Kalshi Kernel
OCI · GHCR.IO/COPYLEFTDEV/KALSHI-KERNEL:0.1.1
Unofficial safety-focused MCP server for Kalshi market data and explicitly authorized trading
Available components
Last scanned (22 hours ago)
Scores higher than 94% of OCI servers
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security0
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: this image's dependency list comes from an SBOM its publisher attached, which nothing verifies, so we will not report it as a clean result.Unverified
- Install-script risk not yet assessed.Unverified
- Dependency health could not be checked: this image's dependency list comes from an SBOM its publisher attached. It names packages and versions but not whether each is deprecated, still maintained or linked to its source, so there is nothing we can fairly grade.Unverified
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Build provenance not yet verified. View diagnostics → Unverified
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 56 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability76
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1034 tokens (~129/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 18 Oct 26 0
- Provenance: fail → unverified ▼ security
- Stability: 0.97 → pass security
- 17 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Oct 26 −2
- Stability: pass → 0.83 functional
- 12 Oct 26 +1
- Stability: 0.93 → pass security
- 10 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 93. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Oct 26 −2
No change was recorded against any check on this day. Stability & Change Management went from 97 to 83.
- 4 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Analysed oci/ghcr.io/copyleftdev/kalshi-kernel:0.1.1
Provenance Inconclusive
We could not complete the check, so nothing is claimed either way. This is a gap on our side, not a finding about the package.
| Result | Inconclusive |
|---|---|
| Ecosystem | oci |
| Reason | Attestation not fetched |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
amend_order ~201
Amend the price and/or maximum fillable quantity of an existing live or paper order.
| Name | Type | Req | Description |
|---|---|---|---|
| client_order_id | string | – | Existing client order identifier. |
| count | string | yes | Desired total maximum fillable quantity; pass the existing value when changing only price. |
| order_id | string | yes | Exchange or paper order identifier. |
| price | string | yes | Desired fixed-point dollar price; pass the existing value when changing only quantity. |
| product | string | yes | Product family containing the order. Allowed values: event, perp. |
| side | string | yes | Existing single-book order side required by the upstream amend operation. Allowed values: bid, ask. |
| subaccount | integer | – | Kalshi subaccount number; defaults to the primary account. Minimum: 0. Maximum: 63. |
| ticker | string | yes | Exact market ticker used for routing and validation. |
| updated_client_order_id | string | – | New idempotency identifier for the amended order. |
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
cancel_order ~95
Cancel the remaining quantity of one live or paper order.
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | yes | Exchange or paper order identifier. |
| product | string | yes | Product family containing the order. Allowed values: event, perp. |
| subaccount | integer | – | Kalshi subaccount number; defaults to the primary account. Minimum: 0. Maximum: 63. |
| ticker | string | yes | Exact market ticker used for routing and validation. |
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
get_market ~54
Get the authoritative metadata and current status for one event-contract or perpetual market.
| Name | Type | Req | Description |
|---|---|---|---|
| product | string | yes | Product family containing the ticker. Allowed values: event, perp. |
| ticker | string | yes | Exact Kalshi market ticker. |
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
get_orderbook ~82
Get the locally reconciled order book for one market, including freshness and sequence metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| depth | integer | – | Maximum price levels to return on each side. Minimum: 1. Maximum: 100. |
| product | string | yes | Product family containing the ticker. Allowed values: event, perp. |
| ticker | string | yes | Exact Kalshi market ticker. |
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
get_portfolio ~75
Return balances, positions, resting orders, and recent fills from the selected live or paper ledger.
| Name | Type | Req | Description |
|---|---|---|---|
| product | string | yes | Product family to report. Allowed values: event, perp. |
| subaccount | integer | – | Kalshi subaccount number; defaults to the primary account. Minimum: 0. Maximum: 63. |
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
kernel_status ~32
Report the immutable execution mode, backend readiness, market-data freshness, and enabled capabilities. Call this before any trading operation.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
place_order ~292
Validate and place one order through the configured execution backend. In paper mode this can only affect the local simulated ledger.
| Name | Type | Req | Description |
|---|---|---|---|
| cancel_order_on_pause | boolean | – | Cancel the resting order if exchange trading pauses. |
| client_order_id | string | – | Stable caller-provided idempotency identifier. The kernel generates one when omitted. |
| count | string | yes | Fixed-point contract quantity encoded as a decimal string. |
| expiration_time | integer | – | Optional Unix time in seconds; only valid with good_till_canceled. |
| post_only | boolean | – | Reject rather than immediately take liquidity. |
| price | string | yes | Fixed-point dollar price encoded as a decimal string. |
| product | string | yes | Product family containing the market. Allowed values: event, perp. |
| reduce_only | boolean | – | Prevent the order from increasing exposure. |
| self_trade_prevention_type | string | yes | Exchange self-trade prevention policy. Allowed values: taker_at_cross, maker. |
| side | string | yes | Single-book order side. Allowed values: bid, ask. |
| subaccount | integer | – | Kalshi subaccount number; defaults to the primary account. Minimum: 0. Maximum: 63. |
| ticker | string | yes | Exact Kalshi market ticker. |
| time_in_force | string | yes | Exchange time-in-force policy. Allowed values: fill_or_kill, good_till_canceled, immediate_or_cancel. |
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
search_markets ~141
Find event-contract or perpetual markets using structured filters. Returns compact summaries suitable for choosing a ticker.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Pagination cursor returned by a previous call. |
| event_ticker | string | – | Restrict event contracts to one event. |
| limit | integer | – | Maximum number of markets to return. Minimum: 1. Maximum: 1000. |
| product | string | yes | Product family to search. Allowed values: event, perp. |
| series_ticker | string | – | Restrict event contracts to one series. |
| status | string | – | Exchange market status filter. |
| tickers | array | – | Exact market tickers to include. |
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | – | – |
| error | null|object | – | – |
| mode | string | yes | – |
| ok | boolean | yes | – |
No examples provided.
How do I install the Kalshi Kernel MCP server?
Kalshi Kernel runs locally as a container image, launched with docker run --rm -i -e KALSHI_KERNEL_MODE -e KALSHI_API_KEY_ID -e KALSHI_PRIVATE_KEY_PATH -e KALSHI_LIVE_TRADING_ACK ghcr.io/copyleftdev/kalshi-kernel:0.1.1. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.
oci · ghcr.io/copyleftdev/kalshi-kernel:0.1.1
claude mcp add copyleftdev-kalshi-kernel -- docker run --rm -i -e KALSHI_KERNEL_MODE -e KALSHI_API_KEY_ID -e KALSHI_PRIVATE_KEY_PATH -e KALSHI_LIVE_TRADING_ACK ghcr.io/copyleftdev/kalshi-kernel:0.1.1
This image reads KALSHI_KERNEL_MODE, KALSHI_API_KEY_ID, KALSHI_PRIVATE_KEY_PATH and KALSHI_LIVE_TRADING_ACK. Set them in your client's env block for this server; docker run -e passes each one through to the container.
What is the Kalshi Kernel MCP server?
Kalshi Kernel is an MCP server listed in the public MCP registry as io.github.copyleftdev/kalshi-kernel. Unofficial safety-focused MCP server for Kalshi market data and explicitly authorized trading. This page covers its container image (ghcr.io/copyleftdev/kalshi-kernel:0.1.1).
Is the Kalshi Kernel MCP server safe to use?
Kalshi Kernel scores 55 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Kalshi Kernel MCP server expose?
Kalshi Kernel exposes 8 tools: amend_order, cancel_order, get_market, get_orderbook, get_portfolio, and 3 more. Their descriptions and schemas cost roughly 972 tokens of context every time the server is loaded.
Is the Kalshi Kernel MCP server still maintained?
Kalshi Kernel is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Kalshi Kernel MCP server under?
Kalshi Kernel declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.