Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "botornot": {
      "type": "http",
      "url": "https://getbotornot.com/mcp"
    }
  }
}

claude mcp add --transport http botornot https://getbotornot.com/mcp

[mcp_servers.botornot]
url = "https://getbotornot.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "botornot": {
      "type": "remote",
      "url": "https://getbotornot.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "botornot": {
      "type": "http",
      "url": "https://getbotornot.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=botornot&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vZ2V0Ym90b3Jub3QuY29tL21jcCJ9"
}

{
  "servers": {
    "botornot": {
      "type": "http",
      "url": "https://getbotornot.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "botornot": {
      "httpUrl": "https://getbotornot.com/mcp"
    }
  }
}

extensions:
  "botornot":
    enabled: true
    name: "botornot"
    type: streamable_http
    uri: "https://getbotornot.com/mcp"
    timeout: 300

Quality 81 / 100new

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations12 of 12 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_telegram (destructiveHint, idempotentHint); get_incidents (destructiveHint, idempotentHint); get_report_card (destructiveHint, idempotentHint); …
pass
tools.token_costabout 1,189 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool history recorded for 3 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

12 tools, about 1,189 tokens to load them all · tool set 4c2717dcdc52 · tools last changed 2026-10-16 · checked 2026-10-19 16:20 UTC

Tool changes

2026-10-16get_incidentsadded
Verified security incidents (hacks, exploits, key leaks) at trading bots: date, what happened, users affected, estimated loss as named in the sources, refund status and source URLs. Optionally filter by bot slug.
2026-10-16check_telegramadded
Check a Telegram @handle or t.me link: is it an official handle of a listed trading bot (verified on the bot's own site or docs), a known impersonator listed by the bot's own docs, a look-alike, or not in our records? Matches include custody model and incident history. A match is NOT a safety rating; unknown is not proof of a scam.
2026-10-16get_changeschangeddescription
before
Recent change events: new regulator cases, new DFPI scam reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.
after · 89% of words in common
Recent change events: new regulator cases, new state scam-tracker reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.
2026-10-16check_websitechangeddescription
before
Scam signals for a website: exact matches in the California DFPI scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.
after · 87% of words in common
Scam signals for a website: exact matches in a state regulator scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.
2026-10-16search_scamschangeddescription
before
Search regulator scam and enforcement records (SEC, CFTC, California DFPI Crypto Scam Tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.
after · 87% of words in common
Search regulator scam and enforcement records (SEC, CFTC and a state regulator crypto scam tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.
2026-10-16check_botchangeddescription
before
Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC, California DFPI). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.
after · 88% of words in common
Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC and a state regulator crypto scam tracker). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 82 / 100

no-repository

provenance55

liveness97

freshness100

hygiene80

+dns-namespace +website +reachable +uptime-93% +updated-4d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://getbotornot.com/mcp` streamable-http	none	yes	93%	246 ms	2025-11-25	2026-10-19

Tools (12)

`check_bot`read-only	Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC and a state regulator crypto scam tracker). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.
`check_telegram`read-only	Check a Telegram @handle or t.me link: is it an official handle of a listed trading bot (verified on the bot's own site or docs), a known impersonator listed by the bot's own docs, a look-alike, or not in our records? Matches include custody model and incident history. A match is NOT a safety rating; unknown is not proof of a scam.
`check_website`read-only	Scam signals for a website: exact matches in a state regulator scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.
`compare_bots`read-only	Side-by-side sourced facts and report cards for two bots by slug. No winner is picked.
`get_bot`read-only	Full sourced fact sheet for one documented bot by slug (see list_bots): pricing, markets, custody model, red flags with sources, report card, impostor scam reports.
`get_changes`read-only	Recent change events: new regulator cases, new state scam-tracker reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.
`get_incidents`read-only	Verified security incidents (hacks, exploits, key leaks) at trading bots: date, what happened, users affected, estimated loss as named in the sources, refund status and source URLs. Optionally filter by bot slug.
`get_leaderboard`read-only	Hyperliquid vault leaderboard from on-chain data: open vaults with >= $100k TVL ranked by 30-day PnL (USD). Refreshed daily. Past results do not predict future ones.
`get_prediction_markets`read-only	Prediction-market venues (Kalshi, Polymarket US, Gemini Predictions) with their CFTC status and official sources, plus the documented prediction-market bots and their report cards.
`get_report_card`read-only	The rule-based BotOrNot report card for a bot (Clear record, Caution, Red flags, Closed, Limited data) with the exact sourced facts and rule ids that produced it. Not a rating or investment advice; payouts never change it.
`list_bots`read-only	List documented trading bots (slug, name, category, report card, official_url). Optionally filter by category or report card result.
`search_scams`read-only	Search regulator scam and enforcement records (SEC, CFTC and a state regulator crypto scam tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.getbotornot/botornot",
  "title": "BotOrNot",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://getbotornot.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "2.0.0",
  "websiteUrl": "https://getbotornot.com/",
  "description": "Is a trading bot legit? Sourced bot fact sheets, regulator scam records and on-chain results."
}