, as the server wrote it
Free, no wallet or signature needed. Today's DAILY 8 long calls on Hyperliquid (symbol, category, rank; entry, stop and size withheld) plus every live call closed since 27 Sep 2026 with its result, and the steps to unlock live orders.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_exits_dueAgentZ calls your wallet still holds that have reached their exit time and should be closed now.No findings
Why it is in this group
- The name "get_exits_due" says "get": a word for reading.
Description, as the server wrote it
AgentZ calls your wallet still holds that have reached their exit time and should be closed now. Free and open; pass wallet.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_open_callsYour assigned calls still inside their 48-hour hold window.No findings
Why it is in this group
- The name "get_open_calls" says "get": a word for reading.
Description, as the server wrote it
Your assigned calls still inside their 48-hour hold window. Free and open; pass wallet.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_track_recordFree.No findings
Why it is in this group
- The name "get_track_record" says "get": a word for reading.
Description, as the server wrote it
Free. AgentZ's canonical record, months labelled replay or live. Replay calls after an estimated 0.15% cost per trade; live calls before costs.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.3.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http agentz https://agent-z.app/api/public/mcp?src=registry

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__agentz__get_access_message",
      "mcp__agentz__get_daily_8_preview",
      "mcp__agentz__get_daily_8",
      "mcp__agentz__get_exits_due",
      "mcp__agentz__get_open_calls",
      "mcp__agentz__get_track_record"
    ],
    "ask": [
      "mcp__agentz__request_capability",
      "mcp__agentz__get_owner_brief",
      "mcp__agentz__agent_health_check",
      "mcp__agentz__build_order",
      "mcp__agentz__risk_check",
      "mcp__agentz__weekend_gap",
      "mcp__agentz__trade_conditions",
      "mcp__agentz__event_calendar",
      "mcp__agentz__crypto_positioning",
      "mcp__agentz__wallet_intel_menu",
      "mcp__agentz__ask_agentz"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agentz. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.jafrancis021-max/agentz/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:36 UTC.

For agents: Markdown · JSON · report this listing