Toolbooth
io.toolbooth/toolboothtoolbooth.iostreamable-httpv1.0.0Scanned
Pay-per-call tools for AI agents: Solana, DEX, perps, prediction markets, DeFi, web. USDC via x402.
67 tools: 34 change things and 33 only read.
- Reads private data · 0
- Reads text others write · 2
- Can send data out · 2
- 2 findings, 1 high
Anlyon alternative
34 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
67 tools
Changes things 34Claude Code: ask
compute_mathEvaluate mathematical expressions.No findings
Why it is in this group
- The description's first verb is "evaluate": a word for a change.
Description, as the server wrote it Evaluate mathematical expressions. Supports arithmetic, algebra, unit conversions, trigonometry, matrices, and more. Costs $0.0005 USDC per call.
copy_trade_signalsAnalyze a wallet's recent swap activity for copy trading.No findings
Why it is in this group
- The name "copy_trade_signals" says "copy": a word for a change.
Description, as the server wrote it Analyze a wallet's recent swap activity for copy trading. Returns active positions, buy/sell patterns, entry prices, and trading frequency. Costs $0.01 USDC per call.
crypto_sentimentAggregate social sentiment for any crypto token or topic.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Aggregate social sentiment for any crypto token or topic. Returns an overall 0-100 bullish score, per-source breakdown (market, community, social), mention volume, and confidence level. Sources: Alternative.me Fear & Greed (market), CoinGecko community votes, and StockGeist social media analysis (when STOCKGEIST_API_KEY is configured). Costs $0.005 USDC per call.
dependency_risk_scoreScore the security risk of software dependencies before using them.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Score the security risk of software dependencies before using them. Checks each package against OSV.dev (Google's vulnerability database) and deps.dev for metadata. Returns per-package CVE counts, max severity, abandonment signals, and a hallucination check — HALLUCINATED means the package was not found and may be an AI-invented name or typosquat. Supports npm, pypi, go, maven, cargo, and nuget. Accepts up to 20 packages per call. Costs $0.10 USDC per call.
dex_liquidityCheck DEX liquidity depth for a Solana token.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check DEX liquidity depth for a Solana token. Returns pool info, TVL estimates, and a liquidity rating (DEEP/MODERATE/SHALLOW/NONE). Costs $0.002 USDC per call.
drift_close_positionClose an open Drift BET prediction market position via your configured Drift Gateway.No findings
Why it is in this group
- The name "drift_close_position" says "close": a word for a change.
Description, as the server wrote it Close an open Drift BET prediction market position via your configured Drift Gateway. Submits a reduce-only market order to exit at the best available price. Requires DRIFT_GATEWAY_URL to be set. Costs $0.01 USDC per call.
drift_open_positionsGet open Drift BET prediction market positions from your configured Drift Gateway.No findings
Why it is in this group
- The name "drift_open_positions" says "open": a word for a change.
Description, as the server wrote it Get open Drift BET prediction market positions from your configured Drift Gateway. Returns all active positions with entry price, current implied probability, unrealized PnL, and direction (long=YES, short=NO). Requires DRIFT_GATEWAY_URL to be set. Costs $0.002 USDC per call.
drift_place_betPlace a bet on a Drift BET prediction market via your configured Drift Gateway.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Place a bet on a Drift BET prediction market via your configured Drift Gateway. Long = betting YES, short = betting NO. Price is the implied probability (0.0–1.0). Requires DRIFT_GATEWAY_URL to be set and a funded Drift account. Costs $0.01 USDC per call.
fear_greed_indexCrypto Fear & Greed composite index.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Crypto Fear & Greed composite index. Aggregates Alternative.me index with CoinGecko market signals (market cap change, volume ratio, BTC dominance). Returns 0-100 score, classification (Extreme Fear to Extreme Greed), 7-day trend, historical comparison, and actionable signal summary. Costs $0.002 USDC per call.
funding_rate_arbitrageCross-exchange funding rate arbitrage detector.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Cross-exchange funding rate arbitrage detector. Scans OKX, Hyperliquid, dYdX, and Kraken Futures perp markets in real time to find funding rate spreads, with every rate normalized to its 8-hour equivalent. Returns ranked arbitrage opportunities with annualized yield, profit estimates, risk notes, and direction (which exchange to long/short). Use for delta-neutral carry trade discovery. Costs $0.01 USDC per call.
gas_trackerSolana network congestion monitor.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Solana network congestion monitor. Returns current fee percentiles, congestion level (LOW/MODERATE/HIGH/VERY_HIGH), and a plain-English recommendation. Costs $0.0005 USDC per call.
hedge_planPlan a Hyperliquid short that hedges a Solana token position: runs the pre-trade scans pair_data, wallet_balance (if you pass a wallet), token_security and funding_rate_arbitrage, …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Plan a Hyperliquid short that hedges a Solana token position: runs the pre-trade scans pair_data, wallet_balance (if you pass a wallet), token_security and funding_rate_arbitrage, then sizes the short on the token's own perp (or SOL with a beta estimate if it has none) and shows funding, liquidation price and distance, margin and fees. Read-only: places no order. One fixed charge covers the scans at list price ($0.005 + $0.001 + $0.001 + $0.01; the wallet scan's share is included even when you pass an amount) plus $0.003 for the plan. If a scan fails or no viable plan can be made you get an error and pay nothing. Hyperliquid excludes US persons. Costs $0.02 USDC per call.
holder_changesTrack which wallets are accumulating or dumping a token based on recent transfer activity.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Track which wallets are accumulating or dumping a token based on recent transfer activity. Returns top movers with net flow direction and a bullish/bearish/neutral sentiment signal. Costs $0.005 USDC per call.
l2_yield_scannerScan DeFi yields across L2 chains (Arbitrum, Optimism, Base, Polygon, zkSync, Linea, Scroll, Blast).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Scan DeFi yields across L2 chains (Arbitrum, Optimism, Base, Polygon, zkSync, Linea, Scroll, Blast). Returns top pools sorted by APY with TVL, protocol, and per-chain summaries. Uses DeFi Llama data. Costs $0.005 USDC per call.
liquidation_riskMonitor Solana lending pools approaching liquidation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Monitor Solana lending pools approaching liquidation. Tracks utilization rates across Kamino, MarginFi, Drift, Solend, Save, and Mango. Returns risk levels (CRITICAL/HIGH/MEDIUM/LOW), market stress indicator, and per-protocol summaries. Costs $0.005 USDC per call.
mev_detectionDetect MEV activity on Solana.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Detect MEV activity on Solana. In 'landscape' mode: returns current Jito tip floor, MEV activity level, and protection recommendations. In 'analyze' mode: checks if a specific transaction was part of a Jito bundle with tip detection and risk assessment. Costs $0.005 USDC per call.
open_interest_changeHow one asset's perpetual-futures open interest moved over the last 1, 4 and 24 hours on OKX, dYdX and Kraken Futures (the US-reachable venues that publish OI history): current OI …No findings
Why it is in this group
- The name "open_interest_change" says "open": a word for a change.
Description, as the server wrote it How one asset's perpetual-futures open interest moved over the last 1, 4 and 24 hours on OKX, dYdX and Kraken Futures (the US-reachable venues that publish OI history): current OI in coins, change and % change per window with the price change alongside, the conventional reading (e.g. OI up with price down, typically read as new shorts), and a combined view across venues. Hourly samples. Accepts BTC, BTCUSDT, BTC/USDT or XBT. Venues that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.003 USDC per call.
options_volatilityOption-implied volatility for BTC, ETH or SOL from Deribit's public market data: ATM implied volatility by expiry (the term structure, interpolated at each expiry's forward), 25-de…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Option-implied volatility for BTC, ETH or SOL from Deribit's public market data: ATM implied volatility by expiry (the term structure, interpolated at each expiry's forward), 25-delta call and put IV with the risk reversal (skew) and butterfly, put/call open-interest and volume ratios per expiry and in total, the index price, and Deribit's DVOL 30-day volatility index with its 24h range (BTC and ETH; Deribit publishes none for SOL). Deltas are Black-76 forward deltas from Deribit mark IVs. Fails (and is not charged) if Deribit's option data is unavailable. Costs $0.005 USDC per call.
order_book_aggregatorPerpetual-futures order books for one asset across OKX, Hyperliquid, dYdX and Kraken Futures, side by side and merged: per-venue best bid/ask and spread, depth and bid/ask imbalanc…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Perpetual-futures order books for one asset across OKX, Hyperliquid, dYdX and Kraken Futures, side by side and merged: per-venue best bid/ask and spread, depth and bid/ask imbalance within ±0.5%, ±1% and ±2% of each venue's mid (in quote value), the cross-venue best bid/ask and any crossed books between venues, and the top merged levels. Accepts BTC, BTCUSDT, BTC/USDT, BTC-USDT-SWAP or Kraken's XBT. Depth bands that extend past what a venue returns are flagged as lower bounds. Venues that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.005 USDC per call.
perp_market_overviewOne asset's perpetual futures across OKX, Hyperliquid, dYdX and Kraken Futures: mark and index/oracle price, basis (mark vs index, in bps), 24h volume and open interest in USD, and…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it One asset's perpetual futures across OKX, Hyperliquid, dYdX and Kraken Futures: mark and index/oracle price, basis (mark vs index, in bps), 24h volume and open interest in USD, and funding — each venue's current or predicted rate with its funding interval, its 8-hour equivalent and simple annualized percentage. Summary: total open interest and volume, highest/lowest and open-interest-weighted 8h funding, and mark-price dispersion across venues. Accepts BTC, BTCUSDT, BTC/USDT or XBT. Venues that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.005 USDC per call.
polymarket_quoteQuote a Polymarket order before you place it: resolves the market and outcome token, walks the live order book for the expected fill (shares, average and worst price, slippage vs b…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Quote a Polymarket order before you place it: resolves the market and outcome token, walks the live order book for the expected fill (shares, average and worst price, slippage vs best and mid) and shows the platform fee and total cost. Read-only: places no order. Accepts a market slug, id, polymarket.com URL or a prediction_market_arbitrage id (polymarket:<id>). Polymarket is close-only or blocked in the US and many other regions. Costs $0.005 USDC per call.
prediction_market_aggregatorCross-platform prediction market search.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Cross-platform prediction market search. Queries Polymarket, Kalshi, and Drift BET in parallel and returns unified results sorted by volume. Finds the same event across platforms to compare odds and spot arbitrage opportunities. Returns probabilities, volume, liquidity, and cross-platform matches with probability spreads. Costs $0.01 USDC per call.
prediction_market_eventsTrack prediction market events and resolutions across Polymarket, Kalshi, and Drift BET.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Track prediction market events and resolutions across Polymarket, Kalshi, and Drift BET. 'upcoming' mode: markets closing soonest with current odds. 'resolved' mode: recently settled markets with outcomes. Cross-platform coverage. Costs $0.005 USDC per call.
prediction_market_sentimentAggregate sentiment across all prediction markets related to a topic.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Aggregate sentiment across all prediction markets related to a topic. Searches Polymarket, analyzes probabilities, and returns a 0-100 sentiment score with bullish/bearish label. Costs $0.01 USDC per call.
recent_liquidationsRecent forced liquidations of one asset's USDT perpetual on OKX (the only venue reachable from the US that publishes a liquidation feed): long vs short liquidated count, size and U…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Recent forced liquidations of one asset's USDT perpetual on OKX (the only venue reachable from the US that publishes a liquidation feed): long vs short liquidated count, size and USD value over the last 0.25–24 hours, the largest ones, an hourly breakdown, and where they cleared relative to the current mark price in adjustable % bands. These are realized liquidations, not estimated liquidation levels. Reports how much of the window the feed covered. Fails (and is not charged) if OKX doesn't answer or lists no such perpetual. Costs $0.003 USDC per call.
secrets_detectionScan code for leaked secrets, API keys, tokens, and credentials.2 findings
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...r leaked secrets, API keys, tokens, and credentials. Detects 16+ secret types including AWS..."
- High
The input schema at properties.filename.description refers to ".env.example".
What this check looks forMatched text
inputSchema.properties.filename.description: "...ilename for context (e.g. 'config.ts', '.env.example')"
Description, as the server wrote it Scan code for leaked secrets, API keys, tokens, and credentials. Detects 16+ secret types including AWS keys, GitHub tokens, Stripe keys, private keys, JWTs, database URLs, and high-entropy strings. Returns redacted previews with severity levels and rotation recommendations. No external API — pure regex pattern matching. Costs $0.005 USDC per call.
solana_tvlSolana ecosystem TVL analytics via DeFi Llama.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Solana ecosystem TVL analytics via DeFi Llama. Returns total TVL, top protocols ranked by TVL, category breakdown (DEX, Lending, Liquid Staking, etc.), 7-day trend, and Solana's market dominance as % of total DeFi. Filter by category for focused analysis. Costs $0.005 USDC per call.
spawn_agentOnboard a new AI agent in one step: Solana and EVM wallets it controls, $1.00 of Toolbooth credit, an ERC-8004 identity on Base, <name>.toolbooth.eth, and MCP config.Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a URL (input.endpoint): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it Onboard a new AI agent in one step: Solana and EVM wallets it controls, $1.00 of Toolbooth credit, an ERC-8004 identity on Base, <name>.toolbooth.eth, and MCP config. Pass the new agent's solanaAddress, evmAddress, apiKeyHash (hex SHA-256 of a fresh tb_live_ key you generated) and proofs: sign "toolbooth.io spawn_agent\nname:<name>\nsolana:<solanaAddress>\nevm:<evmAddress lowercase>\nkey:<apiKeyHash>\nissued:<ISO-8601 now>" with the Solana key (Ed25519, base64 → solanaSig) and the EVM key (EIP-191 personal_sign, hex → evmSig). Or set generateKeys=true to receive new keys once in the result (discouraged: secrets pass through this conversation). Costs $2.00 USDC per call.
stablecoin_peg_monitorUSD stablecoin pegs — USDC, USDT, DAI, PYUSD, USDe, FDUSD and USDS — checked against $1 across independent public sources: Kraken, Coinbase and Gemini USD order books, CoinGecko's …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it USD stablecoin pegs — USDC, USDT, DAI, PYUSD, USDe, FDUSD and USDS — checked against $1 across independent public sources: Kraken, Coinbase and Gemini USD order books, CoinGecko's aggregate price, and Gate's FDUSD/USDT book converted at the USDT/USD rate. For each coin: the median price, deviation from $1 in bps, a severity flag (on_peg < 25 bps, watch < 50, depeg < 200, severe_depeg beyond), how far the sources disagree, and every quote with its spread and volume. Sources that fail are listed under errors; the call fails (and is not charged) only if none answers. Costs $0.002 USDC per call.
token_securityCheck if a Solana token is safe to trade.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check if a Solana token is safe to trade. Returns rug pull detection, honeypot flags, freeze/mint authority, insider networks, transfer fees, and a risk score via RugCheck. Costs $0.005 USDC per call.
transaction_parseParse a Solana transaction into human-readable format.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Parse a Solana transaction into human-readable format. Returns type, transfers, swaps, fees, and a plain-English description. Costs $0.002 USDC per call.
wallet_pnlCalculate realized and unrealized PnL for a Solana wallet's token trades.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Calculate realized and unrealized PnL for a Solana wallet's token trades. Analyzes swap history to compute profit/loss per token in SOL. Costs $0.05 USDC per call.
web_scrapeScrape any webpage and return clean text content.Reads text others writeCan send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe name "web_scrape" says "scrape": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it Scrape any webpage and return clean text content. Strips HTML, scripts, and navigation. Returns the main content as readable text. Costs $0.005 USDC per call.
whale_alertScan a wallet's recent transaction history for large movements.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Scan a wallet's recent transaction history for large movements. Returns whale-sized transfers and token movements. Costs $0.01 USDC per call.
Only reads 33Show 33 read-only tools
bridge_route_optimizerFind the optimal cross-chain bridge route using LI.FI.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it Find the optimal cross-chain bridge route using LI.FI. Compare fees, speed, and output across bridges for any chain pair. Supports ETH, USDC, and custom tokens across Ethereum, Arbitrum, Optimism, Base, Polygon, zkSync, and more. Use toChain='scan' to compare all L2 destinations. Costs $0.01 USDC per call.
crypto_priceGet current price, market cap, volume, and 24h/7d change for any cryptocurrency.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get current price, market cap, volume, and 24h/7d change for any cryptocurrency. Supports search by name, symbol, or CoinGecko ID. Costs $0.001 USDC per call.
dex_searchSearch DEXScreener for any token or pair by name, symbol, or address.No findings
Why it is in this group
- The name "dex_search" says "search": a word for reading.
Description, as the server wrote it Search DEXScreener for any token or pair by name, symbol, or address. Returns price, volume, liquidity, and pair info across all DEXes. Costs $0.001 USDC per call.
drift_market_detailsGet detailed info for a specific Drift BET prediction market.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get detailed info for a specific Drift BET prediction market. Returns oracle price, mark price, 24h change, open interest, fees, funding rate, and recent fill history. Use symbol like 'TRUMP-WIN-2024-BET' or just 'TRUMP-WIN-2024'. Costs $0.002 USDC per call.
drift_market_historyGet historical price/probability data for a Drift BET market.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get historical price/probability data for a Drift BET market. Returns OHLCV candles with implied probability percentages and trend direction. Use for charting and analysis. Costs $0.003 USDC per call.
drift_prediction_marketsList all Drift Protocol BET prediction markets on Solana.No findings
Why it is in this group
- The description's first verb is "list": a word for reading.
Description, as the server wrote it List all Drift Protocol BET prediction markets on Solana. Returns market symbols, implied probabilities, open interest, volume, and status (active/settlement/delisted). These are on-chain perpetual markets priced 0–1 USDC representing event probabilities. Costs $0.002 USDC per call.
drift_statusCheck health of Drift Protocol APIs.No findings
Why it is in this group
- The name "drift_status" says "status": a word for reading.
Description, as the server wrote it Check health of Drift Protocol APIs. Pings the Drift Data API and (if configured) your Drift Gateway. Returns latency, status (ok/error/not_configured), and an overall health verdict (healthy/degraded/down). Useful before placing bets or querying positions. Costs $0.001 USDC per call.
l2_gas_intelligenceCompare gas costs across 8 L2 chains in real time.No findings
Why it is in this group
- The description's first verb is "compare": a word for reading.
Description, as the server wrote it Compare gas costs across 8 L2 chains in real time. Returns gas price in Gwei, estimated swap cost in USD, cheapest/most expensive chain, and a recommendation. Queries all L2 RPCs in parallel. Costs $0.002 USDC per call.
lending_ratesCompare lending and borrowing rates across Solana DeFi protocols (Kamino, MarginFi, Drift, Solend, Save, Mango).No findings
Why it is in this group
- The description's first verb is "compare": a word for reading.
Description, as the server wrote it Compare lending and borrowing rates across Solana DeFi protocols (Kamino, MarginFi, Drift, Solend, Save, Mango). Returns supply APY, borrow APY, utilization rates, reward APY, and per-asset summaries showing the best rates. Filter by asset (USDC, SOL, mSOL, etc.) or protocol. Costs $0.005 USDC per call.
lst_yieldsCompare Solana Liquid Staking Token (LST) yields.No findings
Why it is in this group
- The description's first verb is "compare": a word for reading.
Description, as the server wrote it Compare Solana Liquid Staking Token (LST) yields. Covers mSOL, jitoSOL, bSOL, INF, jupSOL, and 15+ LSTs across Marinade, Jito, Sanctum, BlazeStake, and more. Returns APY, TVL, best yields by TVL tier, and ecosystem average. Data from DeFi Llama. Costs $0.005 USDC per call.
new_pairsGet newly created token pairs on Solana.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get newly created token pairs on Solana. Shows the latest launches with price, volume, liquidity, and age in minutes. Essential for meme coin discovery. Costs $0.002 USDC per call.
news_headlinesSearch Google News for current headlines on any topic.No findings
Why it is in this group
- The description's first verb is "search": a word for reading.
Description, as the server wrote it Search Google News for current headlines on any topic. Returns titles, sources, links, dates, and snippets. Costs $0.005 USDC per call.
pair_dataGet full DEXScreener stats for a token: price, 5m/1h/6h/24h volume, buy/sell counts, liquidity, market cap, and price changes.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get full DEXScreener stats for a token: price, 5m/1h/6h/24h volume, buy/sell counts, liquidity, market cap, and price changes. Returns the highest-volume pair. Costs $0.001 USDC per call.
prediction_market_arbitrageFind prediction market arbitrage opportunities across Polymarket, Kalshi, and Drift BET.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it Find prediction market arbitrage opportunities across Polymarket, Kalshi, and Drift BET. Compares odds for the same event across platforms, calculates probability spreads, and flags actionable opportunities (>3% spread). Sorted by biggest spread first. Costs $0.01 USDC per call.
prediction_market_historyGet probability/price history for a prediction market over time.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get probability/price history for a prediction market over time. Returns data points, high/low, and trend direction. Use for charting and analysis. Costs $0.003 USDC per call.
prediction_market_moversFind prediction markets with the biggest odds changes.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it Find prediction markets with the biggest odds changes. Returns markets where probabilities shifted the most in a given timeframe — early signal for breaking news or sentiment shifts. Costs $0.005 USDC per call.
prediction_market_oddsGet current odds for a prediction market.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get current odds for a prediction market. Search by market slug, ID, or natural language query like 'bitcoin 100k' or 'fed rate cut'. Returns probabilities, volume, liquidity, and outcome prices. Costs $0.002 USDC per call.
prediction_markets_trendingGet top trending prediction markets from Polymarket.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get top trending prediction markets from Polymarket. Returns market questions, current probabilities, volume, liquidity, and outcomes. Filter by category (crypto, politics, sports, tech, culture). Costs $0.005 USDC per call.
priority_feeGet current Solana priority fee estimates.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get current Solana priority fee estimates. Returns low/medium/high/very_high fee levels in microLamports with SOL cost estimates. Call before every transaction. Costs $0.0005 USDC per call.
smart_moneyAnalyze any Solana wallet's trading intelligence.No findings
Why it is in this group
- The description's first verb is "analyze": a word for reading.
Description, as the server wrote it Analyze any Solana wallet's trading intelligence. Scores wallets 0-100 as Smart Money based on swap history: win rate, profit factor, early-entry ability, consistency, and diversification. Returns per-token trade stats, realized PnL in SOL, best/worst trades, and a human-readable label (Smart Money / Above Average / Average / Below Average). Use to evaluate copy-trade targets, track whale wallets, or assess counterparty skill. Costs $0.05 USDC per call.
swap_quoteGet a Jupiter swap quote for any Solana token pair.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get a Jupiter swap quote for any Solana token pair. Returns output amount, price impact, route, and fees. Essential before executing any trade. Costs $0.001 USDC per call.
token_holdersGet full holder list for a Solana token with concentration analysis.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get full holder list for a Solana token with concentration analysis. Returns top holders, balances, % of supply, and distribution metrics. Costs $0.005 USDC per call.
token_metadataGet token metadata: name, symbol, decimals, supply, mint/freeze authority, mutability, and image.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get token metadata: name, symbol, decimals, supply, mint/freeze authority, mutability, and image. Lightweight call — use before any new token interaction. Costs $0.001 USDC per call.
token_priceGet current USD price for any Solana token by mint address.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get current USD price for any Solana token by mint address. Returns price, symbol, and supply info. Costs $0.0005 USDC per call.
token_risk_scoreAnalyze a Solana token's risk profile.No findings
Why it is in this group
- The description's first verb is "analyze": a word for reading.
Description, as the server wrote it Analyze a Solana token's risk profile. Returns a 0-100 risk score based on holder concentration, liquidity, and distribution. Costs $0.005 USDC per call.
top_tradersFind the most active and profitable traders of a specific token.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it Find the most active and profitable traders of a specific token. Returns wallet addresses, buy/sell volumes, estimated PnL in SOL, and trader type classification. Costs $0.01 USDC per call.
trending_tokensGet top trending/boosted tokens on DEXScreener.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get top trending/boosted tokens on DEXScreener. Shows what's getting the most attention right now. Optionally filter by chain. Costs $0.002 USDC per call.
volume_alertFind Solana tokens with unusual volume spikes right now.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it Find Solana tokens with unusual volume spikes right now. Returns tokens where recent 1h volume is disproportionately high vs 24h average — early signal for pumps. Costs $0.002 USDC per call.
wallet_balanceGet SOL balance and all token balances for a Solana wallet.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get SOL balance and all token balances for a Solana wallet. Lightweight check — use before transactions to verify sufficient funds. Costs $0.001 USDC per call.
wallet_profileGet a complete wallet profile: SOL balance, all token holdings with USD values, NFT count, and top holdings ranked by value.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get a complete wallet profile: SOL balance, all token holdings with USD values, NFT count, and top holdings ranked by value. Costs $0.005 USDC per call.
weatherGet current weather and 7-day forecast for any location by latitude/longitude.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get current weather and 7-day forecast for any location by latitude/longitude. Returns temperature, humidity, wind, precipitation, and conditions. Costs $0.001 USDC per call.
web_searchSearch the web via Google.Reads text others writeNo findings
Why it is in this group
- The name "web_search" says "search": a word for reading.
What it can reach
- untrusted-inputThe name "web_search" says "search" and "web": it reads web pages, which anyone can write.
- untrusted-inputThe description's first sentence says "search" and "web": it reads web pages, which anyone can write.
Description, as the server wrote it Search the web via Google. Returns titles, URLs, and snippets for any query. Useful for research, fact-checking, and finding current information. Costs $0.01 USDC per call.
yield_ratesGet current DeFi yield rates (APY) across Solana protocols.No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get current DeFi yield rates (APY) across Solana protocols. Returns top pools sorted by TVL from Marinade, Jito, Raydium, Orca, and more via DeFiLlama. Costs $0.002 USDC per call.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write2
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out2
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
The input schema at properties.filename.description refers to ".env.example".
What this check looks forMatched text
inputSchema.properties.filename.description: "...ilename for context (e.g. 'config.ts', '.env.example')"
The description mentions "credentials".
What this check looks forMatched text
description: "...r leaked secrets, API keys, tokens, and credentials. Detects 16+ secret types including AWS..."
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http toolbooth https://toolbooth.io/mcpclaude mcp add --transport http toolbooth https://toolbooth.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__toolbooth__token_price",
"mcp__toolbooth__wallet_profile",
"mcp__toolbooth__token_risk_score",
"mcp__toolbooth__token_holders",
"mcp__toolbooth__web_search",
"mcp__toolbooth__crypto_price",
"mcp__toolbooth__weather",
"mcp__toolbooth__news_headlines",
"mcp__toolbooth__swap_quote",
"mcp__toolbooth__priority_fee",
"mcp__toolbooth__wallet_balance",
"mcp__toolbooth__dex_search",
"mcp__toolbooth__pair_data",
"mcp__toolbooth__trending_tokens",
"mcp__toolbooth__new_pairs",
"mcp__toolbooth__token_metadata",
"mcp__toolbooth__top_traders",
"mcp__toolbooth__yield_rates",
"mcp__toolbooth__volume_alert",
"mcp__toolbooth__prediction_markets_trending",
"mcp__toolbooth__prediction_market_odds",
"mcp__toolbooth__prediction_market_movers",
"mcp__toolbooth__prediction_market_history",
"mcp__toolbooth__drift_prediction_markets",
"mcp__toolbooth__drift_market_details",
"mcp__toolbooth__drift_market_history",
"mcp__toolbooth__drift_status",
"mcp__toolbooth__lending_rates",
"mcp__toolbooth__smart_money",
"mcp__toolbooth__l2_gas_intelligence",
"mcp__toolbooth__prediction_market_arbitrage",
"mcp__toolbooth__bridge_route_optimizer",
"mcp__toolbooth__lst_yields"
],
"ask": [
"mcp__toolbooth__transaction_parse",
"mcp__toolbooth__whale_alert",
"mcp__toolbooth__dex_liquidity",
"mcp__toolbooth__wallet_pnl",
"mcp__toolbooth__copy_trade_signals",
"mcp__toolbooth__web_scrape",
"mcp__toolbooth__compute_math",
"mcp__toolbooth__token_security",
"mcp__toolbooth__holder_changes",
"mcp__toolbooth__gas_tracker",
"mcp__toolbooth__prediction_market_sentiment",
"mcp__toolbooth__drift_open_positions",
"mcp__toolbooth__drift_place_bet",
"mcp__toolbooth__drift_close_position",
"mcp__toolbooth__dependency_risk_score",
"mcp__toolbooth__crypto_sentiment",
"mcp__toolbooth__prediction_market_aggregator",
"mcp__toolbooth__l2_yield_scanner",
"mcp__toolbooth__liquidation_risk",
"mcp__toolbooth__mev_detection",
"mcp__toolbooth__prediction_market_events",
"mcp__toolbooth__secrets_detection",
"mcp__toolbooth__solana_tvl",
"mcp__toolbooth__fear_greed_index",
"mcp__toolbooth__funding_rate_arbitrage",
"mcp__toolbooth__polymarket_quote",
"mcp__toolbooth__hedge_plan",
"mcp__toolbooth__order_book_aggregator",
"mcp__toolbooth__perp_market_overview",
"mcp__toolbooth__options_volatility",
"mcp__toolbooth__stablecoin_peg_monitor",
"mcp__toolbooth__open_interest_change",
"mcp__toolbooth__recent_liquidations",
"mcp__toolbooth__spawn_agent"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as toolbooth. Review it before you use it.
Capability tags behind 3 rules
- mcp__toolbooth__web_search untrusted-input
- mcp__toolbooth__web_scrape untrusted-input, outbound
- mcp__toolbooth__spawn_agent outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.toolbooth/toolbooth/verify?hash=7d88f551a89224166badf01f338f6931a227755548692917c2b8f4aed67ebb46" | jq -e '.changed == false'Pinned hash 7d88f551a892, from Oct 28, 2026, 00:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.toolbooth/toolbooth/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.toolbooth/toolbooth)Source: MCP Registry. Synced Oct 28, 2026, 00:17 UTC.