@aave/mcp

MCPcommunitylive
v1.0.0UnknownLicenseRef-BUSLUpdated 6d agonpmGitHub

Official Aave MCP server for Aave V3, Aave V4, and DAO governance.

Endpoint healthlive
checked 4 days ago · 349ms
100% of the last 1 check reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
294Downloads/wk
6d agoLast update
Package
AuthorUnknown
LicenseLicenseRef-BUSL
Version1.0.0
Sourcenpm+mcp-registry
GitHubaave/mcp
Trust Status
C
40/100Caution
Listed in Forge index+10/10
Publisher identity verified+0/20
Publisher: run `forge publish` from the package repo to claim ownership
Ed25519 publish signature+0/5
Included automatically when the publisher runs `forge publish`
Domain verification+0/5
Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
npm Trusted Publishing (Sigstore)+0/5
Publish from GitHub Actions with --provenance so the attestation binds this package to this repo
npm maintainer match+0/5
Earned once your identity is verified above and that login is an npm maintainer of this package
CVE scan · clean+30/30
Static analysis · clean+0/20
Suspicious install scripts or obfuscated code detected
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain
Provenance
Dependencies✓ 23 resolved+ · none vulnerable
Tool surface40 tools · none privileged
Security scan⚠ Warnings (1)v1.0.0 · todayHow well does this scan work?
PROMPTtool:cancel_orderExfiltration-shaped instruction
EvalsNone
IndexedSep 3, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · none privileged · 1 flagged for injection
Statically extracted from the published packagev1.0.0 · 2h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

prepare_actionNo description published

This tool published no description. Forge does not invent one.

prepare_set_collateralNo description published

This tool published no description. Forge does not invent one.

preview_actionNo description published

This tool published no description. Forge does not invent one.

prepare_liquidationBuild an unsigned transaction to liquidate an unhealthy position: repay part of someone else's debt and receive their collateral plus the liquidation bonus. Only viable while that position's health factor is below 1 (check get_user_summary for the target). v4 takes collateral and debt as reserveIds…

Build an unsigned transaction to liquidate an unhealthy position: repay part of someone else's debt and receive their collateral plus the liquidation bonus. Only viable while that position's health factor is below 1 (check get_user_summary for the target). v4 takes collateral and debt as reserveIds…

No input schema was published for this tool.

prepare_set_emodev3 only. Build an unsigned transaction to switch a wallet's Aave v3 eMode category. eMode groups correlated assets (ETH-correlated, stablecoins) so they borrow against each other at a higher LTV, raising borrowing power at the cost of restricting which assets the position may hold. Take categoryId…

v3 only. Build an unsigned transaction to switch a wallet's Aave v3 eMode category. eMode groups correlated assets (ETH-correlated, stablecoins) so they borrow against each other at a higher LTV, raising borrowing power at the cost of restricting which assets the position may hold. Take categoryId…

No input schema was published for this tool.

get_reserve_detailsNo description published

This tool published no description. Forge does not invent one.

get_apy_historyNo description published

This tool published no description. Forge does not invent one.

get_user_activityA wallet's Aave transaction history (supply, borrow, repay, withdraw, collateral changes) on v3, v4, or both. Most recent first. v4 covers every chain; v3 reads one market on one chain at a time, because upstream paginates per market, so it states its scope as 'chainsCovered' and 'market' and you p…

A wallet's Aave transaction history (supply, borrow, repay, withdraw, collateral changes) on v3, v4, or both. Most recent first. v4 covers every chain; v3 reads one market on one chain at a time, because upstream paginates per market, so it states its scope as 'chainsCovered' and 'market' and you p…

No input schema was published for this tool.

get_protocol_historyv4 only. Aave v4 protocol-wide history: market size, total borrows and available liquidity per sample over a window. Omit chainId to cover every supported v4 chain. Use this for 'is the protocol growing', not for one wallet (get_user_summary_history) or one reserve (get_apy_history).

v4 only. Aave v4 protocol-wide history: market size, total borrows and available liquidity per sample over a window. Omit chainId to cover every supported v4 chain. Use this for 'is the protocol growing', not for one wallet (get_user_summary_history) or one reserve (get_apy_history).

No input schema was published for this tool.

get_user_summary_historyv4 only. How one wallet's net worth, supplied, debt and health factor moved over a window on Aave v4. Use it to answer 'how has my position changed' or to see how close to liquidation a wallet has been. Omit chainId to cover every supported v4 chain.

v4 only. How one wallet's net worth, supplied, debt and health factor moved over a window on Aave v4. Use it to answer 'how has my position changed' or to see how close to liquidation a wallet has been. Omit chainId to cover every supported v4 chain.

No input schema was published for this tool.

get_hubsv4 only. Aave v4 hubs: a hub holds the liquidity and global accounting that user-facing spokes draw from. Returns each hub's hubId, address, chain and totals. Pass a hubId to get_hub_assets for the assets it carries. Omit chainId to cover every supported v4 chain.

v4 only. Aave v4 hubs: a hub holds the liquidity and global accounting that user-facing spokes draw from. Returns each hub's hubId, address, chain and totals. Pass a hubId to get_hub_assets for the assets it carries. Omit chainId to cover every supported v4 chain.

No input schema was published for this tool.

get_hub_assetsv4 only. The assets held by one Aave v4 hub, with hub-wide supplied and borrowed totals, rates and utilisation. Get hubId from get_hubs (or the hubAddress on get_reserve_details). This is hub-level accounting; for what a user can actually supply or borrow, use get_markets, which is per spoke.

v4 only. The assets held by one Aave v4 hub, with hub-wide supplied and borrowed totals, rates and utilisation. Get hubId from get_hubs (or the hubAddress on get_reserve_details). This is hub-level accounting; for what a user can actually supply or borrow, use get_markets, which is per spoke.

No input schema was published for this tool.

search_governance_proposalsNo description published

This tool published no description. Forge does not invent one.

get_governance_proposalNo description published

This tool published no description. Forge does not invent one.

get_proposal_votesNo description published

This tool published no description. Forge does not invent one.

get_user_voteNo description published

This tool published no description. Forge does not invent one.

get_proposal_payloadsNo description published

This tool published no description. Forge does not invent one.

get_aave_guideNo description published

This tool published no description. Forge does not invent one.

get_startedApplies to both versions. What this Aave server can do: the tool families, the ready-made prompts, and the guide topics. Call this when an Aave conversation opens with no specific request and answer from it, rather than guessing from tool names.

Applies to both versions. What this Aave server can do: the tool families, the ready-made prompts, and the guide topics. Call this when an Aave conversation opens with no specific request and answer from it, rather than guessing from tool names.

No input schema was published for this tool.

aave-guideNo description published

This tool published no description. Forge does not invent one.

get_swappable_tokensNo description published

This tool published no description. Forge does not invent one.

get_swap_quoteNo version argument: token swaps are protocol-agnostic and run on the v4 backend, so the chains and tokens they cover are that backend's and not every chain Aave holds a market on - a chain it does not serve is rejected outright rather than quoted badly. Call get_swappable_tokens first if you do no…

No version argument: token swaps are protocol-agnostic and run on the v4 backend, so the chains and tokens they cover are that backend's and not every chain Aave holds a market on - a chain it does not serve is rejected outright rather than quoted badly. Call get_swappable_tokens first if you do no…

No input schema was published for this tool.

get_leverage_quoteNo description published

This tool published no description. Forge does not invent one.

get_position_swap_quotev4 only. Beta: pending a second audit, and the result says so - relay that to the user. Quote swapping one Aave v4 position for another, atomically and without leaving the protocol: kind=supply swaps collateral for a different collateral asset, kind=borrow swaps one debt for another. Get 'sellPosit…

v4 only. Beta: pending a second audit, and the result says so - relay that to the user. Quote swapping one Aave v4 position for another, atomically and without leaving the protocol: kind=supply swaps collateral for a different collateral asset, kind=borrow swaps one debt for another. Get 'sellPosit…

No input schema was published for this tool.

get_repay_with_supply_quoteNo description published

This tool published no description. Forge does not invent one.

prepare_orderNo description published

This tool published no description. Forge does not invent one.

submit_signed_orderNo version argument: every order runs on the v4 backend. Relay an order the user already signed (quoteId + signature from prepare_order's PreparedOrder). State-changing: this posts the order. The server never signs.

No version argument: every order runs on the v4 backend. Relay an order the user already signed (quoteId + signature from prepare_order's PreparedOrder). State-changing: this posts the order. The server never signs.

No input schema was published for this tool.

prepare_cancel_orderNo version argument. From an orderId, return the EIP-712 cancellation for the user to sign; cancel_order relays the result. This is the gasless route for an intent order; an order that went on chain (a native-token sell) is cancelled with cancel_order's transaction route instead, which needs no sig…

No version argument. From an orderId, return the EIP-712 cancellation for the user to sign; cancel_order relays the result. This is the gasless route for an intent order; an order that went on chain (a native-token sell) is cancelled with cancel_order's transaction route instead, which needs no sig…

No input schema was published for this tool.

cancel_orderinjection riskNo version argument. Cancel an open order. Two routes: pass 'signature' (signed over what prepare_cancel_order returned) to relay a gasless cancellation - state-changing, and the route an intent order takes; omit 'signature' entirely for the on-chain route, which returns the cancel transaction for…

No version argument. Cancel an open order. Two routes: pass 'signature' (signed over what prepare_cancel_order returned) to relay a gasless cancellation - state-changing, and the route an intent order takes; omit 'signature' entirely for the on-chain route, which returns the cancel transaction for…

INJECTIONExfiltration-shaped instructiontion for the user to sign and send, the route an order that went on chain (a native-token sell) takes. The server never…

No input schema was published for this tool.

get_order_statusNo version argument. Status of an order by id: open, pending signature, fulfilled, cancelled or expired, with the operation it performs and an explorer link. 'order' comes back null when the API cannot see that id, which a wrong id and a just-submitted order both produce - poll again briefly before…

No version argument. Status of an order by id: open, pending signature, fulfilled, cancelled or expired, with the operation it performs and an explorer link. 'order' comes back null when the API cannot see that id, which a wrong id and a just-submitted order both produce - poll again briefly before…

No input schema was published for this tool.

get_pending_ordersNo description published

This tool published no description. Forge does not invent one.

check_healthCheck a wallet's Aave health factor and liquidation risk.

Check a wallet's Aave health factor and liquidation risk.

No input schema was published for this tool.

walletWallet address (0x...)

Wallet address (0x...)

No input schema was published for this tool.

versionv3, v4, or all (default all)

v3, v4, or all (default all)

No input schema was published for this tool.

best_stablecoin_yieldFind the best stablecoin supply APY across Aave V3 and V4, on every chain.

Find the best stablecoin supply APY across Aave V3 and V4, on every chain.

No input schema was published for this tool.

chainIdChain id to restrict to. Omit to search every chain

Chain id to restrict to. Omit to search every chain

No input schema was published for this tool.

prepare_supplyBuild a non-custodial supply transaction for a wallet.

Build a non-custodial supply transaction for a wallet.

No input schema was published for this tool.

amountAmount in main units, e.g. 100

Amount in main units, e.g. 100

No input schema was published for this tool.

assetToken symbol, e.g. USDC

Token symbol, e.g. USDC

No input schema was published for this tool.

gho_savingsCompare the sGHO savings rate against supplying GHO to a market.

Compare the sGHO savings rate against supplying GHO to a market.

No input schema was published for this tool.

23 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Official Aave MCP server for Aave V3, Aave V4, and DAO governance.

Keywords
aavedefimcplendinggovernance
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-08 — observed resolution, not a publisher declaration.

23 packages resolved · 6 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

Declared but not resolved

7 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

Not followed: peerDependencies, optionalDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.