cardano-defi-mcp
The server is a Cardano DeFi MCP that lets an AI agent discover indexed DeFi venues, get live market/position/balance data, obtain cross-chain swap quotes and unsigned transactions, and (in wallet mode) sign and submit transactions under spending caps.
Discover venues: list/filter the 11 record taxonomy by category, asset, capability, or free-text query; view full venue details.
Get quotes: race BazaarSwap for cross-chain routes (e.g. EVM assets into ADA) and get the best + all routes by net output.
Build unsigned transactions: turn a quote into unsigned swap transaction data; build unsigned Indigo CDP open/close transactions as CBOR hex.
Read live data: check Cardano address balances (ADA + native assets), read Indigo CDP or Liqwid loan positions, and fetch Liqwid market supply APY/borrow APR/utilization.
Manage an agent wallet (combined/wallet mode): generate burner keys, show wallet status/balances/caps, sign and submit EVM transactions, approve ERC-20 tokens, sign and submit Cardano transactions, and send plain ADA payments — all subject to per-transaction and rolling 24-hour spending caps.
Configure the server: store Blockfrost project ID and Bazaar API URL via the
configuretool.
Provides tools for discovering Cardano DeFi venues, reading ADA and native asset balances, and building unsigned Cardano transactions for DeFi operations.
Allows reading Indigo Protocol CDP positions and building unsigned transactions to open or close CDPs by locking ADA collateral/minting iAssets or burning debt/withdrawing collateral.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@cardano-defi-mcpWhat's the best rate to swap 1000 USDC to ADA?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
cardano-defi-mcp — Cardano DeFi taxonomy + MCP server
Open-source proof of concept for the Cardano PRIME grant. Two things in one small package:
A taxonomy index of Cardano DeFi venues — 11 hand-researched venue records (DEXes, lending, CDPs, stablecoins, perps) with categories, assets, capabilities and honest caveats, validated by a zod schema.
An MCP server that gives an AI agent rails into Cardano DeFi: discover venues, get cross-chain swap quotes into ADA, read balances and positions, and receive unsigned transactions the agent signs with its own keys.
The BazaarSwap routing backend is a separate, closed-source service. This repo is only an HTTP
client of it (BAZAAR_API_URL); nothing in here does routing, and nothing in here is a wallet.
Quickstart — one command
claude mcp add cardano-defi -- npx -y github:ardey26/cardano-defi-mcpThat is the whole install. npx fetches this repo, builds it, and Claude Code spawns it on stdio as
one server with sixteen tools: the nine keyless DeFi tools, five signing tools, and two
onboarding tools. Nothing to clone, no .env to write, no key to paste into a config file. Node 20+
is the only prerequisite, and the CLI says so plainly if you are on an older one.
The wallet spends without asking you. This mode holds private keys and signs with no confirmation prompt anywhere — the policy caps (25 ADA / 0.01 ETH per transaction by default) are the confirmation. Fund it like a prepaid card, not like a savings account. If you want the keyless server only, use the hosted HTTP endpoint instead.
There is no seed phrase and no recovery. The keys live only in
~/.cardano-defi-mcp/credentials.env(or.env.localin a checkout) — delete that file or lose the machine and the funds are gone forever. Back it up if the wallet holds more than pocket change.The caps meter native ETH and ADA only. ERC-20 tokens held by the wallet are not value-limited — fund with native assets, and treat any token balance as fully delegated to the agent.
The conversation that sets you up
Tell the agent "get me set up" and it walks the whole thing, because every unconfigured state comes back as an error naming the exact next tool call:
wallet_status→ "This wallet holds no keys yet… Callsetup_wallet."setup_wallet→ generates the burner keys into a chmod-600 file, returns only the addresses, the caps, and the funding note. It never overwrites an existing key, and the private keys never enter the conversation.You fund those addresses with an amount you would not mind losing.
get_balance(or anything Cardano) → "BLOCKFROST_PROJECT_ID is not set: callconfigurewithblockfrostProjectId— a free key takes a minute at blockfrost.io."configure { blockfrostProjectId }→ stored in~/.cardano-defi-mcp/config.json, applied to the running server, echoed back masked.wallet_status→ addresses, live balances, caps, remaining 24 h headroom. You are done.
From there the agent can quote (get_quote), build (build_swap_tx, open_cdp) and execute
(sign_and_submit_evm, send_cardano, sign_and_submit_cardano) in one connection.
Where your files live
An npx-installed package lives inside a disposable npm cache directory, so nothing writable goes there. Config, keys and the spend ledger live in your home directory instead:
Path | Holds | Mode |
|
|
|
| the |
|
| the rolling 24 h spend ledger |
|
Resolution order for every setting: explicit environment variable (an env block in
.mcp.json, or a shell export) → repo .env.local / .env when running from a checkout →
home directory. CARDANO_DEFI_MCP_HOME relocates the whole directory. A checkout keeps using
.env.local and .wallet-state.json exactly as before; only an installed package uses the home
directory.
The other modes of the same command
npx -y github:ardey26/cardano-defi-mcp # combined local server (the default)
npx -y github:ardey26/cardano-defi-mcp wallet # signing tools + onboarding only
npx -y github:ardey26/cardano-defi-mcp wallet gen evm # make a burner key from the shell
PORT=3000 npx -y github:ardey26/cardano-defi-mcp serve-http # the keyless HTTP serverThe two key-holding modes refuse to start with PORT or MCP_TRANSPORT=http set. A server that
signs must never be reachable over the network, and the combined mode is not a loophole around that.
Environment
Variable | Required for | Default |
|
|
|
|
|
|
|
|
|
| Blockfrost / Indigo host selection |
|
| Indigo |
|
|
| Indigo's current mainnet params via the CLI; unset otherwise |
| relocating config/keys/ledger |
|
| transport selection |
|
| HTTP mode | — (setting it selects HTTP mode) |
| HTTP mode |
|
Every read tool except get_balance and the Indigo tools works with no API keys at all. The
spending caps have their own variables — see the policy leash.
Related MCP server: agentfi-mcp-server
Hosted / HTTP mode (keyless)
A public instance runs at https://cardano-defi-mcp.onrender.com/mcp (free tier: expect a cold
start after idle). Connect from Claude Code:
claude mcp add --transport http cardano-defi https://cardano-defi-mcp.onrender.com/mcpThe same nine tools also speak Streamable HTTP, so the server can be hosted instead of spawned.
stdio stays the default; setting PORT (or MCP_TRANSPORT=http) switches transports.
npm run build
PORT=3000 npm start # POST /mcp, GET /healthConnect a client to it:
claude mcp add --transport http cardano-defi https://<your-host>/mcpStateless. No sessions, no
Mcp-Session-Id: every POST gets its own server instance, so a restart costs a client nothing.GET/DELETE /mcpanswer405— with no session there is no server-initiated stream to open and nothing to tear down.Rate limited to 60 requests/min per IP on
/mcp(RATE_LIMIT_PER_MIN), sliding window, in memory. Over budget gets a429withRetry-Afterand a JSON-RPC error body./healthis exempt.Open CORS (
Access-Control-Allow-Origin: *) so browser-based MCP clients can reach it. There is no auth and no secret worth stealing in the response — the server holds no keys and signs nothing — but everything it can do, any caller can do, so host it with that in mind.
render.yaml deploys it as a Render web service (free plan, /health as the health check). Note
what a free tier means: the instance sleeps after ~15 minutes idle, so the first call after a
quiet spell can take tens of seconds while it wakes. It is a proof of concept, not an SLA — for
anything real, run your own instance or use stdio.
Run from a checkout
The repo is still a normal checkout, and nothing about that path changed.
npm i
cp .env.example .env # fill in BLOCKFROST_PROJECT_ID; the rest have working defaults
npm test # vitest, fully mocked — no network
npx tsx src/server.ts # the keyless MCP server on stdio
npm run wallet # the wallet server on stdio (npm run wallet -- gen for burner keys)
node bin/cli.mjs # the combined server, after npm run build && npm run build:walletIn a checkout, keys stay in .env.local and the ledger in .wallet-state.json at the repo root —
the home directory is used only by an installed package. .mcp.json.example shows the two-server
registration if you would rather keep the keyless server and the wallet apart.
Tools
The keyless server registers the first nine. The combined CLI server registers all sixteen.
Tool | What it does | Funds |
| List/filter indexed venues by category, asset, capability, or free-text | read-only |
| Full taxonomy record for one venue id | read-only |
| Race the BazaarSwap backend for cross-chain routes; returns | read-only |
| Turn a | unsigned |
| ADA + native-asset balance of a Cardano address (Blockfrost) | read-only |
| Indigo CDPs or Liqwid loans for an address ( | read-only |
| Liqwid supply APY / borrow APR / utilization per market | read-only |
| Lock ADA collateral, mint an iAsset on Indigo | unsigned |
| Burn iAsset debt, withdraw ADA collateral on Indigo | unsigned |
| Addresses, live balances, caps and remaining 24 h headroom. No key material | read-only |
| Sign | spends |
| Set an ERC-20 allowance (resets to zero first for USDT-class tokens) | spends gas |
| Sign the unsigned CBOR from | spends |
| Plain ADA payment — the execution leg of a Cardano-side deposit-address bridge | spends |
| Create the missing burner keys; returns addresses, caps and funding instructions | read-only |
| Store | read-only |
All tools return { content: [{ type: 'text', text: <pretty JSON> }] }; failures return
isError: true with a one-line message and no stack trace. A failure caused by missing setup names
the exact tool call that fixes it.
Security model
This is the model of the keyless server — dist/server.js, which is what the hosted deployment
runs and what serve-http starts. The wallet's model is further down.
No keys, ever. The server has no signing code path. For Indigo, the wallet is selected by address only (
lucid.selectWallet.fromAddress), which can balance and build a transaction but is structurally incapable of signing one.No funds, ever. Nothing is custodied, pooled or forwarded.
No broadcasting. The server never submits a transaction.
Unsigned CBOR out.
open_cdp/close_cdpreturn full transaction CBOR hex with an empty witness set — exactly the input a CIP-30signTxexpects — plus a human-readabledescriptionof what the transaction does, so the agent (or the human behind it) can check before signing.Secrets come from the environment and are never logged.
stdoutcarries only JSON-RPC; all diagnostics go tostderr.
Limitations (read this before trusting it)
Liqwid is read-only. Liqwid v2's supply/borrow/repay actions go through the protocol's off-chain batcher with no documented public transaction-building API or SDK. Building those transactions would mean reverse-engineering an undocumented batcher contract, which is not something a PoC should ship. Rates and loan positions are read live from the public GraphQL API.
Indigo's Pyth-oracle path leans on Indigo's analytics API.
open_cdpresolves the collateral price oracle from the collateral asset's datum.OracleNftandDelistedare handled directly. Indigo's newerDeferredValidationpath needs a signed Pyth Lazer price message, which needs a Pyth Lazer access token this server has no business holding — so it proxies the signed message and the Pyth state UTxO from Indigo's public, unauthenticated analytics API (/api/v3/assets/{iasset}/ada/price,/api/v3/pyth-state/utxo), the same route Indigo's ownindigo-mcptakes. Those messages expire 280 s after their timestamp, so the transaction must be signed and submitted promptly after it is built.Indigo needs
INDIGO_SYSTEM_PARAMS_URL. The Indigo SDK ships no default SystemParams and Indigo publishes no documented stable URL for the file, so the tools refuse to guess. The CLI supplies the current mainnet URL (the same onerender.yamlpins) so npx users are not stuck — expect it to 404 after the next protocol upgrade, and set the variable when it does.Indigo position reads use the analytics API, not the SDK. The SDK has no "find CDPs by owner" helper — only datum parsing, which would mean scanning every UTxO at the CDP validator. The analytics endpoint needs no Blockfrost key and returns the CDP out-ref that
close_cdpneeds.Taxonomy asset lists are directional, not exhaustive. Most venues publish no authoritative pool or market listing, so asset lists are the best-confirmed subset, not a complete index. Each venue's
notesfield states exactly what was and was not verified — read it rather than treatingassetsas ground truth.RealFi is not on mainnet yet (testnet at time of research; mainnet stated for late 2026), and its token tickers are unresolved between the live site (
USDrf/sUSDrf) and press coverage (USDr/sUSDr). It is indexed for completeness, not because it is usable today.Quotes are live and perishable.
get_quotecan take up to ~25 s (it waits out a provider race) and quotes expire; build shortly after quoting.
Layout
bin/cli.mjs the npx entry point: combined | wallet | serve-http
taxonomy/venues/*.json one file per venue, validated by VenueSchema
src/taxonomy/ zod schema + loadVenues / listVenues / getVenue / searchVenues
src/adapters/ blockfrost, liqwid, indigo, swap (BazaarSwap API client)
src/tools/ MCP tool registrations (thin: parse -> adapter -> JSON text)
src/server.ts McpServer wiring + transport selection (stdio | http)
src/http.ts Streamable HTTP host: routing, CORS, /health, rate limiting
src/rate-limit.ts in-memory sliding-window per-IP limiter
src/hints.ts whether a missing-setting error names a tool or an env var
src/wallet/ agent-wallet: the local-only, key-holding companion server (see below)
src/wallet/combined.ts the one-command server: defi tools + wallet tools + onboarding
src/wallet/home.ts ~/.cardano-defi-mcp resolution (config, credentials, ledger)
src/wallet/onboarding.ts setup_wallet + configure
src/__tests__/ vitest; all network mockedTwo build outputs, on purpose:
npm run build tsc -> dist/ nine keyless tools, no signing code at all
npm run build:wallet tsconfig.wallet -> dist-wallet/ the key-holding CLI modes
npm run prepare both (npx runs this when it installs from GitHub)dist/ is the deployed artifact and stays structurally incapable of signing: tsconfig.json
excludes src/wallet, and nothing in dist/ imports anything from dist-wallet/. The CLI does need
the wallet compiled to plain JavaScript (an installed package has no tsx), so it gets its own
output directory rather than being folded into the deployed one.
See DESIGN.md for the module contracts and the top of src/adapters/indigo.ts for where the
implementation deviates from the original design and why.
Taxonomy explorer
scripts/build-explorer.mjs renders the venue records into a static page plus a machine-readable
taxonomy.json bundle. The output is generated, not committed — docs/ is gitignored.
npm run build:explorer && open docs/index.html # local preview over file://The published version is built and deployed to GitHub Pages by .github/workflows/pages.yml on
every push to main that touches taxonomy/ or scripts/. This requires the repository's
Settings → Pages → Source to be set to GitHub Actions.
Add your protocol
The taxonomy is a community registry — a venue is one JSON file, and adding one takes a PR.
Fork the repo and create a branch named
taxonomy/<something>(e.g.taxonomy/add-myvenue) — the PR gate rejects other branch names.Add
taxonomy/venues/<id>.json. The filename (minus.json) must equal the record'sid, and the record must matchsrc/taxonomy/schema.ts. Copy an existing file such astaxonomy/venues/minswap.jsonas a starting point.Run
npm run validate:taxonomylocally — it needs no dependencies and names every problem.Open a PR. CI validates the file and prints a summary of what changed. A maintainer applies the
taxonomy-additionlabel after review; the PR cannot merge without it.
Keep notes honest: say what you verified and what you did not. Asset lists are expected to be
directional rather than exhaustive. On merge, the explorer and taxonomy.json republish
automatically.
Try the reference agent
npm run demo runs examples/reference-agent.ts: a minimal MCP client that spawns this server over
stdio, lists its tools, and calls list_venues, get_market_data and get_position against live
public APIs. No API keys needed; network access is.
Execute a real swap (advanced)
examples/execute-swap.ts is the other half of the story: the agent-side signer. The MCP server
quotes and builds but never signs — something outside it has to close the loop, and this example
shows what that something looks like. It moves real funds.
Use a burner wallet. Fund it with exactly the amount you intend to trade and nothing more. This is example code for a proof of concept, not a production signer.
npm run execute -- gen # new burner: appends PRIVATE_KEY to .env.local, prints only the address
npm run execute -- quote # dry run: warms the API token cache, races quotes (no key needed)
npm run execute -- run # quote → build → approve → summary, then STOPS
npm run execute -- run --yes # the same, but signs and broadcastsConfigure the pair with flags or env (.env.local wins over .env):
FROM_CHAIN (1 or 42161), FROM_TOKEN (native or an ERC-20 address), AMOUNT (wei),
DEST_ADDRESS (addr1…), plus optional TO_CHAIN / TO_TOKEN / SLIPPAGE / RPC_URL.
--yesis the only way to broadcast. Without itrunprints the exact transaction — sender, target, value, calldata size, estimated ADA out, destination address — and exits withDRY RUN — add --yes to broadcast.ERC-20 sources get an exact-amount approval, only when the current allowance is short, and the script waits for that receipt before it signs the swap.
After broadcasting it registers the hash with the API (
POST /status/register, sending both thequoteIdand the signedtrackingtoken from the execute response) and pollsGET /status/{txHash}every 15 s for up to 10 minutes, printing each transition untilcomplete/failed/untracked. A failed swap exits non-zero.The private key never touches the keyless MCP server. It is read by the example only, and the server is spawned with
PRIVATE_KEYstripped from its environment.dist/server.jsstill has no signing code path;viemis a runtime dependency of the wallet and this example, and nothing indist/imports it.
Agent wallet (autonomous signing, local only)
examples/execute-swap.ts and examples/execute-cdp.ts prove the loop closes, but a human still runs
them. src/wallet/ is the same signing logic repackaged as a second MCP server — agent-wallet —
so an agent can close the loop itself: the main server builds, the wallet signs and submits.
Everything in the wallet key is spendable by the agent, without asking you, up to the caps below. There is no confirmation prompt anywhere in this server — the caps are the confirmation. Fund it like a petty-cash drawer, not like a savings account. Use a burner.
npm run wallet -- genmakes one.
The one-command install above spawns the wallet inside the combined server, which is the simplest thing that works. The rest of this section is the wallet itself: its caps, its ledger, and the alternative two-server composition if you would rather keep the keyless server hosted.
The two-server composition
Two servers with opposite security properties, registered side by side:
|
| |
Transport | Streamable HTTP, public (or stdio) | stdio only — refuses to start with |
Keys | none, structurally (no signing code path) | holds |
Output | quotes, balances, positions, unsigned CBOR/calldata | broadcast transaction hashes |
Blast radius if compromised | reads only | whatever the caps allow per 24 h |
{
"mcpServers": {
"cardano-defi": {
"type": "http",
"url": "https://cardano-defi-mcp.onrender.com/mcp"
},
"agent-wallet": {
"command": "npx",
"args": ["tsx", "src/wallet/server.ts"],
"cwd": "/absolute/path/to/cardano-defi-mcp",
"env": { "BLOCKFROST_PROJECT_ID": "mainnet<your-blockfrost-project-id>" }
}
}
}The keys themselves stay in .env.local (chmod 600, gitignored) — not in .mcp.json, which tends to
get committed.
npm run wallet -- gen # both burners into .env.local; prints ONLY the addresses
npm run wallet -- gen evm # or just one
npm run wallet -- gen cardano
npm run wallet # start the stdio serverAn agent does the same thing by calling setup_wallet, which writes to .env.local in a checkout
and to ~/.cardano-defi-mcp/credentials.env when installed. Both refuse to overwrite a key that
already exists — a key may hold funds, and replacing it would lose them.
Tools
Tool | What it does | Funds |
| Addresses, live balances (viem per allowlisted chain, Blockfrost for ADA), caps and remaining 24 h headroom. No key material. | read-only |
| Sign | spends |
| Set an ERC-20 allowance (resets to zero first for USDT-class tokens) | spends gas |
| Sign the unsigned CBOR from | spends |
| Build, sign and submit a plain ADA payment to an address | spends |
| Create the missing burner keys; returns addresses, caps and funding instructions | read-only |
| Store | read-only |
Whichever key is present is served; the other chain's tools fail with a clear message instead of silently doing nothing. Keys are never printed or returned, and every error leaving the process is run through a redactor first.
send_cardano exists for deposit-address bridges: a quote that starts on Cardano is executed not
by signing a built transaction but by paying ADA to the provider's deposit address, so that leg is a
plain transfer. It is capped exactly like sign_and_submit_cardano — the amount plus the fee is
measured against the lovelace caps before anything is signed — and it refuses an address on the wrong
network rather than sending funds into the void.
The policy leash
Every signing tool checks the policy before it signs. Two caps per chain family — one per transaction, one rolling 24 hours — plus an EVM chain allowlist.
Variable | Governs | Default |
| ADA per transaction |
|
| ADA per rolling 24 h |
|
| native EVM value per transaction |
|
| native EVM value per rolling 24 h |
|
| chain ids the wallet may sign for at all |
|
| per-chain RPC override | viem's public RPC |
| where the spend ledger lives |
|
The window is a true sliding window, not a calendar day: a spend stops counting exactly 24 h after it was recorded.
Recorded on successful submit only, to
.wallet-state.json(gitignored, chmod 600), so the caps survive a restart — otherwise an agent could reset them by restarting the server. A corrupt ledger file refuses to sign rather than reading as empty.Denials are plannable. A refusal comes back as
isErrorcarrying the cap, the attempted amount, what is already spent, the headroom left, and — for a daily-cap denial — the ISO timestamp at which enough older spends age out for the attempt to fit.The EVM caps count native value only.
valueis what they measure, so an ERC-20 transfer — which moves tokens through calldata and carriesvalue: 0— passes the caps untouched. Likewiseapprove_erc20is exempt from the value caps (an approval moves no value) but still requires an allowlisted chain, and an approval authorises a spender to move tokens later, which the caps do not police either. Approve exact amounts, to spenders that came from a quote, and do not keep token balances in this wallet that you would mind losing. The Cardano cap has no such hole: it measures the whole ADA outflow of the transaction body.EVM amounts are summed in wei across chains. That is only coherent because the default allowlist is ETH-native throughout; adding a chain with a different native token makes the daily EVM cap add apples to oranges.
Cardano spend is measured conservatively: every output that does not pay back to the wallet, plus the fee. A transaction body carries no input values, so an exact net outflow would mean a UTxO lookup per input; this over-counts when the transaction also spends value the wallet did not own (closing a CDP, for instance). Over-counting denies more than it should, never less. See the comment on
cardanoOutflowLovelaceinsrc/wallet/cardano.ts.
What the wallet does not change about the main server
npm run build still excludes src/wallet from dist/, so dist/server.js — the hosted artifact —
still has no way to sign anything, and npm start still starts the keyless nine-tool server. The
wallet compiles to dist-wallet/ instead, which only the CLI's local modes load; tsc --noEmit
typechecks all of it either way.
Two honest caveats about that separation:
npm run preparebuilds both directories, andnpm cirunsprepare, so a Render deploy hasdist-wallet/on disk even though nothing it runs imports it. The property that protects you is that the hosted instance holds no keys and its code path never reaches that directory — not that the bytes are absent.viemmoved fromdevDependenciestodependencies, because an npx install of a git package keeps only runtime dependencies and the wallet needs it to sign.dist/imports it nowhere.
License
Apache-2.0
Available Tools
9 toolsbuild_swap_txBuild an unsigned swap transactionARead-only
Turn a quoteId from get_quote into transaction data for the swap. Returns an UNSIGNED transaction: this server never holds keys, never signs and never broadcasts. The calling agent (or the user's wallet) signs and submits it. Quotes expire, so build shortly after quoting.
| Name | Required | Description | Default |
|---|---|---|---|
| quoteId | Yes | quoteId from a get_quote result | |
| userAddress | Yes | Sender address the transaction is built for |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark readOnlyHint=true; the description reinforces this by explicitly stating the server never holds keys, signs, or broadcasts. Adds the quote-expiry behavior and designates the caller as the signer. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four clear sentences, each adding distinct information: purpose, unsigned/safety model, signer responsibility, and timing. No redundant or filler wording; important constraints are front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter tool with annotations, the description covers the output type (unsigned transaction), the security boundary (no signing/broadcasting), the prerequisite (quoteId), and the freshness requirement. Although no output schema exists, the description discloses the essential return information, making it complete enough for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema already describes both quoteId and userAddress with 100% coverage. The description adds a small clarification that quoteId originates from get_quote, but this largely mirrors the schema. Baseline 3 applies because the schema carries the parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action ('Turn a quoteId... into transaction data') and identifies the resource (swap transaction). Clearly distinguishes from sibling tools like get_quote by referencing it as the input source and by specifying the unsigned-transaction output.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear context: use after get_quote and before quote expiry. Mentions the prerequisite quoteId and that the transaction is subsequently signed/submitted by the caller. Does not explicitly name sibling alternatives or negative conditions, but the context is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
close_cdpBuild an unsigned Indigo close-CDP transactionA
Build a transaction that closes an Indigo CDP: burn the minted iAsset debt and withdraw the ADA collateral. Identify the CDP by the out-ref from get_position (protocol "indigo"). Returns an UNSIGNED transaction as CBOR hex with an empty witness set, plus a human-readable summary. This server never signs, never submits and never holds keys or funds — the agent signs it (CIP-30 signTx) and submits it. Requires BLOCKFROST_PROJECT_ID and INDIGO_SYSTEM_PARAMS_URL.
| Name | Required | Description | Default |
|---|---|---|---|
| txHash | Yes | cdpOutRef.txHash from get_position | |
| address | Yes | Bech32 Cardano address that owns the CDP | |
| outputIndex | Yes | cdpOutRef.outputIndex from get_position |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses important behavior beyond annotations: the server never signs, never submits, never holds keys or funds, and returns an unsigned transaction with an empty witness set plus a summary. This clarifies the exact execution boundary and what the agent must do next.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core operation, then covers identification, return value, safety boundary, and prerequisites. Every sentence carries useful information without filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description appropriately explains the return payload: CBOR-hex unsigned transaction, empty witness set, and human-readable summary. It also names required environment variables and the CIP-30 signing handoff, making the full call context complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the schema already documents that txHash and outputIndex come from cdpOutRef in get_position and that address is the Bech32 CDP owner. The description reinforces this provenance but does not add meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action and resource: building a transaction that closes an Indigo CDP, with concrete sub-effects (burn iAsset debt, withdraw ADA collateral). This clearly distinguishes it from siblings like open_cdp and build_swap_tx.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly ties the CDP to an out-ref from get_position with protocol "indigo", giving the agent a clear input source and workflow. It does not explicitly say 'use this only when closing an Indigo CDP, not for other operations', but the close-specific wording makes the intended use clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_balanceGet a Cardano address balanceARead-only
Read the ADA and native-asset balance of a Cardano address from Blockfrost. Read-only. Requires BLOCKFROST_PROJECT_ID; an address never seen on-chain reports a zero balance.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Bech32 Cardano address (addr1... / addr_test1...) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered. The description adds two genuinely new behavioral facts: the BLOCKFROST_PROJECT_ID requirement and the fact that unseen addresses return zero balance. This goes beyond annotation coverage and helps the agent anticipate side effects and requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler. The core action is front-loaded, followed by the read-only nature, the environment requirement, and the notable zero-balance behavior. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter read tool with readOnlyHint and openWorldHint already provided, the description covers the essential usage requirements (env var, zero-balance edge case). It does not describe return format or error handling, but with no output schema and a trivial operation, that is a minor gap. It is adequate for an agent to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers the single parameter fully with its own description ('Bech32 Cardano address (addr1... / addr_test1...)'). The tool description does not add anything beyond the schema for the parameter, so the baseline of 3 applies. It correctly points to the address parameter but adds no new syntax or format details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Read') and a clear resource ('ADA and native-asset balance of a Cardano address from Blockfrost'). It unambiguously distinguishes this from sibling tools like get_venue, get_quote, or open_cdp, which target different domains. No ambiguity remains about what this tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use it (for reading balances) and provides practical context: it requires BLOCKFROST_PROJECT_ID and explains the zero-balance behavior for unseen addresses. It does not explicitly exclude alternatives, but siblings are so different in purpose that no confusion is likely. It clearly frames this as a read operation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_market_dataGet Liqwid market ratesARead-only
Read live Liqwid v2 money-market data: supply APY, borrow APR and utilization per market. Read-only, no API key needed. Pass asset to filter to one market by its display name (e.g. "ADA", "iUSD").
| Name | Required | Description | Default |
|---|---|---|---|
| asset | No | Filter to one market by display name, case-insensitive |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint and openWorldHint, so the read-only claim is expected; however, the description adds meaningful context by stating 'no API key needed,' specifying 'live Liqwid v2' data, and naming the exact data fields returned. No behavioral contradictions with the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler. The main purpose is front-loaded, followed by authentication context, then the parameter behavior with examples. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only getter with one optional parameter, the description is complete: it states what data is returned, that it is live, that no API key is needed, and how to filter. The absence of an output schema is mitigated by explicitly listing the returned metrics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and already documents asset as a case-insensitive display-name filter, so the baseline is 3. The description adds value by giving concrete examples ('ADA', 'iUSD') that illustrate valid asset values, which the schema alone does not provide.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Read live Liqwid v2 money-market data,' then enumerates exactly what is returned (supply APY, borrow APR, utilization per market). This makes it easy to distinguish from sibling tools like get_quote or get_balance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for read-only market data and notes that no API key is needed, but it never explicitly states when to prefer this over alternatives or when not to use it. Usage context is clear, but exclusion/alternative guidance is missing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_positionGet DeFi positions for an addressARead-only
Read open positions for a Cardano address: Indigo CDPs (collateral, minted iAsset debt, frozen flag, and the CDP out-ref that close_cdp needs) or Liqwid loans (debt, collateral value, health factor, LTV). Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Bech32 Cardano address that owns the positions | |
| protocol | Yes | Which protocol to read positions from |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description reinforces this with 'Read-only.' Beyond that, it details what data is returned for each protocol (e.g., collateral, debt, health factor), which gives the agent concrete expectations about the operation's behavior without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no redundant phrasing. It front-loads the core purpose, then provides concise protocol-specific details, all in an efficient and structured manner.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Since there is no output schema, the description appropriately explains the return values for both protocols, including the CDP out-ref that close_cdp needs. It covers everything an agent needs to know to invoke the tool and interpret its result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so both parameters (address and protocol) are fully documented in the schema. The description does not add additional meaning to the parameters beyond what the schema already provides, so it earns the baseline score of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads open positions for a Cardano address, and then enumerates the exact types (Indigo CDPs and Liqwid loans) with their key fields. It also distinguishes itself from siblings like get_balance by focusing on positions, making its purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context on when to use the tool (to read positions from specific protocols), and the protocol parameter selects the type. It does not explicitly mention alternatives or exclusions, but the sibling set and the explicit protocol choice make the intended usage evident.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_quoteGet cross-chain swap quotesARead-only
Race the BazaarSwap routing backend for cross-chain swap quotes (for example EVM assets into ADA) and return the best route plus every route found, sorted by net output. Read-only: quoting moves no funds. Amounts are in the source token's smallest unit. The returned quoteId feeds build_swap_tx. The race can take up to ~25 seconds.
| Name | Required | Description | Default |
|---|---|---|---|
| amount | Yes | Amount to send, in the source token's smallest unit | |
| toChain | Yes | Destination chain id, e.g. "CARDANO" for Cardano | |
| toToken | Yes | Destination token address; native ADA on "CARDANO" is the zero address | |
| slippage | No | Slippage tolerance in percent, e.g. "0.5" | |
| fromChain | Yes | Source chain id, e.g. "1" for Ethereum | |
| fromToken | Yes | Source token address (or native-token sentinel) | |
| userAddress | Yes | Sender address on the source chain | |
| recipientAddress | No | Destination-chain recipient; defaults to the sender when omitted |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint. The description adds value beyond that: it explains the racing behavior, the ~25-second latency, that it returns both the best route and all routes sorted by net output, and the relationship to build_swap_tx. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, all carrying weight: purpose, read-only safety, amount units, and quoteId integration / timing. Purpose is front-loaded; no filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description explains the return shape at a high level (best route + all routes sorted, quoteId) and covers latency and safety. It could detail the route object structure or error cases, but given the strong annotations and 100% schema coverage, only a minor gap remains.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% description coverage, so the baseline is 3. The description repeats the amount-unit detail already in the schema ('Amounts are in the source token's smallest unit') and adds no new meaning for parameters like slippage, fromChain, or userAddress.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Race the BazaarSwap routing backend for cross-chain swap quotes' and states the exact output (best route plus every route, sorted by net output). It differentiates from build_swap_tx by noting the returned quoteId feeds that tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: read-only, no funds moved, quoteId feeds build_swap_tx, and a ~25s race duration. However, it does not explicitly name alternatives or state when NOT to use this tool, so it stops short of the 'explicit when/when-not/alternatives' bar.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_venueGet one Cardano DeFi venueARead-only
Get the full taxonomy record for one venue by id (e.g. "minswap", "liqwid", "indigo"): category, url, assets, capabilities, integration level and caveats. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Venue id, e.g. "indigo" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description repeats the read-only annotation but adds value by detailing what the record contains. It does not cover error cases or rate limits, but given the simple read-only nature and annotation coverage, the provided details are sufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The first sentence front-loads the purpose and output contents, the second confirms read-only. Every word serves a purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter read tool with no output schema, the description adequately explains what is returned. It lacks explicit error behavior or a pointer to list_venues, but those are minor gaps given the tool's simplicity and the read-only annotation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already describes the id parameter. The description adds multiple concrete examples ("minswap", "liqwid", "indigo") and the phrase "by id" clarifies the expected input context, going slightly beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource (Get the full taxonomy record) and differentiates from list_venues by focusing on a single venue by id. It also enumerates the fields included (category, url, assets, capabilities, integration level, caveats), which makes the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage: call this tool when you have a known venue id and need the full record. It does not explicitly mention alternatives like list_venues for discovering ids or when not to use this tool, leaving the usage context to be inferred.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_venuesList Cardano DeFi venuesARead-only
List the indexed Cardano DeFi venues (DEXes, lending markets, CDP and stablecoin protocols, perps). Optionally filter by category, asset ticker or capability, or pass query for a free-text search over id, name, description and assets. Read-only: returns index data, not live chain state.
| Name | Required | Description | Default |
|---|---|---|---|
| asset | No | Asset ticker the venue must list, e.g. "ADA" or "iUSD" | |
| query | No | Free-text search; when set, the other filters are ignored | |
| category | No | Venue category filter | |
| capability | No | Capability the venue must offer, e.g. "borrow" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already signals safety, and the description adds meaningful context by stating 'Read-only: returns index data, not live chain state.' This clarifies that results are from the index, not a live chain query, which is valuable beyond the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences, front-loaded with the core purpose, then filter options, then an important read-only qualifier. No wasted words or redundant repetition of schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list tool with 4 optional parameters, full schema coverage, and a readOnlyHint, the description provides enough to invoke it correctly: what it lists, which filters exist, what free-text query searches, and what the data scope is. No output schema exists, but the nature of a venue list makes the return shape largely predictable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, and the description adds value by expanding on the parameter meanings: it lists venue category types, explains what 'asset' refers to, and specifies that 'query' searches id, name, description, and assets. This complements rather than repeats the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'List the indexed Cardano DeFi venues' with concrete category examples. This clearly distinguishes list_venues from singular sibling tools like get_venue.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description conveys clear usage context: it is the collection-listing tool with optional filters for category, asset, capability, and free-text query. It does not explicitly name alternatives or exclusions, but the list-oriented framing makes when-to-use unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
open_cdpBuild an unsigned Indigo open-CDP transactionA
Build a transaction that opens an Indigo CDP: lock ADA collateral and mint an iAsset (e.g. iUSD). Returns an UNSIGNED transaction as CBOR hex with an empty witness set, plus a human-readable summary. Pyth-priced markets (e.g. iUSD): the tx embeds a signed price with a ~280-second validity window, so sign and submit promptly after building — a paused/stale tx fails on-chain validation; rebuild instead. This server never signs, never submits and never holds keys or funds — the agent signs it (CIP-30 signTx) and submits it. ADA collateral only; requires BLOCKFROST_PROJECT_ID and INDIGO_SYSTEM_PARAMS_URL.
| Name | Required | Description | Default |
|---|---|---|---|
| iasset | Yes | iAsset to mint, e.g. "iUSD" | |
| address | Yes | Bech32 Cardano address that will own the CDP and fund it | |
| mintAmount | Yes | iAsset amount to mint, in its smallest unit | |
| collateralLovelace | Yes | ADA collateral to lock, in lovelace (1 ADA = 1000000 lovelace) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide only readOnlyHint=false, openWorldHint=true, and destructiveHint=false. The description adds substantial behavioral disclosure: the server never signs, never submits, never holds keys or funds, the returned tx is unsigned and must be signed by the agent, and Pyth-priced txs expire and fail on-chain if stale. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four dense sentences, each earning its place: the first states the main purpose and return value, the second covers the critical timing caveat, the third clarifies the security/trust model, and the fourth lists prerequisites. There is no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description fully specifies what the agent receives, what to do next, what can fail, and what environment prerequisites are needed. It covers return format, signing/submission workflow, expiry behavior, collateral type, and required configuration, making the tool safe and actionable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so all four parameters are already documented with units and formats. The description reinforces that ADA collateral is used and gives 'iUSD' as an example iAsset, but it does not meaningfully extend parameter semantics beyond the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('build') and resource ('transaction that opens an Indigo CDP'), with concrete actions ('lock ADA collateral and mint an iAsset') and the precise return type ('UNSIGNED transaction as CBOR hex with an empty witness set, plus a human-readable summary'). This clearly distinguishes it from sibling tools like close_cdp and build_swap_tx.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for use: it is for opening a CDP and the caller must sign and submit the result. It also provides a critical timing guideline with the ~280-second price-validity window and instructs to rebuild if the tx goes stale. It does not explicitly name sibling alternatives, but the usage context is unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
9 tool updates
v0.1.0- First observed
build_swap_tx - First observed
close_cdp - First observed
get_balance - First observed
get_market_data - First observed
get_position - First observed
get_quote - First observed
get_venue - First observed
list_venues - First observed
open_cdp
TDQS
Scored across 9 tools
Tools are mostly distinct, but get_quote and build_swap_tx are tightly coupled (quote must precede build), and get_balance/get_position both read address state but for different purposes. Minor potential confusion between get_position and get_balance for an agent, but descriptions clarify domains.
All verbs are in present tense (get, list, build, open, close) and nouns are clear (venue, quote, swap_tx, balance, position, market_data, cdp). The pattern is consistent, with minor deviation like 'list_venues' vs 'get_*' but still predictable. Overall coherent.
9 tools is well-scoped for a Cardano DeFi server covering venue discovery, quoting/swap, balance/position reads, market data, and CDP lifecycle. Each tool has a clear purpose and no redundancy.
The surface covers venue discovery, read-only balances/positions, market data, swap quoting/building, and CDP open/close. Missing operations like updating or adjusting a CDP (adding collateral, minting more iAsset) and Liqwid loan lifecycle (borrow, repay) are notable gaps, but the core DeFi workflows are present.
Maintenance
Related MCP Connectors
Non-custodial DeFi for AI agents: swaps, concentrated liquidity (V3/V4) zaps + ranges, 5 EVM chains
Non-custodial DEX aggregator for autonomous AI agents: best-price swaps on 8 chains, no API key.
Non-custodial DeFi tools for AI agents on Solana: swaps, perps, lending, staking, equities.
Token swaps and honeypot/rug checks for AI agents on 8 chains, paid per-call in USDC via x402.
Related MCP Servers
- AlicenseCqualityDmaintenanceEnables AI agents to interact with cryptocurrency ecosystems through wallet management, trading operations (swaps, DCA, limit orders), staking, and multi-chain support starting with Solana.37GPL 3.0
- FlicenseAqualityFmaintenanceDeFi execution and agent-to-agent economy tools for AI agents — swaps, yield, transfers, policy enforcement, trust scoring, A2A jobs, and P\&L across Ethereum, Base, Arbitrum, and Polygon.311-
- AlicenseBqualityDmaintenanceProvides AI assistants with real-time access to Cardano DeFi data, including token, pool, wallet, swap, trade, OTC, and DCA information via Cardexscan's DEX scanner and aggregator.2410 npmMIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to perform complex crypto operations like cross-chain routing, contract decoding, portfolio management, and anti-rug security checks, returning unsigned transactions for safe signing by the agent.MIT