io.github.gtorreal/buda-mcp
NPM · @GUIIE/BUDA-MCP · SCANNED SEP 25
Buda.com market data: prices, spreads, OHLCV, order books, trades, and volume for CLP, COP, PEN.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 166 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability44
- 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Fail
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2612 tokens (~153/item across 17 items; 16 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
- Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 16 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.gtorreal/buda-mcp server?
io.github.gtorreal/buda-mcp runs locally as an npm package, launched with npx -y @guiie/buda-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @guiie/buda-mcp
claude mcp add gtorreal-buda-mcp -- npx -y @guiie/buda-mcp
{
"mcpServers": {
"gtorreal-buda-mcp": {
"command": "npx",
"args": [
"-y",
"@guiie/buda-mcp"
]
}
}
} {
"servers": {
"gtorreal-buda-mcp": {
"command": "npx",
"args": [
"-y",
"@guiie/buda-mcp"
]
}
}
} codex mcp add gtorreal-buda-mcp -- npx -y @guiie/buda-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"gtorreal-buda-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@guiie/buda-mcp"
],
"enabled": true
}
}
} openclaw mcp add gtorreal-buda-mcp --command npx --arg -y --arg @guiie/buda-mcp
mcp_servers:
gtorreal-buda-mcp:
command: "npx"
args: ["-y", "@guiie/buda-mcp"] {
"McpServers": {
"gtorreal-buda-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@guiie/buda-mcp"
]
}
}
} assistant mcp add gtorreal-buda-mcp -t stdio -c npx -a -y @guiie/buda-mcp
{
"mcpServers": {
"gtorreal-buda-mcp": {
"command": "npx",
"args": [
"-y",
"@guiie/buda-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 −2
- Stability: pass → 0.83 functional
- 23 Sept 26 0
- Stability: 0.97 → pass security
- 22 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
- Security disclosure: unverified → pass ▲ functional
- 17 Sept 26 0
- Security disclosure: pass → unverified ▼ functional
- 16 Sept 26 −3
- Stability: pass → 0.77 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Sept 2026 · Analysed npm/@guiie/buda-mcp@2.0.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
calculate_position_size ~240
Calculates position size based on your capital, risk tolerance, entry price, and stop-loss. Determines how many units to buy or sell so that a stop-loss hit costs exactly risk_pct% of capital. Fully client-side — no API call is made. Example: 'How many BTC can I buy on BTC-CLP if I have 1,000,000 CLP, risk 2%, entry 80,000,000 CLP, stop at 78,000,000 CLP?'
| Name | Type | Req | Description |
|---|---|---|---|
| capital | number | yes | Total available capital in the quote currency (e.g. CLP for BTC-CLP). |
| entry_price | number | yes | Planned entry price in quote currency. |
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-COP'). Used to derive the quote currency. |
| risk_pct | number | yes | Percentage of capital to risk on this trade (0.1–10, e.g. 2 = 2%). |
| stop_loss_price | number | yes | Stop-loss price in quote currency. Must be below entry for buys, above entry for sells. |
No output schema declared.
No examples provided.
compare_markets ~125
Returns side-by-side ticker data for all trading pairs of a given base currency across Buda.com's supported quote currencies (CLP, COP, PEN, BTC, USDC, ETH). All prices are floats; price_change_24h and price_change_7d are floats in percent (e.g. 1.23 means +1.23%). Example: 'In which country is Bitcoin currently most expensive on Buda?'
| Name | Type | Req | Description |
|---|---|---|---|
| base_currency | string | yes | Base currency to compare across all available markets (e.g. 'BTC', 'ETH', 'XRP'). |
No output schema declared.
No examples provided.
get_arbitrage_opportunities ~221
Detects cross-country price discrepancies for a given asset across Buda's CLP, COP, and PEN markets, normalized to USDC. Fetches all relevant tickers, converts each local price to USDC using the current USDC-CLP / USDC-COP / USDC-PEN rates, then computes pairwise discrepancy percentages. Results above threshold_pct are returned sorted by opportunity size. Note: Buda taker fee is 0.8% per leg (~1.6% round-trip) — always deduct fees before acting on any discrepancy. Example: 'Is there an arbitrage opportunity for BTC between Chile and Peru right now?'
| Name | Type | Req | Description |
|---|---|---|---|
| base_currency | string | yes | Base asset to scan (e.g. 'BTC', 'ETH', 'XRP'). |
| threshold_pct | number | – | Minimum price discrepancy percentage to include in results (default: 0.5). Buda taker fee is 0.8% per leg, so a round-trip requires > 1.6% to be profitable. |
No output schema declared.
No examples provided.
get_available_banks ~99
Returns banks available for deposits and withdrawals of a fiat currency on Buda.com. Returns an empty banks array (not an error) if the currency has no associated banks (e.g. crypto currencies or unsupported fiat currencies). Results are cached for 60 seconds. Example: 'Which banks can I use for CLP deposits?'
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | yes | Currency code (e.g. 'CLP', 'COP', 'PEN'). |
No output schema declared.
No examples provided.
get_market_sentiment ~123
Computes a composite sentiment score (−100 to +100) for a Buda.com market based on 24h price variation (40%), volume vs 7-day average (35%), and bid/ask spread vs baseline (25%). Returns a score, a label (bearish/neutral/bullish), and a full component breakdown. Example: 'Is the BTC-CLP market currently bullish or bearish?'
| Name | Type | Req | Description |
|---|---|---|---|
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC', 'BTC-USDT'). |
No output schema declared.
No examples provided.
get_market_summary ~158
One-call summary of everything relevant about a market: last price, best bid/ask, spread %, 24h volume, 24h and 7d price change, and a liquidity_rating ('high' / 'medium' / 'low' based on spread thresholds: < 0.3% = high, 0.3–1% = medium, > 1% = low). All prices and volumes are floats. Best first tool to call when a user asks about any specific market. Example: 'Give me a complete overview of the BTC-CLP market right now.'
| Name | Type | Req | Description |
|---|---|---|---|
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-COP', 'BTC-PEN'). |
No output schema declared.
No examples provided.
get_market_volume ~105
Returns 24h and 7-day transacted volume for a Buda.com market, split by buy (bid) and sell (ask) side. All volume values are floats in the base currency (e.g. BTC for BTC-CLP). Example: 'How much Bitcoin was sold on BTC-CLP in the last 24 hours?'
| Name | Type | Req | Description |
|---|---|---|---|
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC'). |
No output schema declared.
No examples provided.
get_markets ~117
Lists all available trading pairs on Buda.com, or returns details for a specific market (base/quote currencies, taker/maker fees as decimals, minimum order size in base currency, and fee discount tiers). Omit market_id to get all ~26 markets at once. Example: 'What is the taker fee and minimum order size for BTC-CLP?'
| Name | Type | Req | Description |
|---|---|---|---|
| market_id | string | – | Optional market ID (e.g. 'BTC-CLP', 'ETH-BTC'). Omit to list all markets. |
No output schema declared.
No examples provided.
get_orderbook ~122
Returns the current order book for a Buda.com market as typed objects with float price and amount fields. Bids are sorted highest-price first; asks lowest-price first. Prices are in the quote currency; amounts are in the base currency. Example: 'What are the top 5 buy and sell orders for BTC-CLP right now?'
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum number of levels to return per side (default: all). |
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC'). |
No output schema declared.
No examples provided.
get_price_history ~223
IMPORTANT: Candles are aggregated client-side from raw trades (Buda has no native candlestick endpoint) — fetching more trades via the 'limit' parameter gives deeper history but slower responses. Returns OHLCV candles (open/high/low/close as floats in quote currency; volume as float in base currency) for periods 5m, 15m, 30m, 1h, 4h, or 1d. Candle timestamps are UTC bucket boundaries. Example: 'Show me the hourly BTC-CLP price chart for the past 24 hours.'
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Raw trades to fetch before aggregation (default: 100, max: 1000). More trades = deeper history but slower response. |
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC'). |
| period | string | – | Candle period: '5m', '15m', '30m', '1h', '4h', or '1d'. Default: '1h'. |
No output schema declared.
No examples provided.
get_real_quotation ~194
Gets a server-side price quotation for a buy or sell on Buda.com. Calls the Buda quotation API to compute an accurate fill estimate including fees, based on live order book state. Prefer this over simulate_order for accurate fee-tier-aware quotes. This is a POST (not idempotent) but does not place an order. Public endpoint — no API key required. Parameters: market_id, type ('Bid'|'Ask'), amount, optional limit price. Example: 'Get an accurate quote to sell 0.05 BTC on BTC-CLP.'
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Order size (positive number). |
| limit | number | – | Optional limit price in quote currency. |
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC'). |
| type | string | yes | 'Bid' to buy base currency, 'Ask' to sell base currency. |
No output schema declared.
No examples provided.
get_spread ~129
Returns the best bid, best ask, absolute spread, and spread percentage for a Buda.com market. All prices are floats in the quote currency (e.g. CLP). spread_percentage is a float in percent (e.g. 0.15 means 0.15%). Use this to evaluate liquidity before placing a large order. Example: 'Is BTC-CLP liquid enough to buy 10M CLP without significant slippage?'
| Name | Type | Req | Description |
|---|---|---|---|
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC', 'BTC-COP'). |
No output schema declared.
No examples provided.
get_technical_indicators ~271
Computes RSI (14), MACD (12/26/9), Bollinger Bands (20, 2σ), SMA 20, and SMA 50 from Buda trade history — no external data or libraries. Supports periods: 5m, 15m, 30m, 1h, 4h, 1d. Use shorter periods (5m/15m) for intraday analysis. Uses at least 500 trades for reliable results (set limit=1000 for maximum depth). Returns latest indicator values and signal interpretations (overbought/oversold, crossover, band position). If fewer than 20 candles are available after aggregation, returns a structured warning instead. Example: 'Is BTC-CLP RSI overbought on the 4-hour chart?'
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Number of raw trades to fetch (default: 500, max: 1000). More trades = more candles = more reliable indicators. |
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC'). |
| period | string | – | Candle period: '5m', '15m', '30m', '1h', '4h', or '1d'. Default: '1h'. |
No output schema declared.
No examples provided.
get_ticker ~132
Returns the current market snapshot for a Buda.com market: last traded price, best bid, best ask, 24h volume, and price change over 24h and 7d. All prices are floats in the quote currency (e.g. CLP for BTC-CLP). price_variation_24h is a decimal fraction (0.012 = +1.2%). Example: 'What is the current Bitcoin price in Chilean pesos?'
| Name | Type | Req | Description |
|---|---|---|---|
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC', 'BTC-COP'). |
No output schema declared.
No examples provided.
get_trades ~145
Returns recent trade history for a Buda.com market as typed objects. Each entry has timestamp_ms (integer), amount (float, base currency), price (float, quote currency), and direction ('buy' or 'sell'). Example: 'What was the last executed price for BTC-CLP and was it a buy or sell?'
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Number of trades to return (default: 50, max: 100). |
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC'). |
| timestamp | integer | – | Unix timestamp (seconds) to paginate from. Returns trades older than this timestamp. |
No output schema declared.
No examples provided.
simulate_order ~201
[DEPRECATED: prefer get_real_quotation for server-side accurate quotes] Simulates a buy or sell order on Buda.com using live ticker data — no order is placed. Returns estimated fill price, fee, total cost, and slippage vs mid-price. Omit 'price' for a market order simulation; supply 'price' for a limit order simulation. All outputs are labelled simulation: true — this tool never places a real order. Example: 'How much would it cost to buy 0.01 BTC on BTC-CLP right now?'
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Order size in base currency (e.g. BTC for BTC-CLP). |
| market_id | string | yes | Market ID (e.g. 'BTC-CLP', 'ETH-BTC'). |
| price | number | – | Limit price in quote currency. Omit for a market order simulation. |
| side | string | yes | 'buy' or 'sell'. |
No output schema declared.
No examples provided.
What is the io.github.gtorreal/buda-mcp server?
io.github.gtorreal/buda-mcp is listed in the public MCP registry as io.github.gtorreal/buda-mcp. Buda.com market data: prices, spreads, OHLCV, order books, trades, and volume for CLP, COP, PEN. This page covers its npm package (@guiie/buda-mcp).
Is the io.github.gtorreal/buda-mcp server safe to use?
io.github.gtorreal/buda-mcp scores 77 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 25 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.gtorreal/buda-mcp server expose?
io.github.gtorreal/buda-mcp exposes 16 tools: get_markets, get_ticker, get_orderbook, get_trades, get_market_volume, and 11 more. Their descriptions and schemas cost roughly 2,605 tokens of context every time the server is loaded.
Is the io.github.gtorreal/buda-mcp server still maintained?
io.github.gtorreal/buda-mcp is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.gtorreal/buda-mcp server under?
io.github.gtorreal/buda-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.