Haiku DeFi MCP
NPM · HAIKU-MCP-SERVER · SCANNED SEP 20
DeFi execution for AI agents — swap, lend, bridge, and yield across 22 chains.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 111 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 150 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability64
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2074 tokens (~296/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
- Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "haiku_execute" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Haiku DeFi MCP server?
Haiku DeFi MCP runs locally as an npm package, launched with npx -y haiku-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · haiku-mcp-server
claude mcp add haiku-trading-haiku-mcp-server -- npx -y haiku-mcp-server
{
"mcpServers": {
"haiku-trading-haiku-mcp-server": {
"command": "npx",
"args": [
"-y",
"haiku-mcp-server"
]
}
}
} {
"servers": {
"haiku-trading-haiku-mcp-server": {
"command": "npx",
"args": [
"-y",
"haiku-mcp-server"
]
}
}
} codex mcp add haiku-trading-haiku-mcp-server -- npx -y haiku-mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"haiku-trading-haiku-mcp-server": {
"type": "local",
"command": [
"npx",
"-y",
"haiku-mcp-server"
],
"enabled": true
}
}
} openclaw mcp add haiku-trading-haiku-mcp-server --command npx --arg -y --arg haiku-mcp-server
mcp_servers:
haiku-trading-haiku-mcp-server:
command: "npx"
args: ["-y", "haiku-mcp-server"] {
"McpServers": {
"haiku-trading-haiku-mcp-server": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"haiku-mcp-server"
]
}
}
} assistant mcp add haiku-trading-haiku-mcp-server -t stdio -c npx -a -y haiku-mcp-server
{
"mcpServers": {
"haiku-trading-haiku-mcp-server": {
"command": "npx",
"args": [
"-y",
"haiku-mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 −2
- Stability: pass → 0.83 functional
- 15 Sept 26 0
- Stability: 0.97 → pass security
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 −2
- Stability: pass → 0.80 functional
- 8 Sept 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/haiku-mcp-server@0.0.8
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 111 packages
| Packages resolved | 111 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
haiku_analyze_portfolio ~110
Analyze a wallet's DeFi portfolio and surface relevant yield opportunities. Returns current positions enriched with available APY options, collateral health factors, and context-specific opportunities based on what the wallet actually holds. Use this when a user asks what they should do with their portfolio or wants yield optimization advice. Pair the output with haiku_discover_yields for broader market context, then use haiku_get_quote to execute.
| Name | Type | Req | Description |
|---|---|---|---|
| walletAddress | string | yes | Wallet address (0x...) to analyze |
No output schema declared.
No examples provided.
haiku_discover_yields ~307
Discover yield-bearing opportunities across DeFi protocols. Returns APY, TVL, risk parameters, and token IIDs ready for haiku_get_quote. Use this to answer questions like 'best lending yields on Arbitrum', 'highest APY vaults with at least $1M TVL', or 'what can I do with USDC on BNB Chain'. The iid field in results can be used directly as a targetWeight key in haiku_get_quote.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | lending=Aave collateral tokens, vault=Yearn/Morpho vaults, lp=Balancer/Uniswap LP, all=every yield-bearing category (default: all) |
| limit | number | – | Maximum number of results (default 20) |
| minApy | number | – | Minimum APY filter as a percentage, e.g. 5 means ≥5% APY |
| minTvl | number | – | Minimum TVL filter in USD, e.g. 1000000 means ≥$1M TVL. Use this to filter to established mainstream vaults and exclude low-liquidity pools. |
| network | number | – | Filter by network. Common networks: 42161 (Arbitrum), 8453 (Base), 1 (Ethereum), 137 (Polygon), 10 (Optimism), 56 (BNB Chain) |
| sortBy | string | – | Sort by APY (default) or TVL, descending |
No output schema declared.
No examples provided.
haiku_execute ~430
Execute a quote. Call haiku_get_quote first, then choose a path: • Path A — Self-contained (WALLET_PRIVATE_KEY set): pass quoteId, sourceChainId, permit2SigningPayload + bridgeSigningPayload (if present in the quote), and approvals. Haiku signs Permit2/bridge internally, sends any approvals on-chain, and broadcasts. Returns tx hash. • Path B — External wallet (no WALLET_PRIVATE_KEY): broadcast: false is required. First broadcast any approvals from the quote via your wallet MCP (each is a {to, data} transaction). Then call haiku_prepare_signatures if signatures are needed → sign via wallet MCP → call haiku_execute with quoteId, sourceChainId, the signatures, and broadcast: false. Returns { transaction: { to, data, value, chainId } } — broadcast transaction via your wallet MCP. Always pass sourceChainId from the quote response.
| Name | Type | Req | Description |
|---|---|---|---|
| approvals | array | – | approvals from haiku_get_quote. Self-contained mode only: haiku broadcasts these on-chain before the swap. In external wallet mode (broadcast: false), do not pass these — broadcast each approval {to,… |
| bridgeSigningPayload | object | – | bridgeSigningPayload from haiku_get_quote (cross-chain only, for self-contained signing) |
| broadcast | boolean | – | If true (default), broadcasts tx. If false, returns unsigned tx. |
| permit2Signature | string | – | Pre-signed Permit2 signature (external wallet mode) |
| permit2SigningPayload | object | – | permit2SigningPayload from haiku_get_quote (for self-contained signing) |
| quoteId | string | yes | Quote ID from haiku_get_quote |
| sourceChainId | number | – | Chain ID of the source token (from haiku_get_quote). Recommended — if omitted, the server will attempt to recover it from the signing payloads or session cache, but passing it explicitly is safer. |
| userSignature | string | – | Pre-signed bridge intent signature (external wallet mode) |
No output schema declared.
No examples provided.
haiku_get_balances ~241
Get token balances for a wallet address. By default fetches across all supported chains. Pass chainIds for a partial refresh — only the specified chains are queried, which is faster and useful after a swap when you only need updated balances for the source and destination chains. Returns balances, USD prices, total portfolio value, and categorized positions (tokens, collateral, debt, vaults). walletAddress is optional when WALLET_PRIVATE_KEY is set in the environment.
| Name | Type | Req | Description |
|---|---|---|---|
| chainIds | array | – | Optional list of chain IDs to fetch balances for. When provided, only those chains are queried (partial refresh). Example: [42161, 8453] to re-fetch only Arbitrum and Base after a cross-chain swap. C… |
| walletAddress | string | – | Wallet address (0x...) or ENS name. Omit to auto-derive from WALLET_PRIVATE_KEY. |
No output schema declared.
No examples provided.
haiku_get_quote ~584
Get a quote for a token swap or portfolio rebalance. Returns expected outputs, fees, gas estimates, and any required approvals. When signatures are required (Permit2 or bridge), EIP-712 signing payloads are included in the response. Two execution paths after getting a quote: • Path A — Self-contained (WALLET_PRIVATE_KEY set): call haiku_execute with quoteId, sourceChainId, permit2SigningPayload + bridgeSigningPayload (if present in this response), and approvals. Haiku signs and broadcasts automatically — returns tx hash. • Path B — External wallet (wallet MCP, broadcast: false required): (1) broadcast any approvals {to, data} via wallet MCP first; (2) call haiku_prepare_signatures with quoteId if signatures are needed → sign via wallet MCP; (3) call haiku_execute with quoteId, sourceChainId, signatures, and broadcast: false → returns { transaction: { to, data, value, chainId } } → broadcast transaction via wallet MCP.
| Name | Type | Req | Description |
|---|---|---|---|
| inputPositions | object | yes | Map of token IID to amount. IID format: "<chain-slug>:<token-address>". Supported chain slugs: arb=Arbitrum(42161), base=Base(8453), eth=Ethereum(1), poly=Polygon(137), opt=Optimism(10), bsc=BNB Chai… |
| receiver | string | – | Receiving wallet address. Required when WALLET_PRIVATE_KEY is not set — must be provided explicitly. When WALLET_PRIVATE_KEY is set, auto-derived from it if omitted. |
| slippage | number | – | Max slippage as decimal (e.g., 0.003 for 0.3%). Default: 0.003 |
| targetWeights | object | yes | Map of output token IID to weight (sum to 1). Example: { "arb:0xaf88...": 0.5, "arb:0xFd08...": 0.5 } |
No output schema declared.
No examples provided.
haiku_get_tokens ~223
Get supported tokens and DeFi positions for trading. Includes vanilla tokens, Aave collateral/debt, yield vaults, and LP tokens. Use category filter to narrow results (e.g., 'collateral' for Aave aTokens). Returns token IIDs (unique identifiers), symbols, names, prices, and chain information. Use the IID format (chainSlug:tokenAddress) when specifying tokens in other tools.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter by token category: 'token' (vanilla tokens), 'collateral' (Aave aTokens), 'varDebt' (Aave debt tokens), 'vault' (Yearn/Morpho vaults), 'weightedLiquidity' (Balancer LP), 'concentratedLiquidity… |
| network | number | – | Filter tokens by network. Common networks: 42161 (Arbitrum), 8453 (Base), 1 (Ethereum), 137 (Polygon), 10 (Optimism), 56 (BSC) |
No output schema declared.
No examples provided.
haiku_prepare_signatures ~179
External wallet signing path — use this instead of passing signing payloads directly to haiku_execute when WALLET_PRIVATE_KEY is not set or when a wallet MCP (Coinbase Payments MCP, wallet-agent, etc.) handles signing. Extracts and normalizes the EIP-712 payloads from a quote into a standard format any wallet's signTypedData can consume. Pass quoteId (preferred) — the server resolves the full quote from session cache. Alternatively pass the full quoteResponse object if quoteId is unavailable. After signing externally, pass permit2Signature and/or userSignature to haiku_execute.
| Name | Type | Req | Description |
|---|---|---|---|
| quoteId | string | – | Quote ID from haiku_get_quote (preferred — server resolves the full quote from session cache) |
| quoteResponse | object | – | Full response from haiku_get_quote (fallback when quoteId is unavailable) |
No output schema declared.
No examples provided.
What is the Haiku DeFi MCP server?
Haiku DeFi MCP is listed in the public MCP registry as io.github.Haiku-Trading/haiku-mcp-server. DeFi execution for AI agents, swap, lend, bridge, and yield across 22 chains. This page covers its npm package (haiku-mcp-server).
Is the Haiku DeFi MCP server safe to use?
Haiku DeFi MCP scores 80 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Haiku DeFi MCP server expose?
Haiku DeFi MCP exposes 7 tools: haiku_get_tokens, haiku_get_balances, haiku_get_quote, haiku_prepare_signatures, haiku_discover_yields, and 2 more. Their descriptions and schemas cost roughly 2,074 tokens of context every time the server is loaded.
Is the Haiku DeFi MCP server still maintained?
Haiku DeFi MCP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Haiku DeFi MCP server under?
Haiku DeFi MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.