Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

AgentZ

REMOTE · AGENT-Z.APP

Daily 8 long calls on Hyperliquid, wallet health checks, order building and risk sizing.

Available components

−49 this week 25 Trust /100

Last scanned (26 minutes ago)

Scores higher than 10% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
  • Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
  • Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified

Unverified: 5 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 −50
    • Endpoint reachability: reachable → not serving MCP ▼ security
    • Stability: 0.63 → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
  • 31 Oct 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “risk_check” rewrote its description, which is the text the model reads security
    • Tool “request_capability” rewrote its description, which is the text the model reads security
    • Tool “ask_agentz” rewrote its description, which is the text the model reads security
    • Tool “build_order” rewrote its description, which is the text the model reads security
    • Tool “get_agentz_index” rewrote its description, which is the text the model reads security
    • Tool “get_daily_8” rewrote its description, which is the text the model reads security
    • Tool “get_exits_due” rewrote its description, which is the text the model reads security
    • Tool “get_owner_brief” rewrote its description, which is the text the model reads security
    • Tool “get_track_record” rewrote its description, which is the text the model reads security
    • “ask_agentz” reworded the description of “message” cosmetic
    • “ask_agentz” reworded the description of “signature” cosmetic
    • “get_daily_8” reworded the description of “message” cosmetic
    • “get_daily_8” reworded the description of “signature” cosmetic
    • “get_exits_due” reworded the description of “message” cosmetic
    • “get_exits_due” reworded the description of “signature” cosmetic
    • “get_open_calls” reworded the description of “message” cosmetic
    • “get_open_calls” reworded the description of “signature” cosmetic
    • Tool “ask_agentz” changed its title: Ask AgentZ → Ask EDGE cosmetic
    • Tool “get_agentz_index” changed its title: AgentZ indexes and funding rate → EDGE indexes and funding rate cosmetic
    • Tool “get_track_record” changed its title: AgentZ track record → EDGE track record cosmetic
  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.

  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

  • 24 Oct 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • New tool “get_agentz_index” functional
  • 22 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

  • 20 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

  • 18 Oct 26 +44
    • Injection markers: unverified → pass ▲ security
    • Transport: fail → pass ▲ security
    • Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 1 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “ask_agentz” rewrote its description, which is the text the model reads security
    • Tool “get_exits_due” rewrote its description, which is the text the model reads security
    • Tool “get_open_calls” rewrote its description, which is the text the model reads security
    • Endpoint reachability: not serving MCP → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • Stability: unverified → 0.17 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://agent-z.app/api/public/mcp?src=registry

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=agent-z.app CN=WE1,O=Google Trust Services,C=US 1 Oct 2026 30 Dec 2026 ECDSA 256 ECDSA-SHA256 61ecfce7faacf9600ea4bfb676da411e
SANs: agent-z.app
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of agent-z.app. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
app. present 23684 8 Verified
agent-z.app. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Inconclusive

We could not reach the endpoint well enough to judge its authorisation posture.

Result Inconclusive
HTTP status 307
Header Value
strict-transport-security max-age=31536000; includeSubDomains
x-content-type-options nosniff
referrer-policy strict-origin-when-cross-origin

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://agent-z.app/api/public/mcp?src=registry Redirected 307 https://edgetrading.live/api/public/mcp?src=registry
http (plaintext) http://agent-z.app/api/public/mcp?src=registry HTTPS enforced 302 https://edgetrading.live/api/public/mcp?src=registry
MCP tools · 18 exposed · ~1,721 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
agent_health_check ~93

Free. A factual review of any wallet's public Hyperliquid perp trading over the last 30 days: volume, realised P&L, win rate, fees in bps, holding time, weekend vs weekday results, largest fill vs market volume, and builder-code share. Describes and compares only; not advice.

NameTypeReqDescription
walletstringyesThe Hyperliquid wallet address to review (0x…).

No output schema declared.

No examples provided.

ask_agentz ~108

Ask the EDGE assistant a question (record, prices, risk, integration). Free and open; pass wallet.

NameTypeReqDescription
messagestring–Optional if the wallet has approved EDGE's builder fee. The exact message returned by get_access_message.
questionstringyesYour question.
signaturestring–Optional if the wallet has approved EDGE's builder fee. personal_sign signature of message by wallet.
walletstringyesYour Hyperliquid wallet address (0x…).

No output schema declared.

No examples provided.

build_order ~212

Free. Returns a ready-to-sign Hyperliquid order for your own wallet or API wallet: entry (limit-first post-only at the best price, with a market fallback, or market), optional protective stop, and leverage action, all carrying EDGE's 5 bps builder code. Also checks whether the wallet has approved the builder fee. EDGE never holds your keys.

NameTypeReqDescription
leveragenumber–Leverage for the leverage action, default 2.
marketstringyesHyperliquid market, e.g. BTC, ETH or xyz:TSLA.
order_typestring–Default limit_first.
reduce_onlyboolean–True to only reduce an existing position.
sidestringyes–
size_usdnumberyesOrder size in USD notional (minimum 10).
stop_pctnumber–Optional protective stop distance in percent, e.g. 4.
walletstring–Optional. Your wallet, to check builder-fee approval.

No output schema declared.

No examples provided.

crypto_positioning ~58

Free. Funding (per 8 hours and annualised) and open interest for a crypto coin across Hyperliquid, Bybit, OKX and Binance.

NameTypeReqDescription
coinstringyesCoin, e.g. BTC, ETH, SOL.

No output schema declared.

No examples provided.

event_calendar ~92

Free. Scheduled releases that move markets: Fed decisions, US CPI, jobs report, PPI, JOLTS, and EIA oil and gas reports. Optionally filtered to what affects one market.

NameTypeReqDescription
daysnumber–Days ahead, 1 to 60. Default 14.
marketstring–Optional Hyperliquid market to filter by, e.g. xyz:CL or BTC.

No output schema declared.

No examples provided.

get_access_message ~50

Free. Returns a message for your wallet to sign (valid 24h). Signing costs nothing and cannot move funds.

NameTypeReqDescription
walletstringyesYour Hyperliquid wallet address (0x…).

No output schema declared.

No examples provided.

get_agentz_index ~98

Free. The EDGE index family on Hyperliquid prices (Silicon, Backbone, Frontier, Core, Private AI, HL 10): level, constituents and month-by-month change, plus the EDGE Funding Rate (the cost of leverage across Hyperliquid) and the hash-chained public record. Pass index to get one.

NameTypeReqDescription
indexstring–Optional: silicon, backbone, frontier, core, private_ai or hl10.

No output schema declared.

No examples provided.

get_daily_8 ~182

Today's assigned EDGE basket as execution-ready Hyperliquid orders: symbol, entry reference, stop, exit time and max size in USD for your wallet. 8 calls on normal days, 4 on defensive days. Pass your wallet: if it has approved EDGE's builder fee, no signature is needed; otherwise sign the access message (first day free). Without either it returns the free preview.

NameTypeReqDescription
messagestring–Optional if the wallet has approved EDGE's builder fee. The exact message returned by get_access_message.
risk_pctnumber–Risk per trade in percent. Default 0.375, max 0.5.
signaturestring–Optional if the wallet has approved EDGE's builder fee. personal_sign signature of message by wallet.
walletstringyesYour Hyperliquid wallet address (0x…).

No output schema declared.

No examples provided.

get_daily_8_preview ~67

Free, no wallet or signature needed. Today's DAILY 8 long calls on Hyperliquid (symbol, category, rank; entry, stop and size withheld) plus every live call closed since 27 Sep 2026 with its result, and the steps to unlock live orders.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_exits_due ~103

EDGE calls your wallet still holds that have reached their exit time and should be closed now. Free and open; pass wallet.

NameTypeReqDescription
messagestring–Optional if the wallet has approved EDGE's builder fee. The exact message returned by get_access_message.
signaturestring–Optional if the wallet has approved EDGE's builder fee. personal_sign signature of message by wallet.
walletstringyesYour Hyperliquid wallet address (0x…).

No output schema declared.

No examples provided.

get_open_calls ~96

Your assigned calls still inside their 48-hour hold window. Free and open; pass wallet.

NameTypeReqDescription
messagestring–Optional if the wallet has approved EDGE's builder fee. The exact message returned by get_access_message.
signaturestring–Optional if the wallet has approved EDGE's builder fee. personal_sign signature of message by wallet.
walletstringyesYour Hyperliquid wallet address (0x…).

No output schema declared.

No examples provided.

get_owner_brief ~60

Free. A short factual summary for the agent's human owner: what EDGE is, price, record, risks and how to revoke. Pass wallet to record it.

NameTypeReqDescription
walletstring–Your Hyperliquid wallet address (0x…).

No output schema declared.

No examples provided.

get_track_record ~41

Free. EDGE's canonical record, months labelled replay or live. Replay calls after an estimated 0.15% cost per trade; live calls before costs.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

request_capability ~90

Free. Tell EDGE what market data, analysis or trading tool you need that is not in this list (any market or venue). Requests decide what is built next.

NameTypeReqDescription
examplestring–Optional. An example input and the answer you would want back.
needstringyesWhat you need, in plain words, e.g. 'liquidation levels for SOL on Hyperliquid'.

No output schema declared.

No examples provided.

risk_check ~152

Free. Describes a proposed trade against your Hyperliquid account and the market: risk in USD and % of equity at the stop, margin needed vs free margin, and the order as a share of the market's 24-hour volume, compared with EDGE's own limits. Factual, not advice.

NameTypeReqDescription
leveragenumber–Leverage, default 2.
marketstringyesHyperliquid market, e.g. BTC or xyz:TSLA.
size_usdnumberyesProposed size in USD notional.
stop_pctnumber–Stop distance in percent, default 4.
walletstringyesYour Hyperliquid wallet address (0x…).

No output schema declared.

No examples provided.

trade_conditions ~81

Free. When a Hyperliquid market trades most and least (UTC hours), volatility by hour, weekend vs weekday volume, and the spread right now.

NameTypeReqDescription
daysnumber–Look-back in days, 3 to 30. Default 14.
marketstringyesHyperliquid market, e.g. BTC or xyz:TSLA.

No output schema declared.

No examples provided.

wallet_intel_menu ~63

Free. Headlines on how ~7-8k tracked Hyperliquid wallets are positioned in the biggest markets, plus the paid wallet answers (smart-money, liquidation-map, wallet-profile) with their x402 URLs and price ($0.02 USDC on Base).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

weekend_gap ~75

Free. A tokenized stock, index or commodity on Hyperliquid vs its Hyperliquid price at the last Friday US close: gap %, range since, and hours to the next US open.

NameTypeReqDescription
marketstringyesHyperliquid market, e.g. xyz:TSLA, xyz:GOLD, xyz:CL.

No output schema declared.

No examples provided.

Install

How do I install the AgentZ MCP server?

AgentZ is a hosted endpoint at https://agent-z.app/api/public/mcp?src=registry, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · agent-z.app

# add to Claude Code
claude mcp add --transport http jafrancis021-max-agentz 'https://agent-z.app/api/public/mcp?src=registry'
Common questions

What is the AgentZ MCP server?

AgentZ is an MCP server listed in the public MCP registry as io.github.jafrancis021-max/agentz. Daily 8 long calls on Hyperliquid, wallet health checks, order building and risk sizing. This page covers its hosted endpoint (https://agent-z.app/api/public/mcp?src=registry).

Is the AgentZ MCP server safe to use?

AgentZ scores 25 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the AgentZ MCP server expose?

AgentZ exposes 18 tools: get_access_message, request_capability, get_daily_8_preview, get_daily_8, get_exits_due, and 13 more. Their descriptions and schemas cost roughly 1,721 tokens of context every time the server is loaded.

Does the AgentZ MCP server require authentication?

Its publisher declares no required credentials for AgentZ. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.

Is the AgentZ MCP server still maintained?

AgentZ is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.