github analyzed 6851755

joinQuantish/polymarket-mcp

github

Self-hosted MCP server for AI agent trading on Polymarket prediction markets

maintainer
joinQuantish
license
first seen
2026-08-13
last seen
2026-08-13
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 28 tools
transport stdio · http verified reported listed in the official MCP registry counts 28 tools · 0 res · 0 prompts permission surface via README inference

tools

  • cancel_all_orders

    Cancel all open orders

  • cancel_order

    Cancel an open order

  • claim_winnings

    Claim resolved market winnings

  • create_additional_api_key

    Create new API key

  • execute_atomic_orders

    Execute multiple orders atomically

  • export_private_key

    Export wallet private key

  • get_balances

    Get USDC/MATIC balances

  • get_claimable_winnings

    Check redeemable winnings

  • get_deposit_addresses

    Get addresses for depositing (EVM, Solana, BTC)

  • get_onchain_shares

    Get all ERC-1155 holdings (including gifted)

  • get_orderbook

    Get market bids/asks

  • get_orders

    Get order history

  • get_positions

    Get your positions

  • get_price

    Get market midpoint price

  • get_swap_quote

    Get swap quote

  • get_wallet_status

    Check wallet deployment and approval status

  • import_private_key

    Import existing wallet

  • list_api_keys

    List your API keys

  • place_order

    Place buy/sell order

  • request_api_key

    Create account with new wallet (or recover existing)

  • revoke_api_key

    Revoke an API key

  • send_matic

    Send MATIC from EOA

  • setup_wallet

    Deploy Safe wallet and set approvals

  • swap_tokens

    Swap tokens via LI.FI

  • sync_positions

    Sync positions from Polymarket API

  • transfer_native_usdc

    Send Circle native USDC

  • transfer_shares

    Send ERC-1155 shares

  • transfer_usdc

    Send bridged USDC

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 6851755 · analyzer v33 · 1d ago

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 34

network 8

  • net joinQuantish-polymarket-mcp-6851755/src/index.ts :6 import axios from 'axios';
  • net joinQuantish-polymarket-mcp-6851755/src/mcp/tools.ts :1090 const response = await fetch('https://bridge.polymarket.com/deposit', {
  • net joinQuantish-polymarket-mcp-6851755/src/routes/search.ts :37 const response = await fetch(DISCOVERY_EXECUTE_URL, {
  • net joinQuantish-polymarket-mcp-6851755/src/services/market.service.ts :60 const response = await fetch(`${this.gammaApiUrl}/markets?${params}`);
  • net joinQuantish-polymarket-mcp-6851755/src/services/order.service.ts :59 const clobResponse = await fetch(
  • net joinQuantish-polymarket-mcp-6851755/src/services/position.service.ts :68 const response = await fetch(
  • net joinQuantish-polymarket-mcp-6851755/src/services/serper.service.ts :55 const response = await fetch(`${SERPER_API_URL}/news`, {
  • net joinQuantish-polymarket-mcp-6851755/src/services/swap.service.ts :177 const response = await fetch(`${LIFI_API_URL}/quote?${params}`, {

secrets 6

  • secrets joinQuantish-polymarket-mcp-6851755/src/config/index.ts :30 key: process.env.ENCRYPTION_KEY || '',
  • secrets joinQuantish-polymarket-mcp-6851755/src/mcp/http-handler.ts :62 if (apiKey === process.env.API_ADMIN_KEY) {
  • secrets joinQuantish-polymarket-mcp-6851755/src/mcp/server.ts :41 const envApiKey = process.env.MCP_API_KEY;
  • secrets joinQuantish-polymarket-mcp-6851755/src/mcp/tools.ts :780 const botSecret = process.env.BOT_SIGNING_SECRET;
  • secrets joinQuantish-polymarket-mcp-6851755/src/routes/admin.ts :23 const expectedKey = process.env.ADMIN_API_KEY;
  • secrets joinQuantish-polymarket-mcp-6851755/src/routes/search.ts :11 const DISCOVERY_API_KEY = config.quantish?.discoveryKey || process.env.QUANTISH_DISCOVERY_KEY || '';

database 3

  • db joinQuantish-polymarket-mcp-6851755/src/db/index.ts :1 import { PrismaClient } from '@prisma/client';
  • db joinQuantish-polymarket-mcp-6851755/src/services/order.service.ts :9 import { OrderSide, OrderStatus, OrderType } from '@prisma/client';
  • db joinQuantish-polymarket-mcp-6851755/src/services/wallet.service.ts :9 import { UserStatus } from '@prisma/client';

declared dependencies 20

  • @modelcontextprotocol/sdk@^1.23.0
  • @polymarket/builder-relayer-client@^0.0.8
  • @polymarket/builder-signing-sdk@^0.0.8
  • @polymarket/clob-client@^5.0.0
  • @polymarket/order-utils@^2.0.0
  • @prisma/client@^5.22.0
  • cors@^2.8.5
  • dotenv@^16.4.5
  • ethers@^5.7.2
  • express@^4.21.1
  • express-rate-limit@^7.4.1
  • helmet@^8.0.0
  • uuid@^10.0.0
  • @types/cors@^2.8.17
  • @types/express@^5.0.0
  • @types/node@^22.9.0
  • @types/uuid@^10.0.0
  • prisma@^5.22.0
  • tsx@^4.19.2
  • typescript@^5.6.3