# BotOrNot

> Is a trading bot legit? Sourced bot fact sheets, regulator scam records and on-chain results.

- name: com.getbotornot/botornot
- version: 2.0.0
- connection class: R0 (autonomous)
- trust: 82/100 flags: no-repository
- quality: 81/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.getbotornot%2Fbotornot
- tools: https://api.protogrid.dev/v1/servers/com.getbotornot%2Fbotornot/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "botornot": {
      "type": "http",
      "url": "https://getbotornot.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 98
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-94% +updated-4d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 81/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 12 of 12 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_bot (destructiveHint, idempotentHint); get_prediction_markets (destructiveHint, idempotentHint); list_bots (destructiveHint, idempotentHint); …
- pass `tools.token_cost`: about 1,189 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 4 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 12, about 1,189 tokens to load them all
- tool set hash: 4c2717dcdc526023ef57ede2d2a69b6f
- tools last changed: 2026-10-16T09:36:43.714Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.getbotornot/botornot.svg)](https://protogrid.dev/servers/com.getbotornot/botornot)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-16 `get_incidents` added
  - Verified security incidents (hacks, exploits, key leaks) at trading bots: date, what happened, users affected, estimated loss as named in the sources, refund status and source URLs. Optionally filter by bot slug.
- 2026-10-16 `check_telegram` added
  - Check a Telegram @handle or t.me link: is it an official handle of a listed trading bot (verified on the bot's own site or docs), a known impersonator listed by the bot's own docs, a look-alike, or not in our records? Matches include custody model and incident history. A match is NOT a safety rating; unknown is not proof of a scam.
- 2026-10-16 `get_changes` changed (description)
  - before: Recent change events: new regulator cases, new DFPI scam reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.
  - after: Recent change events: new regulator cases, new state scam-tracker reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.
- 2026-10-16 `check_website` changed (description)
  - before: Scam signals for a website: exact matches in the California DFPI scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.
  - after: Scam signals for a website: exact matches in a state regulator scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.
- 2026-10-16 `search_scams` changed (description)
  - before: Search regulator scam and enforcement records (SEC, CFTC, California DFPI Crypto Scam Tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.
  - after: Search regulator scam and enforcement records (SEC, CFTC and a state regulator crypto scam tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.
- 2026-10-16 `check_bot` changed (description)
  - before: Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC, California DFPI). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.
  - after: Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC and a state regulator crypto scam tracker). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.

Full history: https://api.protogrid.dev/v1/servers/com.getbotornot%2Fbotornot/changes

## Remotes

- https://getbotornot.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.9411765)

## Packages

_none_

## Tools (12)

- `check_bot`: Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC and a state regulator crypto scam tracker). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.
- `check_telegram`: Check a Telegram @handle or t.me link: is it an official handle of a listed trading bot (verified on the bot's own site or docs), a known impersonator listed by the bot's own docs, a look-alike, or not in our records? Matches include custody model and incident history. A match is NOT a safety rating; unknown is not proof of a scam.
- `check_website`: Scam signals for a website: exact matches in a state regulator scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.
- `compare_bots`: Side-by-side sourced facts and report cards for two bots by slug. No winner is picked.
- `get_bot`: Full sourced fact sheet for one documented bot by slug (see list_bots): pricing, markets, custody model, red flags with sources, report card, impostor scam reports.
- `get_changes`: Recent change events: new regulator cases, new state scam-tracker reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.
- `get_incidents`: Verified security incidents (hacks, exploits, key leaks) at trading bots: date, what happened, users affected, estimated loss as named in the sources, refund status and source URLs. Optionally filter by bot slug.
- `get_leaderboard`: Hyperliquid vault leaderboard from on-chain data: open vaults with >= $100k TVL ranked by 30-day PnL (USD). Refreshed daily. Past results do not predict future ones.
- `get_prediction_markets`: Prediction-market venues (Kalshi, Polymarket US, Gemini Predictions) with their CFTC status and official sources, plus the documented prediction-market bots and their report cards.
- `get_report_card`: The rule-based BotOrNot report card for a bot (Clear record, Caution, Red flags, Closed, Limited data) with the exact sourced facts and rule ids that produced it. Not a rating or investment advice; payouts never change it.
- `list_bots`: List documented trading bots (slug, name, category, report card, official_url). Optionally filter by category or report card result.
- `search_scams`: Search regulator scam and enforcement records (SEC, CFTC and a state regulator crypto scam tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.