Back to Browse

Hyperliquid MCP Server

Developer ToolsModerate5.3MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Read-only Hyperliquid data for AI agents: fills, candles, funding, liquidations, wallet analytics.

About

Read-only Hyperliquid data for AI agents: fills, candles, funding, liquidations, wallet analytics.

Remote endpoints: streamable-http: https://mcp.ironflow.sh/mcp

Security Report

5.3
Moderate5.3Moderate Risk

The Ironflow MCP server is a read-only Hyperliquid market data and wallet analytics tool whose code and README are consistent with its stated purpose, with network access and an optional API key as the main permissions. The main concerns are minor: the API key can be passed in a URL query string, which may be recorded by proxies or access logs, and the hosted server logs tool arguments and client metadata, which the README discloses. The provided source is truncated, so the SQL read-only enforcement and the API client were not reviewed directly. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Optional Ironflow API key. Keyless calls get 30 requests per minute and 2,000 per day; a free key from https://ironflow.sh/key gives 60.Required

Environment variable: IRONFLOW_API_KEY

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

@ironflowsh/mcp

MCP server for Ironflow: read-only Hyperliquid market data and wallet analytics for Claude, Cursor and any MCP client. It covers native perps, HIP-3 builder markets, HIP-4 outcome markets and spot. 36 tools, all read-only, including run_query for read-only SQL over every Hyperliquid fill, wallet, funding and liquidation table.

No API key needed to start: keyless calls get 30 requests per minute, 2,000 per day and 24 hours of history. A free key from ironflow.sh/key raises that to 60 requests per minute and 30 days.

Install

The hosted server needs no install and no key: https://mcp.ironflow.sh/mcp (Streamable HTTP).

Add to Cursor Install in VS Code

Claude Code

claude mcp add --transport http ironflow https://mcp.ironflow.sh/mcp

Claude (claude.ai and Claude Desktop): open Customize → Connectors, click Add custom connector, enter the name Ironflow and the URL https://mcp.ironflow.sh/mcp, then click Add. On Team and Enterprise plans an Owner adds it under Organization settings → Connectors → Add → Custom, and members then click Connect.

Cursor: the button above, or add this to ~/.cursor/mcp.json (or a project's .cursor/mcp.json):

{
  "mcpServers": {
    "ironflow": { "url": "https://mcp.ironflow.sh/mcp" }
  }
}

VS Code: the button above, or

code --add-mcp '{"name":"ironflow","type":"http","url":"https://mcp.ironflow.sh/mcp"}'

Local server (stdio): npx -y @ironflowsh/mcp, see Local server.

With a free key

Send it as Authorization: Bearer if_your_api_key, or as ?key=if_your_api_key on the URL for clients that cannot set headers.

claude mcp add --transport http ironflow https://mcp.ironflow.sh/mcp \
  --header "Authorization: Bearer if_your_api_key"

In Cursor, add "headers": { "Authorization": "Bearer if_your_api_key" } next to url.

Local server

npx -y @ironflowsh/mcp

Requires Node.js 18+. Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%/Claude/claude_desktop_config.json on Windows):

{
  "mcpServers": {
    "ironflow": {
      "command": "npx",
      "args": ["-y", "@ironflowsh/mcp"],
      "env": { "IRONFLOW_API_KEY": "if_your_api_key" }
    }
  }
}

The env block is optional. Claude Code: claude mcp add ironflow -- npx -y @ironflowsh/mcp.

To host the HTTP server yourself: npx -y -p @ironflowsh/mcp ironflow-mcp-http (listens on PORT, default 8080, path /mcp).

Tools

Ask anything (SQL): describe_data lists the queryable tables, columns and example queries; run_query runs one read-only ClickHouse SELECT over them (every fill, per-wallet daily totals, behaviour labels, funding, mark and oracle prices, open interest, liquidations, builder-code fills, transfers, vault flows); get_wallet_behavior returns 30-day trading-style labels per wallet. Keyless queries see the last 24 hours; a free key sees 30 days.

Market data: get_price, get_recent_trades, get_candles, get_funding_rates, get_open_interest, get_liquidations, get_liquidation_summary, get_fills, get_mark_prices, get_vault_operations, list_markets, get_markets_snapshot

Market analytics: get_funding_stats, get_pnl_leaderboard, get_market_top_wallets, get_wallet_labels, get_vault_leaderboard and get_liquidation_levels (needs a Builder or Enterprise key)

Signals: get_top_traders, get_market_leaders, get_early_movers, get_trader_profile

Wallet analytics: get_user_state, get_user_summary, get_user_pnl_series, get_user_funding, get_user_maker_taker, get_user_ledger

Cohorts: list_cohorts, get_cohort_addresses

Status: get_status, get_status_metrics, get_status_history

Markets can be given as display symbols (BTC-PERP, xyz:NVDA-PERP, HYPE/USDC) or Hyperliquid names (BTC, @107, xyz:NVDA), and times as Unix ms, Unix seconds or ISO 8601. When the API reads a name, or serves a window that starts later than asked because of the key's history limit, the result starts with a notice saying so. Fill history covers a rolling 12 months. There is no order book, order status or streaming tool.

Configuration

Env varDefault
IRONFLOW_API_KEYoptional; free key at ironflow.sh/key
IRONFLOW_API_URLhttps://api.ironflow.sh
PORT (HTTP server)8080
MCP_LOG_SALT (HTTP server)random per process; keys the caller hash in the access log

Usage data

Each API call carries two headers so we can see which apps and tools people use: X-Ironflow-Client (the MCP client's name and version, e.g. claude-code/2.1.0) and X-Ironflow-Tool (the tool name). The hosted server logs each request's method, tool arguments, client name, status, whether the tool returned an error, the API status and error code behind it, and a salted hash of the caller's IP. It never logs IPs or API keys.

Links

License

MIT

Reviews

No reviews yet

Be the first to review this server!