Skip to content

Hive Intelligence MCP

by hiveintelligence.xyz · remote · local (npm) · no sign-in to list tools · v1.11.2 · published by xyz.hiveintelligence

Evidence-backed crypto due diligence with sources, freshness, and a runtime receipt on every call.

Deletes · 1Changes · 2

8 tools: 1 can delete or cancel things, 2 change things and 5 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hiveintelligence https://mcp.hiveintelligence.xyz/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The input schema at properties.response_format.description contains "every other tool", wording about other tools or servers.

    Matched text

    inputSchema.properties.response_format.description: "...and markdown, the platform-wide values every other tool advertises, are accepted and treated as..."

    What this check looks for
  • The input schema at properties.response_format.description contains "every other tool", wording about other tools or servers.

    Matched text

    inputSchema.properties.response_format.description: "...and markdown, the platform-wide values every other tool advertises, are accepted and treated as..."

    What this check looks for
  • The input schema at properties.response_format.description contains "every other tool", wording about other tools or servers.

    Matched text

    inputSchema.properties.response_format.description: "...and markdown, the platform-wide values every other tool advertises, are accepted and treated as..."

    What this check looks for
  • The server marks "invoke_api_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "invoke_api_endpoint" says "invoke": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Deletes or cancels 1Claude Code: deny
  • invoke_stateful_endpointInvokes a Hive-native state-changing endpoint after explicit user approval.No findings

    Why it is in this group

    • The name "invoke_stateful_endpoint" says "invoke": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Invokes a Hive-native state-changing endpoint after explicit user approval. This router can create, update, archive, remember, forget, acknowledge, or resolve durable Hive state, so clients must not auto-approve it. Inspect get_api_endpoint_schema first and verify the saved result after execution.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Changes things 2Claude Code: ask
  • check_token_safetyToken security screen for a contract address: honeypot, taxes, ownership, and related GoPlus risk datapoints, plus a summary of LP lock status, top-holder concentration, and creato…1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The input schema at properties.response_format.description contains "every other tool", wording about other tools or servers.

      Matched text

      inputSchema.properties.response_format.description: "...and markdown, the platform-wide values every other tool advertises, are accepted and treated as..."

      What this check looks for
    Description, as the server wrote it
    Token security screen for a contract address: honeypot, taxes, ownership, and related GoPlus risk datapoints, plus a summary of LP lock status, top-holder concentration, and creator/owner balances with plain-language verdicts. EVM chains use chain + address; Solana addresses are detected automatically.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • invoke_api_endpointInvokes only read-only Hive endpoints by name.1 finding

    Why it is in this group

    • The name "invoke_api_endpoint" says "invoke": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "invoke_api_endpoint" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "invoke_api_endpoint" says "invoke": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Invokes only read-only Hive endpoints by name. First discover the tool, inspect get_api_endpoint_schema, and pass bounded schema-valid arguments. State-changing endpoints are rejected and must use invoke_stateful_endpoint after explicit user approval.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 5Claude Code: allow
  • get_api_endpoint_schemaReturns the full input schema, operation type, and correct root invoker for any Hive tool by name.No findings

    Why it is in this group

    • The name "get_api_endpoint_schema" says "get": a word for reading.
    Description, as the server wrote it
    Returns the full input schema, operation type, and correct root invoker for any Hive tool by name. Tool names come from search_tools; inspect this contract before execution.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_token_priceCurrent price for one token.1 finding

    Why it is in this group

    • The name "get_token_price" says "get": a word for reading.

    Findings

    • Warn

      The input schema at properties.response_format.description contains "every other tool", wording about other tools or servers.

      Matched text

      inputSchema.properties.response_format.description: "...and markdown, the platform-wide values every other tool advertises, are accepted and treated as..."

      What this check looks for
    Description, as the server wrote it
    Current price for one token. Pass token as a CoinGecko id or symbol ("bitcoin", "BTC"), or pass chain + address for a specific contract. Returns price, market cap, and 24h change with provider provenance.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • get_wallet_portfolioToken holdings for a wallet with balances, USD values, and 24h price change where available.1 finding

    Why it is in this group

    • The name "get_wallet_portfolio" says "get": a word for reading.

    Findings

    • Warn

      The input schema at properties.response_format.description contains "every other tool", wording about other tools or servers.

      Matched text

      inputSchema.properties.response_format.description: "...and markdown, the platform-wide values every other tool advertises, are accepted and treated as..."

      What this check looks for
    Description, as the server wrote it
    Token holdings for a wallet with balances, USD values, and 24h price change where available. Likely spam airdrops are hidden and counted (include_spam=true shows them). EVM chains route through CoinGecko (eth, base, bsc, polygon_pos, arbitrum, optimism, avax, linea, stable, robinhood, arc) with Alchemy as the fallback; Solana wallets are detected automatically and route through Helius.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • search_toolsSearch canonical task toolsets, compact user-intent routes, and the full Hive coverage catalog.No findings

    Why it is in this group

    • The name "search_tools" says "search": a word for reading.
    Description, as the server wrote it
    Search canonical task toolsets, compact user-intent routes, and the full Hive coverage catalog. Select a matching route first, follow its ordered primary calls and conditional fallbacks, then inspect each exact schema. Execute reads with invoke_api_endpoint and explicitly approved Hive state changes with invoke_stateful_endpoint.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_task_resultValidates a proposed workflow answer against Hive's typed task-output and evidence-receipt contract before it is shown to the user.No findings

    Why it is in this group

    • The name "validate_task_result" says "validate": a word for reading.
    Description, as the server wrote it
    Validates a proposed workflow answer against Hive's typed task-output and evidence-receipt contract before it is shown to the user. It checks the selected route id, ordered route-only calls, conditional fallback use, the four-call route budget, claim-to-receipt citations, canonical phase coverage, and internal receipt consistency. It cannot authenticate invented receipts or turn SHA-256 self-checks into signatures, so every call entry must be copied exactly from the server-minted _hive block returned by that execution.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.11.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http hiveintelligence https://mcp.hiveintelligence.xyz/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__hiveintelligence__get_token_price",
      "mcp__hiveintelligence__get_wallet_portfolio",
      "mcp__hiveintelligence__search_tools",
      "mcp__hiveintelligence__get_api_endpoint_schema",
      "mcp__hiveintelligence__validate_task_result"
    ],
    "ask": [
      "mcp__hiveintelligence__check_token_safety",
      "mcp__hiveintelligence__invoke_api_endpoint"
    ],
    "deny": [
      "mcp__hiveintelligence__invoke_stateful_endpoint"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hiveintelligence. Review it before you use it.