Crypto Market Data
io.github.zaffy18/crypto-market-datazaffy18streamable-httpv0.1.2Scanned
Live crypto market data and Hyperliquid wallet reports for AI agents, paid per call with x402.
15 tools: 1 can delete or cancel things, 12 change things and 2 only read.
- Reads private data · 1
- Reads text others write · 14
- Can send data out · 1
- No findings
Anlyon alternative
13 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
15 tools
Deletes or cancels 1Claude Code: deny
stop_watchFree: stop a watch before it expires.No findings
Why it is in this group
- The name "stop_watch" says "stop": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Free: stop a watch before it expires.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
- title: Stop Watch
Changes things 12Claude Code: ask
create_watchWatch the crypto market for 24 hours: up to 10 conditions (price, % change, funding, open interest, liquidations, order book, Fear and Greed, whale orders, news impact), checked ev…Reads text others writeCan send data outNo findings
Why it is in this group
- The name "create_watch" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.callback_url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it Watch the crypto market for 24 hours: up to 10 conditions (price, % change, funding, open interest, liquidations, order book, Fear and Greed, whale orders, news impact), checked every minute; when one happens you get a signed webhook and it shows in the watch's status. Costs USD 0.02, paid with x402 (USDC on Base); a request that fails is not charged. Keep the returned secret: watch_status and stop_watch need it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Create Watch
derivativesFunding rate per 8 hours, futures premium, open interest with 1-hour and 24-hour change, and long/short account ratio per coin.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Funding rate per 8 hours, futures premium, open interest with 1-hour and 24-hour change, and long/short account ratio per coin. Costs USD 0.003 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Derivatives
hyperliquid_walletEnriched Hyperliquid wallet report: open positions with liquidation distance and a risk label, account value and leverage, PnL and volume by day, week, month and all time, spot bal…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Enriched Hyperliquid wallet report: open positions with liquidation distance and a risk label, account value and leverage, PnL and volume by day, week, month and all time, spot balances and the last 24 hours of trading. Costs USD 0.01 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Hyperliquid Wallet
liquidationsEvery Binance futures liquidation of the last hour across 190+ coins: totals, per coin longs and shorts, and the biggest ones.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Every Binance futures liquidation of the last hour across 190+ coins: totals, per coin longs and shorts, and the biggest ones. Costs USD 0.003 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Liquidations
newsTop crypto stories now from 31 sources, each with an impact score, outlet count and the price reaction afterwards.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Top crypto stories now from 31 sources, each with an impact score, outlet count and the price reaction afterwards. Costs USD 0.003 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: News
orderbookBid-ask spread, order-book imbalance, buyer share of the last 15 minutes and volume versus normal per coin.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bid-ask spread, order-book imbalance, buyer share of the last 15 minutes and volume versus normal per coin. Costs USD 0.003 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Orderbook
pricesLive prices with 5-minute, 1-hour, 4-hour and 24-hour change and 24-hour volume for the top 50 crypto coins, refreshed every minute.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Live prices with 5-minute, 1-hour, 4-hour and 24-hour change and 24-hour volume for the top 50 crypto coins, refreshed every minute. Costs USD 0.003 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Prices
prices_freeFree: the same answer as prices, from a copy refreshed every 15 minutes (up to 30 calls a minute).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Free: the same answer as prices, from a copy refreshed every 15 minutes (up to 30 calls a minute). prices has live data every minute for USD 0.003.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Prices Free
sentimentCrypto Fear and Greed index with the previous value, trending coins, market breadth, mood and volatility regime.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Crypto Fear and Greed index with the previous value, trending coins, market breadth, mood and volatility regime. Costs USD 0.003 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Sentiment
sentiment_freeFree: the same answer as sentiment, from a copy refreshed every 15 minutes (up to 30 calls a minute).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Free: the same answer as sentiment, from a copy refreshed every 15 minutes (up to 30 calls a minute). sentiment has live data every minute for USD 0.003.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Sentiment Free
service_infoFree: what this server offers, the price of each tool and how payment works.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Free: what this server offers, the price of each tool and how payment works.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Service Info
whale_ordersThe biggest market orders of the last hour on Binance futures, Binance spot and Hyperliquid, with what each Hyperliquid order did.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it The biggest market orders of the last hour on Binance futures, Binance spot and Hyperliquid, with what each Hyperliquid order did. Costs USD 0.003 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Whale Orders
Only reads 2Show 2 read-only tools
coin_snapshotEverything for one coin in one call: price, funding and open interest, order book, liquidations, whale orders and news.Reads text others writeNo findings
Why it is in this group
- The name "coin_snapshot" says "snapshot": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Everything for one coin in one call: price, funding and open interest, order book, liquidations, whale orders and news. Costs USD 0.005 per call, paid with x402 (USDC on Base); calls that fail are not charged.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Coin Snapshot
watch_statusFree: a watch's status, current conditions and its last 20 fires (what triggered, when, and whether the webhook was delivered).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "watch_status" says "status": a word for reading.
What it can reach
- private-dataThe input names a secret (input.secret), and the tool reads: it reads secrets.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Free: a watch's status, current conditions and its last 20 fires (what triggered, when, and whether the webhook was delivered).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Watch Status
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
14 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write14
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out1
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
{
"permissions": {
"deny": [
"mcp__crypto-market-data__create_watch"
]
}
}Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 0.1.2. Values in angle brackets are yours to fill in.
claude mcp add --transport http crypto-market-data https://crypto-market-data.zafermemon87.workers.dev/mcpclaude mcp add --transport http crypto-market-data https://crypto-market-data.zafermemon87.workers.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__crypto-market-data__coin_snapshot",
"mcp__crypto-market-data__watch_status"
],
"ask": [
"mcp__crypto-market-data__prices",
"mcp__crypto-market-data__derivatives",
"mcp__crypto-market-data__orderbook",
"mcp__crypto-market-data__liquidations",
"mcp__crypto-market-data__whale_orders",
"mcp__crypto-market-data__news",
"mcp__crypto-market-data__sentiment",
"mcp__crypto-market-data__hyperliquid_wallet",
"mcp__crypto-market-data__create_watch",
"mcp__crypto-market-data__prices_free",
"mcp__crypto-market-data__sentiment_free",
"mcp__crypto-market-data__service_info"
],
"deny": [
"mcp__crypto-market-data__stop_watch"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as crypto-market-data. Review it before you use it.
Capability tags behind 14 rules
- mcp__crypto-market-data__prices untrusted-input
- mcp__crypto-market-data__derivatives untrusted-input
- mcp__crypto-market-data__orderbook untrusted-input
- mcp__crypto-market-data__liquidations untrusted-input
- mcp__crypto-market-data__whale_orders untrusted-input
- mcp__crypto-market-data__news untrusted-input
- mcp__crypto-market-data__sentiment untrusted-input
- mcp__crypto-market-data__coin_snapshot untrusted-input
- mcp__crypto-market-data__hyperliquid_wallet untrusted-input
- mcp__crypto-market-data__create_watch untrusted-input, outbound
- mcp__crypto-market-data__watch_status private-data, untrusted-input
- mcp__crypto-market-data__prices_free untrusted-input
- mcp__crypto-market-data__sentiment_free untrusted-input
- mcp__crypto-market-data__service_info untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.github.zaffy18/crypto-market-data/verify?hash=a2045cf3d38f100b9d18d67fb0e0ea8433c05f495a4fdbd2278d994ce28621ef" | jq -e '.changed == false'Pinned hash a2045cf3d38f, from Oct 24, 2026, 04:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.github.zaffy18/crypto-market-data/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.github.zaffy18/crypto-market-data)Source: MCP Registry · repository. Synced Oct 24, 2026, 04:17 UTC.