Official PMWallets SDK and CLI: Polymarket smart-money leaderboard, real-time wallet fills over WebSocket with gap replay, webhooks, exports — and a CLI + MCP server so AI agents (Claude Code, Codex, Cursor, …) can follow traders and act on their fills.
Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
PMW_API_KEYAPI keyrequiredPMWallets API key (pmw_...), from https://pmwallets.com/keys
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
leaderboardPolymarket traders ranked by realized PnL and other stats over a window, with filters. Each row is an entity (one trader, possibly several wallets).Polymarket traders ranked by realized PnL and other stats over a window, with filters. Each row is an entity (one trader, possibly several wallets).
No input schema was published for this tool.
entityOne trader's statistics by handle or address (full address only once unlocked).One trader's statistics by handle or address (full address only once unlocked).
No input schema was published for this tool.
subscriptionsThe traders this account follows (active and paused subscriptions).The traders this account follows (active and paused subscriptions).
No input schema was published for this tool.
subscribeFollow a trader: their fills start arriving from now on. BILLS THE ACCOUNT per hour (unless the plan covers it). 402 = balance too low; 409 = no fill for 7 days (retry with acceptInactive).Follow a trader: their fills start arriving from now on. BILLS THE ACCOUNT per hour (unless the plan covers it). 402 = balance too low; 409 = no fill for 7 days (retry with acceptInactive).
No input schema was published for this tool.
cancel_subscriptionStop following (and stop paying for) a subscription, by its id from `subscriptions`.Stop following (and stop paying for) a subscription, by its id from `subscriptions`.
No input schema was published for this tool.
new_fillsFills of the followed traders since the previous call of this tool (first call: the last hour). Each fill is returned once to this server; the CLI `pmwallets new-fills` shares the position file, so do not poll with both at once (or give each its own PMW_MCP_STATE). Call again while `more` is true.Fills of the followed traders since the previous call of this tool (first call: the last hour). Each fill is returned once to this server; the CLI `pmwallets new-fills` shares the position file, so do not poll with both at once (or give each its own PMW_MCP_STATE). Call again while `more` is true.
No input schema was published for this tool.
fillsFills of the followed traders strictly after a ledger position (block, logIndex), oldest first. Does not move the new_fills cursor.Fills of the followed traders strictly after a ledger position (block, logIndex), oldest first. Does not move the new_fills cursor.
No input schema was published for this tool.
marketThe Polymarket market and outcome an outcome token id belongs to (question, outcome name, slug, end date).The Polymarket market and outcome an outcome token id belongs to (question, outcome name, slug, end date).
No input schema was published for this tool.
accountThe account's plan (allowances used) and balance.The account's plan (allowances used) and balance.
No input schema was published for this tool.
9 of 9 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Official PMWallets SDK and CLI: Polymarket smart-money leaderboard, real-time wallet fills over WebSocket with gap replay, webhooks, exports — and a CLI + MCP server so AI agents (Claude Code, Codex, Cursor, …) can follow traders and act on their fills.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.