# @aave/mcp

Official Aave MCP server for Aave V3, Aave V4, and DAO governance.

- **Type:** MCP server
- **Trust:** 40/100 (C), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 1.0.0
- **Author:** Unknown
- **License:** LicenseRef-BUSL
- **npm:** @aave/mcp
- **Endpoints:** streamable-http https://mcp.aave.com
- **Source:** https://github.com/aave/mcp
- **Endpoint health:** reachable (last checked 2026-09-04T00:02:57.161Z, 1 sample) — uptime is not a security property and is not part of the trust score
- **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport)

## Trust

40/100 (C), scored on the package rubric
- Publisher verified: no
- Install scripts: suspicious script found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 0 days

## Security scan

- **Status:** warnings
- **Scanned:** 2026-09-08T15:05:52.202Z
- **Version scanned:** 1.0.0
- **CVEs:** none found by OSV at scan time
**Findings**
- injection-shaped content (warning) in the `cancel_order` tool: Exfiltration-shaped instruction

## Tools

40 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `prepare_action`
- `prepare_set_collateral`
- `preview_action`
- `prepare_liquidation` — Build an unsigned transaction to liquidate an unhealthy position: repay part of someone else's debt and receive their collateral plus the liquidation bonus. Onl
- `prepare_set_emode` — v3 only. Build an unsigned transaction to switch a wallet's Aave v3 eMode category. eMode groups correlated assets (ETH-correlated, stablecoins) so they borrow 
- `get_reserve_details`
- `get_apy_history`
- `get_user_activity` — A wallet's Aave transaction history (supply, borrow, repay, withdraw, collateral changes) on v3, v4, or both. Most recent first. v4 covers every chain; v3 reads
- `get_protocol_history` — v4 only. Aave v4 protocol-wide history: market size, total borrows and available liquidity per sample over a window. Omit chainId to cover every supported v4 ch
- `get_user_summary_history` — v4 only. How one wallet's net worth, supplied, debt and health factor moved over a window on Aave v4. Use it to answer 'how has my position changed' or to see h
- `get_hubs` — v4 only. Aave v4 hubs: a hub holds the liquidity and global accounting that user-facing spokes draw from. Returns each hub's hubId, address, chain and totals. P
- `get_hub_assets` — v4 only. The assets held by one Aave v4 hub, with hub-wide supplied and borrowed totals, rates and utilisation. Get hubId from get_hubs (or the hubAddress on ge
- `search_governance_proposals`
- `get_governance_proposal`
- `get_proposal_votes`
- `get_user_vote`
- `get_proposal_payloads`
- `get_aave_guide`
- `get_started` — Applies to both versions. What this Aave server can do: the tool families, the ready-made prompts, and the guide topics. Call this when an Aave conversation ope
- `aave-guide`
- `get_swappable_tokens`
- `get_swap_quote` — No version argument: token swaps are protocol-agnostic and run on the v4 backend, so the chains and tokens they cover are that backend's and not every chain Aav
- `get_leverage_quote`
- `get_position_swap_quote` — v4 only. Beta: pending a second audit, and the result says so - relay that to the user. Quote swapping one Aave v4 position for another, atomically and without 
- `get_repay_with_supply_quote`
- `prepare_order`
- `submit_signed_order` — No version argument: every order runs on the v4 backend. Relay an order the user already signed (quoteId + signature from prepare_order's PreparedOrder). State-
- `prepare_cancel_order` — No version argument. From an orderId, return the EIP-712 cancellation for the user to sign; cancel_order relays the result. This is the gasless route for an int
- `cancel_order` — No version argument. Cancel an open order. Two routes: pass 'signature' (signed over what prepare_cancel_order returned) to relay a gasless cancellation - state
- `get_order_status` — No version argument. Status of an order by id: open, pending signature, fulfilled, cancelled or expired, with the operation it performs and an explorer link. 'o
- `get_pending_orders`
- `check_health` — Check a wallet's Aave health factor and liquidation risk.
- `wallet` — Wallet address (0x...)
- `version` — v3, v4, or all (default all)
- `best_stablecoin_yield` — Find the best stablecoin supply APY across Aave V3 and V4, on every chain.
- `chainId` — Chain id to restrict to. Omit to search every chain
- `prepare_supply` — Build a non-custodial supply transaction for a wallet.
- `amount` — Amount in main units, e.g. 100
- `asset` — Token symbol, e.g. USDC
- `gho_savings` — Compare the sGHO savings rate against supplying GHO to a market.

## Install

**Verdict: do-not-install** — Do not install: 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it.
**Blocking**
- 1 injection-shaped pattern found in this entry's own text — it may try to steer the model that loads it. — tool:cancel_order: Exfiltration-shaped instruction
**Cautions** (coverage gaps and advisories — never blocking)
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Client configuration withheld.** Client configs are withheld because this entry has a blocking finding. Show the warnings below to the person installing it.
If they have seen the findings and still want to proceed, request the plan again with acknowledge_warnings=true.

## Blast radius

Contained to extensive — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs locally and hosted; read-only tool surface.
- Floor 16, ceiling 34 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/%40aave%2Fmcp
- Install plan: https://forgeregistry.com/api/v1/packages/%40aave%2Fmcp/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/%40aave%2Fmcp
- HTML page: https://forgeregistry.com/registry/%40aave%2Fmcp
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.