deribit-mcp (schoeffeljp/deribit-mcp) is an MCP server listed on the M8ven Trust Index. It scores 54 out of 100, grade D. It declares 35 tools. No publisher has claimed this listing.
Connects to Deribit for real-time market data, portfolio management, trade execution, and risk analysis through natural language.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
schoeffeljp
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
analyze_positionPREFERRED tool for position analysis — returns fee-aware NET P&L (after actual entry fees from trade history + estimated exit fees at ~$0.9/contract taker), realistic exit simulation at bid/ask (not mark), DTE, greeks, moneyness, risk flags, and HOLD/TAKE_PROFIT/CLOSE/ROLL recommendations. Always us…
portfolio_risk_metricsPortfolio-level risk dashboard with dollar greeks, theta/netliq ratio, delta/theta ratio, margin utilization, concentration per underlying, and health status (HEALTHY/CAUTION/AT_RISK). Based on Tasty Trade risk framework.
iv_rankGet IV Rank, IV Percentile, HV30, and Volatility Risk Premium (VRP) for a cryptocurrency. IV Rank > 50 = rich (good for selling premium), < 30 = cheap (good for buying).
scan_candidatesScan for option trading opportunities by strategy (naked_put, strangle, covered_call). Returns ranked candidates with premium, delta, IV, margin, annualized yield, and position sizing recommendations.
get_account_summaryGet account balance, equity, margin usage, and P&L summary for a currency.
get_positionsGet all open positions, including size, direction, P&L, average price, and greeks for options.
get_order_stateGet the current state of an order by its order_id. Returns order_state (open, filled, cancelled, rejected, untriggered), average_price, filled_amount, price, and all order details. Use this to check if an order was filled, partially filled, or cancelled.
get_open_ordersList all open (unfilled) orders, optionally filtered by currency or instrument type.
buyPlace a buy order on Deribit. Supports limit, market, stop_limit, and stop_market order types. Use with caution — this places a real trade.
sellPlace a sell order on Deribit. Supports limit, market, stop_limit, and stop_market order types. Use with caution — this places a real trade.
cancel_orderCancel an open order by its order ID.
cancel_all_ordersCancel all open orders, optionally filtered by currency and instrument type.
edit_orderModify an existing open order's price, amount, or other parameters without cancelling and re-placing.
close_positionClose an existing position entirely. Places a market or limit order to flatten the position.
get_user_tradesGet recent trade fills for a currency. ALWAYS filter by kind (option, future, spot) to narrow results. Shows price, size, fees, P&L, IV, and underlying price. Use get_user_trades_by_instrument if you know the specific instrument name.
get_user_trades_by_instrumentGet trade history for a SPECIFIC instrument. Preferred when you know the instrument name (e.g. 'show me my fills on ETH_USDC-27MAR26-2400-C'). Returns price, size, fees, underlying price and IV at time of trade.
get_transaction_logGet the full ledger of account transactions: trades, settlements, fees, funding payments, deposits, withdrawals, and transfers.
get_marginsEstimate the margin required for a hypothetical trade before placing it. Returns margin for both buy and sell sides, plus min/max price bounds.
get_currenciesList all available currencies on Deribit
get_instrumentsList tradable instruments (options, futures, spots) for a currency. Returns instrument names, strike prices, expiration dates, and contract details. Essential for discovering available options chains.
get_tickerGet real-time quote data for an instrument. For options, includes greeks (delta, gamma, vega, theta, rho), implied volatility, mark price, bid/ask, open interest, and volume.
get_order_bookGet the order book (bids and asks) for an instrument, including best bid/ask, mark price, and funding rate for perpetuals.
get_book_summary_by_currencyGet summary info (volume, open interest, bid/ask, mark price) for all instruments of a currency. Useful for scanning the entire options or futures market at a glance.
get_index_priceGet the current index price for a given underlying index (e.g. btc_usd, eth_usd).
get_historical_volatilityGet historical volatility data points for a currency index over time.
get_volatility_indexGet DVOL (Deribit Volatility Index) OHLCV data — Deribit's equivalent of the VIX. Shows implied volatility trend over time.
get_tradingview_chart_dataGet OHLCV candlestick data for any instrument. Useful for price charts, technical analysis, and historical price research.
get_funding_rate_historyGet historical funding rate data for a perpetual instrument. Shows hourly funding rates, index prices, and interest rates.
get_delivery_pricesGet historical settlement/delivery prices for an index. Useful for backtesting and understanding past expiry outcomes.
get_expirationsList available option expiration dates for a currency, sorted chronologically. For USDC currency, use 'underlying' to filter ETH vs BTC options.
get_options_chainGet options chain for a specific currency + expiry. Returns strikes with bid/ask, mark price, IV, greeks, OI. IMPORTANT: always specify 'underlying' for USDC currency, and use 'atm_range' to limit strikes (default 10 = ATM ± 10).
find_options_by_deltaFind options closest to a target delta for a given currency and expiry. E.g., 'find the 25-delta put' or 'find the 50-delta call'. Returns the best matching options sorted by delta proximity.
get_volatility_surfaceGet the implied volatility surface across all strikes and expirations for a currency. Returns a matrix of expiry × strike → IV, plus ATM IV and skew metrics per expiry. Essential for relative value analysis and vol trading.
get_portfolio_greeksGet aggregated portfolio greeks across all open option positions for a currency. Shows total delta, gamma, vega, and theta exposure, plus per-position breakdown. Essential for understanding net risk.
get_portfolio_summaryOne-shot overview of your entire account for a currency: balances, margin usage, equity, all open positions with P&L, and all open orders. Saves multiple API calls into a single comprehensive snapshot.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
DERIBIT_CLIENT_ID"": "your_client_id",DERIBIT_CLIENT_SECRET"": "your_client_secret",DERIBIT_TESTNET"": "true"MCP_API_KEYgenerate_a_random_secret_hereMCP_CORS_ORIGINNo Allowed CORS origin for HTTP modeMCP_TRANSPORTNo stdio stdio for local, http for cloudPORTTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
35/35 tools missing one or more hints — analyze_position (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); portfolio_risk_metrics (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); iv_rank (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +32 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool inputs are validated
34/35 tool handlers declare input schemas (97%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool handlers catch errors
Only 3/35 tool handlers wrap calls in try/catch (9%)
Wrap each tool handler body in try/catch and return a structured error response.
Tool test coverage
25/35 tools referenced in tests (71%)
Write tests that reference each tool by name so every tool has at least one test.
Production dependencies are patched
0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.12.1 (high), @modelcontextprotocol/sdk@1.12.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dev dependencies
1 critical/high in dev-only deps (does not ship to users)
Upgrade dev dependencies when convenient.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/schoeffeljp/deribit-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check