StratVerity MCP Server
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@StratVerity MCP ServerAudit my backtest strategy for overfitting and look-ahead bias."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
StratVerity MCP Server
Audit and verify algorithmic trading backtests — directly from Claude Code, Cursor, Windsurf, and any MCP client.
StratVerity MCP exposes backtest-audit tools to LLM coding agents. It delegates
all computation to the StratVerity FastAPI backend (https://api.stratverity.com)
and never executes submitted strategy code locally.
Tools
Tool | Description |
| Static diagnostic of a strategy excerpt (look-ahead bias, repainting, overfitting). |
| Verify the authenticity of a sealed audit proof by SHA-256 hash. |
| Generate the embeddable badge URL for a certified audit. |
Related MCP server: ai-trader
Install
Smithery (recommended)
npx -y @stratverity/stratverity-mcpClaude Code
// .mcp.json
{
"mcpServers": {
"stratverity": {
"command": "npx",
"args": ["-y", "@stratverity/stratverity-mcp"]
}
}
}Cursor / Windsurf
Add the same server entry to your MCP config, pointing at npx -y @stratverity/stratverity-mcp.
Environment
Variable | Required | Description |
| no | Backend origin (default |
| no | Bearer token for authenticated endpoints |
Development
npm install
npm run build # compile to dist/
npm run dev # run with tsxSecurity
Fail-closed: any upstream error returns a structured error, never a fabricated result.
No code execution, no live trading, no secret handling.
Rate-limited by the upstream backend.
License
MIT
Available Tools
3 toolsstratverity_get_badgeD
Generate the embeddable badge URL for an audit.
| Name | Required | Description | Default |
|---|---|---|---|
| score | No | ||
| status | No | certified | |
| audit_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It only states that a badge URL is generated, but discloses nothing else—no side effects, authentication needs, return format, or what the URL represents. This is a significant gap for an action that produces an artifact.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence, which is concise. However, 'concise' does not mean 'empty': the sentence is so terse that it fails to convey any meaningful detail, borderlining on under-specification rather than efficient communication.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with three parameters, no output schema, and no annotations, this description is woefully incomplete. It does not explain how the badge URL is constructed, what status values imply, or what the caller can expect in return. An agent would have no idea how to correctly use the parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage for its three parameters (audit_id, score, status). The description only implies the role of audit_id via 'for an audit' but does not clarify the meaning or valid combinations of score and status. It adds almost no value beyond the schema's bare property names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb ('Generate') and resource ('badge URL for an audit'). It is specific enough to understand the tool's primary function, though it does not differentiate it from the siblings beyond a general sense of generating output.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus stratverity_quick_check or stratverity_verify_hash. There is no mention of context, prerequisites, or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stratverity_quick_checkA
Static quick diagnostic of a strategy excerpt (look-ahead, repainting, overfitting). Never executes the code.
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | Strategy source code excerpt | |
| language | No | pinescript |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries full responsibility. It discloses one key behavioral trait — 'Never executes the code' — which clearly signals a safe, read-only static operation and distinguishes it from potentially code-executing alternatives. It does not disclose result accuracy or best-effort nature, but the single core safety disclosure is meaningful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that fronts the purpose, lists the specific diagnostic categories in a parenthetical, and closes with the safety caveat. Zero filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The definition is adequate for a simple 2-param tool, covering what it checks and the safety behavior. However, with no output schema present and no mention of return value format, diagnostic result semantics, or what the agent should do with the output, there is a notable gap for a tool whose sole deliverable is a diagnostic result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 50%. The 'source' parameter is documented in schema ('Strategy source code excerpt'), which is adequate but not enriched by the description. 'language' is self-documenting via its enum (pinescript/python/mql5) and default. The description adds nothing beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb-resource pair ('diagnostic of strategy code') and enumerates three concrete checks (look-ahead, repainting, overfitting), which sharply distinguishes it from the siblings stratverity_verify_hash and stratverity_get_badge. Purpose is explicit and unique.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The intended use (static analysis of strategy source) is clear, but there is no explicit when-to-use/when-not-to-use guidance or reference to the sibling tools (verify_hash, get_badge). The phrase 'Never executes the code' hints at safety rather than usage conditions S46. No exclusions or alternative-selection conditions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stratverity_verify_hashB
Verify the authenticity of a sealed audit proof by its SHA-256 hash.
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | 64-char hex audit hash |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full responsibility for behavioral disclosure. It indicates only that the tool 'verifies' and does not disclose whether the operation is read-only, whether it makes a network call, what happens for an invalid or unknown hash, or what response is returned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence with no filler words. The action, resource, and method are all present and the essential 'SHA-256 hash' constraint is included.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no nested objects and no annotations, the description is minimally sufficient to know what input to provide and why. However, with no output schema or annotations, it leaves the success/failure behavior and response format unspecified, which an agent would need to interpret the tool's result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents the lone 'hash' parameter with 100% coverage. The description adds value by clarifying that the hash is a SHA-256 hash of a sealed audit proof, which connects the parameter to the tool's purpose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Verify') and resource ('authenticity of a sealed audit proof by its SHA-256 hash'), which is substantive and more informative than the tool name alone. However, it does not explicitly distinguish this from sibling tools like stratverity_quick_check, which may also perform verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used when a caller has a SHA-256 hash and needs to confirm proof authenticity, but it gives no explicit when-to-use guidance, no exclusions, and no mention of alternatives such as stratverity_quick_check or stratverity_get_badge. An agent cannot tell when this tool is preferred over its siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v0.1.0- First observed
stratverity_get_badge - First observed
stratverity_quick_check - First observed
stratverity_verify_hash
TDQS
Scored across 3 tools
Each tool targets a clearly distinct function: quick_check performs static diagnostics, verify_hash authenticates proofs, and get_badge generates badge URLs. There is no overlap or ambiguity between them.
All tools share the stratverity_ prefix and snake_case style, but quick_check uses an adjective-noun pattern while verify_hash and get_badge follow verb_noun. This is a minor deviation from an otherwise consistent convention.
Three tools is at the lower end but appropriate for the server's narrow audit-verification purpose. Each tool earns its place and the set is well-scoped without unnecessary bloat.
The core workflow is covered: run a quick diagnostic, verify a sealed proof, and generate a badge. A minor gap is the lack of a way to retrieve audit details or history, but agents can work around this for the main use cases.
Maintenance
Related MCP Connectors
Verifiable backtests for AI-built trading strategies: deterministic engine, reproducible results.
- CPZAIOAuthcom.cpz-lab.mcp
Build, backtest, and deploy quantitative trading strategies from your AI agent.
Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.
Pre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceLocal-first backtesting engine with built-in overfitting detection (PBO, deflated Sharpe, bootstrap CI, walk-forward) and a native MCP server for AI agents to validate trading strategies.4Apache 2.0
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants like Claude to run backtests, fetch market data, list strategies, and analyze trading algorithms via natural language.1,068GPL 3.0

panther-mcpofficial
AlicenseAqualityDmaintenanceEnables AI assistants to backtest trading strategies described in plain English, providing access to market data, technical indicators, and comprehensive performance reports.131MIT- AlicenseBqualityAmaintenanceVerify a number before an agent asserts it — a Deflated Sharpe Ratio for backtest, plus eval-gap, subset-win, and judge-bias checks, with signed receipts anyone can verify offline.34MIT