StratVerity MCP Server
StratVerity MCP Server
审计并验证算法交易回测——直接来自 Claude Code、Cursor、Windsurf 以及任何 MCP 客户端。
StratVerity MCP 向 LLM 编码代理提供回测审计工具。它将所有计算委托给 StratVerity FastAPI 后端(https://api.stratverity.com),并且绝不会在本地执行提交的策略代码。
工具
工具 | 描述 |
| 策略摘录的静态诊断(前视偏差、重绘、过拟合)。 |
| 通过 SHA-256 哈希验证密封审计证明的真实性。 |
| 为认证审计生成可嵌入的徽章 URL。 |
Related MCP server: ai-trader
安装
Smithery(推荐)
npx -y @stratverity/stratverity-mcpClaude Code
// .mcp.json
{
"mcpServers": {
"stratverity": {
"command": "npx",
"args": ["-y", "@stratverity/stratverity-mcp"]
}
}
}Cursor / Windsurf
将相同的服务器条目添加到你的 MCP 配置中,指向 npx -y @stratverity/stratverity-mcp。
环境
变量 | 必需 | 描述 |
| 否 | 后端源(默认 |
| 否 | 用于经过身份验证的端点的 Bearer 令牌 |
开发
npm install
npm run build # compile to dist/
npm run dev # run with tsx安全
故障关闭:任何上游错误都会返回结构化错误,绝不会返回伪造结果。
不执行代码、不进行实时交易、不处理机密。
由上游后端进行速率限制。
许可证
MIT
Available Tools
3 toolsstratverity_get_badgeD
Generate the embeddable badge URL for an audit.
| Name | Required | Description | Default |
|---|---|---|---|
| score | No | ||
| status | No | certified | |
| audit_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It only states that a badge URL is generated, but discloses nothing else—no side effects, authentication needs, return format, or what the URL represents. This is a significant gap for an action that produces an artifact.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence, which is concise. However, 'concise' does not mean 'empty': the sentence is so terse that it fails to convey any meaningful detail, borderlining on under-specification rather than efficient communication.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with three parameters, no output schema, and no annotations, this description is woefully incomplete. It does not explain how the badge URL is constructed, what status values imply, or what the caller can expect in return. An agent would have no idea how to correctly use the parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage for its three parameters (audit_id, score, status). The description only implies the role of audit_id via 'for an audit' but does not clarify the meaning or valid combinations of score and status. It adds almost no value beyond the schema's bare property names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb ('Generate') and resource ('badge URL for an audit'). It is specific enough to understand the tool's primary function, though it does not differentiate it from the siblings beyond a general sense of generating output.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus stratverity_quick_check or stratverity_verify_hash. There is no mention of context, prerequisites, or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stratverity_quick_checkA
Static quick diagnostic of a strategy excerpt (look-ahead, repainting, overfitting). Never executes the code.
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | Strategy source code excerpt | |
| language | No | pinescript |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries full responsibility. It discloses one key behavioral trait — 'Never executes the code' — which clearly signals a safe, read-only static operation and distinguishes it from potentially code-executing alternatives. It does not disclose result accuracy or best-effort nature, but the single core safety disclosure is meaningful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that fronts the purpose, lists the specific diagnostic categories in a parenthetical, and closes with the safety caveat. Zero filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The definition is adequate for a simple 2-param tool, covering what it checks and the safety behavior. However, with no output schema present and no mention of return value format, diagnostic result semantics, or what the agent should do with the output, there is a notable gap for a tool whose sole deliverable is a diagnostic result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 50%. The 'source' parameter is documented in schema ('Strategy source code excerpt'), which is adequate but not enriched by the description. 'language' is self-documenting via its enum (pinescript/python/mql5) and default. The description adds nothing beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb-resource pair ('diagnostic of strategy code') and enumerates three concrete checks (look-ahead, repainting, overfitting), which sharply distinguishes it from the siblings stratverity_verify_hash and stratverity_get_badge. Purpose is explicit and unique.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The intended use (static analysis of strategy source) is clear, but there is no explicit when-to-use/when-not-to-use guidance or reference to the sibling tools (verify_hash, get_badge). The phrase 'Never executes the code' hints at safety rather than usage conditions S46. No exclusions or alternative-selection conditions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stratverity_verify_hashB
Verify the authenticity of a sealed audit proof by its SHA-256 hash.
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | 64-char hex audit hash |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full responsibility for behavioral disclosure. It indicates only that the tool 'verifies' and does not disclose whether the operation is read-only, whether it makes a network call, what happens for an invalid or unknown hash, or what response is returned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence with no filler words. The action, resource, and method are all present and the essential 'SHA-256 hash' constraint is included.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no nested objects and no annotations, the description is minimally sufficient to know what input to provide and why. However, with no output schema or annotations, it leaves the success/failure behavior and response format unspecified, which an agent would need to interpret the tool's result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents the lone 'hash' parameter with 100% coverage. The description adds value by clarifying that the hash is a SHA-256 hash of a sealed audit proof, which connects the parameter to the tool's purpose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Verify') and resource ('authenticity of a sealed audit proof by its SHA-256 hash'), which is substantive and more informative than the tool name alone. However, it does not explicitly distinguish this from sibling tools like stratverity_quick_check, which may also perform verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used when a caller has a SHA-256 hash and needs to confirm proof authenticity, but it gives no explicit when-to-use guidance, no exclusions, and no mention of alternatives such as stratverity_quick_check or stratverity_get_badge. An agent cannot tell when this tool is preferred over its siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v0.1.0- First observed
stratverity_get_badge - First observed
stratverity_quick_check - First observed
stratverity_verify_hash
TDQS
Scored across 3 tools
Each tool targets a clearly distinct function: quick_check performs static diagnostics, verify_hash authenticates proofs, and get_badge generates badge URLs. There is no overlap or ambiguity between them.
All tools share the stratverity_ prefix and snake_case style, but quick_check uses an adjective-noun pattern while verify_hash and get_badge follow verb_noun. This is a minor deviation from an otherwise consistent convention.
Three tools is at the lower end but appropriate for the server's narrow audit-verification purpose. Each tool earns its place and the set is well-scoped without unnecessary bloat.
The core workflow is covered: run a quick diagnostic, verify a sealed proof, and generate a badge. A minor gap is the lack of a way to retrieve audit details or history, but agents can work around this for the main use cases.
Maintenance
Related MCP Connectors
Verifiable backtests for AI-built trading strategies: deterministic engine, reproducible results.
- CPZAIOAuthcom.cpz-lab.mcp
Build, backtest, and deploy quantitative trading strategies from your AI agent.
Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.
Pre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceLocal-first backtesting engine with built-in overfitting detection (PBO, deflated Sharpe, bootstrap CI, walk-forward) and a native MCP server for AI agents to validate trading strategies.4Apache 2.0
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants like Claude to run backtests, fetch market data, list strategies, and analyze trading algorithms via natural language.1,106GPL 3.0

panther-mcpofficial
AlicenseAqualityDmaintenanceEnables AI assistants to backtest trading strategies described in plain English, providing access to market data, technical indicators, and comprehensive performance reports.131MIT- AlicenseBqualityAmaintenanceVerify a number before an agent asserts it — a Deflated Sharpe Ratio for backtest, plus eval-gap, subset-win, and judge-bias checks, with signed receipts anyone can verify offline.34MIT