
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
MCP server for Lucyd prediction markets: let AI agents browse markets and trade
Connect an AI agent (Claude, Cursor or any MCP client) to Lucyd, a prediction markets exchange. Ask in plain language to browse markets, read the order book, trade, close positions and collect winnings.
Lucyd currently runs on the Ethereum Sepolia testnet with test USDC.
| Tool | What it does |
|---|---|
list_markets | Markets with filters by state and period |
get_market | One market: rules, strike, end date, outcome token ids |
get_order_book | Bids and asks of an outcome, best bid, best ask, mid |
list_trades | Recent trades, by market or trader |
get_positions | Tokens held, average price, value and profit |
get_trader_stats | Profit, volume, win rate of a wallet |
get_pnl_history | Profit over time |
top_traders | Leaderboard |
get_status | Whether the service, settlement and live trades are healthy |
get_wallet | Your address, ETH and USDC balances, approvals |
get_open_orders | Your resting orders |
get_order_history | Your past and current orders with status and fills |
place_order | Limit or market order (buy or sell up or down) |
close_position | Sell everything you hold on a market right away |
cancel_orders | Cancel by id, all on a market, or all |
approve_trading | One-time approvals for the Exchange contract |
set_auto_redeem | Turn automatic payout of winnings on or off |
redeem | Collect the payout of a resolved market |
Example requests:
Without a wallet key the server works read-only: markets, books, trades and any wallet's public stats.
For market data only, nothing to install: add https://mcp.lucyd.trade/mcp as a custom connector (remote MCP server, no authentication) in Claude, ChatGPT or any client that supports Streamable HTTP. It has the market data tools: markets, order books, trades, and positions and stats of any wallet address. Trading needs your own wallet key, so it works only with the local server below.
To run your own hosted copy, set LUCYD_HTTP_ADDR (for example 0.0.0.0:3006) and LUCYD_HTTP_HOSTS (the host names it answers to); the server then serves MCP at /mcp and refuses to start with a wallet key.
The easiest way needs only Node.js 18 or newer: the client runs npx -y @lucyd/mcp, which downloads the binary for your system on first run and checks its SHA-256. Nothing else to install, see the configs below.
Without Node.js, download the binary for your system from data.testnet.lucyd.trade/mcp (open the latest version folder; SHA256SUMS there lists the checksums) and put it anywhere, for example ~/bin/lucyd-mcp (lucyd-mcp.exe on Windows). On macOS and Linux make it executable with chmod +x lucyd-mcp. Then use its path instead of npx in the configs below.
Or build from source with Rust:
cargo install --git https://github.com/lucyd-trade/mcp-server
Replace the key with your trading wallet key. Restart the client afterwards.
Claude Code
claude mcp add lucyd -e LUCYD_PRIVATE_KEY=0xYOUR_KEY -- npx -y @lucyd/mcp
Claude Desktop: edit claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\).
Cursor: edit ~/.cursor/mcp.json.
Both use the same format:
{
"mcpServers": {
"lucyd": {
"command": "npx",
"args": ["-y", "@lucyd/mcp"],
"env": {
"LUCYD_PRIVATE_KEY": "0xYOUR_KEY"
}
}
}
}
If the client on Windows cannot start npx, use "command": "cmd" with "args": ["/c", "npx", "-y", "@lucyd/mcp"].
The wallet needs USDC to buy and a little Sepolia ETH to pay gas for one-time approvals and redemptions. Then ask the agent to check your wallet and approve trading, or call approve_trading directly. Trading itself costs no gas: the exchange settles fills on chain.
| Variable | Default | Meaning |
|---|---|---|
LUCYD_PRIVATE_KEY | none | Wallet key that signs orders and transactions. Without it trading tools are off |
LUCYD_MAX_ORDER_USD | 100 | Largest buy order in USDC |
LUCYD_READ_ONLY | false | true turns off every tool that trades or sends transactions |
LUCYD_RPC_URL | https://ethereum-sepolia-rpc.publicnode.com | Sepolia RPC node |
LUCYD_API_URL | https://api.testnet.lucyd.trade | Markets API |
LUCYD_CLOB_URL | https://clob.testnet.lucyd.trade | Order book |
LUCYD_MAX_ORDER_USD low, or LUCYD_READ_ONLY=true if you only want data.The server runs locally and talks to the agent over stdio. Market data comes from the public API. Orders are signed with EIP-712 and sent to the order book over WebSocket (protocol in the API docs). Approvals and redemptions are plain transactions on Sepolia.
| Contract | Address |
|---|---|
| Exchange | 0x6588c789c6b6df8f8b6b92e6433f813cc2d1d4d0 |
| ConditionalTokens (outcome tokens) | 0xB62eFc43C16b4E2Bf1aAAD33002368e55708538D |
| USDC (6 decimals) | 0x1c7D4B196Cb0C7B01d743Fbc6116a902379C7238 |
| AutoRedeemer | 0x42Bf669f0A3DCc95510001Ddbc43D56FdE67268F |
MIT
FAQs
MCP server for Lucyd prediction markets: let AI agents browse markets and trade
The npm package @lucyd/mcp receives a total of 0 weekly downloads. As such, @lucyd/mcp popularity was classified as not popular.
We found that @lucyd/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.