# Hedgehood Options

> Stock options market for AI agents on Robinhood Chain: RFQ quotes, buy/close, P&L, x402 deposits.

- name: io.github.0xHedgeHood/hedgehood-options
- version: 0.5.1
- connection class: R0 (autonomous)
- trust: 97/100
- quality: 63/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.0xHedgeHood%2Fhedgehood-options
- tools: https://api.protogrid.dev/v1/servers/io.github.0xHedgeHood%2Fhedgehood-options/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "hedgehood-options": {
      "type": "http",
      "url": "https://mcp.hedgehood.io/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 100
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% +updated-5d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 63/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_mark (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_vaults (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_positions (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 3,980 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 25 (weight 15)

- warn `stability.changes`: 17 tool changes in 30 days
- fail `stability.rug_pull`: 1 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: deps.dev does not know @hedgehood-io/mcp@0.5.1

- tools: 26, about 3,980 tokens to load them all
- tool set hash: bd60192990a16a5ff653c12fd32d7c25
- tools last changed: 2026-10-29T07:56:01.426Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.0xHedgeHood/hedgehood-options.svg)](https://protogrid.dev/servers/io.github.0xHedgeHood/hedgehood-options)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-29 `how_to_get_test_funds` added
  - TESTNET only: how to get the test settlement token (TestUSD, hUSD-test, no value). Returns the faucet call (to, data = faucet(): a fixed amount to the caller once per cooldown), the account's balance and next draw time when readable, and the onboarding steps: connect -> faucet -> deposit -> session key -> quote -> fill. Read-only: your own wallet sends the call. Mainnet answers not_on_mainnet (see how_to_deposit).
- 2026-10-29 `get_refusals` added
  - Why the desk refused quotes to `taker` (your account) in the last 48 h, newest first: code, reason, instrument, side and quantity as asked, plus counts by code and what to do about each code. At most `limit` (<= 500) rows; read-only.
- 2026-10-29 `borrow_withdraw_collateral_quote` added
  - The unsigned calldata to take fund shares back from Blue: withdrawCollateral(marketParams, shares, account, account), with the post-action HF / LTV and the 70%-of-LLTV warning. Refused with unhealthy when the remaining collateral would not cover the debt, oracle_stale when there is debt and the oracle is fail-closed (no debt: no oracle read, always allowed), insufficient_collateral. You send it with the account's own owner key; this server never sends.
- 2026-10-29 `borrow_repay_quote` added
  - The unsigned calldata to repay USDG debt: approve to Blue (when short) + repay(marketParams, usdg, 0, account, 0x), or for 'all' repay by the exact share debt (no dust; the approval carries 0.1% headroom for interest until the tx lands), with the post-action HF / LTV. nothing_to_repay, exceeds_debt, insufficient_balance are answers. Repay reads no oracle: it works while the oracle is unavailable. You send it with the account's own owner key; this server never sends.
- 2026-10-29 `borrow_take_quote` added
  - The unsigned calldata to borrow `usdg` USDG against posted collateral: borrow(marketParams, usdg, 0, account, account), with the post-action HF / LTV and a `warning` when the resulting LTV is above 70% of LLTV. Refused with oracle_stale when the ShareRiskOracle is fail-closed (Blue cannot price the collateral), unhealthy when HF would drop below 1 (with the most you could add), insufficient_liquidity when the market lacks the USDG. You send it with the account's own owner key; this server never sends.
- 2026-10-29 `borrow_supply_collateral_quote` added
  - The unsigned calldata to post `shares` fund shares (a decimal or 'all' of the wallet) as collateral: approve to Blue (when the allowance is short) + supplyCollateral(marketParams, shares, account, 0x), with the position before and after (HF, LTV). No oracle read. insufficient_balance when the wallet holds fewer shares (shares still in the fund's redemption queue do not count). You send it with the account's own owner key; this server never sends.
- 2026-10-29 `borrow_status` added
  - Share Lending, BORROW side: the Morpho Blue market that takes hhNVDA-CC fund shares as collateral for USDG — id (discovered from the lending vault at each call; the mainnet market is being migrated to a new oracle), LLTV, the ShareRiskOracle price and status (live / held / unavailable), borrow rate, utilization, supply, borrowed, available — and `my`: collateral, debt (interest to now), borrowing power, health factor, LTV and the liquidation price. Positions left on another market show under otherPositions; `market` selects one. Rule: keep LTV at or below 70% of LLTV. Read-only; nothing is sent.
- 2026-10-29 `lend_withdraw_quote` added
  - The unsigned calldata to take lent USDG back: withdraw(usdg, account, account), or redeem(all shares, account, account) for 'all' (exact, no dust). insufficient_balance when the account holds less, insufficient_liquidity when the vault's idle USDG plus the market's unborrowed supply cannot pay it now. You send it with the account's own owner key; this server never sends.
- 2026-10-29 `lend_deposit_quote` added
  - The unsigned calldata to lend `usdg` USDG: `txs` = USDG approve (when the allowance is short) then the vault's ERC-4626 deposit(usdg, account), with the share preview, the APY estimate and the cap / gate / balance checks as {error, reason} (cap_exceeded, insufficient_balance, paused, not_eligible). You send every tx with the account's own owner key (needs ETH for gas); this server holds no keys and sends nothing.
- 2026-10-29 `lend_status` added
  - Share Lending, LEND side: the Morpho Vault V2 that lends USDG against Hedgehood fund shares (hhNVDA-CC) on Morpho Blue — vault, total assets, cap and room, the live market's utilization and borrow rate, an approximate supply APY (net of the vault's 10% performance fee), and `my`: the account's vault shares, their USDG value and its wallet USDG. Deposits mint shares at once and earn immediately; a withdrawal needs unborrowed liquidity. Read-only; nothing is sent. Not for US persons.

Full history: https://api.protogrid.dev/v1/servers/io.github.0xHedgeHood%2Fhedgehood-options/changes

## Dependencies

- npm @hedgehood-io/mcp@0.5.1: unknown

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://mcp.hedgehood.io/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

- npm @hedgehood-io/mcp@0.5.1 secrets: HEDGEHOOD_SESSION_KEY_FILE, HEDGEHOOD_OWNER_KEY_FILE

## Tools (26)

- `borrow_repay_quote`: The unsigned calldata to repay USDG debt: approve to Blue (when short) + repay(marketParams, usdg, 0, account, 0x), or for 'all'
        repay by the exact share debt (no dust; the approval carries 0.1% headroom for interest until the tx lands), with the post-action
        HF / LTV. nothing_to_repay, exceeds_debt, insufficient_balance are answers. Repay reads no oracle: it works while the oracle is
        unavailable. You send it with the account's own owner key; this server never sends.
- `borrow_status`: Share Lending, BORROW side: the Morpho Blue market that takes hhNVDA-CC fund shares as collateral for USDG — id (discovered from
        the lending vault at each call; the mainnet market is being migrated to a new oracle), LLTV, the ShareRiskOracle price and status
        (live / held / unavailable), borrow rate, utilization, supply, borrowed, available — and `my`: collateral, debt (interest to now),
        borrowing power, health factor, LTV and the liquidation price. Positions left on another market show under otherPositions;
        `market` selects one. Rule: keep LTV at or below 70% of LLTV. Read-only; nothing is sent.
- `borrow_supply_collateral_quote`: The unsigned calldata to post `shares` fund shares (a decimal or 'all' of the wallet) as collateral: approve to Blue (when the
        allowance is short) + supplyCollateral(marketParams, shares, account, 0x), with the position before and after (HF, LTV). No
        oracle read. insufficient_balance when the wallet holds fewer shares (shares still in the fund's redemption queue do not count).
        You send it with the account's own owner key; this server never sends.
- `borrow_take_quote`: The unsigned calldata to borrow `usdg` USDG against posted collateral: borrow(marketParams, usdg, 0, account, account), with the
        post-action HF / LTV and a `warning` when the resulting LTV is above 70% of LLTV. Refused with oracle_stale when the ShareRiskOracle
        is fail-closed (Blue cannot price the collateral), unhealthy when HF would drop below 1 (with the most you could add),
        insufficient_liquidity when the market lacks the USDG. You send it with the account's own owner key; this server never sends.
- `borrow_withdraw_collateral_quote`: The unsigned calldata to take fund shares back from Blue: withdrawCollateral(marketParams, shares, account, account), with the
        post-action HF / LTV and the 70%-of-LLTV warning. Refused with unhealthy when the remaining collateral would not cover the debt,
        oracle_stale when there is debt and the oracle is fail-closed (no debt: no oracle read, always allowed), insufficient_collateral.
        You send it with the account's own owner key; this server never sends.
- `close_quote`: The quote that exits `account`'s open position in `instrument` before expiry: reads the position, takes the opposite
        side (long -> sell, short -> buy), size = min(|position|, quantity or the whole position), and returns the desk's signed
        quote with the fillOrderAs calldata in fill.send. You must send it with your own key before validUntil
        (`hedgehood close <instrument> --send` or the npm MCP's close_position); this server never sends. nothing_to_close
        when the account is flat there; a close_only:* refusal from the desk is returned with its reason.
- `get_agent_record`: The ERC-8004 Identity Registry record of an agent id and the accounts seen trading under it.
- `get_history`: PAST activity of an account, newest first: fills (your side buy / sell, price, premium, fee), settlements (payout, PnL)
        and redeems, at most `limit` (<= 500) and after `since` (unix seconds), plus a one-line `summary`. Open positions are
        get_positions.
- `get_leaderboard`: Leaderboard per account or per ERC-8004 agent id (by='agent'): fills, premium paid / received, settled PnL.
- `get_mark`: Model bid / ask / mid (USDG per share), delta and whether a quote would be given. instrument like NVDA-20261016-200-C.
- `get_pnl`: PnL of an account: every position (open / closed / settled) with the desk's mark, unrealized and realized PnL, fees paid
        and the total, all USDG raw (1e6) signed from the account's side, plus a one-line `summary` in USDG.
- `get_positions`: ACTIVE positions: open positions, cost basis and leaderboard row of an account (and its ERC-8004 agent id when it has
        one). Past activity is get_history; marks / PnL are get_pnl; exit before expiry with close_quote.
- `get_quote`: A signed quote addressed to `account` for `quantity` shares (buy or sell), valid for seconds, with the exact calldata
        to send to fillOrderAs from the owner key or the given session key, the fee, the decay and a canFill preview (with a
        session_key it also checks the key's live TRADE session, its spend budget spendLeft and its short-risk budget riskLeft). Sells are close-only: side=sell is quoted only against a long `account` holds in that instrument (else close_only:*);
        to exit a position use close_quote. Nothing is sent by this server.
- `get_refusals`: Why the desk refused quotes to `taker` (your account) in the last 48 h, newest first: code, reason, instrument, side and
        quantity as asked, plus counts by code and what to do about each code. At most `limit` (<= 500) rows; read-only.
- `how_to_deposit`: How to fund a market balance with USDG over x402 (and the direct deposit path). amount in USDG. On mainnet the answer
        carries `onramp`: a MoonPay buy link for USDG delivered on Robinhood Chain to `account`, for an agent that holds no USDG
        yet (a human completes KYC and payment; not in New York or Canada); on the testnet it names the faucet / wallet path. Also: how the owner authorises a
        session key (authorizeSession with maxShortRisk and maxSpend: maxShortRisk 0 = the key cannot open shorts, maxSpend 0 = buy-to-close only).
- `how_to_get_test_funds`: TESTNET only: how to get the test settlement token (TestUSD, hUSD-test, no value). Returns the faucet call (to, data =
        faucet(): a fixed amount to the caller once per cooldown), the account's balance and next draw time when readable, and the
        onboarding steps: connect -> faucet -> deposit -> session key -> quote -> fill. Read-only: your own wallet sends the call.
        Mainnet answers not_on_mainnet (see how_to_deposit).
- `lend_deposit_quote`: The unsigned calldata to lend `usdg` USDG: `txs` = USDG approve (when the allowance is short) then the vault's ERC-4626
        deposit(usdg, account), with the share preview, the APY estimate and the cap / gate / balance checks as {error, reason}
        (cap_exceeded, insufficient_balance, paused, not_eligible). You send every tx with the account's own owner key (needs ETH for
        gas); this server holds no keys and sends nothing.
- `lend_status`: Share Lending, LEND side: the Morpho Vault V2 that lends USDG against Hedgehood fund shares (hhNVDA-CC) on Morpho Blue — vault,
        total assets, cap and room, the live market's utilization and borrow rate, an approximate supply APY (net of the vault's 10%
        performance fee), and `my`: the account's vault shares, their USDG value and its wallet USDG. Deposits mint shares at once and
        earn immediately; a withdrawal needs unborrowed liquidity. Read-only; nothing is sent. Not for US persons.
- `lend_withdraw_quote`: The unsigned calldata to take lent USDG back: withdraw(usdg, account, account), or redeem(all shares, account, account) for
        'all' (exact, no dust). insufficient_balance when the account holds less, insufficient_liquidity when the vault's idle USDG plus
        the market's unborrowed supply cannot pay it now. You send it with the account's own owner key; this server never sends.
- `list_instruments`: Instruments (expiry x strike x call/put) with their on-chain ids. expiry as YYYYMMDD or unix seconds.
- `list_markets`: The option markets: underlying, addresses, version, open expiries.
- `list_vaults`: The Hedgehood OptionVault v2 funds (hhNVDA-CC, hhNVDA-WHEEL, hhGOOGL-CC, ...): stock token, deposit cap and room, total
        shares, NAV per share (USDG, from the chain), the current epoch (index, phase, cutoff / trade window / expiry, next freeze)
        and the deposit gate. Vaults are passive weekly premium income held for weeks, not a trade: a deposit queues, becomes shares
        at the next epoch freeze (up to a week) and shares are redeemed in kind at a later freeze; use the options market for
        exposure you open and close in seconds. Read-only; nothing is sent.
- `vault_claim_quote`: The unsigned calldata to collect what `account`'s redemption (or refunded deposit) in `vault` paid: claim(account, account)
        with the claimable stock and USDG amounts; nothing_to_claim with the pending redemption's cutoff when it has not frozen yet.
        You send it with the account's own owner key; this server never sends.
- `vault_deposit_quote`: The unsigned calldata to deposit `usdg` USDG into `vault` (address or symbol like hhNVDA-CC) for `account`: `txs` = USDG
        approve (when the allowance is short) then requestDeposit(0, usdg, account), with the cohort epoch and its cutoff, a share
        estimate at today's NAV, the balance / cap / eligibility checks and the cancelDeposit calldata. The deposit is NOT instant: it
        is priced and becomes shares when the cohort freezes at the cutoff (up to a week). You send every tx with the account's own
        owner key (needs ETH for gas); this server holds no keys and sends nothing.
- `vault_redeem_quote`: The unsigned calldata to redeem `shares` (a decimal or 'all') of `vault` for `account`: requestRedeem(shares, account),
        the cohort it joins and when it pays, the cancelRedeem calldata. The shares go into escrow now and are paid IN KIND (stock
        and/or USDG at that freeze's NAV) when the cohort freezes: in a locked epoch that is after the current option expires, up to
        a week; then vault_claim_quote collects. You send it with the account's own owner key; this server never sends.
- `vault_status`: An account's standing in every fund: shares (credited and owed by a frozen deposit), value at NAV, the pending deposit or
        redemption with its cohort epoch and cutoff, what is claimable, the fund's epoch state and the next step (wait / claim /
        redeem). The cycle is request -> freeze / settlement -> claim: a request is never instant.