Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

com.donnyautomation/dex-data

NPM · DEX-DATA-MCP · SCANNED SEP 20

DEX market data, SEC EDGAR change oracles, LEI and US Treasury curve. 13 tools, x402 paid.

Available components

npm · dex-data-mcp 77
−13 this week 77 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 0 of 20 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to donnywin85/dex-data-mcp). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 4 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability72
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2758 tokens (~212/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability check failed: the tool surface changed between 1.6.0 and 1.7.0: 20 tool removals, 0 breaking changes, 10 additions. See how to fix → Fail
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 13 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities20
  • Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
Install

How do I install the com.donnyautomation/dex-data MCP server?

com.donnyautomation/dex-data runs locally as an npm package, launched with npx -y dex-data-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · dex-data-mcp

# add to Claude Code
claude mcp add com-donnyautomation-dex-data -- npx -y dex-data-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "com-donnyautomation-dex-data": {
      "command": "npx",
      "args": [
        "-y",
        "dex-data-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "com-donnyautomation-dex-data": {
      "command": "npx",
      "args": [
        "-y",
        "dex-data-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add com-donnyautomation-dex-data -- npx -y dex-data-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-donnyautomation-dex-data": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "dex-data-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-donnyautomation-dex-data --command npx --arg -y --arg dex-data-mcp
# ~/.hermes/config.yaml
mcp_servers:
  com-donnyautomation-dex-data:
    command: "npx"
    args: ["-y", "dex-data-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "com-donnyautomation-dex-data": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "dex-data-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add com-donnyautomation-dex-data -t stdio -c npx -a -y dex-data-mcp
// mcp.json
{
  "mcpServers": {
    "com-donnyautomation-dex-data": {
      "command": "npx",
      "args": [
        "-y",
        "dex-data-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 19 Sept 26 −2

    No change was recorded against any check on this day. Stability & Change Management went from 14 to 0.

  • 17 Sept 26 +16
    • Malware scan: unverified → pass ▲ security
  • 16 Sept 26 −28
    • Malware scan: pass → unverified ▼ security
    • Stability: 0.90 → fail ▼ security
    • Schema quality: 126 → 212 ▼ functional
    • Package version: 1.6.0 → 1.7.0 functional
  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Sept 26 −3
    • Stability: pass → 0.80 functional
  • 11 Sept 26 0
    • Stability: 0.97 → pass security
  • 10 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/dex-data-mcp@1.7.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo donnywin85/dex-data-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/donnywin85/dex-data-mcp/.github/workflows/publish.yml@refs/tags/v1.7.0
Rekor log index 2856478032
Predicate type https://slsa.dev/provenance/v1
Subject digest sha512:00a01b7b1d3b73453b0f36316ae44269710d93485cbfd67701f20254264f09019bce9d6f3f3d39972ad20e16c4aebc793a9e4682bd5c0e15e7a71f756

Background: How many MCP packages publish verified provenance →

Dependencies 20 packages
Packages resolved 20
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 13 exposed · ~2,758 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
find_avalanche_arbitrage ~182

Scan AVALANCHE C-Chain for cross-venue arbitrage right now: pairs whose price differs enough between DEX venues to be worth acting on, ranked by gross spread. Returns the pair, the cheap and expensive venue, the spread in bps and the liquidity on each side. Gross, not net — gas and slippage are yours to subtract. $0.01 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: minSpreadBps=25.

NameTypeReqDescription
limitnumber–Maximum opportunities returned.
minSpreadBpsnumber–Minimum gross spread to report, in basis points. Default 10.
minVenueTvlUsdnumber–Ignore venues thinner than this, in USD. Default 1000.

No output schema declared.

No examples provided.

find_polygon_arbitrage ~177

Scan POLYGON PoS for cross-venue arbitrage right now: pairs whose price differs enough between DEX venues to be worth acting on, ranked by gross spread. Returns the pair, the cheap and expensive venue, the spread in bps and the liquidity on each side. Gross, not net — gas and slippage are yours to subtract. $0.01 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: minSpreadBps=25.

NameTypeReqDescription
limitnumber–Maximum opportunities returned.
minSpreadBpsnumber–Minimum gross spread to report, in basis points. Default 10.
minVenueTvlUsdnumber–Ignore venues thinner than this, in USD. Default 1000.

No output schema declared.

No examples provided.

get_avalanche_pool_reserves ~172

Raw AMM pool reserves and live pool state for a pair on AVALANCHE C-Chain: both token balances, the pool fee in bps, the implied price from those reserves and the pool TVL, all read at one block height which is returned with the answer. This is the underlying data the price and depth tools are derived from — use it when you need to compute your own, or to audit a quote against the chain. $0.01 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: pair="WAVAX/USDC".

NameTypeReqDescription
pairstringyesToken pair as SYM/SYM on Avalanche C-Chain, e.g. WAVAX/USDC.

No output schema declared.

No examples provided.

get_base_liquidity ~129

DEX liquidity, market depth and TVL for a trading pair on BASE, broken down by venue. Returns per-venue USD liquidity, the pools backing it and the total, so you can tell a quote backed by a deep pool from one backed by dust. $0.01 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: pair="WETH/USDC".

NameTypeReqDescription
pairstringyesToken pair as SYM/SYM on Base, e.g. WETH/USDC.

No output schema declared.

No examples provided.

get_company_dossier ~319

COUNTERPARTY DOSSIER for one legal entity in a single call: who it is (GLEIF), whether it is sanctioned (OFAC name screening) and whether it is an SEC registrant, joined and returned together. Use this instead of calling lookup_lei and screening separately when the question is "can we deal with this party". A name match is a REVIEW ITEM, never a determination — the score and the matched alias come back with it. $0.05 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: q="Apple Inc." or ticker="AAPL".

NameTypeReqDescription
cikstring–SEC Central Index Key, 1 to 10 digits. Alternative to ticker; cik wins if both are sent.
leistring–Exact 20-character LEI, for an unambiguous subject. Use instead of q.
minScorenumber–OFAC name-match threshold 0.1..1, default 0.85. 1.0 is an exact name-token match. Lower it to WIDEN the review set, never to narrow it.
qstring–Legal entity name, max 200 chars. Include the suffix for a precise match, e.g. "Apple Inc." rather than "Apple".
tickerstring–Exchange ticker, e.g. AAPL. Resolves the SEC block directly and supplies the registered name to search GLEIF with.

No output schema declared.

No examples provided.

get_polygon_token_price ~149

Live USD price of a token on POLYGON PoS, read from DEX pools at call time rather than from a cached feed. Returns the price, the pair it was priced through, the USD liquidity backing that quote and a confidence rating; refuses to return a price backed by a dust pool instead of reporting an unreliable number. $0.01 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: symbol="WMATIC".

NameTypeReqDescription
symbolstringyesToken symbol on Polygon PoS, e.g. WMATIC, WETH, WBTC, USDC, USDT, DAI, LINK.

No output schema declared.

No examples provided.

get_sec_events ~317

SEC EDGAR MATERIAL EVENT ORACLE for one issuer: which material events this company has reported since your cursor, decoded from its 8-K item codes rather than left as raw filings. Returns the item code, what it means, and the filing it came from. Filter to the events you care about — 1.01 material agreement, 5.02 officer departure, 2.06 impairment. A malformed code returns 400 bad_items rather than being silently ignored. $0.05 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: ticker="TSLA", since="2026-09-01", items="5.02".

NameTypeReqDescription
cikstring–SEC Central Index Key, 1 to 10 digits (e.g. 1318605). Alternative to ticker.
itemsstring–Comma separated 8-K item codes to filter on, e.g. "1.01,5.02,2.06". A filing matches if it carries ANY of them.
limitnumber–Maximum events returned, 1 to 200. Default 50.
sincestringyesISO date YYYY-MM-DD. INCLUSIVE cursor: events filed on this date are returned. Required — this route returns a delta, not a dump.
tickerstring–Exchange ticker, e.g. TSLA. Send cik instead when you have it. If both are sent, cik wins.

No output schema declared.

No examples provided.

get_sec_filings ~329

SEC EDGAR FILING CHANGE ORACLE for one issuer: everything this company has filed with the SEC since your cursor, as a delta rather than a dump. Returns accession number, form type, filing and period dates, and the document URL. Amendments are matched with their original (10-K also matches 10-K/A). Reports `matched` and `truncated` so a cut-off delta is never mistaken for a complete one. $0.05 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: ticker="AAPL", since="2026-09-01", forms="8-K".

NameTypeReqDescription
cikstring–SEC Central Index Key, 1 to 10 digits, zero padding optional (e.g. 320193 or 0000320193). Alternative to ticker.
formsstring–Comma separated form filter, e.g. "10-K,10-Q,8-K". A form also matches its /A amendment; "8-K/A" alone matches only amendments.
limitnumber–Maximum filings returned, 1 to 200. Default 50.
sincestringyesISO date YYYY-MM-DD. INCLUSIVE cursor: filings on this date are returned. Required — this route returns a delta, not a dump.
tickerstring–Exchange ticker, e.g. AAPL. Send cik instead when you have it: cik is EDGAR identity, ticker is a convenience. If both are sent, cik wins.

No output schema declared.

No examples provided.

get_sec_insiders ~323

SEC EDGAR OWNERSHIP CHANGE ORACLE for one issuer: who has reported a change in their position since your cursor. Covers Forms 3, 4, 5, SC 13D and SC 13G and nothing outside that set. Returns the reporting owner, their relationship to the issuer, the form and the filing. An amendment is matched with its original and is NOT a second transaction. Active issuers file many Form 4s, so `matched` and `truncated` tell you when you hit the cap. $0.05 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: ticker="NVDA", since="2026-09-01", forms="4".

NameTypeReqDescription
cikstring–SEC Central Index Key, 1 to 10 digits (e.g. 1045810). Alternative to ticker.
formsstring–Comma separated filter within the ownership set, e.g. "4" or "SC 13D". A form also matches its /A amendment.
limitnumber–Maximum filings returned, 1 to 200. Default 50.
sincestringyesISO date YYYY-MM-DD. INCLUSIVE cursor: ownership filings on this date are returned. Required — this route returns a delta, not a dump.
tickerstring–Exchange ticker, e.g. NVDA. Send cik instead when you have it. If both are sent, cik wins.

No output schema declared.

No examples provided.

get_spend_budget ~60

How much this session has spent on paid calls, and the caps in force. Free, local, no network: it makes the cost of continuing visible BEFORE it is incurred. Call it first if you are about to run a loop over paid tools.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_treasury_yield_curve ~155

US Treasury par yield curve: the full set of constant-maturity rates for one business day, from 1 month to 30 years, as published by the Treasury. The risk-free curve behind any discounting, spread or carry calculation. A non-publication date returns 404 with the available range rather than the nearest guess. $0.03 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: no arguments for the latest curve, or date="2026-09-02".

NameTypeReqDescription
datestring–YYYY-MM-DD business day, for a specific past day. Omit for the most recent published curve.

No output schema declared.

No examples provided.

get_v4_hook_risk ~227

Uniswap v4 HOOK SECURITY SCAN on Base: decode a hook contract before routing a trade through it. Decodes all 14 hook permission bits from the address (v4-core Hooks.sol), flags swap custody, fee-taking and EIP-1967 upgradeable hooks, and verifies source via Basescan/Sourcify/Blockscout consensus. Returns a custody class (PASSIVE | FLOW_CONTROL | FEE_TAKING | SWAP_CUSTODY | OPAQUE), risk flags and the verification state. It is capability analysis and NEVER outputs SAFE: it tells you what the hook is able to do to your trade, not whether its author intends to. $0.01 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: address="0x0000000000000000000000000000000000000080".

NameTypeReqDescription
addressstringyesUniswap v4 hook contract address on Base mainnet, 0x + 40 hex characters.

No output schema declared.

No examples provided.

lookup_lei ~219

Look up a company in the GLEIF Legal Entity Identifier golden copy BY NAME, not just by identifier — knowing the LEI already is the hard part. Returns the LEI, registered legal name, previous names, legal form, jurisdiction, legal and headquarters addresses and the registration record. Lapsed, retired and annulled entities come back FLAGGED rather than filtered out: a hidden record and no record are indistinguishable to the caller. $0.03 USDC per call after the free tier. First 25 calls/day are free — no wallet, no signup, no key. Example: q="Apple Inc.".

NameTypeReqDescription
leistring–Exact 20-character LEI, for a single record instead of a name search.
limitnumber–Maximum name-search results, 1..50. Default 10.
qstring–Legal entity name, max 200 chars. A bare brand name works — "Apple" finds Apple Inc. Results are ranked across the legal name and any alternative names.

No output schema declared.

No examples provided.

Common questions

What is the com.donnyautomation/dex-data MCP server?

com.donnyautomation/dex-data is an MCP server listed in the public MCP registry as com.donnyautomation/dex-data. DEX market data, SEC EDGAR change oracles, LEI and US Treasury curve. 13 tools, x402 paid. This page covers its npm package (dex-data-mcp).

Is the com.donnyautomation/dex-data MCP server safe to use?

com.donnyautomation/dex-data scores 77 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the com.donnyautomation/dex-data MCP server expose?

com.donnyautomation/dex-data exposes 13 tools: get_base_liquidity, get_polygon_token_price, get_avalanche_pool_reserves, find_polygon_arbitrage, find_avalanche_arbitrage, and 8 more. Their descriptions and schemas cost roughly 2,758 tokens of context every time the server is loaded.

Is the com.donnyautomation/dex-data MCP server still maintained?

com.donnyautomation/dex-data is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the com.donnyautomation/dex-data MCP server under?

com.donnyautomation/dex-data declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.