# @ironflowsh/mcp Read-only Hyperliquid market data and wallet analytics MCP server for Claude, Cursor and AI agents - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 0.7.0 - **Author:** Ironflow - **License:** MIT - **npm:** @ironflowsh/mcp - **Source:** https://github.com/ironflowsh/mcp - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-23T20:18:40.138Z - **Version scanned:** 0.7.0 - **CVEs:** none found by OSV at scan time ## Tools 30 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `get_price` — Get the latest mid-market price for a perpetual futures market on Hyperliquid - `get_recent_trades` — Get recent tick-level trades for a market including price, size, side, and timestamp - `get_candles` — Get OHLCV candlestick data for a market. Useful for price analysis and charting - `get_funding_rates` — Get funding rate history for a perpetual futures market. Rates are paid hourly on Hyperliquid - `get_open_interest` — Get the current open interest and 24h trading volume for a perpetual futures market - `get_liquidations` — Get recent liquidation events for a market showing forced position closures with price, size, and address - `get_fills` — Get trade fills for a specific wallet address, optionally filtered by market - `get_mark_prices` — Get the current mark price, oracle price, and funding rate for a market - `get_vault_operations` — Get vault deposit and withdrawal events, filterable by vault address or user address - `get_net_flows` — Get net deposit/withdrawal flows over time — shows capital inflows and outflows (Builder+ tier) - `get_liquidation_levels` — Get liquidations bucketed by price level — useful for heatmap visualization (Builder+ tier) - `get_order_flow` — Get fill and cancel rates per market — shows execution quality (Builder+ tier) - `get_vault_leaderboard` — Get vaults ranked by net deposits — shows which vaults are attracting capital (Builder+ tier) - `get_funding_stats` — Get funding rate statistics over time including annualized rates (Builder+ tier) - `get_user_state` — Get an address's current open perp positions + unrealized P&L. Mirrors HL clearinghouseState — best tool for 'is this wallet long or short right now?' or 'what' - `get_user_funding` — Get funding payments per market per bucket for an address. Sign convention: positive = received, negative = paid. Use bucket=1d for daily roll-up, 1h for raw HL - `get_user_maker_taker` — Get an address's maker vs taker fill breakdown per market over a time window. The single most diagnostic endpoint for market-maker analysis — no commercial prov - `get_user_ledger` — Get non-fill ledger events for an address: deposits, withdrawals, vault operations. Sign convention on amount: positive = into account, negative = out. Phase b - `get_pnl_leaderboard` — Global Smart Money leaderboard — every HL wallet ranked by realized PnL, biggest losses, or volume over a chosen window. Replaces HL's 10-cap 'tracked addresses - `get_market_top_wallets` — Top wallets ranked for one specific market. HL's public info API caps tracked addresses at 10; this returns up to 200. Sort by 'volume' or 'realized_pnl'. - `get_markets_snapshot` — Anchored snapshot of every active market in one round-trip. Each row carries current mark, 24h-ago mark, 24h change %, latest open interest (USD and base), and - `get_user_summary` — Aggregate stats for one address over a window — single ClickHouse aggregation. Returns volume, realized PnL, fill count, win rate, maker mix, markets touched. F - `get_wallet_labels` — Precomputed wallet label catalog. Returns a map of address → label list covering top whales by 24h volume, top smart money by 30d realized PnL, every distinct v - `get_user_pnl_series` — Bucketed realized-PnL time series for one address. Each point is the sum of realized_pnl in a bucket_ms window. Server clamps bucket_ms so the series has ≤500 b - `list_cohorts` — List available address cohorts: six predefined groups (top_pnl_30d, high_volume_30d, whale_fills, net_withdrawers_7d, liquidation_prone, vault_whales) plus any - `get_cohort_addresses` — Get the wallet addresses in a specific cohort - `get_status` — Get system status, data freshness, and venue health (unauthenticated) - `get_status_metrics` — Get rolling-window API + pipeline + synthetic performance metrics (unauthenticated) - `get_status_history` — Get an uptime / freshness timeline. period: '24h' (default) or '7d' (unauthenticated) - `list_markets` — List active markets from the registry. Filter by source (venue), market_class (perp|spot|prediction), or issuer (HIP-3 builder code; pass empty string '' for na ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"mcp\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@ironflowsh/mcp\"\n ],\n \"env\": {\n \"IRONFLOW_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `IRONFLOW_API_KEY` — Ironflow API Key (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — holds an api key; runs on your machine. - Floor 23, ceiling 23 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40ironflowsh%2Fmcp - Install plan: https://forgeregistry.com/api/v1/packages/%40ironflowsh%2Fmcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40ironflowsh%2Fmcp - HTML page: https://forgeregistry.com/registry/%40ironflowsh%2Fmcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.