
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
hyperliquid-agent-gateway
Advanced tools
MCP gateway for AI agents to Hyperliquid public data: perp/spot market overviews, quotes, order books, candles, trades, funding, account risk and HyperEVM transfers. Read-only, keyless.
An MCP (Model Context Protocol) server that gives AI agents read-only,
keyless access to Hyperliquid public data - the ~233-perp DEX
market, ~326 spot pairs, funding, per-account risk and HyperEVM (chain
999) token transfers. No API keys, no auth, no signing, no writes:
every tool reads public endpoints only (api.hyperliquid.xyz/info and
rpc.hyperliquid.xyz/evm), cached and rate-limited so an enthusiastic
agent cannot hammer the upstream.
account risk view)token_transfers)Full walkthroughs: examples/use-cases.md.
Claude Code:
claude mcp add hyperliquid -- uvx hyperliquid-agent-gateway
stdio (default, for local agents):
uvx hyperliquid-agent-gateway
or from a checkout:
git clone https://github.com/alekskram/hyperliquid-agent-gateway
cd hyperliquid-agent-gateway
uv sync
uv run hyperliquid-agent-gateway
Claude Desktop / Cursor config:
{
"mcpServers": {
"hyperliquid": {
"command": "uvx",
"args": ["hyperliquid-agent-gateway"]
}
}
}
Hosted form — streamable HTTP on port 8903:
uvx hyperliquid-agent-gateway --http # 127.0.0.1:8903
curl http://127.0.0.1:8903/health # -> {"ok": true, "service": "hyperliquid-agent-gateway", ...}
[mcp_servers.hyperliquid]
command = "uvx"
args = ["hyperliquid-agent-gateway"]
# 1) start the gateway (keep it running)
uvx hyperliquid-agent-gateway --http --port 8903 &
# 2) register it (merges into ~/.zcode/cli/config.json)
python3 - <<'PY'
import json, os
p = os.path.expanduser("~/.zcode/cli/config.json")
os.makedirs(os.path.dirname(p), exist_ok=True)
cfg = json.load(open(p)) if os.path.exists(p) else {}
cfg.setdefault("mcp", {}).setdefault("servers", {})["hyperliquid"] = {
"type": "http", "url": "http://127.0.0.1:8903/mcp"}
json.dump(cfg, open(p, "w"), indent=2)
print("hyperliquid-agent-gateway registered:", p)
PY
All 12 tools are read-only (annotated readOnlyHint: true, destructiveHint: false, openWorldHint: true).
| # | Tool | Signature | What it does |
|---|---|---|---|
| 1 | market_overview | market_overview(limit=20, sort="open_interest") | Perp market snapshot from ONE metaAndAssetCtxs call: per-coin mark, open interest, day volume, premium, max leverage + totals. sort in {open_interest, volume, premium}. |
| 2 | spot_overview | spot_overview(limit=20) | Spot pairs from spotMeta + ctxs with HIP-1 to ERC-20 links; @{index} names resolved to readable token names. |
| 3 | quote | quote(coin) | Bid/ask/mid/spread + top-of-book sizes from l2Book. mid is the book midpoint (bid+ask)/2 when both sides exist (mid_source: "book"); allMids is only a labeled fallback when the book lacks a side (mid_source: "allMids"); mid_source: null when neither knows the coin — with both sides present mid never leaves [bid, ask]. coin is the ONLY parameter (no size/limit). Unknown coin raises with 5 examples. |
| 4 | order_book | order_book(coin, depth=10) | Book levels per side with nSigFigs aggregation and per-side total liquidity. |
| 5 | candles | candles(coin, interval="1h", limit=100) | OHLCV rows newest-first; intervals 1m/15m/1h/4h/1d/1w/1M; startTime computed from limit. |
| 6 | trades | trades(coin, limit=20) | Recent public fills WITH both sides' addresses (users: [maker, taker]). |
| 7 | funding_history | funding_history(coin, limit=100) | Hourly funding rows + premium_now from the live asset ctx. |
| 8 | liquidation_risk | liquidation_risk(address) | Per-account risk: margin summary, cross maintenance margin, per-position leverage + liquidationPx when published; when null, an explicitly flagged ESTIMATED distance from the maintenance-margin ratio. Mark px is resolved per coin from metaAndAssetCtxs (fallback allMids) because live positions carry no markPx - see mark_px_source on each row. Includes funding drag. |
| 9 | trader_activity | trader_activity(address, limit=50) | Fills PnL/fees/volume/win-rate, funding net, open positions, per-coin breakdown. |
| 10 | funding_carry_screener | funding_carry_screener(topN=10, metric="premium") | Ranks ALL perps from ONE call; fundingHistory fetched only for the topN (weight economy). |
| 11 | token_transfers | token_transfers(contract, limit=100, from_block=None) | HyperEVM ERC-20 Transfer logs via adaptive-window eth_getLogs; rows carry from/to/value/txHash/blockNumber/ts with per-token decimals + decimals_source (static map or assumed_18). |
| 12 | wallet_balance | wallet_balance(address) | Native (eth_getBalance) + up to 20 ERC-20s (eth_call balanceOf, resolved from spotMeta) + Hyperliquid spot balances; every row carries decimals/decimals_source. |
api.hyperliquid.xyz/info is open and one POST away — the traps start after that:
| Raw API gives you | You would have to build |
|---|---|
two mid-price sources that disagree (allMids vs l2Book) | the discipline of book-derived mids that never leave [bid, ask], with labeled fallbacks |
candleSnapshot whose cache key ignores nested request params | per-coin cache isolation (a naive first-coin key poisons every subsequent coin for the TTL) |
| OI in base units, funding as an hourly rate | unit normalization (×price), annualized carry math, a one-call screener that fetches history only for the top-N |
live positions that carry no markPx | per-coin mark resolution with a mark_px_source tag on every row, plus estimated-vs-published liquidation distance flags |
| raw HyperEVM RPCs | adaptive-window eth_getLogs, decimals resolution with decimals_source provenance |
Two independent, locally enforced budgets protect the upstream:
/info - 1200 weight per rolling 60s (Hyperliquid's documented
weight pricing), tracked per request type:
| type | weight |
|---|---|
allMids | 2 |
l2Book | 2 |
meta, metaAndAssetCtxs, spotMeta, spotMetaAndAssetCtxs | 20 |
recentTrades, clearinghouseState, userFills, userFunding, spotClearinghouseState | 20 |
fundingHistory | 20 base + extra per 20 items beyond the first |
candleSnapshot | 60 |
When the next request would exceed the budget the client waits once (<=5s) for the window to roll, then raises a clear error naming the limit - it never sleep-blocks forever.
HyperEVM RPC - 100 requests per rolling 60s (flat 1 per request),
enforced separately from /info. Over-budget calls raise immediately
(rpc-limit) - tools surface an honest error dict, and
wallet_balance stops its ERC-20 scan at the cap.
TTL caches additionally dedupe repeated calls per data type: allMids 15s, recentTrades 15s, l2Book 5s, metaAndAssetCtxs 60s, spotMeta 3600s, spotMetaAndAssetCtxs 60s, candleSnapshot 300s, fundingHistory 300s, per-address account types 60s.
null always means "not
available", never zero.{"error": ..., "source": ..., "reason": ...}, never a traceback;
partial data degrades field-by-field with warnings[].liquidation_risk never invents a liquidation price: when the venue
publishes none, liq_px stays null and the distance is an
explicitly flagged estimate (formula in the tool's note). Mark px is
likewise never invented: live positions carry no markPx, so it is
resolved from metaAndAssetCtxs (fallback allMids) and the row's
mark_px_source says which; no source -> null.funding_drag / funding_net: the venue's userFunding returns
only NON-ZERO funding events, so a live null/empty for a fresh or
quiet address is expected behaviour, not a bug.decimals_source: "assumed_18" - do
not trust 6dp precision for unmapped tokens.age_seconds / fetched_at freshness fields.Four sibling read-only MCP gateways, one style — keyless, cached, honest degradation:
| Gateway | Focus |
|---|---|
| dydx-agent-gateway | dYdX v4: verified trader PnL, funding/OI anomaly detectors, leaderboard |
| arcus-agent-gateway | 194 tokenized US equities on Robinhood Chain: quotes, holders, whale transfers |
| hyperliquid-agent-gateway (you are here) | Hyperliquid: 233 perps + spot, funding carry, account risk, HyperEVM |
| aster-agent-gateway | Aster DEX: ~580 futures incl. 24/7 TradFi perps, funding caps/floors |
All four are on glama.ai and PyPI — install any of them with uvx <name>.
MIT.
FAQs
MCP gateway for AI agents to Hyperliquid public data: perp/spot market overviews, quotes, order books, candles, trades, funding, account risk and HyperEVM transfers. Read-only, keyless.
We found that hyperliquid-agent-gateway demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.