Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

YieldCave

REMOTE · MCP.YIELDCAVE.COM

Tokenized asset data for agents: treasury yields, stablecoin rates, tokenized stocks, alerts.

64 Trust /100

Last scanned (5 hours ago)

Scores higher than 46% of remote servers

Reachable. Last reached 18 Oct 2026.

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security54
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (delete_alert). See how to fix → View diagnostics → Fail
  • HTTPS enforcement could not be verified: the plaintext port answered with HTTP 406, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
Schema Quality & AI Usability73
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 1969 tokens (~103/item across 19 items; 19 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management7
  • Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 93% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 18 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Oct 26 0
    • Stability: unverified → 0.03 ▲ functional
  • 16 Oct 26 63

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 18 Oct 2026 · Probed https://mcp.yieldcave.com

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=yieldcave.com CN=WE1,O=Google Trust Services,C=US 16 Oct 2026 14 Jan 2027 ECDSA 256 ECDSA-SHA256 d32595718a4723f70e7ea8b37e64cc35
SANs: yieldcave.com, mcp.yieldcave.com, *.mcp.yieldcave.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of mcp.yieldcave.com. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
yieldcave.com. present 2371 13 Verified
mcp.yieldcave.com. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains; preload

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.yieldcave.com Verified 200
http (plaintext) http://mcp.yieldcave.com Inconclusive 406
MCP tools · 19 exposed · ~1,969 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
compare_yield_to_tokenized_treasuries ~144

Given an APY the user currently earns (e.g. a bank savings rate), computes the simple-interest difference versus the highest-yielding liquid tokenized treasury over a horizon. Returns arithmetic and assumptions only; it does not recommend.

NameTypeReqDescription
amountUsdnumber–Amount in USD (default 10,000)
currentApyPercentnumberyesAPY the user earns today, in percent, e.g. 0.5
horizonDaysinteger–Horizon in days (default 365)
minTvlUsdnumber–Liquidity floor for candidates (default 50,000,000)

No output schema declared.

No examples provided.

create_alert ~241

Creates a rule that is checked every hour after the data refresh. When any matching deployment crosses the threshold, YieldCave POSTs a JSON payload to your HTTPS webhook (Slack, Discord, Zapier, your own server). Fires at most once per 24 hours per rule. universe "rwa" (tokenized treasuries, default) or "stablecoin" (stablecoin pools with at least $10M TVL; omit symbol for all major stablecoins). Returns the alert id; keep it to delete the alert later.

NameTypeReqDescription
chainstring–Restrict to one chain
labelstring–Free text shown in the payload
metricstringyes"apy" in percent, "tvl" in USD
operatorstringyes–
symbolstring–One token, e.g. "USDY". Omit for every tokenized treasury
thresholdnumberyese.g. 4.5 for APY, 500000000 for TVL
universestring–Default rwa
webhookUrlstringyesWhere to POST when the alert fires

No output schema declared.

No examples provided.

create_api_key ~80

Creates a free YieldCave API key (300 calls/day, 3 alerts, 7 days of history) tied to an email address. The key is shown once. Send it on every request as an x-api-key header or Authorization: Bearer. One key per email.

NameTypeReqDescription
emailstringyesWhere to reach you about the key

No output schema declared.

No examples provided.

delete_alert ~21

Deletes an alert by id.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

get_rwa_asset ~62

Returns every deployment of one tokenized asset symbol (e.g. BUIDL, USDY, OUSG) across chains, with total TVL and curated description.

NameTypeReqDescription
symbolstringyesToken symbol, e.g. "BUIDL"

No output schema declared.

No examples provided.

get_tokenized_equity ~74

All tokenized versions of one underlying stock (e.g. TSLA) across issuers: market caps, volumes, chains, the most liquid wrapper, and (on Pro) the premium/discount range versus the underlying quote.

NameTypeReqDescription
underlyingstringyesUnderlying ticker, e.g. "NVDA"

No output schema declared.

No examples provided.

list_alerts ~23

Lists active alert rules (webhook hosts only, never full URLs).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_rwa_yields ~153

Lists tokenized real-world asset deployments (tokenized US treasuries, credit, funds) with current APY and TVL, from public DefiLlama data. Filter by chain or kind. Information only, not advice.

NameTypeReqDescription
chainstring–Blockchain name, e.g. "Ethereum", "Solana", "Base"
kindstring–"treasury" = tokenized US government debt / money-market style
limitinteger–Max rows (default 20)
minTvlUsdnumber–Minimum total value locked in USD (default 1,000,000)
sortBystring–Sort key (default tvlUsd)

No output schema declared.

No examples provided.

list_stablecoin_yields ~248

Where USDC, USDT, DAI, USDe and other stablecoins earn yield right now: single-asset pools on lending markets and vaults (credit and basis venues on Pro) (DefiLlama data, excludes tokenized treasuries, which have their own tools). Each row carries its protocol category group (lending, vault, credit, basis), base vs reward APY, 30-day mean APY and TVL. Default: pools with at least $10M TVL, highest APY first. Information only, not advice.

NameTypeReqDescription
chainstring–Blockchain name, e.g. "Base"
groupstring–Risk/category group
limitinteger–Max rows (default 20)
majorOnlyboolean–Only major stablecoins (USDC, USDT, DAI, USDS, USDe, PYUSD, ...)
minTvlUsdnumber–Minimum pool TVL in USD (default 10,000,000)
sortBystring–Default apy
symbolstring–Stablecoin symbol, e.g. "USDC"

No output schema declared.

No examples provided.

list_tokenized_equities ~240

Tokenized equities on public chains (xStocks, bStocks, Ondo Global Markets, Robinhood, Dinari, Coinbase and others): token price, market cap, 24h volume, the underlying ticker, chains, and (on Pro) premium or discount to the latest underlying quote. Filter by issuer, kind (stock, pre-ipo, etf), underlying or chain. Information only, not advice.

NameTypeReqDescription
chainstring–Chain name as CoinGecko lists it, e.g. "solana", "arbitrum-one", "ethereum"
issuerstring–Issuer name or part of it, e.g. "xStocks", "Ondo", "Robinhood"
kindstring––
limitinteger–Max rows (default 20; Free and anonymous up to 10, Pro up to 100)
minMarketCapUsdnumber–Default 1,000,000
sortBystring–Default marketCap; premium sorts by absolute premium
underlyingstring–Underlying ticker, e.g. "TSLA"

No output schema declared.

No examples provided.

manage_subscription ~36

Returns a Stripe Billing Portal link to update payment details, see invoices, or cancel the Pro subscription. Needs an API key with a subscription.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

my_usage ~33

Shows the caller's plan, calls used today, remaining allowance, alert allowance, depth limits, and what each plan includes.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

rwa_changes ~114

Compares the latest market with the snapshot from N days ago (default 1): APY and TVL change per deployment, biggest movers first, plus new and vanished deployments. universe "rwa" (default) or "stablecoin".

NameTypeReqDescription
daysinteger–How many days back to compare against (default 1)
kindstring–Default "treasury" (rwa universe only)
limitinteger–Max movers (default 15)
universestring–Default rwa

No output schema declared.

No examples provided.

rwa_history ~140

Daily snapshots of total TVL and TVL-weighted APY for one symbol, optionally on one chain, over the last N days (default 30; Free and anonymous plans see 7, Pro the full history). universe "rwa" (tokenized assets, default) or "stablecoin" (stablecoin pools). Includes the change from first to last day.

NameTypeReqDescription
chainstring–Restrict to one chain
daysinteger–How many days back (default 30)
symbolstringyesSymbol, e.g. "USDY" or "USDC"
universestring–Default rwa

No output schema declared.

No examples provided.

rwa_issuer_terms ~109

Hand-curated terms for a tokenized treasury token: who may invest (US persons?), minimum, structure (summary on Free; Pro adds what backs it, domicile, redemption method and timing, fees, yield mechanics and source URLs). Covers BUIDL, USYC, USDY, OUSG, USTB, TBILL, STBT, BENJI. Null means not stated by the source.

NameTypeReqDescription
symbolstringyesToken symbol, e.g. "USYC"

No output schema declared.

No examples provided.

rwa_market_summary ~45

Totals for the tokenized treasury market: distinct tokens, total TVL, median APY, top tokens by TVL, plus totals for other tokenized real-world assets.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

stablecoin_yield_summary ~86

Per stablecoin: venues, total TVL, median APY, best venue overall and best collateralized-lending venue; totals by category group; and the median tokenized treasury APY for comparison. Pools with at least $10M TVL by default.

NameTypeReqDescription
minTvlUsdnumber–Pool TVL floor (default 10,000,000)

No output schema declared.

No examples provided.

tokenized_equity_summary ~72

Totals for tokenized equities: token count, market cap and 24h volume; breakdown by issuer and by kind; top underlyings by combined market cap (top 5 on Free, 10 on Pro); on Pro, how many tokens have an underlying quote and the median absolute premium.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

upgrade ~48

Returns a checkout link for the Pro plan ($49/month: full history and changes, all stablecoin venues, full issuer terms, 100 alerts, 5000 calls/day). Needs an API key.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Install

How do I install the YieldCave MCP server?

YieldCave is a hosted endpoint at https://mcp.yieldcave.com/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.yieldcave.com

# add to Claude Code
claude mcp add --transport http com-yieldcave-yieldcave 'https://mcp.yieldcave.com/'
Common questions

What is the YieldCave MCP server?

YieldCave is an MCP server listed in the public MCP registry as com.yieldcave/yieldcave. Tokenized asset data for agents: treasury yields, stablecoin rates, tokenized stocks, alerts. This page covers its hosted endpoint (https://mcp.yieldcave.com).

Is the YieldCave MCP server safe to use?

YieldCave scores 64 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the YieldCave MCP server expose?

YieldCave exposes 19 tools: list_rwa_yields, get_rwa_asset, rwa_market_summary, compare_yield_to_tokenized_treasuries, list_stablecoin_yields, and 14 more. Their descriptions and schemas cost roughly 1,969 tokens of context every time the server is loaded.

Does the YieldCave MCP server require authentication?

No. We connected to YieldCave without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the YieldCave MCP server still maintained?

YieldCave is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.