# Hedgehood Options (remote · mcp.hedgehood.io)

Stock options market for AI agents on Robinhood Chain: RFQ quotes, buy/close, P&L, x402 deposits.

- Trust score: 61/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `mcp.hedgehood.io`: 61/100 (this document), [markdown](https://verifymcp.io/servers/0xhedgehood-hedgehood-options/mcp.md), [page](https://verifymcp.io/servers/0xhedgehood-hedgehood-options/mcp)
- npm · `@hedgehood-io/mcp`: 33/100, [markdown](https://verifymcp.io/servers/0xhedgehood-hedgehood-options/hedgehood-io-mcp.md), [page](https://verifymcp.io/servers/0xhedgehood-hedgehood-options/hedgehood-io-mcp)

## Channel facts

- Endpoint: `https://mcp.hedgehood.io/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.5.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 57/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 26 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 60/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3357 tokens (~129/item across 26 items; 26 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 67/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "lend_withdraw_quote" implies "withdraw" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 27 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the Hedgehood Options MCP server?

Hedgehood Options is a hosted endpoint at https://mcp.hedgehood.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http 0xhedgehood-hedgehood-options 'https://mcp.hedgehood.io/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "0xhedgehood-hedgehood-options": {
      "url": "https://mcp.hedgehood.io/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "0xhedgehood-hedgehood-options": {
      "type": "http",
      "url": "https://mcp.hedgehood.io/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.0xhedgehood-hedgehood-options]
url = "https://mcp.hedgehood.io/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "0xhedgehood-hedgehood-options": {
      "type": "remote",
      "url": "https://mcp.hedgehood.io/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add 0xhedgehood-hedgehood-options --url 'https://mcp.hedgehood.io/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  0xhedgehood-hedgehood-options:
    url: "https://mcp.hedgehood.io/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "0xhedgehood-hedgehood-options": {
      "Transport": "http",
      "Url": "https://mcp.hedgehood.io/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add 0xhedgehood-hedgehood-options -t streamable-http -u 'https://mcp.hedgehood.io/mcp'
```

### Other

```json
{
  "mcpServers": {
    "0xhedgehood-hedgehood-options": {
      "type": "http",
      "url": "https://mcp.hedgehood.io/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 61, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 60, +1)

No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-31 (score 59, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-29 (score 58, +3)

- [security improvement] HTTPS: unverified → pass
- [security] The server rewrote its instructions, which are the text every model session reads
- [security] Tool “get_quote” rewrote its description, which is the text the model reads
- [security] Tool “how_to_deposit” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: pass → fail
- [functional improvement] Stability: unverified → 0.03
- [functional] Schema quality: fair → good
- [functional] Destructive annotations: pass → 0
- [functional] New tool “get_refusals”
- [functional] New tool “how_to_get_test_funds”
- [functional] New tool “lend_deposit_quote”
- [functional] New tool “borrow_repay_quote”
- [functional] New tool “borrow_status”
- [functional] New tool “borrow_supply_collateral_quote”
- [functional] New tool “borrow_take_quote”
- [functional] New tool “borrow_withdraw_collateral_quote”
- [functional] New tool “lend_status”
- [functional] New tool “lend_withdraw_quote”
- [functional] New tool “list_vaults”
- [functional] New tool “vault_claim_quote”
- [functional] New tool “vault_deposit_quote”
- [functional] New tool “vault_redeem_quote”
- [functional] New tool “vault_status”

### 2026-10-28 (score 55)

First indexed and scored.

## MCP tools (26)

### `list_markets` (~23 tokens)

The option markets: underlying, addresses, version, open expiries.

### `list_instruments` (~44 tokens)

Instruments (expiry x strike x call/put) with their on-chain ids. expiry as YYYYMMDD or unix seconds.

Input parameters:

- `expiry`
- `underlying`

### `get_mark` (~48 tokens)

Model bid / ask / mid (USDG per share), delta and whether a quote would be given. instrument like NVDA-20261016-200-C.

Input parameters:

- `instrument` (string, required)

### `get_quote` (~171 tokens)

A signed quote addressed to `account` for `quantity` shares (buy or sell), valid for seconds, with the exact calldata
        to send to fillOrderAs from the owner key or the given session key, the fee, the decay and a canFill preview (with a
        session_key it also checks the key's live TRADE session, its spend budget spendLeft and its short-risk budget riskLeft). Sells are close-only: side=sell is quoted only against a long `account` holds in that instrument (else close_only:*);
        to exit a position use close_quote. Nothing is sent by this server.

Input parameters:

- `account` (string, required)
- `instrument` (string, required)
- `quantity` (string, required)
- `session_key`
- `side` (string, required)

### `close_quote` (~165 tokens)

The quote that exits `account`'s open position in `instrument` before expiry: reads the position, takes the opposite
        side (long -> sell, short -> buy), size = min(|position|, quantity or the whole position), and returns the desk's signed
        quote with the fillOrderAs calldata in fill.send. You must send it with your own key before validUntil
        (`hedgehood close <instrument> --send` or the npm MCP's close_position); this server never sends. nothing_to_close
        when the account is flat there; a close_only:* refusal from the desk is returned with its reason.

Input parameters:

- `account` (string, required)
- `instrument` (string, required)
- `quantity`
- `session_key`

### `get_positions` (~68 tokens)

ACTIVE positions: open positions, cost basis and leaderboard row of an account (and its ERC-8004 agent id when it has
        one). Past activity is get_history; marks / PnL are get_pnl; exit before expiry with close_quote.

Input parameters:

- `account` (string, required)

### `get_pnl` (~81 tokens)

PnL of an account: every position (open / closed / settled) with the desk's mark, unrealized and realized PnL, fees paid
        and the total, all USDG raw (1e6) signed from the account's side, plus a one-line `summary` in USDG.

Input parameters:

- `account` (string, required)

### `get_history` (~99 tokens)

PAST activity of an account, newest first: fills (your side buy / sell, price, premium, fee), settlements (payout, PnL)
        and redeems, at most `limit` (<= 500) and after `since` (unix seconds), plus a one-line `summary`. Open positions are
        get_positions.

Input parameters:

- `account` (string, required)
- `limit` (integer)
- `since`

### `get_refusals` (~90 tokens)

Why the desk refused quotes to `taker` (your account) in the last 48 h, newest first: code, reason, instrument, side and
        quantity as asked, plus counts by code and what to do about each code. At most `limit` (<= 500) rows; read-only.

Input parameters:

- `limit` (integer)
- `taker` (string, required)

### `get_leaderboard` (~60 tokens)

Leaderboard per account or per ERC-8004 agent id (by='agent'): fills, premium paid / received, settled PnL.

Input parameters:

- `by` (string)
- `limit` (integer)
- `order` (string)

### `get_agent_record` (~37 tokens)

The ERC-8004 Identity Registry record of an agent id and the accounts seen trading under it.

Input parameters:

- `agent_id` (integer, required)

### `how_to_deposit` (~158 tokens)

How to fund a market balance with USDG over x402 (and the direct deposit path). amount in USDG. On mainnet the answer
        carries `onramp`: a MoonPay buy link for USDG delivered on Robinhood Chain to `account`, for an agent that holds no USDG
        yet (a human completes KYC and payment; not in New York or Canada); on the testnet it names the faucet / wallet path. Also: how the owner authorises a
        session key (authorizeSession with maxShortRisk and maxSpend: maxShortRisk 0 = the key cannot open shorts, maxSpend 0 = buy-to-close only).

Input parameters:

- `account`
- `amount`

### `how_to_get_test_funds` (~117 tokens)

TESTNET only: how to get the test settlement token (TestUSD, hUSD-test, no value). Returns the faucet call (to, data =
        faucet(): a fixed amount to the caller once per cooldown), the account's balance and next draw time when readable, and the
        onboarding steps: connect -> faucet -> deposit -> session key -> quote -> fill. Read-only: your own wallet sends the call.
        Mainnet answers not_on_mainnet (see how_to_deposit).

Input parameters:

- `account`

### `list_vaults` (~155 tokens)

The Hedgehood OptionVault v2 funds (hhNVDA-CC, hhNVDA-WHEEL, hhGOOGL-CC, ...): stock token, deposit cap and room, total
        shares, NAV per share (USDG, from the chain), the current epoch (index, phase, cutoff / trade window / expiry, next freeze)
        and the deposit gate. Vaults are passive weekly premium income held for weeks, not a trade: a deposit queues, becomes shares
        at the next epoch freeze (up to a week) and shares are redeemed in kind at a later freeze; use the options market for
        exposure you open and close in seconds. Read-only; nothing is sent.

### `vault_status` (~90 tokens)

An account's standing in every fund: shares (credited and owed by a frozen deposit), value at NAV, the pending deposit or
        redemption with its cohort epoch and cutoff, what is claimable, the fund's epoch state and the next step (wait / claim /
        redeem). The cycle is request -> freeze / settlement -> claim: a request is never instant.

Input parameters:

- `account` (string, required)

### `vault_deposit_quote` (~175 tokens)

The unsigned calldata to deposit `usdg` USDG into `vault` (address or symbol like hhNVDA-CC) for `account`: `txs` = USDG
        approve (when the allowance is short) then requestDeposit(0, usdg, account), with the cohort epoch and its cutoff, a share
        estimate at today's NAV, the balance / cap / eligibility checks and the cancelDeposit calldata. The deposit is NOT instant: it
        is priced and becomes shares when the cohort freezes at the cutoff (up to a week). You send every tx with the account's own
        owner key (needs ETH for gas); this server holds no keys and sends nothing.

Input parameters:

- `account` (string, required)
- `usdg` (string, required)
- `vault` (string, required)

### `vault_redeem_quote` (~150 tokens)

The unsigned calldata to redeem `shares` (a decimal or 'all') of `vault` for `account`: requestRedeem(shares, account),
        the cohort it joins and when it pays, the cancelRedeem calldata. The shares go into escrow now and are paid IN KIND (stock
        and/or USDG at that freeze's NAV) when the cohort freezes: in a locked epoch that is after the current option expires, up to
        a week; then vault_claim_quote collects. You send it with the account's own owner key; this server never sends.

Input parameters:

- `account` (string, required)
- `shares` (string)
- `vault` (string, required)

### `vault_claim_quote` (~95 tokens)

The unsigned calldata to collect what `account`'s redemption (or refunded deposit) in `vault` paid: claim(account, account)
        with the claimable stock and USDG amounts; nothing_to_claim with the pending redemption's cutoff when it has not frozen yet.
        You send it with the account's own owner key; this server never sends.

Input parameters:

- `account` (string, required)
- `vault` (string, required)

### `lend_status` (~138 tokens)

Share Lending, LEND side: the Morpho Vault V2 that lends USDG against Hedgehood fund shares (hhNVDA-CC) on Morpho Blue — vault,
        total assets, cap and room, the live market's utilization and borrow rate, an approximate supply APY (net of the vault's 10%
        performance fee), and `my`: the account's vault shares, their USDG value and its wallet USDG. Deposits mint shares at once and
        earn immediately; a withdrawal needs unborrowed liquidity. Read-only; nothing is sent. Not for US persons.

Input parameters:

- `account` (string, required)

### `lend_deposit_quote` (~134 tokens)

The unsigned calldata to lend `usdg` USDG: `txs` = USDG approve (when the allowance is short) then the vault's ERC-4626
        deposit(usdg, account), with the share preview, the APY estimate and the cap / gate / balance checks as {error, reason}
        (cap_exceeded, insufficient_balance, paused, not_eligible). You send every tx with the account's own owner key (needs ETH for
        gas); this server holds no keys and sends nothing.

Input parameters:

- `account` (string, required)
- `usdg` (string, required)

### `lend_withdraw_quote` (~114 tokens)

The unsigned calldata to take lent USDG back: withdraw(usdg, account, account), or redeem(all shares, account, account) for
        'all' (exact, no dust). insufficient_balance when the account holds less, insufficient_liquidity when the vault's idle USDG plus
        the market's unborrowed supply cannot pay it now. You send it with the account's own owner key; this server never sends.

Input parameters:

- `account` (string, required)
- `usdg` (string)

### `borrow_status` (~168 tokens)

Share Lending, BORROW side: the Morpho Blue market that takes hhNVDA-CC fund shares as collateral for USDG — id (discovered from
        the lending vault at each call; the mainnet market is being migrated to a new oracle), LLTV, the ShareRiskOracle price and status
        (live / held / unavailable), borrow rate, utilization, supply, borrowed, available — and `my`: collateral, debt (interest to now),
        borrowing power, health factor, LTV and the liquidation price. Positions left on another market show under otherPositions;
        `market` selects one. Rule: keep LTV at or below 70% of LLTV. Read-only; nothing is sent.

Input parameters:

- `account` (string, required)
- `market`

### `borrow_supply_collateral_quote` (~137 tokens)

The unsigned calldata to post `shares` fund shares (a decimal or 'all' of the wallet) as collateral: approve to Blue (when the
        allowance is short) + supplyCollateral(marketParams, shares, account, 0x), with the position before and after (HF, LTV). No
        oracle read. insufficient_balance when the wallet holds fewer shares (shares still in the fund's redemption queue do not count).
        You send it with the account's own owner key; this server never sends.

Input parameters:

- `account` (string, required)
- `market`
- `shares` (string, required)

### `borrow_take_quote` (~157 tokens)

The unsigned calldata to borrow `usdg` USDG against posted collateral: borrow(marketParams, usdg, 0, account, account), with the
        post-action HF / LTV and a `warning` when the resulting LTV is above 70% of LLTV. Refused with oracle_stale when the ShareRiskOracle
        is fail-closed (Blue cannot price the collateral), unhealthy when HF would drop below 1 (with the most you could add),
        insufficient_liquidity when the market lacks the USDG. You send it with the account's own owner key; this server never sends.

Input parameters:

- `account` (string, required)
- `market`
- `usdg` (string, required)

### `borrow_repay_quote` (~154 tokens)

The unsigned calldata to repay USDG debt: approve to Blue (when short) + repay(marketParams, usdg, 0, account, 0x), or for 'all'
        repay by the exact share debt (no dust; the approval carries 0.1% headroom for interest until the tx lands), with the post-action
        HF / LTV. nothing_to_repay, exceeds_debt, insufficient_balance are answers. Repay reads no oracle: it works while the oracle is
        unavailable. You send it with the account's own owner key; this server never sends.

Input parameters:

- `account` (string, required)
- `market`
- `usdg` (string)

### `borrow_withdraw_collateral_quote` (~136 tokens)

The unsigned calldata to take fund shares back from Blue: withdrawCollateral(marketParams, shares, account, account), with the
        post-action HF / LTV and the 70%-of-LLTV warning. Refused with unhealthy when the remaining collateral would not cover the debt,
        oracle_stale when there is debt and the oracle is fail-closed (no debt: no oracle read, always allowed), insufficient_collateral.
        You send it with the account's own owner key; this server never sends.

Input parameters:

- `account` (string, required)
- `market`
- `shares` (string)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/0xhedgehood-hedgehood-options/mcp#diagnostics

## Score history

- 2026-11-05: 61
- 2026-11-04: 61
- 2026-11-03: 60
- 2026-11-02: 60
- 2026-11-01: 59
- 2026-10-31: 59
- 2026-10-30: 58
- 2026-10-29: 58
- 2026-10-28: 55

## Common questions

### What is the Hedgehood Options MCP server?

Hedgehood Options is an MCP server listed in the public MCP registry as io.github.0xHedgeHood/hedgehood-options. Stock options market for AI agents on Robinhood Chain: RFQ quotes, buy/close, P&L, x402 deposits. This page covers its hosted endpoint (https://mcp.hedgehood.io/mcp).

### Is the Hedgehood Options MCP server safe to use?

Hedgehood Options scores 61 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Hedgehood Options MCP server expose?

Hedgehood Options exposes 26 tools: list_markets, list_instruments, get_mark, get_quote, close_quote, and 21 more. Their descriptions and schemas cost roughly 2,964 tokens of context every time the server is loaded.

### Does the Hedgehood Options MCP server require authentication?

No. We connected to Hedgehood Options without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Hedgehood Options MCP server still maintained?

Hedgehood Options is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://mcp.hedgehood.io/mcp
- Repository: https://github.com/0xHedgeHood/hedgehood-agent-kit
- Website: https://hedgehood.app/
- Changelog RSS feed: https://verifymcp.io/servers/0xhedgehood-hedgehood-options/mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/0xhedgehood-hedgehood-options/mcp.json
- HTML version of this page: https://verifymcp.io/servers/0xhedgehood-hedgehood-options/mcp