56
grade D
3 days ago
glama
crypto-quant-signal-mcp
AI-native quantitative trading signal engine for crypto and TradFi perpetuals. Multi-factor composite BUY/SELL/HOLD signals, cross-venue funding rate arbitrage scanning, and market regime detection powered by Hyperliquid data.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
✅
3 tools verified — handlers match their declared behaviour
3 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 9 credentials: ADMIN_API_KEY, CQS_API_KEY, DEVTO_API_KEY, FACILITATOR_PRIVATE_KEY, MERKLE_PUBLISHER_KEY, MOLTBOOK_API_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, TELEGRAM_BOT_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
ADMIN_API_KEYconfig
BASE_RPC_URLconfig
CORS_ORIGIN🔐 secret
CQS_API_KEYconfig
DATABASE_URL🔐 secret
DEVTO_API_KEYconfig
FACILITATOR_PORT🔐 secret
FACILITATOR_PRIVATE_KEYconfig
FORUM_POST_KILL_SWITCHconfig
HASHNODE_ENABLEDconfig
HASHNODE_PATconfig
HASHNODE_PUBLICATION_IDconfig
MERKLE_CONTRACT_ADDRESS🔐 secret
MERKLE_PUBLISHER_KEY🔐 secret
MOLTBOOK_API_KEYconfig
PORTconfig
STRIPE_ENTERPRISE_PRICE_IDconfig
STRIPE_PRO_PRICE_ID🔐 secret
STRIPE_SECRET_KEYconfig
STRIPE_STARTER_PRICE_ID🔐 secret
STRIPE_WEBHOOK_SECRET🔐 secret
TELEGRAM_BOT_TOKENconfig
TELEGRAM_CHAT_IDconfig
TRANSPORT— "env": { "": "stdio" }config
X402_FACILITATOR_URLconfig
X402_NETWORKconfig
X402_WALLET_ADDRESS// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/algovaultlabs-crypto-quant-signal-mcp-2o4hve)commit: 5687819045ccaa8a95fddb33d9087a919cdebd1d
code hash: 5c82bdc8100616215b214fed8bec79b03202b9731e68a8632e1a424b203b933e
verified: 4/18/2026, 6:19:33 PM