# `io.rmassistanthub/assistant-hub` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.rmassistanthub/assistant-hub - JSON: https://anlyon.dev/api/v1/servers/io.rmassistanthub/assistant-hub - Version: 0.9.7 (active) - Publisher: io.rmassistanthub (domain proven to the MCP Registry) - Runs: remote (sse,streamable-http) - Sign-in to list tools: none - Metadata from the official MCP Registry, synced 2026-10-21T18:52:40.603Z Title and description, as the publisher wrote them: ```untrusted-server-text Assistant Hub Ranked crypto setups with a graded track record, and trading skills with public records. ``` Scanned 2026-10-21T19:17:22.433Z over streamable-http. **12 tools: 1 do something that can't be undone, 4 change things and 7 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 1 | ask | | Changes things | write | 4 | ask | | Only reads | read | 7 | allow | ## Findings No check matched anything in these tool definitions. ## Can't be undone (1) Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask. ### `strategy_analysis` - The input addresses people (input.to): what it sends cannot be taken back. Description, as the server wrote it: ```untrusted-server-text Strategy Lab: backtest a trading strategy on historical OHLCV plus Monte Carlo and Walk-Forward robustness analysis. Strategies: dca, grid, momentum, custom. Premium — x402 $0.50. ``` ## Changes things (4) Creates or changes something that can be changed back. Claude Code: ask. ### `best_setups` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Up to eight ranked setups for one window (1m, 1h, 1d, 1w or 1y), each with its score, the scored inputs, why now, what would invalidate it, a risk posture and an as-of time. Deterministic: no LLM touches the score. An empty window says why. The ranking has no proven edge yet: see get_setups_track_record. Free. ``` ### `install_trading_skill` - The name "install_trading_skill" says "install": a word for a change. Description, as the server wrote it: ```untrusted-server-text The installable bundle for a skill, pinned to its hash: manifest, run loop and risk contract. Installs for paper trading; live trading needs the owner to arm it. Free. ``` ### `pulse_deep_dive` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Deep-dive on the current Daily Macro Pulse, written by an AI from the pulse text alone: for each opportunity, the reasoning, what would invalidate it, risk level, catalysts to watch and a trade thesis framed as conditions to check. It has no on-chain, whale, order-book or live price data and says so rather than inventing any. Premium — x402 $0.30. ``` ### `research_coin` - The description's first verb is "run": a word for a change. Description, as the server wrote it: ```untrusted-server-text Run the 3-agent orchestration pipeline (Sentiment: Grok, Technical: Groq, Synthesis: Gemini; Gemini stands in when Grok or Groq is unavailable) on a crypto research question. ``` ## Only reads (7) Looks things up and changes nothing. Claude Code: allow. ### `get_forecast` - The name "get_forecast" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Get AI-powered price forecast for a coin: SMA, RSI, Bollinger Bands, and narrative. ``` ### `get_setups_track_record` - The name "get_setups_track_record" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text How the desk's past setups turned out, per window: every published card graded as a buy over its window's horizon, close to close from exchange candles, against BTC over the same span. Hit rate withheld below 30 graded calls; the method is in the payload. Free. ``` ### `get_skill_regime` - The name "get_skill_regime" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Whether a skill may open a position on each of its pairs now: the pair's regime from closed hourly bars, whether the skill allows it, for a feature-gated skill whether the newest bar's stored feature row and Fear & Greed (as readable at its close) pass the gate, whether the bars are fresh, and whether the skill is halted. Call before every new position. Free. ``` ### `get_trading_skill` - The name "get_trading_skill" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text One skill's full manifest (rules, parameters with bounds, risk contract, allowed regimes, engine config) and its card: the rules run on stored hourly bars before and since listing, next to buy-and-hold, with drawdown and round trips won after fees. Free. ``` ### `get_whale_intel` - The name "get_whale_intel" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text AI commentary on recent Etherscan transfers plus macro context. The on-chain input is narrow: for ETH, one well-known wallet's latest transactions; for LINK, the token contract's latest transfers; neither is size-filtered or market-wide. Other coins get no on-chain data, and the answer says so. ``` ### `list_trading_skills` - The name "list_trading_skills" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text Installable trading skills: versioned, hashed rule sets an agent runs on paper in its own loop. Each lists its label (experimental, forward-tested, proven, halted), the regimes it may trade in, its pairs and install count. Also lists community uploads: unverified, paper-only, no card. Free. ``` ### `search_signals` - The name "search_signals" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Browse community trade signals and how they resolved (win/loss is checked against CoinGecko prices at expiry). Signals whose creator anchored them on Base carry an on-chain transaction hash; the rest do not. Signals appear here an hour after they are posted. Filter by coin and status. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `assistant-hub`: ```json { "permissions": { "allow": [ "mcp__assistant-hub__get_forecast", "mcp__assistant-hub__get_whale_intel", "mcp__assistant-hub__get_setups_track_record", "mcp__assistant-hub__list_trading_skills", "mcp__assistant-hub__get_trading_skill", "mcp__assistant-hub__get_skill_regime", "mcp__assistant-hub__search_signals" ], "ask": [ "mcp__assistant-hub__research_coin", "mcp__assistant-hub__strategy_analysis", "mcp__assistant-hub__pulse_deep_dive", "mcp__assistant-hub__best_setups", "mcp__assistant-hub__install_trading_skill" ], "deny": [] } } ```