Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

ai.shumi/mcp

NPM · @SHUMI-AI/MCP · 2 COMPONENTS · SCANNED SEP 20

Crypto market intelligence: prices, funding rates, narratives, regime, and delta-neutral research.

0 this week 84 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 0 of 8 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency45
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Build provenance is cryptographically sound, but it attests a different repository to the one declared in the registry. Most often the declared URL is simply stale. View diagnostics → Unverified
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 31 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability88
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 3094 tokens (~93/item across 33 items; 31 tools + 2 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
  • Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (94% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 31 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 33 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Install

How do I install the ai.shumi/mcp server?

ai.shumi/mcp runs locally as an npm package, launched with npx -y @shumi-ai/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @shumi-ai/mcp

# add to Claude Code
claude mcp add ai-shumi-mcp -- npx -y @shumi-ai/mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "ai-shumi-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shumi-ai/mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "ai-shumi-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shumi-ai/mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add ai-shumi-mcp -- npx -y @shumi-ai/mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-shumi-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@shumi-ai/mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add ai-shumi-mcp --command npx --arg -y --arg @shumi-ai/mcp
# ~/.hermes/config.yaml
mcp_servers:
  ai-shumi-mcp:
    command: "npx"
    args: ["-y", "@shumi-ai/mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "ai-shumi-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@shumi-ai/mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add ai-shumi-mcp -t stdio -c npx -a -y @shumi-ai/mcp
// mcp.json
{
  "mcpServers": {
    "ai-shumi-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@shumi-ai/mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Sept 26 −3
    • Stability: pass → 0.80 functional
  • 18 Sept 26 +1
    • Stability: 0.97 → pass security
  • 16 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 14 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Sept 26 −3
    • Stability: pass → 0.80 functional
  • 11 Sept 26 +1
    • Stability: 0.97 → pass security
  • 8 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 7 Sept 26 0
    • Security disclosure: unverified → fail functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/@shumi-ai/mcp@1.1.0

Provenance Repository mismatch

The attestation is cryptographically sound but binds a different repository to the one the registry declares. Most often the declared URL is simply stale.

Result Repository mismatch
Ecosystem npm
Reason Repository mismatch
Discovered via Registry attestation endpoint
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/mayrsascha/shumi-mcp/.github/workflows/publish.yml@refs/heads/main
Rekor log index 2521012577
Predicate type https://slsa.dev/provenance/v1
Subject digest sha512:bc76ec169ac832348fdc960440c043e8aa238fd9774f749f5a0c9dc20d4658727f5ed041880b65407e9e427c4402231df065aab05af5648581bc84f7f

Background: How many MCP packages publish verified provenance →

Dependencies 8 packages
Packages resolved 8
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 31 exposed · ~2,963 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
ask_shumi ~104

Ask Shumi any crypto-market question in natural language. Shumi classifies the query, fetches the relevant data, and returns a synthesized answer. Use this when no specific typed tool fits, or for multi-part / comparative questions.

NameTypeReqDescription
archetypestringSpecialization path (default "base"; e.g. "perp-dex").
querystringyesThe natural-language question, e.g. "is funding extreme on SOL right now?".

No output schema declared.

No examples provided.

get_basket ~65

Daily snapshots of the tracked basket — composition and performance over time.

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
NameTypeReqDescription
data
error
meta

No examples provided.

get_category ~99

Detail for one category. view=info (trend breakdown), coins (member coins), sentiment.

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
namestringyesCategory name, e.g. "Layer 2".
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
viewstringWhich category view to return.
NameTypeReqDescription
data
error
meta

No examples provided.

get_coin_historical ~152

Market cap, volume, open interest, funding rate and price for a coin AS OF a chosen point in the past. Returns a single snapshot, not a series: call it once per point you want to compare (e.g. amount=7 interval=d for a week ago, then again with no offset for now). Use this to answer "how has funding/open interest changed since…".

NameTypeReqDescription
amountintegerHow far back to look, in units of `interval`. Omit for the most recent snapshot.
intervalstringUnit for `amount`: h (hours) or d (days). Defaults to hours.
symbolstringyesCoin symbol, e.g. ETH.
NameTypeReqDescription
data
error
meta

No examples provided.

get_coin_risk ~122

Bundled risk context for one or more coins: price, funding APR, deterministic funding_paying_side, funding_receiving_side, carry_if_long and carry_if_short fields, daily/weekly trend, sentiment stance, and BTC correlation. Funding applies to perpetual positions only; spot positions neither pay nor receive it. Relay the carry fields exactly rather than inferring direction from crowding. The best single tool for "should I be worried about X".

NameTypeReqDescription
symbolsarrayyesOne or more coin symbols, e.g. ["BTC","ETH","SOL"].
NameTypeReqDescription
data
error
meta

No examples provided.

get_coin_sentiment ~34

On-chain/social sentiment aggregates for a single coin.

NameTypeReqDescription
symbolstringyesCoin symbol, e.g. BTC.
NameTypeReqDescription
data
error
meta

No examples provided.

get_funding_alerts ~74

Discrete funding-rate alert events (asset, trigger zone, funding at trigger, fired-at time).

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
NameTypeReqDescription
data
error
meta

No examples provided.

get_funding_momentum ~101

Perpetual funding-rate positioning context, market-wide or for one symbol. APR is already in percent units (1.7 = 1.7%). Positive funding means longs pay and shorts receive; negative funding means shorts pay and longs receive. Funding is context only, not a standalone directional, timing, or entry signal.

NameTypeReqDescription
symbolstringRestrict to one symbol, e.g. BTC. Omit for the market-wide view.
NameTypeReqDescription
data
error
meta

No examples provided.

get_futures_signals ~118

Perpetual-futures signal engine. view=state (currently open signals), log (recent fires), history (one asset's past signals — needs asset).

NameTypeReqDescription
assetstringAsset symbol, e.g. BTC. Required when view="history".
fieldsstringToken-saving: comma-separated top-level fields to keep.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
viewstringWhich futures view to return.
NameTypeReqDescription
data
error
meta

No examples provided.

get_global_market ~23

Global market aggregates: BTC dominance, total market cap, total volume.

Input schema present but exposes no named parameters.

NameTypeReqDescription
data
error
meta

No examples provided.

get_holders ~128

Tracked token-holder cohorts. view=watchlist (which token contracts are tracked), movements (recent holder-count changes for one contract). Answers "is the holder base growing or bleeding?".

NameTypeReqDescription
contractstringToken contract address. Required when view="movements".
fieldsstringToken-saving: comma-separated top-level fields to keep.
limitintegerMax results.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
viewstringWhich holder view to return.
NameTypeReqDescription
data
error
meta

No examples provided.

get_market_crossing ~58

The most recent regime crossing — when one trend cohort (UP/HODL/DOWN) overtook another market-wide. Answers "has the market flipped?". Returns an empty `crossings` array plus a message when no crossing has fired.

Input schema present but exposes no named parameters.

NameTypeReqDescription
data
error
meta

No examples provided.

get_market_health ~55

Overall market health: the UP/HODL/DOWN trend distribution and extreme movers. Set context for the full bundle.

NameTypeReqDescription
contextbooleanInclude the full market-context bundle (breadth velocity, regime age, leadership).
NameTypeReqDescription
data
error
meta

No examples provided.

get_market_sentiment ~96

Aggregate market sentiment. view=market/latest/summary (overall), narratives, categories, slopes/entity-slopes (what is trending), health (pipeline status).

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
viewstringWhich sentiment view to return.
NameTypeReqDescription
data
error
meta

No examples provided.

get_narrative ~36

Sentiment and momentum for a single named narrative.

NameTypeReqDescription
namestringyesNarrative name, e.g. "AI coins".
NameTypeReqDescription
data
error
meta

No examples provided.

get_pair_suggestions ~206

Pair-trading and delta-neutral funding-arbitrage intelligence. mode=suggestions (pair ideas), delta-neutral (funding arb), history (backtest), signal (state for a specific pair — needs token_a & token_b).

NameTypeReqDescription
dex_onlybooleanDEX exchanges only (delta-neutral).
exchangestringFilter by exchange (delta-neutral).
fieldsstringToken-saving: comma-separated top-level fields to keep.
limitintegerMax results.
modestringWhich pair view to return.
symbolstringFilter by symbol (suggestions / delta-neutral).
token_astringFirst token (required for mode="signal"), e.g. ETH.
token_bstringSecond token (required for mode="signal"), e.g. SOL.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
NameTypeReqDescription
data
error
meta

No examples provided.

get_prices ~127

Bulk live prices, optionally with 4h/24h/7d baseline overlays. Omit symbols for the full tracked set.

NameTypeReqDescription
baselinesbooleanInclude 4h/24h/7d baseline price overlay.
fieldsstringToken-saving: comma-separated top-level fields to keep.
symbolsstringComma-separated symbols, e.g. "BTC,ETH,SOL". Omit for all tracked coins.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
NameTypeReqDescription
data
error
meta

No examples provided.

get_regime ~73

Market regime signals. view=active (current positions), signals (all), confidence (scores). Provide symbol to get that symbol's regime history instead.

NameTypeReqDescription
symbolstringIf set, returns regime history for this symbol.
viewstringWhich regime view to return (ignored when symbol is set).
NameTypeReqDescription
data
error
meta

No examples provided.

get_rwa_asset ~143

Price, daily/weekly trend and perp funding for one real-world asset (stock, ETF, commodity, index, FX). Look up by ticker (AAPL, GOLD) or by namespaced id (xyz:AAPL). Funding belongs to the PERPETUAL CONTRACT, not the underlying — `funding.apr` is the annualized rate in percent, `funding.rate` is the raw per-hour fraction. Do not use the crypto coin tools for these.

NameTypeReqDescription
bystringHow `identifier` is interpreted.
identifierstringyesTicker (AAPL, GOLD, SP500) or namespaced id (xyz:AAPL).
NameTypeReqDescription
data
error
meta

No examples provided.

get_signal ~38

Synthesized verdict for a coin, combining trend, funding, sentiment and regime.

NameTypeReqDescription
symbolstringyesCoin symbol, e.g. SOL.
NameTypeReqDescription
data
error
meta

No examples provided.

get_signal_quality ~59

Signal validation envelope for an asset: Sharpe ratio, win rate, sample size, reliability tier.

NameTypeReqDescription
assetstringyesAsset symbol, e.g. BTC.
signal_typestringSignal type (default: mean_reversion).
NameTypeReqDescription
data
error
meta

No examples provided.

get_transcripts ~110

Highlights mined from tracked video/podcast transcripts. view=highlights (extracted claims with the coins, sectors and macro tags they mention), sources (which channels are tracked). Answers "what are people actually saying about X?".

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
viewstringWhich transcript view to return.
NameTypeReqDescription
data
error
meta

No examples provided.

get_wallets ~123

Tracked wallets. view=watchlist (which wallets are tracked), movements (recent balance changes for one wallet address). Answers "what did this wallet do recently?".

NameTypeReqDescription
addressstringWallet address. Required when view="movements".
fieldsstringToken-saving: comma-separated top-level fields to keep.
limitintegerMax results.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
viewstringWhich wallet view to return.
NameTypeReqDescription
data
error
meta

No examples provided.

list_categories ~68

List all tracked crypto categories (DeFi, Layer 2, memes, …).

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
NameTypeReqDescription
data
error
meta

No examples provided.

list_narratives ~72

List the currently active market narratives (e.g. "AI coins", "DeFi summer").

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
NameTypeReqDescription
data
error
meta

No examples provided.

list_rwa_assets ~152

List the tradable real-world assets — stocks and ETFs (AAPL, NVDA, SPY), metals and commodities (GOLD, SILVER, BRENT), stock indices (SP500, JP225) and FX. These trade as perps on Hyperliquid builder DEXes and are NOT crypto tokens; the crypto tools will not find them. Use this to answer "which stocks/commodities can I look at?".

NameTypeReqDescription
dexstringFilter by builder-DEX slug, e.g. "xyz".
topintegerMax assets to return (server default 200; the full universe is ~94).
typestringFilter by asset class.
NameTypeReqDescription
data
error
meta

No examples provided.

lookup_coin ~107

Look up a single coin and its core metrics (price, trend, metadata) by symbol, name, CoinGecko/internal id, or on-chain contract address.

NameTypeReqDescription
bystringHow `identifier` is interpreted.
chainstringChain for contract lookups (ethereum, bsc, solana, base, …). Required when by="contract".
identifierstringyesThe symbol (BTC), name (Bitcoin), id (bitcoin), or contract address.
NameTypeReqDescription
data
error
meta

No examples provided.

resolve_coin ~65

Fuzzily resolve a symbol, name, or contract to canonical coin candidates. Use this first when the user input is ambiguous, before calling other tools.

NameTypeReqDescription
limitintegerMax candidates to return.
querystringyesSymbol, name, or contract to resolve.
NameTypeReqDescription
data
error
meta

No examples provided.

scan_coins ~169

Filter the tracked universe by trend direction, category, market-cap band, and exchange.

NameTypeReqDescription
categorystringFilter by category name, e.g. "Layer 2".
exchangestringFilter by exchange listing.
fieldsstringToken-saving: comma-separated top-level fields to keep.
intervalstringTrend interval: 1d (daily) or 1w (weekly).
limitintegerMax results.
mcap_maxnumberMaximum market cap in USD.
mcap_minnumberMinimum market cap in USD.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
trendstringFilter by trend direction.
NameTypeReqDescription
data
error
meta

No examples provided.

scan_trends ~127

Trend scanner. state=fresh (newly started), stale (longest running), aligned (multi-timeframe agreement), extreme (biggest moves), historical.

NameTypeReqDescription
fieldsstringToken-saving: comma-separated top-level fields to keep.
intervalstringTrend interval: 1d (daily) or 1w (weekly).
limitintegerMax results.
statestringWhich trend slice to return.
topintegerKeep only the first N items (default 50). Raise for more, lower to save tokens.
NameTypeReqDescription
data
error
meta

No examples provided.

search_web ~59

Search the web for crypto information, or get a direct answer. Backed by Shumi's web-search tool.

NameTypeReqDescription
answerbooleanReturn a direct synthesized answer instead of raw search results.
querystringyesWhat to search for.

No output schema declared.

No examples provided.

Common questions

What is the ai.shumi/mcp server?

ai.shumi/mcp is listed in the public MCP registry as ai.shumi/mcp. Crypto market intelligence: prices, funding rates, narratives, regime, and delta-neutral research. This page covers its npm package (@shumi-ai/mcp).

Is the ai.shumi/mcp server safe to use?

ai.shumi/mcp scores 84 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ai.shumi/mcp server expose?

ai.shumi/mcp exposes 31 tools: get_coin_risk, lookup_coin, resolve_coin, get_coin_sentiment, get_coin_historical, and 26 more. Their descriptions and schemas cost roughly 2,963 tokens of context every time the server is loaded.

Is the ai.shumi/mcp server still maintained?

ai.shumi/mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the ai.shumi/mcp server under?

ai.shumi/mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.