Skip to content

Toolbooth

io.toolbooth/toolboothtoolbooth.iostreamable-httpv1.0.0Scanned

Pay-per-call tools for AI agents: Solana, DEX, perps, prediction markets, DeFi, web. USDC via x402.

67 tools: 34 change things and 33 only read.

Tools: 0 delete, 0 irreversible, 34 write, 33 read.
  • Reads private data · 0
  • Reads text others write · 2
  • Can send data out · 2
  • 2 findings, 1 high

Anlyon alternative

34 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

67 tools

Changes things 34Claude Code: ask
  • compute_mathEvaluate mathematical expressions.No findings

    Why it is in this group

    • The description's first verb is "evaluate": a word for a change.
    Description, as the server wrote it
    Evaluate mathematical expressions. Supports arithmetic, algebra, unit conversions, trigonometry, matrices, and more. Costs $0.0005 USDC per call.
  • copy_trade_signalsAnalyze a wallet's recent swap activity for copy trading.No findings

    Why it is in this group

    • The name "copy_trade_signals" says "copy": a word for a change.
    Description, as the server wrote it
    Analyze a wallet's recent swap activity for copy trading. Returns active positions, buy/sell patterns, entry prices, and trading frequency. Costs $0.01 USDC per call.
  • crypto_sentimentAggregate social sentiment for any crypto token or topic.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Aggregate social sentiment for any crypto token or topic. Returns an overall 0-100 bullish score, per-source breakdown (market, community, social), mention volume, and confidence level. Sources: Alternative.me Fear & Greed (market), CoinGecko community votes, and StockGeist social media analysis (when STOCKGEIST_API_KEY is configured). Costs $0.005 USDC per call.
  • dependency_risk_scoreScore the security risk of software dependencies before using them.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Score the security risk of software dependencies before using them. Checks each package against OSV.dev (Google's vulnerability database) and deps.dev for metadata. Returns per-package CVE counts, max severity, abandonment signals, and a hallucination check — HALLUCINATED means the package was not found and may be an AI-invented name or typosquat. Supports npm, pypi, go, maven, cargo, and nuget. Accepts up to 20 packages per call. Costs $0.10 USDC per call.
  • dex_liquidityCheck DEX liquidity depth for a Solana token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check DEX liquidity depth for a Solana token. Returns pool info, TVL estimates, and a liquidity rating (DEEP/MODERATE/SHALLOW/NONE). Costs $0.002 USDC per call.
  • drift_close_positionClose an open Drift BET prediction market position via your configured Drift Gateway.No findings

    Why it is in this group

    • The name "drift_close_position" says "close": a word for a change.
    Description, as the server wrote it
    Close an open Drift BET prediction market position via your configured Drift Gateway. Submits a reduce-only market order to exit at the best available price. Requires DRIFT_GATEWAY_URL to be set. Costs $0.01 USDC per call.
  • drift_open_positionsGet open Drift BET prediction market positions from your configured Drift Gateway.No findings

    Why it is in this group

    • The name "drift_open_positions" says "open": a word for a change.
    Description, as the server wrote it
    Get open Drift BET prediction market positions from your configured Drift Gateway. Returns all active positions with entry price, current implied probability, unrealized PnL, and direction (long=YES, short=NO). Requires DRIFT_GATEWAY_URL to be set. Costs $0.002 USDC per call.
  • drift_place_betPlace a bet on a Drift BET prediction market via your configured Drift Gateway.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Place a bet on a Drift BET prediction market via your configured Drift Gateway. Long = betting YES, short = betting NO. Price is the implied probability (0.0–1.0). Requires DRIFT_GATEWAY_URL to be set and a funded Drift account. Costs $0.01 USDC per call.
  • fear_greed_indexCrypto Fear & Greed composite index.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Crypto Fear & Greed composite index. Aggregates Alternative.me index with CoinGecko market signals (market cap change, volume ratio, BTC dominance). Returns 0-100 score, classification (Extreme Fear to Extreme Greed), 7-day trend, historical comparison, and actionable signal summary. Costs $0.002 USDC per call.
  • funding_rate_arbitrageCross-exchange funding rate arbitrage detector.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Cross-exchange funding rate arbitrage detector. Scans OKX, Hyperliquid, dYdX, and Kraken Futures perp markets in real time to find funding rate spreads, with every rate normalized to its 8-hour equivalent. Returns ranked arbitrage opportunities with annualized yield, profit estimates, risk notes, and direction (which exchange to long/short). Use for delta-neutral carry trade discovery. Costs $0.01 USDC per call.
  • gas_trackerSolana network congestion monitor.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Solana network congestion monitor. Returns current fee percentiles, congestion level (LOW/MODERATE/HIGH/VERY_HIGH), and a plain-English recommendation. Costs $0.0005 USDC per call.
  • hedge_planPlan a Hyperliquid short that hedges a Solana token position: runs the pre-trade scans pair_data, wallet_balance (if you pass a wallet), token_security and funding_rate_arbitrage, …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Plan a Hyperliquid short that hedges a Solana token position: runs the pre-trade scans pair_data, wallet_balance (if you pass a wallet), token_security and funding_rate_arbitrage, then sizes the short on the token's own perp (or SOL with a beta estimate if it has none) and shows funding, liquidation price and distance, margin and fees. Read-only: places no order. One fixed charge covers the scans at list price ($0.005 + $0.001 + $0.001 + $0.01; the wallet scan's share is included even when you pass an amount) plus $0.003 for the plan. If a scan fails or no viable plan can be made you get an error and pay nothing. Hyperliquid excludes US persons. Costs $0.02 USDC per call.
  • holder_changesTrack which wallets are accumulating or dumping a token based on recent transfer activity.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Track which wallets are accumulating or dumping a token based on recent transfer activity. Returns top movers with net flow direction and a bullish/bearish/neutral sentiment signal. Costs $0.005 USDC per call.
  • l2_yield_scannerScan DeFi yields across L2 chains (Arbitrum, Optimism, Base, Polygon, zkSync, Linea, Scroll, Blast).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Scan DeFi yields across L2 chains (Arbitrum, Optimism, Base, Polygon, zkSync, Linea, Scroll, Blast). Returns top pools sorted by APY with TVL, protocol, and per-chain summaries. Uses DeFi Llama data. Costs $0.005 USDC per call.
  • liquidation_riskMonitor Solana lending pools approaching liquidation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Monitor Solana lending pools approaching liquidation. Tracks utilization rates across Kamino, MarginFi, Drift, Solend, Save, and Mango. Returns risk levels (CRITICAL/HIGH/MEDIUM/LOW), market stress indicator, and per-protocol summaries. Costs $0.005 USDC per call.
  • mev_detectionDetect MEV activity on Solana.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Detect MEV activity on Solana. In 'landscape' mode: returns current Jito tip floor, MEV activity level, and protection recommendations. In 'analyze' mode: checks if a specific transaction was part of a Jito bundle with tip detection and risk assessment. Costs $0.005 USDC per call.
  • open_interest_changeHow one asset's perpetual-futures open interest moved over the last 1, 4 and 24 hours on OKX, dYdX and Kraken Futures (the US-reachable venues that publish OI history): current OI …No findings

    Why it is in this group

    • The name "open_interest_change" says "open": a word for a change.
    Description, as the server wrote it
    How one asset's perpetual-futures open interest moved over the last 1, 4 and 24 hours on OKX, dYdX and Kraken Futures (the US-reachable venues that publish OI history): current OI in coins, change and % change per window with the price change alongside, the conventional reading (e.g. OI up with price down, typically read as new shorts), and a combined view across venues. Hourly samples. Accepts BTC, BTCUSDT, BTC/USDT or XBT. Venues that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.003 USDC per call.
  • options_volatilityOption-implied volatility for BTC, ETH or SOL from Deribit's public market data: ATM implied volatility by expiry (the term structure, interpolated at each expiry's forward), 25-de…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Option-implied volatility for BTC, ETH or SOL from Deribit's public market data: ATM implied volatility by expiry (the term structure, interpolated at each expiry's forward), 25-delta call and put IV with the risk reversal (skew) and butterfly, put/call open-interest and volume ratios per expiry and in total, the index price, and Deribit's DVOL 30-day volatility index with its 24h range (BTC and ETH; Deribit publishes none for SOL). Deltas are Black-76 forward deltas from Deribit mark IVs. Fails (and is not charged) if Deribit's option data is unavailable. Costs $0.005 USDC per call.
  • order_book_aggregatorPerpetual-futures order books for one asset across OKX, Hyperliquid, dYdX and Kraken Futures, side by side and merged: per-venue best bid/ask and spread, depth and bid/ask imbalanc…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Perpetual-futures order books for one asset across OKX, Hyperliquid, dYdX and Kraken Futures, side by side and merged: per-venue best bid/ask and spread, depth and bid/ask imbalance within ±0.5%, ±1% and ±2% of each venue's mid (in quote value), the cross-venue best bid/ask and any crossed books between venues, and the top merged levels. Accepts BTC, BTCUSDT, BTC/USDT, BTC-USDT-SWAP or Kraken's XBT. Depth bands that extend past what a venue returns are flagged as lower bounds. Venues that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.005 USDC per call.
  • perp_market_overviewOne asset's perpetual futures across OKX, Hyperliquid, dYdX and Kraken Futures: mark and index/oracle price, basis (mark vs index, in bps), 24h volume and open interest in USD, and…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    One asset's perpetual futures across OKX, Hyperliquid, dYdX and Kraken Futures: mark and index/oracle price, basis (mark vs index, in bps), 24h volume and open interest in USD, and funding — each venue's current or predicted rate with its funding interval, its 8-hour equivalent and simple annualized percentage. Summary: total open interest and volume, highest/lowest and open-interest-weighted 8h funding, and mark-price dispersion across venues. Accepts BTC, BTCUSDT, BTC/USDT or XBT. Venues that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.005 USDC per call.
  • polymarket_quoteQuote a Polymarket order before you place it: resolves the market and outcome token, walks the live order book for the expected fill (shares, average and worst price, slippage vs b…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Quote a Polymarket order before you place it: resolves the market and outcome token, walks the live order book for the expected fill (shares, average and worst price, slippage vs best and mid) and shows the platform fee and total cost. Read-only: places no order. Accepts a market slug, id, polymarket.com URL or a prediction_market_arbitrage id (polymarket:<id>). Polymarket is close-only or blocked in the US and many other regions. Costs $0.005 USDC per call.
  • prediction_market_aggregatorCross-platform prediction market search.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Cross-platform prediction market search. Queries Polymarket, Kalshi, and Drift BET in parallel and returns unified results sorted by volume. Finds the same event across platforms to compare odds and spot arbitrage opportunities. Returns probabilities, volume, liquidity, and cross-platform matches with probability spreads. Costs $0.01 USDC per call.
  • prediction_market_eventsTrack prediction market events and resolutions across Polymarket, Kalshi, and Drift BET.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Track prediction market events and resolutions across Polymarket, Kalshi, and Drift BET. 'upcoming' mode: markets closing soonest with current odds. 'resolved' mode: recently settled markets with outcomes. Cross-platform coverage. Costs $0.005 USDC per call.
  • prediction_market_sentimentAggregate sentiment across all prediction markets related to a topic.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Aggregate sentiment across all prediction markets related to a topic. Searches Polymarket, analyzes probabilities, and returns a 0-100 sentiment score with bullish/bearish label. Costs $0.01 USDC per call.
  • recent_liquidationsRecent forced liquidations of one asset's USDT perpetual on OKX (the only venue reachable from the US that publishes a liquidation feed): long vs short liquidated count, size and U…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Recent forced liquidations of one asset's USDT perpetual on OKX (the only venue reachable from the US that publishes a liquidation feed): long vs short liquidated count, size and USD value over the last 0.25–24 hours, the largest ones, an hourly breakdown, and where they cleared relative to the current mark price in adjustable % bands. These are realized liquidations, not estimated liquidation levels. Reports how much of the window the feed covered. Fails (and is not charged) if OKX doesn't answer or lists no such perpetual. Costs $0.003 USDC per call.
  • secrets_detectionScan code for leaked secrets, API keys, tokens, and credentials.2 findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...r leaked secrets, API keys, tokens, and credentials. Detects 16+ secret types including AWS..."

      What this check looks for
    • High

      The input schema at properties.filename.description refers to ".env.example".

      Matched text

      inputSchema.properties.filename.description: "...ilename for context (e.g. 'config.ts', '.env.example')"

      What this check looks for
    Description, as the server wrote it
    Scan code for leaked secrets, API keys, tokens, and credentials. Detects 16+ secret types including AWS keys, GitHub tokens, Stripe keys, private keys, JWTs, database URLs, and high-entropy strings. Returns redacted previews with severity levels and rotation recommendations. No external API — pure regex pattern matching. Costs $0.005 USDC per call.
  • solana_tvlSolana ecosystem TVL analytics via DeFi Llama.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Solana ecosystem TVL analytics via DeFi Llama. Returns total TVL, top protocols ranked by TVL, category breakdown (DEX, Lending, Liquid Staking, etc.), 7-day trend, and Solana's market dominance as % of total DeFi. Filter by category for focused analysis. Costs $0.005 USDC per call.
  • spawn_agentOnboard a new AI agent in one step: Solana and EVM wallets it controls, $1.00 of Toolbooth credit, an ERC-8004 identity on Base, <name>.toolbooth.eth, and MCP config.Can send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a URL (input.endpoint): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Onboard a new AI agent in one step: Solana and EVM wallets it controls, $1.00 of Toolbooth credit, an ERC-8004 identity on Base, <name>.toolbooth.eth, and MCP config. Pass the new agent's solanaAddress, evmAddress, apiKeyHash (hex SHA-256 of a fresh tb_live_ key you generated) and proofs: sign "toolbooth.io spawn_agent\nname:<name>\nsolana:<solanaAddress>\nevm:<evmAddress lowercase>\nkey:<apiKeyHash>\nissued:<ISO-8601 now>" with the Solana key (Ed25519, base64 → solanaSig) and the EVM key (EIP-191 personal_sign, hex → evmSig). Or set generateKeys=true to receive new keys once in the result (discouraged: secrets pass through this conversation). Costs $2.00 USDC per call.
  • stablecoin_peg_monitorUSD stablecoin pegs — USDC, USDT, DAI, PYUSD, USDe, FDUSD and USDS — checked against $1 across independent public sources: Kraken, Coinbase and Gemini USD order books, CoinGecko's …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    USD stablecoin pegs — USDC, USDT, DAI, PYUSD, USDe, FDUSD and USDS — checked against $1 across independent public sources: Kraken, Coinbase and Gemini USD order books, CoinGecko's aggregate price, and Gate's FDUSD/USDT book converted at the USDT/USD rate. For each coin: the median price, deviation from $1 in bps, a severity flag (on_peg < 25 bps, watch < 50, depeg < 200, severe_depeg beyond), how far the sources disagree, and every quote with its spread and volume. Sources that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.002 USDC per call.
  • token_securityCheck if a Solana token is safe to trade.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check if a Solana token is safe to trade. Returns rug pull detection, honeypot flags, freeze/mint authority, insider networks, transfer fees, and a risk score via RugCheck. Costs $0.005 USDC per call.
  • transaction_parseParse a Solana transaction into human-readable format.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Parse a Solana transaction into human-readable format. Returns type, transfers, swaps, fees, and a plain-English description. Costs $0.002 USDC per call.
  • wallet_pnlCalculate realized and unrealized PnL for a Solana wallet's token trades.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Calculate realized and unrealized PnL for a Solana wallet's token trades. Analyzes swap history to compute profit/loss per token in SOL. Costs $0.05 USDC per call.
  • web_scrapeScrape any webpage and return clean text content.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe name "web_scrape" says "scrape": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Scrape any webpage and return clean text content. Strips HTML, scripts, and navigation. Returns the main content as readable text. Costs $0.005 USDC per call.
  • whale_alertScan a wallet's recent transaction history for large movements.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Scan a wallet's recent transaction history for large movements. Returns whale-sized transfers and token movements. Costs $0.01 USDC per call.
Only reads 33Show 33 read-only tools
  • bridge_route_optimizerFind the optimal cross-chain bridge route using LI.FI.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find the optimal cross-chain bridge route using LI.FI. Compare fees, speed, and output across bridges for any chain pair. Supports ETH, USDC, and custom tokens across Ethereum, Arbitrum, Optimism, Base, Polygon, zkSync, and more. Use toChain='scan' to compare all L2 destinations. Costs $0.01 USDC per call.
  • crypto_priceGet current price, market cap, volume, and 24h/7d change for any cryptocurrency.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get current price, market cap, volume, and 24h/7d change for any cryptocurrency. Supports search by name, symbol, or CoinGecko ID. Costs $0.001 USDC per call.
  • drift_market_detailsGet detailed info for a specific Drift BET prediction market.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get detailed info for a specific Drift BET prediction market. Returns oracle price, mark price, 24h change, open interest, fees, funding rate, and recent fill history. Use symbol like 'TRUMP-WIN-2024-BET' or just 'TRUMP-WIN-2024'. Costs $0.002 USDC per call.
  • drift_market_historyGet historical price/probability data for a Drift BET market.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get historical price/probability data for a Drift BET market. Returns OHLCV candles with implied probability percentages and trend direction. Use for charting and analysis. Costs $0.003 USDC per call.
  • drift_prediction_marketsList all Drift Protocol BET prediction markets on Solana.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List all Drift Protocol BET prediction markets on Solana. Returns market symbols, implied probabilities, open interest, volume, and status (active/settlement/delisted). These are on-chain perpetual markets priced 0–1 USDC representing event probabilities. Costs $0.002 USDC per call.
  • drift_statusCheck health of Drift Protocol APIs.No findings

    Why it is in this group

    • The name "drift_status" says "status": a word for reading.
    Description, as the server wrote it
    Check health of Drift Protocol APIs. Pings the Drift Data API and (if configured) your Drift Gateway. Returns latency, status (ok/error/not_configured), and an overall health verdict (healthy/degraded/down). Useful before placing bets or querying positions. Costs $0.001 USDC per call.
  • l2_gas_intelligenceCompare gas costs across 8 L2 chains in real time.No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    Description, as the server wrote it
    Compare gas costs across 8 L2 chains in real time. Returns gas price in Gwei, estimated swap cost in USD, cheapest/most expensive chain, and a recommendation. Queries all L2 RPCs in parallel. Costs $0.002 USDC per call.
  • lending_ratesCompare lending and borrowing rates across Solana DeFi protocols (Kamino, MarginFi, Drift, Solend, Save, Mango).No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    Description, as the server wrote it
    Compare lending and borrowing rates across Solana DeFi protocols (Kamino, MarginFi, Drift, Solend, Save, Mango). Returns supply APY, borrow APY, utilization rates, reward APY, and per-asset summaries showing the best rates. Filter by asset (USDC, SOL, mSOL, etc.) or protocol. Costs $0.005 USDC per call.
  • lst_yieldsCompare Solana Liquid Staking Token (LST) yields.No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    Description, as the server wrote it
    Compare Solana Liquid Staking Token (LST) yields. Covers mSOL, jitoSOL, bSOL, INF, jupSOL, and 15+ LSTs across Marinade, Jito, Sanctum, BlazeStake, and more. Returns APY, TVL, best yields by TVL tier, and ecosystem average. Data from DeFi Llama. Costs $0.005 USDC per call.
  • new_pairsGet newly created token pairs on Solana.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get newly created token pairs on Solana. Shows the latest launches with price, volume, liquidity, and age in minutes. Essential for meme coin discovery. Costs $0.002 USDC per call.
  • news_headlinesSearch Google News for current headlines on any topic.No findings

    Why it is in this group

    • The description's first verb is "search": a word for reading.
    Description, as the server wrote it
    Search Google News for current headlines on any topic. Returns titles, sources, links, dates, and snippets. Costs $0.005 USDC per call.
  • pair_dataGet full DEXScreener stats for a token: price, 5m/1h/6h/24h volume, buy/sell counts, liquidity, market cap, and price changes.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get full DEXScreener stats for a token: price, 5m/1h/6h/24h volume, buy/sell counts, liquidity, market cap, and price changes. Returns the highest-volume pair. Costs $0.001 USDC per call.
  • prediction_market_arbitrageFind prediction market arbitrage opportunities across Polymarket, Kalshi, and Drift BET.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find prediction market arbitrage opportunities across Polymarket, Kalshi, and Drift BET. Compares odds for the same event across platforms, calculates probability spreads, and flags actionable opportunities (>3% spread). Sorted by biggest spread first. Costs $0.01 USDC per call.
  • prediction_market_historyGet probability/price history for a prediction market over time.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get probability/price history for a prediction market over time. Returns data points, high/low, and trend direction. Use for charting and analysis. Costs $0.003 USDC per call.
  • prediction_market_moversFind prediction markets with the biggest odds changes.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find prediction markets with the biggest odds changes. Returns markets where probabilities shifted the most in a given timeframe — early signal for breaking news or sentiment shifts. Costs $0.005 USDC per call.
  • prediction_market_oddsGet current odds for a prediction market.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get current odds for a prediction market. Search by market slug, ID, or natural language query like 'bitcoin 100k' or 'fed rate cut'. Returns probabilities, volume, liquidity, and outcome prices. Costs $0.002 USDC per call.
  • priority_feeGet current Solana priority fee estimates.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get current Solana priority fee estimates. Returns low/medium/high/very_high fee levels in microLamports with SOL cost estimates. Call before every transaction. Costs $0.0005 USDC per call.
  • smart_moneyAnalyze any Solana wallet's trading intelligence.No findings

    Why it is in this group

    • The description's first verb is "analyze": a word for reading.
    Description, as the server wrote it
    Analyze any Solana wallet's trading intelligence. Scores wallets 0-100 as Smart Money based on swap history: win rate, profit factor, early-entry ability, consistency, and diversification. Returns per-token trade stats, realized PnL in SOL, best/worst trades, and a human-readable label (Smart Money / Above Average / Average / Below Average). Use to evaluate copy-trade targets, track whale wallets, or assess counterparty skill. Costs $0.05 USDC per call.
  • swap_quoteGet a Jupiter swap quote for any Solana token pair.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get a Jupiter swap quote for any Solana token pair. Returns output amount, price impact, route, and fees. Essential before executing any trade. Costs $0.001 USDC per call.
  • token_holdersGet full holder list for a Solana token with concentration analysis.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get full holder list for a Solana token with concentration analysis. Returns top holders, balances, % of supply, and distribution metrics. Costs $0.005 USDC per call.
  • token_metadataGet token metadata: name, symbol, decimals, supply, mint/freeze authority, mutability, and image.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get token metadata: name, symbol, decimals, supply, mint/freeze authority, mutability, and image. Lightweight call — use before any new token interaction. Costs $0.001 USDC per call.
  • token_priceGet current USD price for any Solana token by mint address.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get current USD price for any Solana token by mint address. Returns price, symbol, and supply info. Costs $0.0005 USDC per call.
  • token_risk_scoreAnalyze a Solana token's risk profile.No findings

    Why it is in this group

    • The description's first verb is "analyze": a word for reading.
    Description, as the server wrote it
    Analyze a Solana token's risk profile. Returns a 0-100 risk score based on holder concentration, liquidity, and distribution. Costs $0.005 USDC per call.
  • top_tradersFind the most active and profitable traders of a specific token.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find the most active and profitable traders of a specific token. Returns wallet addresses, buy/sell volumes, estimated PnL in SOL, and trader type classification. Costs $0.01 USDC per call.
  • volume_alertFind Solana tokens with unusual volume spikes right now.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find Solana tokens with unusual volume spikes right now. Returns tokens where recent 1h volume is disproportionately high vs 24h average — early signal for pumps. Costs $0.002 USDC per call.
  • wallet_balanceGet SOL balance and all token balances for a Solana wallet.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get SOL balance and all token balances for a Solana wallet. Lightweight check — use before transactions to verify sufficient funds. Costs $0.001 USDC per call.
  • wallet_profileGet a complete wallet profile: SOL balance, all token holdings with USD values, NFT count, and top holdings ranked by value.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get a complete wallet profile: SOL balance, all token holdings with USD values, NFT count, and top holdings ranked by value. Costs $0.005 USDC per call.
  • weatherGet current weather and 7-day forecast for any location by latitude/longitude.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get current weather and 7-day forecast for any location by latitude/longitude. Returns temperature, humidity, wind, precipitation, and conditions. Costs $0.001 USDC per call.
  • yield_ratesGet current DeFi yield rates (APY) across Solana protocols.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get current DeFi yield rates (APY) across Solana protocols. Returns top pools sorted by TVL from Marinade, Jito, Raydium, Orca, and more via DeFiLlama. Costs $0.002 USDC per call.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out2
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 high1 info
  • The input schema at properties.filename.description refers to ".env.example".

    Matched text

    inputSchema.properties.filename.description: "...ilename for context (e.g. 'config.ts', '.env.example')"

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...r leaked secrets, API keys, tokens, and credentials. Detects 16+ secret types including AWS..."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http toolbooth https://toolbooth.io/mcp
claude mcp add --transport http toolbooth https://toolbooth.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__toolbooth__token_price",
      "mcp__toolbooth__wallet_profile",
      "mcp__toolbooth__token_risk_score",
      "mcp__toolbooth__token_holders",
      "mcp__toolbooth__web_search",
      "mcp__toolbooth__crypto_price",
      "mcp__toolbooth__weather",
      "mcp__toolbooth__news_headlines",
      "mcp__toolbooth__swap_quote",
      "mcp__toolbooth__priority_fee",
      "mcp__toolbooth__wallet_balance",
      "mcp__toolbooth__dex_search",
      "mcp__toolbooth__pair_data",
      "mcp__toolbooth__trending_tokens",
      "mcp__toolbooth__new_pairs",
      "mcp__toolbooth__token_metadata",
      "mcp__toolbooth__top_traders",
      "mcp__toolbooth__yield_rates",
      "mcp__toolbooth__volume_alert",
      "mcp__toolbooth__prediction_markets_trending",
      "mcp__toolbooth__prediction_market_odds",
      "mcp__toolbooth__prediction_market_movers",
      "mcp__toolbooth__prediction_market_history",
      "mcp__toolbooth__drift_prediction_markets",
      "mcp__toolbooth__drift_market_details",
      "mcp__toolbooth__drift_market_history",
      "mcp__toolbooth__drift_status",
      "mcp__toolbooth__lending_rates",
      "mcp__toolbooth__smart_money",
      "mcp__toolbooth__l2_gas_intelligence",
      "mcp__toolbooth__prediction_market_arbitrage",
      "mcp__toolbooth__bridge_route_optimizer",
      "mcp__toolbooth__lst_yields"
    ],
    "ask": [
      "mcp__toolbooth__transaction_parse",
      "mcp__toolbooth__whale_alert",
      "mcp__toolbooth__dex_liquidity",
      "mcp__toolbooth__wallet_pnl",
      "mcp__toolbooth__copy_trade_signals",
      "mcp__toolbooth__web_scrape",
      "mcp__toolbooth__compute_math",
      "mcp__toolbooth__token_security",
      "mcp__toolbooth__holder_changes",
      "mcp__toolbooth__gas_tracker",
      "mcp__toolbooth__prediction_market_sentiment",
      "mcp__toolbooth__drift_open_positions",
      "mcp__toolbooth__drift_place_bet",
      "mcp__toolbooth__drift_close_position",
      "mcp__toolbooth__dependency_risk_score",
      "mcp__toolbooth__crypto_sentiment",
      "mcp__toolbooth__prediction_market_aggregator",
      "mcp__toolbooth__l2_yield_scanner",
      "mcp__toolbooth__liquidation_risk",
      "mcp__toolbooth__mev_detection",
      "mcp__toolbooth__prediction_market_events",
      "mcp__toolbooth__secrets_detection",
      "mcp__toolbooth__solana_tvl",
      "mcp__toolbooth__fear_greed_index",
      "mcp__toolbooth__funding_rate_arbitrage",
      "mcp__toolbooth__polymarket_quote",
      "mcp__toolbooth__hedge_plan",
      "mcp__toolbooth__order_book_aggregator",
      "mcp__toolbooth__perp_market_overview",
      "mcp__toolbooth__options_volatility",
      "mcp__toolbooth__stablecoin_peg_monitor",
      "mcp__toolbooth__open_interest_change",
      "mcp__toolbooth__recent_liquidations",
      "mcp__toolbooth__spawn_agent"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as toolbooth. Review it before you use it.

Capability tags behind 3 rules
  • mcp__toolbooth__web_search untrusted-input
  • mcp__toolbooth__web_scrape untrusted-input, outbound
  • mcp__toolbooth__spawn_agent outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.toolbooth/toolbooth/verify?hash=7d88f551a89224166badf01f338f6931a227755548692917c2b8f4aed67ebb46" | jq -e '.changed == false'

Pinned hash 7d88f551a892, from Oct 28, 2026, 00:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.toolbooth/toolbooth/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.toolbooth/toolbooth
[![anlyon.dev](https://anlyon.dev/badge/io.toolbooth/toolbooth.svg)](https://anlyon.dev/servers/io.toolbooth/toolbooth)

Source: MCP Registry. Synced Oct 28, 2026, 00:17 UTC.