Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "quote": {
      "type": "http",
      "url": "https://quote.trade/mcp",
      "headers": {
        "X-MBX-APIKEY": "${X_MBX_APIKEY}",
        "X-MBX-APISECRET": "${X_MBX_APISECRET}"
      }
    }
  }
}

claude mcp add --transport http quote https://quote.trade/mcp --header "X-MBX-APIKEY: ${X_MBX_APIKEY}" --header "X-MBX-APISECRET: ${X_MBX_APISECRET}"

[mcp_servers.quote]
url = "https://quote.trade/mcp"
env_http_headers = { "X-MBX-APIKEY" = "X_MBX_APIKEY", "X-MBX-APISECRET" = "X_MBX_APISECRET" }

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "quote": {
      "type": "remote",
      "url": "https://quote.trade/mcp",
      "enabled": true,
      "headers": {
        "X-MBX-APIKEY": "{env:X_MBX_APIKEY}",
        "X-MBX-APISECRET": "{env:X_MBX_APISECRET}"
      }
    }
  }
}

{
  "mcpServers": {
    "quote": {
      "type": "http",
      "url": "https://quote.trade/mcp",
      "headers": {
        "X-MBX-APIKEY": "${X_MBX_APIKEY}",
        "X-MBX-APISECRET": "${X_MBX_APISECRET}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=quote&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vcXVvdGUudHJhZGUvbWNwIiwiaGVhZGVycyI6eyJYLU1CWC1BUElLRVkiOiIke1hfTUJYX0FQSUtFWX0iLCJYLU1CWC1BUElTRUNSRVQiOiIke1hfTUJYX0FQSVNFQ1JFVH0ifX0%3D"
}

{
  "servers": {
    "quote": {
      "type": "http",
      "url": "https://quote.trade/mcp",
      "headers": {
        "X-MBX-APIKEY": "${X_MBX_APIKEY}",
        "X-MBX-APISECRET": "${X_MBX_APISECRET}"
      }
    }
  }
}

{
  "mcpServers": {
    "quote": {
      "httpUrl": "https://quote.trade/mcp",
      "headers": {
        "X-MBX-APIKEY": "${X_MBX_APIKEY}",
        "X-MBX-APISECRET": "${X_MBX_APISECRET}"
      }
    }
  }
}

extensions:
  "quote":
    enabled: true
    name: "quote"
    type: streamable_http
    uri: "https://quote.trade/mcp"
    headers:
      "X-MBX-APIKEY": "${X_MBX_APIKEY}"
      "X-MBX-APISECRET": "${X_MBX_APISECRET}"
    timeout: 300

Placeholders to fill from your own secret store: ${X_MBX_APIKEY}, ${X_MBX_APISECRET}. The registry never accepts secret values.

Quality 80 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations25 of 25 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: quote_trade_api_manifest (idempotentHint); quote_trade_ticker (idempotentHint); quote_trade_account (idempotentHint); …
pass
tools.token_costabout 4,215 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes6 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

25 tools, about 4,215 tokens to load them all · tool set 17fccbee0b85 · tools last changed 2026-09-28 · checked 2026-10-19 10:20 UTC

Tool changes

2026-09-28quote_trade_withdrawchangeddescription
before
Withdraw step 3. POST /api/sendWithdrawWithVTokenRequest for stablecoins only (USDC|USDT|XUSDC) to the user's own login wallet (no toAddress). Not available for BTC/ETH/other assets. Requires a full-access API key with withdraw entitlement (trade-only keys are rejected by Quote.Trade), tradingEnabled, allowedWithdrawAssets (independent of the trading allowedSymbols allowlist), and maxNotionalUsd>0. humanApproved/approvalText are agent friction only.
after · 88% of words in common
Withdraw step 3. POST /api/sendWithdrawWithVTokenRequest for stablecoins only (USDC|USDT|XUSDC) to the user's own login wallet (no toAddress). Not available for BTC/ETH/other assets. Requires a full-access API key with withdraw entitlement (trade-only keys are rejected by Quote.Trade), tradingEnabled, and allowedWithdrawAssets (independent of the trading allowedSymbols allowlist). No MCP USD notional cap applies. humanApproved/approvalText are agent friction only.
2026-09-28quote_trade_withdraw_previewchangedoutput schema
2026-09-28quote_trade_place_orderchangeddescription
before
Trade step 4. POST /api/order with a suitable price after instruments/ticker/depth. Requires tradingEnabled, allowedSymbols (* or explicit list; empty denies), maxNotionalUsd>0, and API credentials. Sending X-MBX-APISECRET to this MCP host grants it full signing authority. humanApproved/approvalText are agent friction only.
after · 86% of words in common
Trade step 4. POST /api/order with a suitable price after instruments/ticker/depth. Requires tradingEnabled, allowedSymbols (* or explicit list; empty denies), and API credentials. No MCP USD notional cap applies. Sending X-MBX-APISECRET to this MCP host grants it full signing authority. humanApproved/approvalText are agent friction only.
2026-09-28quote_trade_order_previewchangedoutput schema
2026-09-28quote_trade_api_manifestchangedoutput schema
2026-09-28quote_trade_api_discoverychangedoutput schema

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 80 / 100

no-repository

provenance55

liveness100

freshness85

hygiene80

+dns-namespace +website +reachable +uptime-99% ~updated-32d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://quote.trade/mcp` streamable-http	none	yes	99%	793 ms	2025-06-18, 2025-03-26	2026-10-19

Tools (25)

`quote_trade_account`read-only	Withdraw step 1 / anytime account check. GET /api/account with per-request X-MBX-APIKEY. Inspect available balances before withdraw. No live trading action.
`quote_trade_api_discovery`read-only	Read once to learn efficient direct REST/WebSocket use: routes, signing, streaming, cumulative depth, and client execution controls. Public guidance only; no upstream calls.
`quote_trade_api_manifest`read-only	Explains that MCP is only a tool/schema adapter around the existing Quote.Trade APIs, and returns local servlet guardrail configuration.
`quote_trade_cancel_order`destructive	Cancel one order by orderId. POST /api/cancelOrder. Identifies exactly one order via the matching engine's single-order cancel path - NOT a mass-cancel. There is no quote_trade_cancel_all: the upstream mass-cancel action's scope for edge-case parameters could not be verified from this codebase alone and is intentionally not exposed through MCP. Requires tradingEnabled, allowedSymbols (same allowlist as quote_trade_place_order), and a trade-scoped API key. No notional check applies: a cancellation has none. humanApproved/approvalText are agent friction only.
`quote_trade_depth`read-only	Trade step 3. GET /api/depth?symbol=SYMBOL&limit=N. Use depth quantity to choose a suitable limit price before placing an order.
`quote_trade_exchange_info`read-only	Call GET /api/exchangeInfo and return a paginated slice of trading symbols plus rate limits/server time. Upstream has no pagination, so this adapter filters/slices locally. Default limit=50, max=200. Prefer quote_trade_instruments for compact tradable-pair discovery.
`quote_trade_get_challenge`	Optional wallet login/register step 1 (not required for trading with an existing API key). POST /api/getChallenge with a wallet address (login). Returns challenge text and isNewUser. Step 2: sign the challenge with the wallet outside MCP. Step 3: quote_trade_logon. No API key required.
`quote_trade_get_deposit_address`read-only	Deposit step 1. GET /api/getDepositAddress?symbol=ASSET and return chain + contract/address. Supported assets: USDC and USDT (mainnet), XUSDC (USDC on XDC). Step 2 is transferring funds to that address outside MCP (no backend call).
`quote_trade_get_deposit_history`read-only	Anytime deposit check. POST /api/getDepositHistory with per-request X-MBX-APIKEY. Requires a trade-scoped API key (same scope as quote_trade_place_order). Read-only: no live trading action.
`quote_trade_get_index_positions`read-only	Anytime position check. POST /api/getIndexPositions with per-request X-MBX-APIKEY. Distinct from quote_trade_get_positions: index/basket instrument positions rather than regular instrument positions. Optional assetType filter. Read-only: no live trading action.
`quote_trade_get_order_history`read-only	Anytime order check. POST /api/getOrderHistory with per-request X-MBX-APIKEY. Full order history, or one order's history with optional orderId. Requires a trade-scoped API key (same scope as quote_trade_place_order). Read-only: no live trading action.
`quote_trade_get_orders`read-only	Anytime order check. POST /api/getOrders with per-request X-MBX-APIKEY. Read-only: no live trading action. Requires read entitlement on API keys that carry one.
`quote_trade_get_order_status`read-only	Anytime order check. POST /api/orderStatus with per-request X-MBX-APIKEY. Query the status of an order previously placed with quote_trade_place_order. Read-only: no live trading action.
`quote_trade_get_positions`read-only	Anytime position check. GET /api/positions with per-request X-MBX-APIKEY. Reconcile current positions when starting or reconnecting, per the direct-discovery guide (quote_trade_api_discovery / rest.privateReads). No live trading action.
`quote_trade_get_risk`read-only	Anytime risk check. POST /api/getRisk with per-request X-MBX-APIKEY. Margin/equity/unrealized-PnL summary for the authenticated account. Read-only: no live trading action.
`quote_trade_get_user_wallets`read-only	Anytime wallet check. POST /api/getUserWallets with per-request X-MBX-APIKEY. On-chain addresses previously seen depositing to the authenticated account. Read-only: no live trading action.
`quote_trade_get_withdraw_requests`read-only	Anytime withdrawal check. POST /api/getWithdrawRequests with per-request X-MBX-APIKEY. Inspect the status of withdrawals already submitted (including via quote_trade_withdraw). Requires a trade-scoped API key. Read-only: no live trading action, and this tool cannot cancel a withdrawal.
`quote_trade_instruments`read-only	Trade step 1. GET /api/getInstrumentPairs — paginated tradable symbols/instruments. Default limit=50, max=200. Use skip to page. Pick a symbol from this response for ticker/depth/order calls.
`quote_trade_logon`	Optional wallet login/register step 3 (not required if the agent already has an API key). Pass challenge + wallet signature from steps 1–2. isNewUser=true -> POST /api/registerUser; else POST /api/logon. On success, map body.requestToken/requestSecret to X-MBX-APIKEY / X-MBX-APISECRET; use body.id as account. Wallet signing stays outside MCP.
`quote_trade_order_preview`read-only	Optional before live trade. Normalize/validate a BUY/SELL order locally without sending it.
`quote_trade_place_order`destructive	Trade step 4. POST /api/order with a suitable price after instruments/ticker/depth. Requires tradingEnabled, allowedSymbols (* or explicit list; empty denies), and API credentials. No MCP USD notional cap applies. Sending X-MBX-APISECRET to this MCP host grants it full signing authority. humanApproved/approvalText are agent friction only.
`quote_trade_status`read-only	Call GET /api/status and return system status, server time, contracts URL, and feature flags.
`quote_trade_ticker`read-only	Trade step 2. GET /api/ticker?symbol=SYMBOL for a symbol from quote_trade_instruments. Returns last price, bid, ask, lastUpdateId.
`quote_trade_withdraw`destructive	Withdraw step 3. POST /api/sendWithdrawWithVTokenRequest for stablecoins only (USDC\|USDT\|XUSDC) to the user's own login wallet (no toAddress). Not available for BTC/ETH/other assets. Requires a full-access API key with withdraw entitlement (trade-only keys are rejected by Quote.Trade), tradingEnabled, and allowedWithdrawAssets (independent of the trading allowedSymbols allowlist). No MCP USD notional cap applies. humanApproved/approvalText are agent friction only.
`quote_trade_withdraw_preview`read-only	Optional before live withdraw. Stablecoins only: USDC, USDT, or XUSDC (not BTC/ETH/other). Own login wallet only (no toAddress). estimatedNotional is USD at $1 peg. Trade-only API keys cannot withdraw — use a full-access key with withdraw entitlement.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "trade.quote/mcp",
  "title": "Quote.Trade MCP Adapter",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://quote.trade/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "X-MBX-APIKEY",
          "isSecret": true,
          "description": "API key from Quote.Trade (wallet login optional). Trade-only: no withdraw. Full-access: trade+withdraw."
        },
        {
          "name": "X-MBX-APISECRET",
          "isSecret": true,
          "description": "API secret for the key above. MCP host HMAC-signs with it (full signing authority for that key). Prefer trade-only keys for agents."
        }
      ]
    }
  ],
  "version": "1.5.8",
  "websiteUrl": "https://quote.trade",
  "description": "Quote.Trade MCP: login, deposit address, market data, orders, and withdraws."
}