Is the copy.top MCP server safe?

No scan can promise that. What its definitions show: 11 tools, 1 of which can change, send or delete something, and 1 finding from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.

Can the copy.top MCP server delete data?

No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.

Can the copy.top MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the copy.top MCP server have?

11 tools: 1 write, 10 read. get_hot_index, search, get_trader, get_leaderboard, get_token, get_theses, get_hot_coins, get_live_trades and 3 more.

Does the copy.top MCP server send data to outside services?

None of its tools sends, posts or publishes, or takes a recipient, channel or URL.

Has the copy.top MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 14, 2026.

copy.top MCP server

top.copy/mcpcopy.topstreamable-httpv0.2.0Scanned 11 hours ago

Live signals, trader intel and alerts from top fomo, pump.fun and hyperliquid traders. Read-only.

11 tools: 1 change things and 10 only read.

Reads private data · 0
Reads text others write · 11
Can send data out · 0
1 finding

With Anlyon

1 tool here changes things. Govern it.

Anlyon lists the tools and adopts none.
Each tool you adopt gets approvals and receipts.
Your agent never holds the key.

Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

What the copy.top MCP server can do

The copy.top MCP server is published by copy.top, a domain the MCP Registry verified. It has 11 tools. It can create or change data (1 tool: get_hot_index), but cannot delete data. 10 tools only read.

11 tools bring in text other people can write (search, get_trader, get_leaderboard and 8 more).

The fixed checks matched 1 finding (annotation-conflict). Each one comes with the text it matched.

Last scanned Nov 14, 2026, version 0.2.0.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

11 tools

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

get_hot_indexcopy.top's hot index: coins ranked 0-100 by attention right now, mixing tracked traders buying, callers and x activity (voices, views).Reads text others write1 finding
Why it is in this group
- The name "get_hot_index" says "get": a word for reading.
- The description's first verb is "copy": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "get_hot_index" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_hot_index" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
copy.top's hot index: coins ranked 0-100 by attention right now, mixing tracked traders buying, callers and x activity (voices, views). window 1h, 6h or 24h; optional chain.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 10Looks things up and changes nothing.Show 10 read-only tools

get_alertsevents since a cursor, for alert bots: confluence (several top traders bought the same coin recently), big_trade (one tracked trader bought or sold a large amount) and thesis (a tr…Reads text others writeNo findings
Why it is in this group
- The name "get_alerts" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
events since a cursor, for alert bots: confluence (several top traders bought the same coin recently), big_trade (one tracked trader bought or sold a large amount) and thesis (a tracked trader posted a thesis). pass the cursor of the previous call as since; without since, the last 15 minutes. thresholds are yours.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_dex_paidcoins whose team paid for a dexscreener profile in the last 24 h (a sign the team is spending), with price, market cap, liquidity, volume and moves.Reads text others writeNo findings
Why it is in this group
- The name "get_dex_paid" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
coins whose team paid for a dexscreener profile in the last 24 h (a sign the team is spending), with price, market cap, liquidity, volume and moves.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_hot_coinsthe signal feed: coins tracked traders are buying now.Reads text others writeNo findings
Why it is in this group
- The name "get_hot_coins" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
the signal feed: coins tracked traders are buying now. window 1h or 24h, optional max market cap in dollars. each coin: how many traders and top traders bought, dollars bought and sold, minutes since the first buy, and the first buyers.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_leaderboardrank traders like copy.top's discover page.Reads text others writeNo findings
Why it is in this group
- The name "get_leaderboard" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
rank traders like copy.top's discover page. window 1d, 7d or 30d; sort total (pnl), realized, roi, winrate or copiers; optional chain or platform (fomo, pumpfun); fair_play clean or clean_or_watch keeps only those.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_live_tradesthe live tape: the latest buys and sells by tracked traders (fomo and pump.fun), newest first.Reads text others writeNo findings
Why it is in this group
- The name "get_live_trades" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
the live tape: the latest buys and sells by tracked traders (fomo and pump.fun), newest first. optional since (iso time or the cursor of a previous call) to get only newer trades, side buy or sell, min_usd.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_money_flowwhere tracked traders' dollars go: coins ranked by dollars bought (side buy) or sold (side sell) over 1h, 6h, 24h or 7d, with the number of traders.Reads text others writeNo findings
Why it is in this group
- The name "get_money_flow" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
where tracked traders' dollars go: coins ranked by dollars bought (side buy) or sold (side sell) over 1h, 6h, 24h or 7d, with the number of traders.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_thesesthe latest or most popular theses (a trader's written reason for holding a coin) posted by tracked traders in the last 24 h at most, with the coin and their pnl at post.Reads text others writeNo findings
Why it is in this group
- The name "get_theses" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
Description, as the server wrote it
the latest or most popular theses (a trader's written reason for holding a coin) posted by tracked traders in the last 24 h at most, with the coin and their pnl at post.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_tokena coin's copy.top page: price, market cap, 1h and 24h moves, liquidity, which tracked traders hold it or sold it and their pnl on it, and their theses.Reads text others writeNo findings
Why it is in this group
- The name "get_token" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
a coin's copy.top page: price, market cap, 1h and 24h moves, liquidity, which tracked traders hold it or sold it and their pnl on it, and their theses.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_tradera trader's copy.top profile (fomo or pump.fun): pnl 30d (realized, unrealized, total), roi, win rate, fair play verdict and badges, followers, copiers, platforms, largest open posi…Reads text others writeNo findings
Why it is in this group
- The name "get_trader" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
a trader's copy.top profile (fomo or pump.fun): pnl 30d (realized, unrealized, total), roi, win rate, fair play verdict and badges, followers, copiers, platforms, largest open positions, latest trades and theses.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
searchfind traders and coins on copy.top by name, handle, @x, $ticker or address.Reads text others writeNo findings
Why it is in this group
- The name "search" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
find traders and coins on copy.top by name, handle, @x, $ticker or address. use it to resolve a name before the other tools.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write11: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_alerts
get_dex_paid
get_hot_coins
get_hot_index
get_leaderboard
get_live_trades
get_money_flow
get_theses
get_token
get_trader
search
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnget_hot_index
The server marks "get_hot_index" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_hot_index" says "get": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http copy https://copy.top/mcp

claude mcp add --transport http copy https://copy.top/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__copy__search",
      "mcp__copy__get_trader",
      "mcp__copy__get_leaderboard",
      "mcp__copy__get_token",
      "mcp__copy__get_theses",
      "mcp__copy__get_hot_coins",
      "mcp__copy__get_live_trades",
      "mcp__copy__get_alerts",
      "mcp__copy__get_money_flow",
      "mcp__copy__get_dex_paid"
    ],
    "ask": [
      "mcp__copy__get_hot_index"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as copy. Review it before you use it.

Capability tags behind 11 rules

mcp__copy__search untrusted-input
mcp__copy__get_trader untrusted-input
mcp__copy__get_leaderboard untrusted-input
mcp__copy__get_token untrusted-input
mcp__copy__get_theses untrusted-input
mcp__copy__get_hot_coins untrusted-input
mcp__copy__get_live_trades untrusted-input
mcp__copy__get_alerts untrusted-input
mcp__copy__get_hot_index untrusted-input
mcp__copy__get_money_flow untrusted-input
mcp__copy__get_dex_paid untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/top.copy/mcp/verify?hash=450634fd21568b4a2984acb3a0b07c7967cb82ece4d77a217fbabd820c649ec2" | jq -e '.changed == false'

Pinned hash 450634fd2156, from Nov 14, 2026, 15:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/top.copy/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/top.copy/mcp.svg)](https://anlyon.dev/servers/top.copy/mcp)

Source: MCP Registry. Synced Nov 14, 2026, 15:19 UTC.