
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
lighter-mcp
Advanced tools
MCP server for Lighter perpetuals, including the H100 compute-price market. Built by Prism. Not affiliated with, endorsed by, or operated by Lighter or elliottech.
An MCP server that gives an agent read access to Lighter markets and a guarded path to place orders, including market 182, the perpetual on NVIDIA H100 rental cost.
Built by Prism. Not affiliated with, endorsed by, or operated by Lighter or elliottech.
npx -y lighter-mcp
Node 20 or newer. The server speaks MCP over stdio and writes diagnostics to stderr.
{
"mcpServers": {
"lighter": {
"command": "npx",
"args": ["-y", "lighter-mcp"],
"env": {
"LIGHTER_NETWORK": "mainnet"
}
}
}
}
| Tool | Arguments | Signs |
|---|---|---|
lighter_markets | query, limit | no |
lighter_market | market_id or symbol, depth | no |
lighter_h100 | none | no |
lighter_funding | market_id or symbol, history_limit | no |
lighter_account | account_index, optional market selector | no |
lighter_place_order | market selector, side, size, order_type, price, max_notional_usd | yes |
lighter_cancel | market selector, order_index | yes |
lighter_cancel_all | none | yes |
lighter_hedge_h100 | gpu_hours, side, max_notional_usd, execute | only when execute is true |
Lighter cancels account-wide, so lighter_cancel_all clears every market and cannot be scoped to
one. Order indexes travel as decimal strings, since they exceed the safe integer range.
lighter_markets reads Lighter's market-detail route. That route carried 229 markets on mainnet on
2026-08-26, and the response reports the live count.
lighter_funding returns Lighter's own rates. The same route carries Binance, Bybit, and
Hyperliquid for reference, and those rows are left out, since a position opened here collects
Lighter's rate.
Responses are JSON, capped at 16,000 characters. Long lists are shortened and the count of omitted items is reported, so a full market listing cannot flood the context.
| Variable | Required | Purpose |
|---|---|---|
LIGHTER_NETWORK | no | mainnet, testnet, or robinhood. Defaults to mainnet |
LIGHTER_ACCOUNT_INDEX | for signing | Sub-account the agent trades from |
LIGHTER_API_KEY_INDEX | for signing | API key slot, 0 to 254 |
LIGHTER_API_KEY_PRIVATE_KEY | for signing | API key private key |
LIGHTER_MAX_NOTIONAL_USD | for signing | Per-order notional ceiling, no default |
LIGHTER_CHAIN_ID | on robinhood | Layer-2 chain id bound into every signature |
LIGHTER_READ_ONLY_TOKEN | no | Read account state without a signing key |
Set all four signing variables or none. A partial set stops the server at startup with a message naming what is missing, rather than starting in a state where an order fails halfway through.
Mainnet signs against chain id 304 and testnet against 300, so LIGHTER_CHAIN_ID is only there to
override them. Lighter on Robinhood Chain publishes no chain id, so signing there needs one, and
the server stops at startup instead of letting the first order fail at the signer.
lighter_place_order and lighter_hedge_h100 require max_notional_usd on every call. There is
no default and no way to opt out.LIGHTER_MAX_NOTIONAL_USD as a second ceiling, and the lower of the
two wins.lighter_hedge_h100 returns a plan and sends nothing unless execute is true.A Lighter API key is full write authority over the account it is bound to, so run this server against a dedicated sub-account funded with only what the agent may lose.
The H100 book is thin. Measured on 2026-08-26 it traded about $7,100 over 24 hours, held open interest near $10,000, and showed 4.00 of size at the top of book on each side. Lighter's Standard rate tier allows 60 requests per minute, so the server caches the market list for 30 seconds.
FAQs
MCP server for Lighter perpetuals, including the H100 compute-price market. Built by Prism. Not affiliated with, endorsed by, or operated by Lighter or elliottech.
The npm package lighter-mcp receives a total of 30 weekly downloads. As such, lighter-mcp popularity was classified as not popular.
We found that lighter-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.