Grok Crypto Quant API
REMOTE · GROK-BACKTEST-API.FLY.DEV
Bias-free crypto backtests (399 coins), signals, token scam checks. Free samples; pay via x402 USDC.
Available components
Last scanned (6 hours ago)
Scores higher than 58% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Crypto and Web3
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security74
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability60
- AI-judged instruction clarity (fair).Partial
- Context-footprint check failed: tool/resource definitions use about 1520 tokens (~116/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
- Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage88
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 57% of tool parameters carry a description.Partial
- Structured output schemas are declared (62% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 13 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “backtest” rewrote its description, which is the text the model reads security
- Tool “market_signals” rewrote its description, which is the text the model reads security
- Tool “optimize_strategy” rewrote its description, which is the text the model reads security
- Tool “token_check” rewrote its description, which is the text the model reads security
- Tool “universe_snapshot” rewrote its description, which is the text the model reads security
- Schema quality: 1221 → 1520 ▼ functional
- Tool coverage: 55% → 62% ▲ functional
- New tool “backtest_sample” functional
- New tool “signals_sample” functional
- 27 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 26 Oct 26 67
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://grok-backtest-api.fly.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.fly.dev | CN=YE1,O=Let's Encrypt,C=US | 20 Oct 2026 | 18 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 5e6e25e6df778e81cd07b85fc9f12d4df7d |
| SANs: *.fly.dev | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of grok-backtest-api.fly.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| fly.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://grok-backtest-api.fly.dev/mcp | Verified | 200 | |
| http (plaintext) | http://grok-backtest-api.fly.dev/mcp | HTTPS enforced | 301 | https://grok-backtest-api.fly.dev/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
backtest Crypto strategy backtest ~207
Backtest crypto strategies on 399 Coinbase coins without survivorship bias. DIY backtests usually use today's coin list, so dead coins vanish and returns are overstated; this rebuilds the universe from each past day's top coins. Breakout, momentum, dip-buy or MA-trend rules on daily data with fees, slippage, H1/H2 split and a luck flag. No data fetching or backtest code on your side. Price: $0.05 USDC per call (x402, Base mainnet). Free pre-check: validate_backtest. Free sample: backtest_sample.
| Name | Type | Req | Description |
|---|---|---|---|
| end | – | – | YYYY-MM-DD |
| fee | number | – | Fee per side (0.009 = 0.9%) |
| include_trades | boolean | – | – |
| initial_capital | number | – | Starting capital in USD |
| slippage | number | – | Slippage per side |
| start | – | – | YYYY-MM-DD |
| strategy | – | yes | – |
| universe | – | – | – |
No output schema declared.
No examples provided.
backtest_sample Crypto backtest, free sample ~98
Free sample of the paid `backtest` tool on the same survivorship-bias-free engine: any strategy, point-in-time top-10 universe, window = last `days` (14..90) completed days, summary only. Full version: backtest ($0.05). Limit 30/hour per client.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Window length in days, ending on the last completed UTC day |
| strategy | – | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
get_schema Schemas and examples (free) ~25
Free: request schemas, examples, prices and limits for every paid tool/endpoint.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
health Service status (free) ~19
Free: service status, prices, network and data range.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
market_signals Daily crypto market signals ~115
Daily crypto market regime in one call: BTC/ETH vs 20/50-day MAs, breadth of the point-in-time top-N (no survivorship bias), coins nearest a 20-day breakout, and the R1 breakout strategy's gate and entry signals. No candle fetching or indicator code. Completed UTC daily closes only. Price: $0.01 USDC per call (x402, Base mainnet). Free sample: signals_sample.
| Name | Type | Req | Description |
|---|---|---|---|
| top_n | integer | – | Universe size for breadth / breakout scan |
No output schema declared.
No examples provided.
optimize_strategy Robust strategy parameter optimiser ~196
Find robust strategy params, not lucky ones: tests up to 50 combos on the same survivorship-bias-free backtester, ranks by worst-half (H1/H2) return with neighbourhood smoothing, flags overfitting, and recommends the most stable parameters rather than the best-fit ones. Price: $0.50 USDC per call (x402, Base mainnet). Free pre-check: validate_optimize.
| Name | Type | Req | Description |
|---|---|---|---|
| end | – | – | YYYY-MM-DD |
| fee | number | – | Fee per side (0.009 = 0.9%) |
| grid | object | yes | param -> values to try; <= 50 combos total, <= 10 values per param |
| initial_capital | number | – | Starting capital in USD |
| rank_by | string | – | – |
| slippage | number | – | Slippage per side |
| start | – | – | YYYY-MM-DD |
| strategy | – | yes | – |
| universe | – | – | – |
No output schema declared.
No examples provided.
signals_sample Market signals, delayed free sample ~63
Free, one day delayed: yesterday's full /signals result (BTC/ETH trend, breadth, breakout watchlist, R1 gate) so you can judge quality before paying. Today's result: paid market_signals ($0.01). Limit 60/hour per client.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
token_check Token scam / honeypot risk check ~133
Token scam check in one call instead of wiring up five data sources: honeypot sell simulation, unverified code, mint/pause/blacklist powers, taxes, upgradeable proxy, age, liquidity, fake major-token (e.g. fake USDC) lookalikes and spam-airdrop patterns. Base, Ethereum or Solana. Never visits metadata URLs. Price: $0.02 USDC per call (x402, Base mainnet). Free pre-check: validate_token_check.
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | Token contract / mint address |
| chain | string | yes | base, ethereum or solana |
No output schema declared.
No examples provided.
universe_snapshot Point-in-time top-N coin universe ~121
Survivorship-free top-N coin list for any past date: Coinbase USD pairs ranked by trailing 20-day dollar volume using only data available that day. Fixes your own backtests: picking today's top coins hides the ones that died and overstates returns. Price: $0.05 USDC per call (x402, Base mainnet). Free pre-check: validate_universe.
| Name | Type | Req | Description |
|---|---|---|---|
| date | – | – | YYYY-MM-DD |
| min_age_days | integer | – | – |
| min_avg_dollar_volume | number | – | – |
| top_n | integer | – | – |
No output schema declared.
No examples provided.
validate_backtest Validate a backtest (free) ~108
Free: check backtest arguments (same as the paid `backtest` tool) before paying.
| Name | Type | Req | Description |
|---|---|---|---|
| end | – | – | YYYY-MM-DD |
| fee | number | – | Fee per side (0.009 = 0.9%) |
| include_trades | boolean | – | – |
| initial_capital | number | – | Starting capital in USD |
| slippage | number | – | Slippage per side |
| start | – | – | YYYY-MM-DD |
| strategy | – | yes | – |
| universe | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
validate_optimize Validate an optimisation (free) ~112
Free: check optimize_strategy arguments and count grid combos before paying.
| Name | Type | Req | Description |
|---|---|---|---|
| end | – | – | YYYY-MM-DD |
| fee | number | – | Fee per side (0.009 = 0.9%) |
| grid | object | yes | param -> values to try |
| initial_capital | number | – | Starting capital in USD |
| rank_by | string | – | – |
| slippage | number | – | Slippage per side |
| start | – | – | YYYY-MM-DD |
| strategy | – | yes | – |
| universe | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
validate_token_check Validate a token address (free) ~38
Free: format-check a token_check request (no on-chain lookups).
| Name | Type | Req | Description |
|---|---|---|---|
| address | string | yes | – |
| chain | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
validate_universe Validate a universe request (free) ~62
Free: check universe_snapshot arguments (date in range, enough history) before paying.
| Name | Type | Req | Description |
|---|---|---|---|
| date | – | – | YYYY-MM-DD |
| min_age_days | integer | – | – |
| min_avg_dollar_volume | number | – | – |
| top_n | integer | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the Grok Crypto Quant API MCP server?
Grok Crypto Quant API is a hosted endpoint at https://grok-backtest-api.fly.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · grok-backtest-api.fly.dev
claude mcp add --transport http dev-fly-grok-backtest-api-crypto-quant 'https://grok-backtest-api.fly.dev/mcp'
What is the Grok Crypto Quant API MCP server?
Grok Crypto Quant API is an MCP server listed in the public MCP registry as dev.fly.grok-backtest-api/crypto-quant. Bias-free crypto backtests (399 coins), signals, token scam checks. Free samples; pay via x402 USDC. This page covers its hosted endpoint (https://grok-backtest-api.fly.dev/mcp).
Is the Grok Crypto Quant API MCP server safe to use?
Grok Crypto Quant API scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Grok Crypto Quant API MCP server expose?
Grok Crypto Quant API exposes 13 tools: backtest, market_signals, token_check, optimize_strategy, universe_snapshot, and 8 more. Their descriptions and schemas cost roughly 1,297 tokens of context every time the server is loaded.
Does the Grok Crypto Quant API MCP server require authentication?
No. We connected to Grok Crypto Quant API without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Grok Crypto Quant API MCP server still maintained?
Grok Crypto Quant API is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.