# io.github.hyperd-ai/hyperd-mcp (npm · hyperd-mcp)

Pre-trade DeFi intelligence: 24 paid x402 tools incl. 6 synthesis verdicts, USDC on Base.

- Trust score: 65/100 (medium)
- Change this week: +19
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `hyperd-mcp`: 65/100 (this document), [markdown](https://verifymcp.io/servers/hyperd-ai-hyperd-mcp/hyperd-mcp.md), [page](https://verifymcp.io/servers/hyperd-ai-hyperd-mcp/hyperd-mcp)

## Channel facts

- Registry: `npm`
- Package: `hyperd-mcp`
- Version: `1.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (112 of 116), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (112 of 116), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 54 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 74/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3203 tokens (~110/item across 29 items; 29 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add hyperd-ai-hyperd-mcp -- npx -y hyperd-mcp
```

### Codex

```bash
codex mcp add hyperd-ai-hyperd-mcp -- npx -y hyperd-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "hyperd-ai-hyperd-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "hyperd-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add hyperd-ai-hyperd-mcp --command npx --arg -y --arg hyperd-mcp
```

### Hermes

```yaml
mcp_servers:
  hyperd-ai-hyperd-mcp:
    command: "npx"
    args: ["-y", "hyperd-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "hyperd-ai-hyperd-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "hyperd-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 65, +44)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional regression] Security disclosure: unverified → fail
- [functional regression] Dependency health: partial → unverified
- [functional improvement] Schema quality: unverified → good
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] License: unverified → pass
- [functional improvement] Tool coverage: unverified → 100
- [functional] Licence: MIT

### 2026-08-01 (score 21, +16)

- [security improvement] Malware scan: unverified → pass
- [functional regression] Security disclosure: fail → unverified
- [functional improvement] Dependency health: unverified → partial

### 2026-07-31 (score 5, −1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 6, −40)

- [security regression] Malware scan: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (29)

### `hyperd.catalog.list` (~48 tokens)

List all available hyperD x402 API endpoints with their prices, descriptions, and example responses. FREE — no wallet required. Use this to discover what tools are available before configuring a wallet.

### `hyperd.pricing.get` (~35 tokens)

Get the current price list for all hyperD paid endpoints (in USDC on Base). FREE — no wallet required.

### `hyperd.health.check` (~48 tokens)

Check the health of the hyperD API: which network it's on, whether the payment facilitator is configured, which optional backend keys are wired, and cache stats. FREE — no wallet required.

### `hyperd.balance.get` (~128 tokens)

Get the on-chain balance for an EVM wallet address. Multi-chain (Base, Ethereum, Polygon, Arbitrum). Supports ERC-20 by symbol or contract address. Pass chain='all' for parallel multi-chain lookup. Costs $0.01 in USDC on Base.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain. Default 'base'. Use 'all' for parallel multi-chain.
- `token` (string): Token symbol (e.g., USDC, WETH) or contract address. Default USDC.

### `hyperd.yield.recommend` (~143 tokens)

Get an opinionated DeFi yield recommendation. Filters DefiLlama's pool universe by risk tier (low/medium/high), TVL, and IL exposure, then ranks by APY. Returns the top picks plus projected $ yield over your duration. Costs $0.05 in USDC.

Input parameters:

- `amount` (number, required): USD amount to invest
- `chain` (string): Optional chain filter (e.g., 'base')
- `duration` (integer): Investment duration in days. Default 30.
- `risk` (string, required): Risk tolerance
- `stables` (boolean): Stablecoins-only filter. Default false (true for low risk).

### `hyperd.token.info` (~113 tokens)

Get aggregated token metadata: market cap, supply, contract addresses across chains, recent volume. One call replaces multiple CoinGecko / Etherscan / DefiLlama lookups. Costs $0.01 in USDC.

Input parameters:

- `chain` (string): Chain when using contract. Default 'base'.
- `contract` (string): Contract address (alternative to query)
- `query` (string): Symbol, name, or coingecko id (e.g., 'USDC' or 'usd-coin')

### `hyperd.token.security` (~95 tokens)

Get a token's security risk score (0-100). Ensemble of GoPlus signals: honeypot detection, owner permissions, holder concentration, buy/sell taxes, source verification. Returns score, band (safe/caution/warning/danger), and structured findings. Costs $0.05 in USDC.

Input parameters:

- `chain` (string): Chain. Default 'base'.
- `contract` (string, required): Token contract address

### `hyperd.wallet.risk` (~108 tokens)

Check a wallet's risk profile. Combines Chainalysis Sanctions Oracle (OFAC SDN authoritative) with GoPlus address heuristics (mixers, phishing, scams). Returns sanctioned flag + 0-100 heuristic score. Costs $0.10 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain. Default 'base'.
- `deep` (boolean): Cross-check across multiple chains. Default false.

### `hyperd.protocol.tvl` (~106 tokens)

Get a DeFi protocol's TVL, audits, chain distribution from DefiLlama. Pass slug for detail (e.g., 'aave', 'morpho-blue') or list=true for top 50. Costs $0.01 in USDC.

Input parameters:

- `list` (boolean): If true, returns top 50 protocols by TVL
- `slug` (string): Protocol slug, e.g., 'aave' or 'morpho-blue'

### `hyperd.gas.estimate` (~52 tokens)

Get current gas price + base fee + tip percentiles for fast/standard/slow inclusion. Costs $0.005 in USDC.

Input parameters:

- `chain` (string): Chain. Default 'base'.

### `hyperd.dex.quote` (~137 tokens)

Get the best DEX swap route across multiple aggregators (Paraswap + 0x). Returns the highest output amount and per-source quotes. Costs $0.02 in USDC.

Input parameters:

- `amount` (string, required): Decimal amount of source token
- `chain` (string): Chain. Default 'base'.
- `from` (string, required): Source token symbol or contract address
- `slippage` (integer): Max slippage in basis points. Default 50.
- `taker` (string): Optional payer address for 0x quote (improves accuracy)
- `to` (string, required): Destination token symbol or contract address

### `hyperd.wallet.persona` (~102 tokens)

Classify a wallet's persona based on on-chain behavior. Returns one of: Trader, HODLer, MEV-bot, Whale, Smart-Money, Airdrop-Farmer, Compromised, Inactive — plus confidence and supporting signals. Costs $0.10 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain to analyze. Default 'base'.

### `hyperd.contract.audit` (~90 tokens)

Pre-trade contract security audit. Composes GoPlus + Sourcify + DefiLlama protocol recognition + on-chain heuristics into a single 0-100 risk score with structured findings. Use BEFORE interacting with any unfamiliar contract. Costs $0.10 in USDC.

Input parameters:

- `chain` (string): Chain. Default 'base'.
- `contract` (string, required): Contract address to audit

### `hyperd.governance.summarize` (~71 tokens)

Summarize a DAO governance proposal (Snapshot or Tally URL). Returns structured impact analysis: who benefits, who pays, recommended position. LLM-summarized. Costs $0.10 in USDC.

Input parameters:

- `proposal_url` (string, required): Snapshot or Tally proposal URL

### `hyperd.sentiment.token` (~93 tokens)

Get a token's sentiment score (0-100) from recent Farcaster discussion. Returns score, band (very_negative to very_positive), volume, trend, sample casts. Costs $0.05 in USDC.

Input parameters:

- `token` (string, required): Token symbol or name
- `window` (string): Days (1-30) or "24h" / "7d". Default "24h".

### `hyperd.liquidation.risk` (~109 tokens)

Cross-protocol liquidation risk for a wallet's lending positions. Health factor, USD-at-risk, and recommendations across Aave V3, Compound v3, Spark Lend, and Morpho Blue. Pass chain='all' for cross-chain aggregate. Costs $0.10 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain to check, or 'all' for cross-chain aggregate. Default 'base'.

### `hyperd.wallet.anomaly` (~134 tokens)

Wallet behavioral anomaly detection. Compares recent activity against the wallet's own 180-day baseline — surfaces tx-volume spikes, dormant-wakeup patterns, new-protocol interactions, counterparty diversification. Catches compromised hot wallets, dormant whales, MEV-bot strategy shifts. Costs $0.10 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain to analyze. Default 'base'.
- `window` (string): Recent activity window. "24h", "7d", "30d", or bare integer days. Default "24h".

### `hyperd.wallet.pnl` (~232 tokens)

Realized + unrealized P&L for a wallet over a time window. ERC-20 + native, single chain per call. Three cost-basis methods: FIFO (default, IRS standard), LIFO (last-in-first-out), HCFO (highest-cost-first-out, tax-loss-harvesting view). Per-token breakdown with weighted-avg cost + mark-to-market. Unpriced trades and untracked-proceeds gaps surfaced honestly under coverage.* fields. v1.0 defers per-tx gas-fee USD attribution. Costs $0.05 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain to compute P&L on. Default 'base'.
- `from` (integer): Window start, unix seconds. Default = to - 30 days. Must be >= 1577836800 (2020-01-01).
- `method` (string): Cost-basis method. Default 'fifo'.
- `to` (integer): Window end, unix seconds. Default = now. Cannot be > now+60.

### `hyperd.budget.guardian` (~189 tokens)

Agent spend visibility: aggregates recent outbound USDC transfers from a wallet over a configurable window (1h/24h/7d/30d). Returns total spend, by-destination breakdown, projected-24h rate, and an optional under_cap flag if cap_usd is provided. Use this BEFORE initiating the next paid x402 call to enforce a self-imposed budget. Bridged USDC.e variants are NOT counted. Costs $0.01 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `cap_usd` (number): Optional self-imposed USDC cap. When provided, response includes under_cap, remainingUsd, and anyTxExceedsTenthOfCap.
- `chain` (string): Chain to compute spend on. Default 'base'.
- `window` (string): Lookback window. Default '24h'.

### `hyperd.bundle` (~142 tokens)

Bundle multiple paid GET calls into one x402 settlement. Up to 10 sub-calls executed in parallel (concurrency cap 4), per-call results returned in a structured envelope. Fixed $0.20 USDC — typically cheaper than à la carte for any combination summing > $0.24 individually. Best-effort execution: failed sub-calls don't refund in v1.0 (credit ledger planned for v1.1). Use this when you need 3+ paid calls and want to save on facilitator round-trips.

Input parameters:

- `calls` (array, required): 1-10 sub-calls. Each must target a bundleable paid GET endpoint.

### `hyperd.watch.create` (~240 tokens)

Subscribe to a continuous watch on a wallet/position. Returns watch_id and webhook_secret (shown ONCE — store it; we cannot recover it). HMAC-SHA256 signed alerts POSTed to your webhook_url when threshold conditions are met. v1.0 supports liquidation watches across Aave V3 / Compound v3 / Spark / Morpho. $3.00 USDC prepays for duration_days (default 30, max 90).

Input parameters:

- `duration_days` (integer): Watch lifetime in days. Default 30, max 90.
- `fire_on_band_or_worse` (string): Fire when health-factor band reaches this severity OR worse. Default 'warning'.
- `target_addresses` (array, required): Wallet to watch (length-1 in v1.0; multi-target reserved for v1.1 Pro tier).
- `target_chain` (string): Chain to watch. Default 'base'.
- `type` (string, required): Watch type. v1.0 only supports 'liquidation'.
- `webhook_url` (string, required): HTTPS endpoint to POST alerts to. Must be publicly reachable; private/loopback IPs rejected.

### `hyperd.watch.list` (~64 tokens)

List the active watches owned by your wallet. $0.001 USDC ops fee — covers the x402 auth path that proves wallet ownership (without it, the server can't tell which wallet is asking). webhook_secret is NEVER returned — store it from the create response.

### `hyperd.watch.cancel` (~76 tokens)

Cancel a watch you own. $0.001 USDC ops fee covers the x402 auth path. Returns 404 (not 403) if the watch_id doesn't exist OR if you're not the owner — no existence-leak side-channel.

Input parameters:

- `watch_id` (string, required): The watch_id returned from hyperd.watch.create.

### `hyperd.risk.full_audit` (~113 tokens)

Composed wallet risk verdict. Fans out to balance, wallet_risk, wallet_persona, contract_audit, and privacy_mixer_risk then returns a Haiku 4.5-authored summary + confidence + band (safe / moderate / elevated / critical). One verdict replaces a manual 5-call audit walk. Costs $0.35 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain. Default 'base'.

### `hyperd.token.archetype` (~93 tokens)

Composed token classification. Fans out to token_info, token_security, and protocol_tvl then returns a single archetype (stablecoin / blue_chip / mid_cap / memecoin / wrapped / governance / unverified) plus a plain-language verdict. Costs $0.30 in USDC.

Input parameters:

- `chain` (string): Chain. Default 'base'.
- `contract` (string, required): Token contract address

### `hyperd.wallet.thesis` (~102 tokens)

Composed wallet behavioral thesis. Fans out to balance, wallet_persona, wallet_pnl, and wallet_anomaly then returns a plain-language summary of the wallet's investing posture plus archetype (trader / hodler / yield_farmer / mev_bot / compromised / inactive). Costs $0.50 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain. Default 'base'.

### `hyperd.wallet.threat_brief` (~111 tokens)

Composed wallet threat brief. Fans out to wallet_risk, wallet_anomaly, privacy_mixer_risk, budget_guardian, and wallet_persona then returns a 2-3 sentence security verdict + band (clean / watch / elevated / critical). Replaces a manual 5-call security audit walk. Costs $1.50 in USDC.

Input parameters:

- `address` (string, required): 0x EVM wallet address
- `chain` (string): Chain. Default 'base'.

### `hyperd.gov.translate` (~100 tokens)

Composed DAO governance translator. Takes a Snapshot or Tally proposal URL, fetches structured data via /api/governance/summarize, then produces a 2-3 sentence plain-language translation + domain band (economic_param / treasury / code_upgrade / governance_meta / social_signal). 1-year cache — proposals are immutable. Costs $1.00 in USDC.

Input parameters:

- `proposal_url` (string, required): Snapshot or Tally proposal URL

### `hyperd.yield.allocation` (~129 tokens)

Composed yield allocation recommender. Fans out 3 parallel /api/yield calls at low/medium/high risk tiers for the same amount + duration, then returns a recommended portfolio split + 2-sentence rationale. Bands: conservative / balanced / aggressive / bespoke. 6h cache bucketed by amount tier × duration × chain. Costs $1.00 in USDC.

Input parameters:

- `amount` (number, required): USDC equivalent to allocate
- `chain` (string): Chain filter. Default 'base'.
- `duration` (integer): Investment horizon in days. Default 30.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/hyperd-ai-hyperd-mcp/hyperd-mcp#diagnostics

## Score history

- 2026-08-03: 65
- 2026-08-02: 65
- 2026-08-01: 21
- 2026-07-31: 5
- 2026-07-30: 6
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/hyperd-mcp
- Socket report: https://socket.dev/npm/package/hyperd-mcp
- Repository: https://github.com/hyperd-ai/hyperd-mcp
- Changelog RSS feed: https://verifymcp.io/servers/hyperd-ai-hyperd-mcp/hyperd-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/hyperd-ai-hyperd-mcp/hyperd-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/hyperd-ai-hyperd-mcp/hyperd-mcp