
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
polymarket-agent-mcp
Advanced tools
MCP server for Polymarket — trade, analyze markets, copy top traders, and manage your portfolio via AI
Trade, analyze, and automate Polymarket prediction markets through AI.
The most comprehensive MCP server for Polymarket — 48 tools spanning direct trading, market discovery, smart money tracking, copy trading, backtesting, risk management, and portfolio optimization. Works with Claude Code, Cursor, or any MCP-compatible client.
| Category | Count | Highlights |
|---|---|---|
| Discovery | 9 | Search, trending, featured, events, related markets, smart money flow |
| Analysis | 8 | AI opportunity scoring, conviction rating, price history, market quality, top holders, comparison |
| Trading | 8 | Buy, sell, batch orders, limit orders, order management, safety limits |
| Copy Trading | 5 | Watch traders, auto-monitor, auto-rebalance, backtest |
| Portfolio | 10 | Positions, P&L, balance, risk assessment, SL/TP, optimization, market alerts |
| Utilities | 8 | Dashboard, config, trade history, watchlists, agent logging |
npm install -g polymarket-agent-mcp
docker compose up
Add to ~/.claude/settings.json:
{
"mcpServers": {
"polymarket": {
"command": "npx",
"args": ["polymarket-agent-mcp"]
}
}
}
Just talk naturally to your AI assistant:
"What are the trending markets today?"
"Search for bitcoin prediction markets"
"Buy $5 on this market"
"Score this trader — should I copy them?"
"Backtest this trader with $10 per trade"
"Show smart money flow — what are the top traders buying?"
"Set stop-loss at 0.30 on my BTC position"
"Optimize my portfolio with a balanced strategy"
"Scan for arbitrage opportunities"
"Compare these two markets side by side"
| Tool | Description |
|---|---|
search_markets | Search markets by keyword (bitcoin, election, UFC...) |
discover_traders | Find top traders by PnL and volume |
discover_markets | Find markets by end date and category |
trending_markets | Top markets by 24h/7d/30d volume |
featured_markets | Most liquid markets by category (politics, sports, crypto...) |
discover_wta | WTA tennis markets with stink bid prices |
discover_flow | Smart money signals — multiple top traders buying same market |
find_related | Find markets related to a topic or market |
get_market_events | Browse all markets under an event |
| Tool | Description |
|---|---|
analyze_opportunity | AI-powered BUY/SELL/HOLD recommendation |
analyze_trader | Detailed trader profile, win rate, P&L |
score_trader | Conviction score (0-100) across 5 dimensions |
check_market | Market quality — spread, depth, price range |
get_price | Live bid/ask/spread prices |
get_price_history | Historical prices with sparkline (1h to 1m) |
get_top_holders | Biggest position holders in a market |
compare_markets | Side-by-side comparison of 2-5 markets |
| Tool | Description |
|---|---|
buy | Buy shares on any market |
sell | Sell an open position |
batch_order | Execute up to 10 orders at once |
place_stink_bid | Place limit orders at discount |
cancel_orders | Cancel all open orders |
get_open_orders | View pending limit orders |
get_order_status | Check status of a specific order |
go_live | Switch from preview to live mode |
| Tool | Description |
|---|---|
watch_wallet | Add/remove traders from watchlist |
start_monitor | Start automatic copy trading loop |
stop_monitor | Stop monitoring |
rebalance | Remove underperforming traders |
backtest_trader | Simulate copying a trader's past trades |
| Tool | Description |
|---|---|
get_balance | Account balance, budget, and P&L |
get_portfolio | Multi-wallet overview with P&L per trader |
get_positions | Open/closed positions |
close_position | Manually close a position |
set_exit_rules | Set stop-loss and take-profit levels |
check_exits | Check positions for resolution |
assess_risk | Portfolio risk scoring and warnings |
optimize_portfolio | AI-powered optimization (conservative/balanced/aggressive) |
watch_market | Market watchlist with price alerts |
detect_arbitrage | Find YES+NO price discrepancies |
| Tool | Description |
|---|---|
set_config | Update bot settings |
set_safety_limits | Max order size, exposure cap, spread tolerance |
get_dashboard | Terminal-formatted dashboard |
get_trade_history | Trade history with filters |
list_watchlist | Show watched wallets |
log_cycle | Log agent cycle for dashboard |
get_trader_positions | View a trader's open positions |
discover_wta | WTA tennis market discovery |
Claude Code / Cursor / AI Client
|
| MCP Protocol (stdio)
v
+------------------+
| MCP Server | 48 tools registered
| (index.ts) |
+--------+---------+
|
+----+----+
| |
Tools Services
| |
v v
+-------+ +------------+
| Zod | | Backtester |
| Input | | Scorer |
| Valid. | | SmartFlow |
+-------+ | Filter |
| Tracker |
| Executor |
+-----+------+
|
+-------+-------+
| | |
Data Gamma CLOB
API API API
The server supports two transport modes:
| Mode | Activation | Use case |
|---|---|---|
| stdio (default) | npx polymarket-agent-mcp | Claude Code, Cursor, local MCP clients |
| HTTP | --http flag or PORT env var | Self-hosted Docker, private VPS, single-user remote |
This server is designed for single-tenant use. Each client runs its own instance with its own SQLite database (copytrader.db), watchlist, daily budget, trade history, and monitor loop. The stdio mode is the recommended path for most users — npx polymarket-agent-mcp or the Claude Code config above gives you a fully isolated, local-only instance.
⚠️ Do not expose an HTTP instance publicly. The server has no per-user isolation: watchlist, positions, budget, and the background monitor loop are shared across every client that connects. A public HTTP deployment is effectively a shared workspace, not a multi-tenant SaaS. If you enable live trading, a public endpoint can drain your Polymarket wallet from any caller. Always configure the HTTP bearer-token env var (see PERMISSIONS.md) and keep the endpoint behind a firewall, VPN, or auth proxy.
# Flag
node dist/index.js --http
# Or set PORT (defaults to 3000)
PORT=8080 node dist/index.js
| Path | Method | Description |
|---|---|---|
/mcp | POST | MCP protocol endpoint (Streamable HTTP transport) |
/health | GET | Health check — returns { status, version, db } |
/.well-known/mcp/server-card.json | GET | MCP discovery card (tools, permissions, data handling) |
/ | GET | Server info with version and endpoint list |
The HTTP transport accepts an optional bearer token gated by an environment variable — the exact name is documented in PERMISSIONS.md. When set, clients must send Authorization: Bearer <token> on requests to /mcp; when unset the endpoint is open (suitable only for local or private networks).
The included Dockerfile builds a multi-stage production image that runs in HTTP mode:
docker build -t polymarket-mcp .
docker run -p 3000:3000 -v mcp-data:/app/data \
-e DAILY_BUDGET=50 \
polymarket-mcp
# To require bearer-token auth on /mcp, also pass the HTTP bearer env var
# listed in PERMISSIONS.md (e.g. `-e <VAR>=my-secret-key`).
DB_PATH (default /app/data/copytrader.db) controls where SQLite data is persisted — mount a volume to keep it across restarts.
All secrets stay in memory for the lifetime of the process — they are never written to the database, logs, or disk, and are only transmitted to their designated Polymarket API endpoint over HTTPS. The complete authoritative env var list, with per-variable sensitivity and scope, lives in PERMISSIONS.md and SECURITY.md.
| Variable | Required | Default | Description |
|---|---|---|---|
COPY_MODE | No | preview | preview (simulated) or live (real orders) |
DAILY_BUDGET | No | 20 | Max daily spend in USDC |
MIN_CONVICTION | No | 3 | Min trade size to copy ($) |
| Wallet signing key | Live only | - | Locally signs CLOB order payloads, never persisted (see PERMISSIONS.md for exact env var name) |
| CLOB API credentials | Live only | - | API key / secret / passphrase — sent only to clob.polymarket.com (see PERMISSIONS.md for exact names) |
This package has a transparent, minimal footprint. Full disclosure: PERMISSIONS.md — machine-readable version in .well-known/mcp/server-card.json.
| Category | Scope |
|---|---|
| Network (outbound) | 3 Polymarket HTTPS APIs + 1 inbound-only WSS public price stream (ws-subscriptions-clob.polymarket.com) + optional license check (mcp-marketplace.io) |
| Filesystem | Single SQLite database file + .env read at startup — nothing else |
| Environment | API credentials (live mode only, in memory only), budget config, mode selection |
| Processes | None — no child processes, no shell commands, no eval/Function |
| Telemetry | None — no analytics, no crash reports, no update checks, no third-party data flow |
WebSocket scope: The WSS connection to Polymarket is inbound-only for public price updates. No wallet, credential, or user identity is transmitted — it carries the same public feed available to any browser client.
Secrets scope: Every secret environment variable is held in memory only, never logged, never persisted, and sent to exactly one host (see SECURITY.md).
git clone https://github.com/demwick/polymarket-agent-mcp.git
cd polymarket-agent-mcp
npm install
npm run build
npm test # 200+ tests
MIT - see LICENSE
FAQs
MCP server for Polymarket — trade, analyze markets, copy top traders, and manage your portfolio via AI
The npm package polymarket-agent-mcp receives a total of 541 weekly downloads. As such, polymarket-agent-mcp popularity was classified as not popular.
We found that polymarket-agent-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.