
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
OKX MCP (Model Context Protocol) server providing trading and portfolio management tools
A Model Context Protocol (MCP) server that provides access to OKX trading and portfolio management functionality. This package allows AI assistants to interact with your OKX account to retrieve portfolio information, trading positions, order history, and more.
This MCP server is designed with security as a top priority. Here's what makes it safe to use:
Example: Ask Claude "give me account summary" and instantly get your portfolio breakdown, asset allocation, and trading insightsβall from your OKX account data.
Transform your trading experience with AI-powered portfolio insights. Once configured, you can ask Claude natural language questions about your OKX account:
The AI can provide instant analysis, generate insights, and help you make informed trading decisionsβall through simple conversation.
Access Your OKX Account:
Open API Management:
Create Your API Key:
Set Read-Only Permissions:
Generate and Copy Credentials:
Your credentials will look like this:
apikey = "12345678-abcd-1234-efgh-123456789abc"
secretkey = "ABCD1234EFGH5678IJKL9012MNOP3456"
IP = ""
API key name = "MCP Server"
Permissions = "Read"
Secure Your Credentials:
Before configuring Claude Desktop, you need to install Node.js.
Option 1: Download from Official Website
Open Claude Desktop Settings:
Access Developer Section:
Edit Configuration:
claude_desktop_config.json
file in your default text editorAdd OKX MCP Server Configuration:
{
"mcpServers": {
"okx-mcp": {
"command": "okx-mcp",
"env": {
"OKX_API_KEY": "your_api_key_here",
"OKX_API_SECRET": "your_secret_key_here",
"OKX_API_PASSPHRASE": "your_passphrase_here"
}
}
}
}
Update Your Credentials:
your_api_key_here
with your actual API Key from Step 1your_secret_key_here
with your actual Secret Key from Step 1your_passphrase_here
with your actual Passphrase from Step 1Restart Claude Desktop:
Test the Connection:
This MCP server provides the following tools for AI assistants:
get_account_summary
get_portfolio
get_positions
get_open_orders
get_order_history
instId
(required): Instrument ID (e.g., "BTC-USDT")begin
(optional): Start timestampend
(optional): End timestamp# Clone the repository
git clone https://github.com/maxbarinov/okx-mcp.git
cd okx-mcp
# Install dependencies
npm install
# Set up environment variables
cp .env.example .env
# Edit .env with your OKX API credentials
# Run in development mode
npm run dev
npm run build
src/
βββ services/
β βββ okxApiClient.ts # OKX API client wrapper
βββ tools/ # MCP tool implementations
βββ get_account_summary.ts
βββ get_portfolio.ts
βββ get_positions.ts
βββ get_open_orders.ts
βββ get_order_history.ts
MIT
If you encounter any issues or have questions:
FAQs
OKX MCP (Model Context Protocol) server providing trading and portfolio management tools
The npm package okx-mcp receives a total of 10 weekly downloads. As such, okx-mcp popularity was classified as not popular.
We found that okx-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last weekβs supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.