Skip to content
anlyon.devby Anlyon

pro.horustek/horus-flow-mcp

pro.horustek/horus-flow-mcphorustek.prostreamable-httpv3.1.0Scanned

Crypto order flow, cross-venue derivatives and US market context for AI agents, with a track record.

13 tools: 13 only read.

Tools: 0 delete, 0 irreversible, 0 write, 13 read.
  • Reads private data · 0
  • Reads text others write · 13
  • Can send data out · 0
  • No findings

Anlyon alternative

Run the operations that matter as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

13 tools

Only reads 13Show 13 read-only tools
  • get_cortexHorus Cortex: the BTC market regime, trust score (0-100), active contradictions between evidence families, invalidation and breakout levels, and position-size multipliers by strate…Reads text others writeNo findings

    Why it is in this group

    • The name "get_cortex" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Horus Cortex: the BTC market regime, trust score (0-100), active contradictions between evidence families, invalidation and breakout levels, and position-size multipliers by strategy type. PRO plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_cross_assetBTC order flow side by side with US equities flow (SPY, QQQ) and crypto-linked stocks and ETFs (COIN, MSTR, IBIT): are crypto and stocks risk-on together, risk-off together, or div…Reads text others writeNo findings

    Why it is in this group

    • The name "get_cross_asset" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    BTC order flow side by side with US equities flow (SPY, QQQ) and crypto-linked stocks and ETFs (COIN, MSTR, IBIT): are crypto and stocks risk-on together, risk-off together, or diverging? When US markets are closed, says so and keeps BTC as the live gauge. Equity flow is an IEX sample. BUILDER plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_crypto_flowLive order flow for one Binance spot pair: signal, direction, 30-second buy/sell delta in USD, order book depth ratio, large sells in the last 5 minutes, and the signal's measured …Reads text others writeNo findings

    Why it is in this group

    • The name "get_crypto_flow" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live order flow for one Binance spot pair: signal, direction, 30-second buy/sell delta in USD, order book depth ratio, large sells in the last 5 minutes, and the signal's measured hit rate. Use for "what is the market doing right now in X". Symbols like BTCUSDT, ETHUSDT, SOLUSDT.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_derivativesDerivatives positioning for one of 10 majors: funding (per venue and OI-weighted), open interest and its 10/30-minute change, futures/spot volume vs its 7-day median, crowd long/sh…Reads text others writeNo findings

    Why it is in this group

    • The name "get_derivatives" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Derivatives positioning for one of 10 majors: funding (per venue and OI-weighted), open interest and its 10/30-minute change, futures/spot volume vs its 7-day median, crowd long/short vs its 24h median, top-trader divergence, estimated liquidation levels, liquidations seen in the last 5 minutes. PRO plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_equity_flowOrder flow for one US stock or ETF from the IEX feed (about 3% of US volume, a sample): signal, buy/sell ratio, delta, large IEX prints.Reads text others writeNo findings

    Why it is in this group

    • The name "get_equity_flow" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Order flow for one US stock or ETF from the IEX feed (about 3% of US volume, a sample): signal, buy/sell ratio, delta, large IEX prints. Extreme verdicts are capped because of the sample size. BUILDER plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_flow_historyRecent order-flow snapshots (every 15s) for a crypto pair with a summary: signal counts, price change, cumulative 30s delta.Reads text others writeNo findings

    Why it is in this group

    • The name "get_flow_history" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Recent order-flow snapshots (every 15s) for a crypto pair with a summary: signal counts, price change, cumulative 30s delta. Use to see whether pressure is building or fading. minutes up to 60 (BUILDER) or 1440 (PRO).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_ignitionsVolatility-breakout scanner across ~750 crypto assets, refreshed every minute: global regime and the assets with the highest ignition score (0-1).Reads text others writeNo findings

    Why it is in this group

    • The name "get_ignitions" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Volatility-breakout scanner across ~750 crypto assets, refreshed every minute: global regime and the assets with the highest ignition score (0-1). A ranking of breakout conditions, not a probability. BUILDER plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_market_overviewOne call for the crypto market: BTC climate, ignition regime, Cortex regime, and for 10 majors the composite score, derivatives positioning (crowd vs its 24h median, liquidation gr…Reads text others writeNo findings

    Why it is in this group

    • The name "get_market_overview" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One call for the crypto market: BTC climate, ignition regime, Cortex regime, and for 10 majors the composite score, derivatives positioning (crowd vs its 24h median, liquidation gravity), futures/spot activity and open interest across Binance, Bybit and OKX. PRO plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_recent_eventsWhat changed since your last check: liquidation cascades, strong flow signals, composite changes, Cortex regime changes, climate changes, ignition alerts, US session changes, new U…Reads text others writeNo findings

    Why it is in this group

    • The name "get_recent_events" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    What changed since your last check: liquidation cascades, strong flow signals, composite changes, Cortex regime changes, climate changes, ignition alerts, US session changes, new US trading halts. Pass the last event id you saw as since_id. types is a comma-separated filter. BUILDER plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_service_statusFreshness and uptime of every Horus data source.Reads text others writeNo findings

    Why it is in this group

    • The name "get_service_status" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Freshness and uptime of every Horus data source. Check this if a tool returns data_stale. Free.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_signal_ledgerPoint-in-time ledger: every signal Horus emitted for BTCUSDT, ETHUSDT or SOLUSDT between start and end (ISO dates, max 31 days), with the price and what the market did 1/5/15/30 mi…Reads text others writeNo findings

    Why it is in this group

    • The name "get_signal_ledger" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Point-in-time ledger: every signal Horus emitted for BTCUSDT, ETHUSDT or SOLUSDT between start and end (ISO dates, max 31 days), with the price and what the market did 1/5/15/30 minutes later. For backtesting. BUILDER plan.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_track_recordMeasured hit rates of Horus signals at 1, 5, 15 and 30 minutes (window 30d or all), from every signal recorded live since August 2026.Reads text others writeNo findings

    Why it is in this group

    • The name "get_track_record" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Measured hit rates of Horus signals at 1, 5, 15 and 30 minutes (window 30d or all), from every signal recorded live since August 2026. Pass a signal name (e.g. STRONG_BUY_PRESSURE) for just that signal. Use this to decide how much weight to give a reading. Free.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_us_market_sessionUS equity market right now: session phase (pre-market, regular, after-hours, closed), holidays and early closes, next open and close in New York time, minutes to close, and current…Reads text others writeNo findings

    Why it is in this group

    • The name "get_us_market_session" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    US equity market right now: session phase (pre-market, regular, after-hours, closed), holidays and early closes, next open and close in New York time, minutes to close, and currently active trading halts. Call this before reasoning about US stock trades. Free.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write13
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 3.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http horus-flow https://flow.horustek.pro/mcp
claude mcp add --transport http horus-flow https://flow.horustek.pro/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__horus-flow__get_crypto_flow",
      "mcp__horus-flow__get_flow_history",
      "mcp__horus-flow__get_market_overview",
      "mcp__horus-flow__get_derivatives",
      "mcp__horus-flow__get_cortex",
      "mcp__horus-flow__get_ignitions",
      "mcp__horus-flow__get_track_record",
      "mcp__horus-flow__get_signal_ledger",
      "mcp__horus-flow__get_recent_events",
      "mcp__horus-flow__get_us_market_session",
      "mcp__horus-flow__get_cross_asset",
      "mcp__horus-flow__get_equity_flow",
      "mcp__horus-flow__get_service_status"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as horus-flow. Review it before you use it.

Capability tags behind 13 rules
  • mcp__horus-flow__get_crypto_flow untrusted-input
  • mcp__horus-flow__get_flow_history untrusted-input
  • mcp__horus-flow__get_market_overview untrusted-input
  • mcp__horus-flow__get_derivatives untrusted-input
  • mcp__horus-flow__get_cortex untrusted-input
  • mcp__horus-flow__get_ignitions untrusted-input
  • mcp__horus-flow__get_track_record untrusted-input
  • mcp__horus-flow__get_signal_ledger untrusted-input
  • mcp__horus-flow__get_recent_events untrusted-input
  • mcp__horus-flow__get_us_market_session untrusted-input
  • mcp__horus-flow__get_cross_asset untrusted-input
  • mcp__horus-flow__get_equity_flow untrusted-input
  • mcp__horus-flow__get_service_status untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/pro.horustek/horus-flow-mcp/verify?hash=76cd1e141e20e824afb3dcb54def133418f96665df150028af6d61eed838c6fd" | jq -e '.changed == false'

Pinned hash 76cd1e141e20, from Oct 23, 2026, 18:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/pro.horustek/horus-flow-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for pro.horustek/horus-flow-mcp
[![anlyon.dev](https://anlyon.dev/badge/pro.horustek/horus-flow-mcp.svg)](https://anlyon.dev/servers/pro.horustek/horus-flow-mcp)

Source: MCP Registry · repository. Synced Oct 23, 2026, 18:19 UTC.