Oracle MCP server

Read from the package source without running it. The installed server may list more.

• anvil_marketplace_opensea_arb

  Scan every live Anvil market and full inventory by default where exact OpenSea slug mappings exist. ARB requires validated complete discovery plus fresh authenticated exact-leg gas and successful simulation evidence; incomplete scans return WATCH with deterministic continuation. Read-only.

• anvil_marketplace_scan

  Scan every live Anvil market and its full inventory by default with collection-specific metadata traits and exact quote checks. Explicit bounds return complete=false plus continuation evidence. Read-only.

• anvil_nft_scan

  Scan exact Anvil inventory IDs on Robinhood Chain for current NFT traits and fee-inclusive buy quotes. Read-only.

• anvil_opensea_arb

  Compare exact Anvil inventory and fee quotes against exact OpenSea listings and offers. ARB requires validated complete inventory plus fresh authenticated exact-leg gas and successful simulation evidence for every executable leg. Read-only.

• anvil_prepare_buywrite action

  Build one exact-token Anvil buy action for Oracle's armed owner-local signer. The caller cap may reject but never widen the exact fresh quote encoded and confirmed. Requires sufficient allowance, exact human confirmation, simulation, and arm.

• anvil_prepare_sell

  Build one exact-token Anvil sale action for Oracle's armed owner-local signer. The caller floor may reject but never widen the exact fresh net payout encoded and confirmed. Requires pre-existing ERC721 approval, exact human confirmation, simulation, and arm.

• best_bridge_route

  Compare cross-chain bridge routes and rank by NET output. Also reports each route's expected duration, which is NOT folded into the score -- a route that saves $2 but takes 30 minutes is a trade-off for the caller to make.

• best_swap_route

  Compare swap routes across every available aggregator and rank by NET output (after gas and fees), not headline quote. Returns the winner plus all runners-up so the ranking can be checked rather than trusted.

• bridge_aggregator_scan

  Scan ALL cross-chain bridge routes: deBridge DLN + LI.FI/Relay + ChangeNOW. Ranks every route by net output, checks for existing token approvals that should be revoked before bridging, and returns the winner + runners-up. Read-only. Never signs or broadcasts. ChangeNOW requires ticker symbols.

• btc_balance

  Bitcoin address balance in sats via Esplora. Read-only.

• btc_fees

  Recommended Bitcoin fee rates (sats/vB). Read-only.

• btc_health

  Bitcoin L1 Esplora health + tip height (mempool.space by default). No Core RPC, no keys. Read-only.

• btc_inscription_children

  Child inscriptions of a parent (collections). KEYLESS via ordinals.com recursive. Read-only.

• btc_inscription_info

  Inscription metadata by inscription id (content type/length, height, sat, fee). KEYLESS via ordinals.com recursive. Read-only.

• btc_inscriptions

  Inscriptions controlled by an address. REQUIRES a keyed indexer (ordinals.com has no address index). Returns unknownNotEmpty:true when unconfigured \u2014 that means UNKNOWN, never 'wallet holds none'. Protect these UTXOs from fee spends.

• btc_meta_health

  Ordinals/runes indexer health. Reports whether BTC_META_API_URL / vendor API keys are configured. Read-only.

• btc_ord_block_info

  Ord node block info / indexer tip. KEYLESS. Use to confirm the ordinals indexer is at the same tip as Esplora before trusting metaprotocol reads.

• btc_rune_balance

  Rune balances for a Bitcoin address (requires configured indexer + optional API key). Read-only.

• btc_tx

  Lookup a Bitcoin transaction by txid via Esplora. Read-only.

• btc_utxos

  UTXOs for a Bitcoin address via Esplora. Read-only.

• chain_list

  List Oracle's EVM chain registry (chainId, name, rpc env names). Read-only.

• contract_risk_scan

  Check what powers a contract's deployer still holds before you interact with it: mint, blacklist, pause, fee changes, and upgradeability (EIP-1967, legacy zeppelinos, EIP-1822 proxies). Complements a sell simulation \u2014 that proves a token is sellable NOW, this asks whether someone can change that afterwards. Read-only eth_getCode/eth_getStorageAt; never returns 'safe', only 'unknown-risk', 'el

• data_catalog

  List every read-plane provider the desk exposes (id, venue, chainIds, ops). Discovery only; generic provider dispatch is not exposed by this public MCP.

• data_health

  Health of every read-plane provider (which public APIs are up / configured). Read-only.

• dex_quote

  Quote a swap across PancakeSwap (BSC+), SushiSwap (30+ chains), or Raydium (Solana via Jupiter). Specify the DEX and chain. Read-only.

• dex_search

  DexScreener search across all chains by symbol/name/address. Returns matching pairs with price, liquidity, volume, chain. Read-only.

• dex_token

  DexScreener pairs for a specific token address (any chain). Price, liquidity, volume, pair addresses. Read-only.

• equity_prepare

  Prepare an UNSIGNED Robinhood-chain Uniswap artifact for a tokenized equity. Only the prepare-tier venue (rh_uniswap / chain 4663). Requires the real wallet as recipient. requiresWalletSignature=true, backendSigner=false. Never signs or broadcasts.

• equity_quote

  Cross-chain best-execution comparison for a tokenized equity ticker (NVDA, SPY, TSLA, ...). Ranks HIP-3, Arcus, RH Uniswap, Solana xStocks, and TON. Returns winner + runners-up + bestPreparable (only rh_uniswap is preparable in v1). rankedOn is usually gross because fees/gas are unmeasured - say so. Never signs.

• equity_venues

  Inventory of on-chain equities venues (HIP-3 builder DEXes, Arcus perps/spot on Robinhood 4663, RH Uniswap prepare tier, Solana xStocks, TON ston.fi) with tiers and a liveness snapshot. Offline fixtures by default. Read-only / prepare-only.

• evm_simulate_transaction

  Simulate an EVM transaction BEFORE signing: catches reverts via eth_call at pending state, decodes the reason (Error(string), Panic codes, or the raw selector for custom errors), and returns a buffered gas estimate usable as gasLimit. Also flags calls that return boolean false without reverting (some ERC-20s signal failure that way). An unreachable node returns 'unavailable', never 'would fail'. A

• evm_token_sniper_scan

  Scan and optionally prepare a guarded token buy through the same armed local-signer path on every supported EVM chain. Robinhood Chain 4663 is the default. Resolves identity and pools, checks structural risk, proves the sell route, quotes, then hands execution to the loopback signer under owner policy.

• hl_delta_neutral

  Hyperliquid delta-neutral funding carry. Scan, quote, or run one loop tick. Owner-operated. Not automated.

• hl_precompile_read

  Read HyperCore through HyperEVM L1Read precompiles (0x800-0x809). Positions, oracle/mark, spot, HLP vault equity, withdrawable. eth_call only. Never writes, never CoreWriter.

• hlp_vault_tracker

  Read-only Hyperliquid vault tracker, including HLP. List summaries, inspect one vault, or read a user's vault equities. Never deposits, withdraws, signs, or submits.

• jupiter_prepare

  Prepare an unsigned Jupiter swap transaction for the user's Solana wallet to sign. No local signer, no broadcast.

• jupiter_quote

  Jupiter Solana Swap API quote with a hard <=100 bps slippage cap. Read-only.

• jupiter_venues

  Jupiter Solana venue map, optionally verified on-chain against executable BPF loader ownership. Read-only.

• lending_markets

  Scan lending protocol markets across Compound ($2B+ TVL). Returns supply/borrow APYs, total supply, collateral factors. Read-only.

• lifi_quote

  LI.FI cross-chain / DEX aggregator quote (no key). Best route + expected out for a swap or bridge. Read-only.

• lighter_delta_neutral

  Lighter.xyz delta-neutral funding carry. Scan, quote, or run one loop tick. Owner-operated official sendTx signer. Not automated.

• llama_prices

  DeFiLlama current prices for coins keyed 'chain:address' or 'coingecko:id' (comma-joined or array). Read-only.

• llama_protocols

  DeFiLlama: full protocol list with TVL, chain(s), category, 1d/7d change. The primary cross-chain protocol scanner. Read-only. Large payload \u2014 filter client-side.

• mev_status

  MEV observer/operator flag posture. Read-only. Never implies a live trade. Flash-loan execute still needs ORACLE_MEV_EXECUTE_ENABLED=1 and literal --execute on oracle mev.

• nft_gallery

  Generate one static NFT contact-sheet image page from wallet inventory or supplied normalized items. External metadata is never rendered as HTML; only allowlisted JPEG/PNG/WebP bytes are embedded and unsafe or missing media becomes a placeholder.

• nft_inventory

  Read all discoverable NFTs for configured EVM, Solana, and Bitcoin addresses. Returns normalized assets, image URLs, estimated values, per-chain partial failures, flagged/NSFW items separated from visible items, listing coverage, and explicit unsupported chains. Read-only.

• nft_mancer_os_scan

  Fail-closed scan for a Mancers-gated Robinhood (4663) NFT mint. Requires bytecode that references Mancers 0x797a\u2026, value=0, a sim with Transfer to the minter and no setApprovalForAll. Never returns safe. executeFire needs actionMode=execute, ORACLE_AUTONOMOUS_MINT=1, and a grant naming this exact contract with maxValueWei=0. Trading flag does not unlock mint. Returns unsigned mint + revoke ca

• nft_mint_gas_price

  Price a competitive EIP-1559 bid for a contested transaction using eth_feeHistory reward percentiles (p50 normal / p75 fast / p90 war). maxFeePerGas is a refundable ceiling; the tip is the real spend. Reports viable:false when a cap would put the bid below the observed market rather than silently clamping to a losing number.

• nft_mint_prepare

  Prepare an UNSIGNED EVM NFT mint. Discovers the collection's mint entrypoint from deployed bytecode (ERC-721 does not standardize minting), encodes calldata, prices a competitive EIP-1559 bid from fee-history percentiles, enforces gas-war caps, and reports contract risk. Returns wallet-signable calldata \u2014 never signs or broadcasts. Supply gasLimit plus maxTotalGasWei to enforce the caps; with

• nft_mint_triggerwrite action

  Create a mint-open trigger. DEFAULTS TO alert_only: Oracle watches, notifies, and prepares a signable artifact. Firing unattended requires ALL of: actionMode set to the exact string 'execute', ORACLE_AUTONOMOUS_TRADING=1, and a bounded grant naming this exact contract/chain with maxTotalGasWei, maxValueWei, and an expiry under 24h. Any missing or mismatched bound silently downgrades to alert_only

• nft_pnl

  NFT PnL with explicit methodology. Returns OpenSea-indexed account-level PnL where available plus per-item unrealized estimates only when both user-supplied acquisition cost and provider estimated current value exist. Missing history is unavailable, never zero.

• nft_prepare_list

  Prepare an NFT listing for OpenSea EVM, Magic Eden Solana, or Satflow Bitcoin after explicit user review. Requires userConfirmed=true plus asset, marketplace, price, currency where applicable, and future expiry. Magic Eden Solana also requires confirmation exactly: list <tokenMint> on magiceden-sol for <priceSol> SOL until <expiry>. Returns approval/signing actions, an unsigned Solana transaction,

• nft_trait_snipe

  Evaluate an OpenSea EVM NFT trait-snipe candidate using caller-supplied fresh listings, trait floor, max price, minimum discount, recent real trait sales, and trait volume gates. Returns BUY/PASS plus an unsigned local-only buy intent. Never signs, submits, broadcasts, or treats rarity metadata alone as evidence.

• options_markets

  Scan on-chain options markets (calls/puts). Currently Aevo. Returns instruments, mark prices, funding, open interest. Read-only.

• perps_markets

  Scan perps markets across dYdX (standalone chain), Drift (Solana), and Vertex (Arbitrum). Returns ticker, oracle price, funding rate, open interest, and 24h volume. Read-only. Never signs.

• portfolio_analyze

  Summarize a caller-supplied portfolio ledger. Read-only.

• portfolio_balance

  Read-only balance aggregation across every configured EVM chain plus Solana, Bitcoin, and Hyperliquid. Reports native assets, supported token/collectible reads, failed or missing providers, unverified assets, timestamps, and known priced value without pretending it is a complete total. Public addresses only; never signs or broadcasts.

• portfolio_history

  Read profile-local portfolio observations in a time range. Unknown or unavailable values remain null and are never converted to zero. Defaults to the configured public-address portfolio fingerprint.

• portfolio_snapshot

  Query the current multichain balance and NFT inventory, then append one compact profile-local observation for historical tracking. Stores public-address fingerprint, coverage, breakdown, and known priced value only; no keys, signatures, executable payloads, or raw NFT metadata. Returns the live balance, NFT result, and recorded snapshot.

• portfolio_value_graph

  Render a static SVG line graph from profile-local portfolio snapshots. Plots known priced value only, labels incomplete coverage, includes provider-estimated NFT values when recorded, and omits unavailable observations instead of plotting fake zeroes.

• prepare_best_bridge_route

  Compare cross-chain bridge routes, then build the signable transaction sequence for the winner. Returns a LIST of unsigned transactions -- some routes need an approval and a deposit signed in order, and signing only the first leaves funds approved but not bridged. Reports the destination chain and expected credit time. Bridging is not atomic. Never signs or broadcasts.

• prepare_best_route

  Compare routes, then build the SIGNABLE artifact for the winner. Returns an unsigned transaction (LI.FI/ParaSwap/0x) or EIP-712 typed data for an off-chain order (CoW) -- the artifactKind field says which, and they require different wallet actions. Re-quotes before preparing and reports drift against the comparison. Never signs or broadcasts.

• protocol_evalwrite action

  Run protocol-builder language evals: Solidity templates, Rust/Anchor vault, Bitcoin Miniscript. Read-only. Not a firm audit. Never deploys or signs.

• receipt_report

  Classify a caller-supplied receipt. Reports whether a tx hash exists. Does not verify chain success.

• research_artifactwrite action

  Create a citation-bearing research artifact. fetchedAt must be supplied by the caller.

• rfq_quotewrite action

  Create a cross-chain RFQ intent and fan it out to reviewed solver or venue sources. Returns firm quote objects with intentHash, firmQuoteHash, expiry, min receive, and unsigned executable artifacts. Never signs or broadcasts.

• rpc_balance

  Native token balance of an address on a chain via public RPC. Read-only. Omit address to read the operator wallet.

• rpc_block

  Latest block number on a chain via public RPC. Read-only.

• satflow_floor_listings

  Satflow floor listings for collection id(s). Read-only.

• satflow_floors

  Satflow collection floor prices. type=ordinals|runes. Read-only.

• satflow_health

  Satflow marketplace health (primary BTC ordinals/runes market after Magic Eden BTC sunset). Needs SATFLOW_API_KEY. Read-only.

• satflow_item

  Satflow item detail for an inscription id (listing + bids + meta). Read-only.

• satflow_wallet

  Satflow wallet contents (ordinals/runes) for an address. Read-only.

• scan_token

  Resolve a token on an EVM chain: metadata, its pools, and a risk score. Works on chains no indexer covers because it reads the chain directly. Read-only.

• scanner_coverage

  Which chains the on-chain scanner supports and which capabilities each one has (blockNumber, nativeBalance, tokenBalance, resolveToken, resolvePools, scanBlocks, scoreRisk, quote, sellSimulation, prepareUnsignedTx). Read-only.

• signal_score

  Cold-score onchain signal events. Never fetches or executes.

• solana_balance

  Solana mainnet SOL balance for a base58 public key. Read-only; no signing or broadcast.

• solana_simulate

  Simulate a base64 Solana transaction through RPC. Read-only; never signs or broadcasts.

• solana_token_accounts

  Solana SPL token accounts for an owner, optionally filtered by mint. Read-only.

• stonkbrokers_broker_desk

  Read StonkBroker owner/TBA identities and Clock In state, or prepare an unsigned permissionless Clock In call. No signing or broadcast.

• stonkbrokers_scan_loot

  Verify StonkBroker parent availability and nested ERC-6551 loot custody, then rank matching traits without treating rarity as buy evidence. Read-only.

• strategy_backtest

  Backtest a deterministic strategy with fees, builder fees, slippage, funding, latency, stops, take profit, and liquidation. Uses supplied bars or keyless Hyperliquid history.

• strategy_draft

  Draft a deterministic Hyperliquid strategy DSL from supported plain-English EMA, RSI, or funding rules. Fails closed on unsupported ambiguity. Never signs or broadcasts.

• strategy_evidence

  Produce separate train, holdout, and walk-forward evidence with overfitting flags and a fail, paper-only, or live-eligible status. Live eligibility never arms execution.

• strategy_optimizewrite action

  Run bounded deterministic parameter search on training bars, then separately evaluate out-of-sample evidence. Never uses holdout data during optimization.

• strategy_prepare_livewrite action

  Create an integrity-bound prepare-only handoff after live-eligible evidence, HMAC-authenticated when local attestation is configured. All execution flags stay false. A separate local operator must revalidate, arm, sign, and broadcast.

• strategy_shadow_list

  List durable local shadow runners. Read-only and secret-free.

• strategy_shadow_start

  Start a durable local shadow runner that records intended orders and theoretical fills only. Never signs or broadcasts.

• strategy_shadow_status

  Inspect one durable local shadow runner. Read-only and secret-free.

• strategy_shadow_step

  Advance one durable shadow runner over supplied or keyless historical bars. Never signs or broadcasts.

• strategy_shadow_stop

  Stop one durable local shadow runner. Does not submit or cancel exchange orders.

• strategy_validate

  Strictly compile and hash a Hyperliquid strategy DSL. No network or execution.

• trade_lifecyclewrite action

  Create, verify, or advance a prepare-only trade fact chain. Signing and broadcasting are never performed here.

• twap_simulate

  Simulate a TWAP (time-weighted average price) DCA order. Splits a large order into equal-sized chunks over a configurable window, quotes every chunk at current prices, and returns the schedule + estimated average price. Read-only. Never signs or broadcasts. Use before committing to a TWAP.

• twitter_ca_watch

  One Twitter CA watch tick: read an account, extract EVM/Solana CAs, rank the USD book, PREPARE only. Automated ticks never emit a card and never broadcast. Needs ORACLE_XURL_ENABLED=true.

• wallet_balances

  Native balance for an address on an EVM chain, plus one token balance when a token address is supplied. Read-only; never signs.

• watch_createwrite action

  Create an alert-only watch. actionMode is always alert_only. Never execute.

• watch_list

  List alert-only price/token watches. Never execute.

• workspace_artifact

  Get, list, put, or link deterministic workspace artifacts. No arbitrary paths.

• yield_vaults

  Scan yield aggregator vaults across Yearn + Convex. Returns vault APYs, TVLs, boosted status. Read-only.

• Code scan146 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityno repository or website to verify2/10

Safety score

65/100

higher than 25% of 1,761 Finance servers

Tools

100

the typical Finance server has 8

Tools that change things

9%

typical: 0%. Fewer write tools means less an agent can break

Downloads a week

2,225

more than 100% of 421 Finance servers with a package

Oracle: common questions

Is Oracle MCP server safe?

With care: it is graded C, so read the findings first (65/100). Read the Oracle safety report

How do I install Oracle?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Oracle need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Oracle maintained?

The latest release is v0.35.15.

What can I use instead of Oracle?

Servers from other publishers that do the same job: Sato Hub: Build Onchain & Crypto Agents MCP server, Trading Signals MCP server and CoinRithm Agent Trading MCP server.

How does Oracle compare with other Finance MCP servers?

safety score 65/100 (higher than 25% of 1,761 Finance servers); tools 100 (the typical Finance server has 8); tools that change things 9% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.