# Ophis MCP (remote · mcp.ophis.fi)

Gasless, MEV-protected onchain token swaps for AI agents on 11 EVM chains, built on CoW Protocol.

- Trust score: 67/100 (medium)
- Change this week: +6
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `mcp.ophis.fi`: 67/100 (this document), [markdown](https://verifymcp.io/servers/fi-ophis-mcp/mcp.md), [page](https://verifymcp.io/servers/fi-ophis-mcp/mcp)

## Channel facts

- Endpoint: `https://mcp.ophis.fi/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.1.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 66/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (submit_order).
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC is configured correctly; the domain's records validate against the full chain to the root.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 57/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 2982 tokens (~213/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 99/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 96% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http fi-ophis-mcp https://mcp.ophis.fi/mcp
```

### Codex

```toml
[mcp_servers.fi-ophis-mcp]
url = "https://mcp.ophis.fi/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "fi-ophis-mcp": {
      "type": "remote",
      "url": "https://mcp.ophis.fi/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add fi-ophis-mcp --url https://mcp.ophis.fi/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  fi-ophis-mcp:
    url: "https://mcp.ophis.fi/mcp"
```

### Other

```json
{
  "mcpServers": {
    "fi-ophis-mcp": {
      "type": "http",
      "url": "https://mcp.ophis.fi/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-01 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 65, +2)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 63, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 63, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-28 (score 62, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 61, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 61)

First indexed and scored.

## MCP tools (14)

### `parse_intent` (~86 tokens)

Parse a plain-English swap request (e.g. "swap 100 USDC for ETH on Optimism") into a structured intent: { intent: "swap"|"unknown", entities: [{type: sellToken|buyToken|amount|chain, value, raw}] }. Backed by the live Ophis parser.

Input parameters:

- `text` (string, required): The natural-language swap request.

### `get_quote` (~263 tokens)

Fetch a best-execution quote from the chain's Ophis orderbook (use a chainId from list_chains' `tradeable`). Amounts are in atoms (smallest unit, uint256 decimal string). For kind='sell' the amount is the sell amount before fee; for kind='buy' it is the desired buy amount. Returns the orderbook quote (sellAmount/buyAmount/feeAmount/validTo). Before build_order, apply slippage to the limit side by kind: kind='sell' -> lower buyAmount (min out); kind='buy' -> raise sellAmount (max in).

Input parameters:

- `amount` (string, required): Amount in atoms (uint256 decimal string).
- `buyToken` (string, required): Buy token address (0x...).
- `chainId` (integer, required): EVM chain id (use list_chains for supported chains).
- `from` (string, required): The trading account address (quotes are account-aware).
- `kind` (string, required): 'sell' = you specify the sell amount; 'buy' = you specify the buy amount.
- `sellToken` (string, required): Sell token address (0x...).
- `validForSeconds` (integer): Quote validity window in seconds (default 1200 = 20 min).

### `build_order` (~688 tokens)

Build a bounded, ready-to-sign CoW order on Ophis. Returns { order, signing:{domain,types,primaryType}, fullAppData, appDataHash, partnerFee, next }. The receiver is ALWAYS PINNED to the owner (proceeds cannot leave the account); this public endpoint exposes no custom-receiver option. Uses the correct per-chain settlement contract (Optimism and Unichain are non-canonical) and embeds the CIP-75 partner fee. Apply slippage to the LIMIT side by kind: for kind 'sell' lower buyAmount (your minimum out); for kind 'buy' raise sellAmount (your maximum in). slippageBips is capped at 5000 (50%); when omitted, the enforced backstop defaults to 100 bps (1%). ENFORCED: build_order fetches a live quote and REJECTS the call if the limit is worse than slippageBips vs that quote (or if a quote cannot be fetched; retry). Sign `order` as EIP-712 with `signing`, then call submit_order.

Input parameters:

- `buyAmount` (string, required): In atoms. kind 'sell': the MINIMUM you accept (slippage-adjusted DOWN from the quote). kind 'buy': the EXACT amount you want to receive.
- `buyToken` (string, required): Buy token address (0x...).
- `chainId` (integer, required): EVM chain id (use a chainId from list_chains `tradeable`).
- `feeAmount` (string): Signed feeAmount in atoms. Must be omitted or "0" on this tool (the fee is taken from surplus + the appData partner fee).
- `kind` (string, required): 'sell' = sellAmount is exact and buyAmount is your minimum out; 'buy' = buyAmount is exact and sellAmount is your maximum in.
- `owner` (string, required): The signer/owner address (receiver defaults to this).
- `partiallyFillable` (boolean): Allow partial fills (default false = fill-or-kill).
- `referenceBuyAmount`
- `referenceSellAmount`
- `referrerCode` (string): Affiliate referral code to embed in appData (credits that code's owner for this trade). Defaults to the server's OPHIS_DEFAULT_REFERRER_CODE if set. Grammar: 3-64 chars [a-z0-9_-]; an invalid code er…
- `sellAmount` (string, required): In atoms. kind 'sell': the EXACT amount you sell. kind 'buy': the MAXIMUM you'll spend (slippage-adjusted UP from the quote).
- `sellToken` (string, required): Sell token address (0x...).
- `slippageBips` (integer): Max accepted slippage in bips; capped at 5000 (50%); when omitted, the enforced backstop defaults to 100 bps (1%). Recorded in appData. ENFORCED: build_order fetches a live quote and rejects a limit…
- `validForSeconds` (integer): Order lifetime in seconds (default 1200 = 20 min; minimum 60). The enforced live-quote fetch can consume several seconds, so very short lifetimes would return a near-expired order the orderbook rejec…

### `submit_order` (~174 tokens)

Relay a PRE-SIGNED order to the chain's Ophis orderbook. Pass the exact `order` object and `fullAppData` from build_order, plus your EIP-712 `signature` and `from` (owner). The MCP holds no keys — it only forwards. Returns the order UID on success.

Input parameters:

- `chainId` (integer, required): EVM chain id the order was built for.
- `from` (string, required): The owner address that signed.
- `fullAppData` (string, required): The fullAppData string returned by build_order.
- `order` (object, required): The order object returned by build_order.
- `signature` (string, required): 0x EIP-712 signature over the order by the owner.
- `signingScheme` (string): Signature scheme over the order (default 'eip712').

### `lookup_tier` (~63 tokens)

Look up a wallet's Ophis fee-rebate tier and live status (30-day volume → bronze/silver/gold/platinum, rebate %). Returns the indexer status plus the static tier ladder.

Input parameters:

- `wallet` (string, required): Wallet address (0x...).

### `get_integrator_earnings` (~188 tokens)

Look up what an integrator's own-fee routing earned, by appCode (the identifier you tag into appData: your widget appCode or your SDK ophisReferrer code). Returns routed volume (USD, split by chain and by sovereign-vs-hosted), the Ophis base fee charged on your flow, your OWN stacked fee, and your referral rebate paid-to-date with payout tx links. Guaranteed/paid figures are scoped to the Ophis-operated chains (Optimism, Unichain); CoW-hosted figures are accrued at settlement and disbursed by CoW under CoW terms (see the response `disclaimer`). Read-only, keyless, cumulative (no current-cycle or next-payout data).

Input parameters:

- `appCode` (string, required): Your integrator appCode / referral code (3-64 chars of [a-z0-9_-]).

### `list_chains` (~91 tokens)

List Ophis chains, split into `tradeable` (orderbook host is live, only route get_quote/build_order to these) and `paused` (settlement deployed but no live orderbook yet, so these throw). Each tradeable chain includes its orderbook host and GPv2Settlement contract (Optimism and Unichain are non-canonical) and partner-fee config. No input.

### `get_balances` (~166 tokens)

Read a wallet's native-token balance plus ERC-20 balances for the given token addresses on one chain, via a public RPC (one multicall). Returns each token's symbol, decimals, raw atoms, and human-readable amount. A token address that is not an ERC-20 is reported with an `error` and does not fail the batch. Read-only; holds no keys. Supported chains are those with a public RPC (most Ophis chains).

Input parameters:

- `chainId` (integer, required): EVM chain id (use list_chains for Ophis chains).
- `owner` (string, required): Wallet address to read balances for (0x...).
- `tokens` (array): ERC-20 token addresses to read (0x...); max 50. Native balance is always returned.

### `get_portfolio` (~172 tokens)

Read a wallet's native and (optionally) ERC-20 balances across multiple chains at once. Pass `tokensByChain` (chainId -> token addresses) to include token balances; omit `chainIds` to scan every chain with a public RPC (max 12 chains, and at most 100 token reads total across all chains). Per-chain RPC failures are returned inline so one dead endpoint does not sink the result. Read-only; holds no keys.

Input parameters:

- `chainIds` (array): Chains to read (max 12). Omit to scan all chains with a public RPC.
- `owner` (string, required): Wallet address to read (0x...).
- `tokensByChain` (object): Map of chainId -> ERC-20 token addresses to read on that chain (native is always included).

### `get_gas` (~86 tokens)

Read a chain's current gas price (EIP-1559 maxFee/maxPriority suggestion when supported, plus an effective gasPrice in wei and gwei). Ophis trades are gasless for the trader, so this mainly bounds the cost of a one-time ERC-20 approval to the VaultRelayer. Read-only.

Input parameters:

- `chainId` (integer, required): EVM chain id.

### `get_token_chart` (~220 tokens)

Fetch OHLCV price history for a token from the keyless GeckoTerminal market API (resolves the token's deepest pool, then returns candles). Use for an agent to reason about recent price action before quoting. Prices come from a single pool that may be thin or manipulated, so treat them as advisory, not a sole execution signal. The keyless tier is a shared ~30 req/min quota, so cache and do not poll tightly. Read-only.

Input parameters:

- `aggregate` (integer): Bucket multiple base units into one candle, e.g. timeframe=hour aggregate=4 = 4h candles (default 1).
- `chainId` (integer, required): EVM chain id (GeckoTerminal-mapped: eth/optimism/base/arbitrum/polygon/bsc/avax/linea/gnosis/ink).
- `limit` (integer): Number of candles (default 30, max 300).
- `timeframe` (string): Candle timeframe (default 'day').
- `token` (string, required): Token address (0x...).

### `expected_surplus` (~203 tokens)

Estimate how much better Ophis quotes than the open market for a sell: fetches the Ophis orderbook sell-quote and a public all-DEX aggregator (KyberSwap) quote for the same input, and returns `beatBps` (+ = Ophis returns more of the buy token). Use before build_order to show the expected edge. The reference can reflect thin or manipulated liquidity, so treat beatBps as advisory, not a sole execution signal. Sell-side (exact-in) only. Read-only.

Input parameters:

- `buyToken` (string, required): Buy token address (0x...).
- `chainId` (integer, required): EVM chain id (use a chainId from list_chains `tradeable`).
- `from` (string, required): The trading account address (quotes are account-aware).
- `sellAmount` (string, required): Exact sell amount in atoms (uint256 decimal string).
- `sellToken` (string, required): Sell token address (0x...).

### `resolve_token` (~221 tokens)

Resolve an ERC-20 token SYMBOL to its CANONICAL on-chain address from the trusted Ophis/CoW token list (the same curated list the swap UI uses). Use this BEFORE quoting or building so you never trade an address taken from chat, the web, or memory: a token can spoof the symbol "USDC" at a scam address, and this fails closed. Returns { found, ambiguous, canonical: {address, decimals, name} | null, matches: [...] }. found=false means no trusted match (do NOT guess: confirm any candidate with get_balances and the user). ambiguous=true means several trusted tokens share the symbol (e.g. native vs bridged); confirm which the user means. Native coins are not returned; resolve the wrapped symbol (e.g. WETH). Read-only.

Input parameters:

- `chainId` (integer, required): EVM chain id (use a chainId from list_chains `tradeable`).
- `symbol` (string, required): Token symbol to resolve, e.g. "USDC" or "WETH".

### `validate_order` (~361 tokens)

Offline preflight for an order you built OUTSIDE build_order (no network call, no keys). Catches the documented silent-failure modes before you sign or submit: wrong appCode (settles but earns zero rebate), wrong orderbook host (api.cow.fi silently bypasses the Ophis stack on Ophis-operated chains), wrong EIP-712 domain (signing against CoW's canonical settlement on an Ophis-operated chain yields a domain the deployed contract rejects), appData hash mismatch (order.appData must equal keccak256 of the exact fullAppData string), an unpinned receiver (proceeds leaving the owner), an expired or non-zero-fee order, and malformed partnerFee entries. Pass whatever you have (chainId is required; owner, order, fullAppData, signingDomain, orderbookUrl are all optional and each is checked if present). Returns { valid, errors, warnings, expected } where `expected` echoes the correct per-chain orderbook host, settlement, EIP-712 domain, appCode, and partnerFee. Prefer build_order to construct orders; use this to verify externally-built ones.

Input parameters:

- `chainId` (integer, required): EVM chain id the order is for (use list_chains `tradeable`).
- `fullAppData` (string): The exact appData JSON string that will be submitted with the order.
- `order` (object): The (partial) order about to be signed.
- `orderbookUrl` (string): The orderbook base URL the order will be submitted to.
- `owner` (string): The signing account address; enables the receiver drain-guard check.
- `signingDomain` (object): The EIP-712 domain the order will be signed against.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/fi-ophis-mcp/mcp#diagnostics

## Score history

- 2026-08-03: 67
- 2026-08-02: 66
- 2026-08-01: 66
- 2026-07-31: 65
- 2026-07-30: 63
- 2026-07-29: 63
- 2026-07-28: 62
- 2026-07-27: 61
- 2026-07-26: 61

## Links

- Remote endpoint: https://mcp.ophis.fi/mcp
- Repository: https://github.com/ophis-fi/ophis
- Website: https://ophis.fi/
- Changelog RSS feed: https://verifymcp.io/servers/fi-ophis-mcp/mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/fi-ophis-mcp/mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/fi-ophis-mcp/mcp