Skip to content
anlyon.devby Anlyon

Syndicate MCP server

trade.syndicate/marketssyndicate.tradestreamable-httpv1.0.0Scanned

Read-only market data: tokens, stocks, Hyperliquid perps, Polymarket, and public trader books.

15 tools: 1 change things and 14 only read.

Tools: 0 delete, 0 irreversible, 1 write, 14 read.
  • Reads private data · 0
  • Reads text others write · 15
  • Can send data out · 0
  • No findings

Tools listed without sign-in. Remote posture

With Anlyon

1 tool here changes things. Govern it.

  • Anlyon lists the tools and adopts none.
  • Each tool you adopt gets approvals and receipts.
  • Your agent never holds the key.
Govern this server →

A tool your agent calls directly is not routed through Anlyon and is not governed by it. anlyon.dev only lists and labels, and these labels are the same either way.

Compare with similar serversMarkdownJSONReport this listing

What the Syndicate MCP server can do

The Syndicate MCP server is published by syndicate.trade, a domain the MCP Registry verified. It has 15 tools. It can create or change data (1 tool: leaderboard), but cannot delete data. 14 tools only read.

15 tools bring in text other people can write (discover, discover_categories, get_perp_candles and 12 more).

None of the fixed checks matched anything in its tool definitions. That is not a safety guarantee.

Its remote endpoint lists its tools without sign-in.

Last scanned Nov 7, 2026, version 1.0.0.

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

15 tools

Changes things 1Claude Code: ask
  • leaderboardThe points leaderboard's top rows: rank, handle, score and referrals.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The points leaderboard's top rows: rank, handle, score and referrals. Points, not trading performance; use list_traders for PnL.

    Annotations the server declares

    • title: Points leaderboard
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 14Show 14 read-only tools
  • discoverBrowse or filter the Discover index across spot tokens, tokenised stocks, perps and prediction markets; each row carries its venues, chains, outcomes and 24h stats.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "browse": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse or filter the Discover index across spot tokens, tokenised stocks, perps and prediction markets; each row carries its venues, chains, outcomes and 24h stats. Filter by kind, venue, chain, class, tag or feed; sort by volume_24h, change_24h, market_cap, trending, ends_soon and more; page with cursor. For movers use kind=perp: spot change_24h is noise from illiquid pools unless filtered by liquidity. Prediction rows carry every outcome, so keep limit small (<=5).

    Annotations the server declares

    • title: Discover markets
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • discover_categoriesList the Discover categories (prediction-market tags and their slugs) usable as discover's `tag` filter.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List the Discover categories (prediction-market tags and their slugs) usable as discover's `tag` filter.

    Annotations the server declares

    • title: Discover categories
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_perp_candlesHyperliquid perp candles for one coin as parallel arrays t/o/h/l/c/v.Reads text others writeNo findings

    Why it is in this group

    • The name "get_perp_candles" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Hyperliquid perp candles for one coin as parallel arrays t/o/h/l/c/v. `coin` is the bare Hyperliquid coin (BTC, not BTC-PERP; HIP-3 coins are dex-prefixed, e.g. xyz:NVDA). `interval` sets the bar size (default 1h). `from`/`to` are unix MILLISECONDS (default the last 7 days); returned `t` is unix seconds.

    Annotations the server declares

    • title: Get perp candles
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_prediction_eventOne Polymarket event (all its outcomes) by event slug, event id, market slug or condition_id: each outcome's price, bid/ask and price history, plus live game state for sports.Reads text others writeNo findings

    Why it is in this group

    • The name "get_prediction_event" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One Polymarket event (all its outcomes) by event slug, event id, market slug or condition_id: each outcome's price, bid/ask and price history, plus live game state for sports. Prices are YES probabilities 0..1. `interval` is the history's lookback window (1h, 6h, 1d, 1w, 1m, max), not a bar size; keep it short (default 1d) on many-outcome events.

    Annotations the server declares

    • title: Get prediction event
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_syndicateOne syndicate by id: its public page (name, pitch, operators, terms, members) under `syndicate` and its book (holdings, closed positions, balance curve) under `book`.Reads text others writeNo findings

    Why it is in this group

    • The name "get_syndicate" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One syndicate by id: its public page (name, pitch, operators, terms, members) under `syndicate` and its book (holdings, closed positions, balance curve) under `book`.

    Annotations the server declares

    • title: Get syndicate
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_tokenOne token by chain and contract address: identity, mark price, liquidity and listings under `token`; per-window price change and 24h trading activity (volume, buys, sells, traders)…Reads text others writeNo findings

    Why it is in this group

    • The name "get_token" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One token by chain and contract address: identity, mark price, liquidity and listings under `token`; per-window price change and 24h trading activity (volume, buys, sells, traders) under `stats`.

    Annotations the server declares

    • title: Get token
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_token_candlesOHLCV candles for one token by chain slug and contract address.Reads text others writeNo findings

    Why it is in this group

    • The name "get_token_candles" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    OHLCV candles for one token by chain slug and contract address. `tf` sets the resolution; `from`/`to` are unix SECONDS. Always pass tf and from: with no window the answer runs to over a thousand bars. Use a coarse tf (60, 1D) for long windows.

    Annotations the server declares

    • title: Get token candles
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_traderA trader's public profile by handle: user id, bio, avatar, follower and following counts, join date.Reads text others writeNo findings

    Why it is in this group

    • The name "get_trader" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    A trader's public profile by handle: user id, bio, avatar, follower and following counts, join date. Private and followers-only profiles answer not found.

    Annotations the server declares

    • title: Get trader profile
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_trader_activityA public trader's ledger activity by handle, newest first: swaps, deposits, withdrawals, transfers and fees.Reads text others writeNo findings

    Why it is in this group

    • The name "get_trader_activity" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    A public trader's ledger activity by handle, newest first: swaps, deposits, withdrawals, transfers and fees. Narrow with `filter`, page with `cursor`.

    Annotations the server declares

    • title: Get trader activity
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_trader_portfolioA public trader's book by handle: open holdings and perps with value and PnL, closed positions, cash, realized PnL and the balance curve.Reads text others writeNo findings

    Why it is in this group

    • The name "get_trader_portfolio" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    A public trader's book by handle: open holdings and perps with value and PnL, closed positions, cash, realized PnL and the balance curve. Dust is hidden unless include_dust is true.

    Annotations the server declares

    • title: Get trader portfolio
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_perp_marketsRaw Hyperliquid metaAndAssetCtxs (large): a universe array and a per-asset context array, parallel and joined by index, delisted coins included.Reads text others writeNo findings

    Why it is in this group

    • The name "list_perp_markets" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Raw Hyperliquid metaAndAssetCtxs (large): a universe array and a per-asset context array, parallel and joined by index, delisted coins included. Funding is the hourly rate as a fraction; open interest is in coin units. Use only for raw funding; screen perps with discover kind=perp.

    Annotations the server declares

    • title: List perp markets
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_syndicatesBrowse public syndicates (shared trading books run by operators), newest first: id, name, pitch, emblem, status, operators and member count.Reads text others writeNo findings

    Why it is in this group

    • The name "list_syndicates" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse public syndicates (shared trading books run by operators), newest first: id, name, pitch, emblem, status, operators and member count. Page with `cursor`.

    Annotations the server declares

    • title: List syndicates
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_tradersThe trading ranking: public traders by realized PnL, return or hit rate over a rolling window, with open value and balance per row.Reads text others writeNo findings

    Why it is in this group

    • The name "list_traders" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The trading ranking: public traders by realized PnL, return or hit rate over a rolling window, with open value and balance per row. Few traders qualify; raise min_sales (default 5) to drop lucky one-sale records, and always show each row's `sales` beside its rank.

    Annotations the server declares

    • title: List top traders
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_assetsSearch everything by text: tokens, perps, prediction markets and traders matching a ticker, name, address or handle.Reads text others writeNo findings

    Why it is in this group

    • The name "search_assets" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search everything by text: tokens, perps, prediction markets and traders matching a ticker, name, address or handle. Start here to turn a name into the chain+address, coin or condition_id the other tools take. `limit` caps token hits only. Names are often ambiguous (many TRUMPs): pick by kind and liquidity.

    Annotations the server declares

    • title: Search assets and traders
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write15
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Nov 8, 2026, 06:19 UTC, unchanged since Nov 8, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
1
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
https://gateway.syndicate.trade/.well-known/oauth-protected-resource/mcp
Authorization servers
https://gateway.syndicate.trade
Legacy HTTP+SSE transport
no
Dynamic client registration
yes
Client ID metadata documents
no
  • WarnThe whole server

    The endpoint served tools/list without credentials, and the list has 1 tool that changes things (1 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://gateway.syndicate.trade/mcp: tools/list returned 15 tools to an anonymous client, including leaderboard (write)

    What this check looks for

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http markets https://gateway.syndicate.trade/mcp
claude mcp add --transport http markets https://gateway.syndicate.trade/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__markets__discover",
      "mcp__markets__discover_categories",
      "mcp__markets__get_perp_candles",
      "mcp__markets__get_prediction_event",
      "mcp__markets__get_syndicate",
      "mcp__markets__get_token",
      "mcp__markets__get_token_candles",
      "mcp__markets__get_trader",
      "mcp__markets__get_trader_activity",
      "mcp__markets__get_trader_portfolio",
      "mcp__markets__list_perp_markets",
      "mcp__markets__list_syndicates",
      "mcp__markets__list_traders",
      "mcp__markets__search_assets"
    ],
    "ask": [
      "mcp__markets__leaderboard"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as markets. Review it before you use it.

Capability tags behind 15 rules
  • mcp__markets__discover untrusted-input
  • mcp__markets__discover_categories untrusted-input
  • mcp__markets__get_perp_candles untrusted-input
  • mcp__markets__get_prediction_event untrusted-input
  • mcp__markets__get_syndicate untrusted-input
  • mcp__markets__get_token untrusted-input
  • mcp__markets__get_token_candles untrusted-input
  • mcp__markets__get_trader untrusted-input
  • mcp__markets__get_trader_activity untrusted-input
  • mcp__markets__get_trader_portfolio untrusted-input
  • mcp__markets__leaderboard untrusted-input
  • mcp__markets__list_perp_markets untrusted-input
  • mcp__markets__list_syndicates untrusted-input
  • mcp__markets__list_traders untrusted-input
  • mcp__markets__search_assets untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/trade.syndicate/markets/verify?hash=a625bef969044d0ca7705f21b1d50deab7d9073851366b40828265128ca6b5ec" | jq -e '.changed == false'

Pinned hash a625bef96904, from Nov 7, 2026, 23:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/trade.syndicate/markets/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for trade.syndicate/markets
[![anlyon.dev](https://anlyon.dev/badge/trade.syndicate/markets.svg)](https://anlyon.dev/servers/trade.syndicate/markets)

Source: MCP Registry. Synced Nov 7, 2026, 23:18 UTC.

Syndicate MCP server: questions and answers

Answered from the scan above, not from the publisher's description.

Is the Syndicate MCP server safe?

No scan can promise that. What its definitions show: 15 tools, 1 of which can change, send or delete something, and 0 findings from fixed checks. Allow the reads, ask before each change, and deny the deletes; the permissions block on this page does that.

Can the Syndicate MCP server delete data?

No tool is classed as destructive: going by their definitions, none of them deletes, cancels or revokes anything.

Can the Syndicate MCP server do things that cannot be undone?

No tool is classed as irreversible: none of them sends, pays, publishes or merges, going by their definitions.

What tools does the Syndicate MCP server have?

15 tools: 1 write, 14 read. leaderboard, discover, discover_categories, get_perp_candles, get_prediction_event, get_syndicate, get_token, get_token_candles and 7 more.

Does the Syndicate MCP server need sign-in or OAuth?

Its remote endpoint listed its tools to an anonymous client, without sign-in.

Does the Syndicate MCP server send data to outside services?

None of its tools sends, posts or publishes, or takes a recipient, channel or URL.

Has the Syndicate MCP server changed its tools?

Not since anlyon.dev started tracking it. Last scanned Nov 7, 2026.