# Locker Protocol Agentic (npm · @locker-protocol/agent-wallet-hyperliquid-trader-mcp)

Hyperliquid perps for AI agents. The agent trades; the keys stay offline in Locker Vault.

- Trust score: 65/100 (medium)
- Change this week: +31
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-18

## Components

- npm · `@locker-protocol/agent-wallet-hyperliquid-trader-mcp`: 65/100 (this document), [markdown](https://verifymcp.io/servers/locker-protocol-agentic/locker-protocol-agent-wallet-hyperliquid-trader-mcp.md), [page](https://verifymcp.io/servers/locker-protocol-agentic/locker-protocol-agent-wallet-hyperliquid-trader-mcp)

## Channel facts

- Registry: `npm`
- Package: `@locker-protocol/agent-wallet-hyperliquid-trader-mcp`
- Version: `2.4.3`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-18.

- **Supply Chain Security**: 89/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known high-severity CVE affects uuid 8.3.2, reached via @locker-protocol/agent-wallet-hyperliquid-trader > @locker-protocol/agent-wallet-vault > @keystonehq/bc-ur-registry-eth > uuid. A fixed version is available.
  - No install/post-install scripts declared.
  - 69 of 184 dependencies flagged as unhealthy (1 deprecated).
- **Provenance & Transparency**: 35/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Licence could not be checked: the licence is shipped as a file inside the package, not declared as a standard (SPDX) licence identifier, so we cannot tell whether it is OSI-approved.
  - Actively maintained (last published 1 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 68/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 4516 tokens (~107/item across 42 items; 42 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 10/100
  - Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 43 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the Locker Protocol Agentic MCP server?

Locker Protocol Agentic runs locally as an npm package, launched with npx -y @locker-protocol/agent-wallet-hyperliquid-trader-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add locker-protocol-agentic -- npx -y @locker-protocol/agent-wallet-hyperliquid-trader-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "locker-protocol-agentic": {
      "command": "npx",
      "args": [
        "-y",
        "@locker-protocol/agent-wallet-hyperliquid-trader-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "locker-protocol-agentic": {
      "command": "npx",
      "args": [
        "-y",
        "@locker-protocol/agent-wallet-hyperliquid-trader-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add locker-protocol-agentic -- npx -y @locker-protocol/agent-wallet-hyperliquid-trader-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "locker-protocol-agentic": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@locker-protocol/agent-wallet-hyperliquid-trader-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add locker-protocol-agentic --command npx --arg -y --arg @locker-protocol/agent-wallet-hyperliquid-trader-mcp
```

### Hermes

```yaml
mcp_servers:
  locker-protocol-agentic:
    command: "npx"
    args: ["-y", "@locker-protocol/agent-wallet-hyperliquid-trader-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "locker-protocol-agentic": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@locker-protocol/agent-wallet-hyperliquid-trader-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add locker-protocol-agentic -t stdio -c npx -a -y @locker-protocol/agent-wallet-hyperliquid-trader-mcp
```

### Other

```json
{
  "mcpServers": {
    "locker-protocol-agentic": {
      "command": "npx",
      "args": [
        "-y",
        "@locker-protocol/agent-wallet-hyperliquid-trader-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-17 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-16 (score 64, +15)

- [security regression] Tool safety: pass → unverified
- [security regression] Tool safety: pass → unverified
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [security] Stability: Stability not yet verified: this package could not be installed in a clean environment, so we have no schema to compare.
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional improvement] Stability: unverified → 0.03
- [functional] Schema quality: Schema quality not yet verified: this package could not be installed in a clean environment, so we have no schema to assess.
- [functional] Package version: 2.4.1 → 2.4.3
- [functional] Package version: 2.3.0 → 2.4.2

### 2026-10-15 (score 49, +15)

- [security regression] Malware scan: pass → unverified
- [security improvement] Injection markers: unverified → pass
- [security] First check of Judged manipulation: pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] MCP protocol: unverified → pass
- [functional] First check of Schema quality: fail
- [functional] First check of Schema quality: fail
- [functional] First check of Destructive annotations: 100
- [functional] First check of Schema quality: good
- [functional] First check of Tool coverage: 100
- [functional] Package version: 2.3.0 → 2.4.1
- [functional] Package version: 2.3.0 → 2.4.0

### 2026-10-14 (score 34, 0)

- [functional] Package version: 2.2.0 → 2.3.0

### 2026-10-12 (score 34, 0)

- [functional] Package version: 2.0.2 → 2.2.0

### 2026-10-09 (score 34)

First indexed and scored.

## MCP tools (42)

### `perps_venues` (~23 tokens)

Perps venues

The perps venues this wallet trades on (Hyperliquid).

### `perps_markets` (~114 tokens)

Perps markets

Markets by 24 h volume: mark price, 24 h change, funding, open interest, maximum leverage; halted ones marked.

Input parameters:

- `all_dexes` (boolean): Every dex the account is funded on
- `dex` (string): A HIP-3 dex by name, in lower case (omit for the main dex)
- `limit` (integer): How many markets, largest 24 h volume first (default 25)
- `search` (string): Only the markets whose name holds this text

### `perps_quote` (~362 tokens)

Quote an order

What an order would cost before anything is signed: entry and worst price on the live book, fees as one total, liquidation estimate, Hyperliquid's $10 minimum.

Input parameters:

- `leverage` (integer, required): The leverage, e.g. 3
- `limit_px` (string): The limit price, with type limit
- `margin` (string): cross or isolated: the margin the leverage is set in (default: the position's, or the market's; a market that takes isolated only refuses cross). The leverage is set for the whole market
- `max_slippage_bps` (integer): The worst price accepted, in basis points from the mid (default 300)
- `reduce_only` (boolean): Only reduce the position held, the side the other way: no leverage set, no margin taken, always allowed by the policy as a close
- `side` (string, required): long or short
- `size` (string, required): The size in the base asset, e.g. 0.01
- `sl` (string): A stop-loss price
- `symbol` (string, required): The market, e.g. BTC, ETH, xyz:GOLD
- `tif` (string): With type limit: gtc (default) rests until cancelled, ioc fills what it can at once and cancels the rest, alo is posted to the book only and refused if it would fill at once
- `tp` (string): A take-profit price
- `trigger_px` (string): The entry trigger, with type trigger: a long above the price, a short below; no tp or sl with it
- `type` (string): market (default), limit, or trigger (a market order once the price reaches trigger_px)

### `perps_positions` (~106 tokens)

Open positions

Open positions (the simulation account's with paper: true, or when simulation mode is on and no address is given).

Input parameters:

- `address` (string): Another account to read (0x...); omit for the vault account
- `all_dexes` (boolean): Every dex the account is funded on
- `dex` (string): A HIP-3 dex by name, in lower case (omit for the main dex)
- `paper` (boolean): On the simulation account

### `perps_balance` (~100 tokens)

Margin balance

Equity and withdrawable margin, per dex (the simulation account's with paper: true).

Input parameters:

- `address` (string): Another account to read (0x...); omit for the vault account
- `all_dexes` (boolean): Every dex the account is funded on
- `dex` (string): A HIP-3 dex by name, in lower case (omit for the main dex)
- `paper` (boolean): On the simulation account

### `perps_orders` (~119 tokens)

Open orders

Open orders, triggers included (the simulation account's with paper: true: its entry triggers waiting for their price, judged on the mark first, one reached filled and said under fired).

Input parameters:

- `address` (string): Another account to read (0x...); omit for the vault account
- `all_dexes` (boolean): Every dex the account is funded on
- `dex` (string): A HIP-3 dex by name, in lower case (omit for the main dex)
- `paper` (boolean): On the simulation account

### `perps_regime` (~116 tokens)

Market regime

The regime of a market, read on its 1 h, 4 h and 5 m candles: strong bull, weak bull, range, weak bear or strong bear with its trend score, the EMA stack, the structure (higher highs and lows), RSI 14 and 6, ATR and whether volatility expands, volume, and how long the regime has held. It tells a trending market from one in a range.

Input parameters:

- `symbol` (string, required): The market, e.g. BTC, ETH, xyz:GOLD

### `perps_ranges` (~133 tokens)

Markets in a range

Which markets are in a range now, over the last 4 hours: range width, volatility, their ratio (ranginess), a score from 0 to 10 (0 outside 0.5 to 5 % wide), support and resistance. The markets whose candles fail are skipped and counted.

Input parameters:

- `all_dexes` (boolean): Every dex the account is funded on
- `dex` (string): A HIP-3 dex by name, in lower case (omit for the main dex)
- `limit` (integer): How many markets to scan, by 24 h volume (default 20)

### `perps_open` (~437 tokens)

Open a position

Open or add to a position. Without confirm, returns the quote, the local policy check and a quote_id, and signs nothing. With confirm: true and that quote_id, the guardian rebuilds the order, checks the policy again and signs it with the agent key.

Input parameters:

- `confirm` (boolean): The user's agreement to this order. Without it nothing is signed.
- `leverage` (integer, required): The leverage, e.g. 3
- `limit_px` (string): The limit price, with type limit
- `margin` (string): cross or isolated: the margin the leverage is set in (default: the position's, or the market's; a market that takes isolated only refuses cross). The leverage is set for the whole market
- `max_slippage_bps` (integer): The worst price accepted, in basis points from the mid (default 300)
- `paper` (boolean): On the simulation account
- `quote_id` (string): The quote_id of the quote this confirms, as the same call without confirm returned it.
- `reduce_only` (boolean): Only reduce the position held, the side the other way: no leverage set, no margin taken, always allowed by the policy as a close
- `side` (string, required): long or short
- `size` (string, required): The size in the base asset, e.g. 0.01
- `sl` (string): A stop-loss price
- `symbol` (string, required): The market, e.g. BTC, ETH, xyz:GOLD
- `tif` (string): With type limit: gtc (default) rests until cancelled, ioc fills what it can at once and cancels the rest, alo is posted to the book only and refused if it would fill at once
- `tp` (string): A take-profit price
- `trigger_px` (string): The entry trigger, with type trigger: a long above the price, a short below; no tp or sl with it
- `type` (string): market (default), limit, or trigger (a market order once the price reaches trigger_px)

### `perps_close` (~182 tokens)

Close positions

Close a position (reduce-only, at market), or every one with all: true. Without confirm, returns what would close and a quote_id, and signs nothing. Closing is always allowed by the policy.

Input parameters:

- `all` (boolean): Every open position (instead of symbol)
- `confirm` (boolean): The user's agreement to this order. Without it nothing is signed.
- `max_slippage_bps` (integer): The worst price accepted, in basis points (default 300)
- `paper` (boolean): On the simulation account
- `quote_id` (string): The quote_id of the quote this confirms, as the same call without confirm returned it.
- `size` (string): Part of the position, in the base asset, never more than it holds (the whole position when absent)
- `symbol` (string): The market to close

### `perps_cancel` (~108 tokens)

Cancel an order

Cancel an open order. Runs only with confirm: true and the quote_id the same call without confirm returned; without them, signs nothing.

Input parameters:

- `confirm` (boolean): The user's agreement to this order. Without it nothing is signed.
- `order_id` (integer, required): The order id (perps_orders)
- `quote_id` (string): The quote_id of the quote this confirms, as the same call without confirm returned it.
- `symbol` (string, required): The market of the order

### `perps_modify` (~138 tokens)

Modify a market

Change the leverage of a market, or set TP/SL on an open position. Runs only with confirm: true and the quote_id the same call without confirm returned; without them, signs nothing.

Input parameters:

- `confirm` (boolean): The user's agreement to this order. Without it nothing is signed.
- `leverage` (integer): A new leverage (within the policy)
- `quote_id` (string): The quote_id of the quote this confirms, as the same call without confirm returned it.
- `sl` (string): A stop-loss price
- `symbol` (string, required): The market
- `tp` (string): A take-profit price

### `perps_deposit` (~72 tokens)

Deposit USDC

Deposit USDC from Arbitrum to Hyperliquid. Signed by the user's own wallet (Locker Vault, their browser extension or their mobile wallet): this tool signs nothing and returns the command the user types in their own terminal.

Input parameters:

- `amount` (string, required): USDC to bring from Arbitrum One

### `perps_withdraw` (~94 tokens)

Withdraw USDC

Withdraw USDC to Arbitrum. Signed by the user's own wallet (Locker Vault, their browser extension or their mobile wallet): this tool signs nothing and returns the command the user types in their own terminal. The agent key cannot withdraw (Hyperliquid refuses it).

Input parameters:

- `amount` (string, required): USDC to withdraw to Arbitrum
- `destination` (string): Another address (omit for the vault account)

### `perps_transfer` (~105 tokens)

Move margin between dexes

Move USDC margin between the main dex and a HIP-3 dex of the account. Signed by the user's own wallet (Locker Vault, their browser extension or their mobile wallet): this tool signs nothing and returns the command the user types.

Input parameters:

- `amount` (string, required): USDC to move
- `from_dex` (string): The dex to move from (default main)
- `to_dex` (string, required): The dex to move to (main for the main dex)

### `wallet_address` (~31 tokens)

Account

The account the agent trades for, and how it signs: Locker Vault, a browser extension or a mobile wallet.

### `wallet_balances` (~41 tokens)

Balances

ETH and USDC on Arbitrum, margin and spot on Hyperliquid.

Input parameters:

- `address` (string): Another account (omit for the vault account)

### `paper_init` (~66 tokens)

Open a simulation account

Open a simulation account: fills on the real order book with the real fees, no key and no vault needed.

Input parameters:

- `budget` (number): The simulation budget in USD (default 1000)
- `reset` (boolean): Start an existing simulation account over (its history is lost)

### `paper_status` (~22 tokens)

Simulation account

Equity, positions and fees of the simulation account, at live marks.

### `paper_on` (~32 tokens)

Simulation mode on

Every perps tool uses the simulation account until paper_off; modify, cancel and the movements of funds are refused meanwhile.

### `paper_off` (~14 tokens)

Simulation mode off

Back to the real account.

### `paper_record` (~161 tokens)

Record the market

Record the market into a local tape for paper_replay: the 1 m, 5 m, 1 h and 4 h candles of each market and its funding history, appended to what is already recorded. One call reaches about a day back on the 1 m band, so the tape grows by running this again over days. Nothing is signed and no key is read.

Input parameters:

- `coins` (string): The markets to record, comma separated (BTC,ETH); omit for the busiest ones
- `min_vlm` (number): Only the markets with at least this much 24 h volume in USD (default 5000000)
- `top` (integer): How many markets to record, by 24 h volume (default 20)

### `paper_replay` (~261 tokens)

Replay a strategy

Replay a strategy on the recorded tape and return the report: trades, win rate with its 95 % lower bound, costs, and a verdict. GATE NOT CLEARED is the usual outcome of a short tape, and it means the tape is too short to tell, not that the strategy is bad; run paper_record again over days. A replay never proves that a real order will win: it is what the recorded past would have given, fees and funding counted, and nothing is signed.

Input parameters:

- `coins` (string): Only these markets of the tape, comma separated (BTC,ETH)
- `from` (string): The start: a date, a timestamp in milliseconds, or a duration back from now (3d, 6h)
- `strategy` (object, required): The strategy, as a JSON object of schema version 1: version, name (lower-case letters, digits and dashes), an optional comment, when (the conditions) and order (side, sizeUsd, leverage, entry, tp, sl…
- `to` (string): The end, in the same forms as from

### `policy_show` (~41 tokens)

Policy

The limits every order is checked against: size per order, leverage, markets, orders per day, risk:reward, expiry and the bounds set on this computer.

### `mandate_show` (~63 tokens)

Mandate

The mandate the user signed, when there is one: the limits the guardian applies before every opening on top of the policy (size, leverage, markets, orders and notional per day, the fee recipient, live copies), its end, and whether it is in force.

### `mandate_sign` (~263 tokens)

Sign a mandate

Sign the limits of the agent with the user's own wallet (Locker Vault, their extension or their mobile wallet): the policy's bounds, a notional ceiling per day, the uses it allows (orders, live copies, the pilot) and the traders live copies may follow, for the agent's life at most (180 days). This tool signs nothing and returns the command the user types in their own terminal.

Input parameters:

- `actions` (string): The uses it allows, comma separated: trade (orders from the agent), copy (live copies, with copy_leaders), pilot (orders the pilot decides itself). Default: trade, and copy with copy_leaders
- `copy_budget` (number): With copy_leaders: the USD the live copies may use
- `copy_leaders` (string): Traders live copies may follow, comma separated (0x...,0x...)
- `copy_only` (boolean): Live copies only, no orders from the agent
- `days` (number): How long it lasts (default and at most 180, the agent's life, never past the agent)
- `max_notional_per_day` (number): The most notional opened per UTC day, in USD (default: the policy's largest order times its orders per day)

### `mandate_revoke` (~37 tokens)

Revoke the mandate

Drop the mandate: the guardian opens nothing under it until the user signs a new one. Closing positions stays allowed. It only restricts.

### `journal` (~65 tokens)

Journal

What was done, refused, and paid: orders, refusals, deposits, and the fees total.

Input parameters:

- `limit` (integer): How many lines (default 50)
- `since` (string): A duration back from now (24h, 7d) or a date

### `status` (~24 tokens)

Status

Account, agent, guardian (locked or unlocked) and mode, at a glance.

### `doctor` (~21 tokens)

Doctor

Check the setup, sign nothing: each check with what to do.

### `hyperkeel_status` (~46 tokens)

hyperkeel connection

Whether this computer is connected to hyperkeel.com (market data, alerts), with which account, until when. Connecting is the user's: `lpa hyperkeel login`.

### `hyperkeel_brief` (~40 tokens)

Market brief

The state of the market in one answer, from hyperkeel: the movers, funding, liquidations and large trades. No account needed.

### `hyperkeel_leaders` (~55 tokens)

Leaderboard

The first accounts of a Hyperliquid leaderboard, from hyperkeel: their PnL, volume and ROI over the period. No account needed.

Input parameters:

- `window` (string): The period ranked (default day)

### `hyperkeel_follows` (~32 tokens)

Traders followed

The traders the user follows on hyperkeel, where their moves are sent, and the latest ones.

### `hyperkeel_follow` (~45 tokens)

Follow a trader

Follow a trader on hyperkeel: its moves reach the user with their alerts. Moves no funds.

Input parameters:

- `address` (string, required): The trader's account (0x...)

### `hyperkeel_unfollow` (~34 tokens)

Stop following a trader

Stop following a trader on hyperkeel.

Input parameters:

- `address` (string, required): The trader's account (0x...)

### `hyperkeel_alerts` (~70 tokens)

Alerts on followed traders

The alerts on the moves of the traders followed (notifications, email): on from 250k, 1m or 5m dollars, or off.

Input parameters:

- `off` (boolean): Turn the alerts off
- `threshold` (string): Alert on moves of at least this many dollars

### `copy_start` (~391 tokens)

Copy a trader, in simulation or live

Start a background process that copies a trader for some days: every order of theirs is mirrored, sized as asked, with the real fees; what the leader reduces is reduced by the same share. In simulation by default, on a simulation account of its own, and nothing is signed. With live, the orders go to the real account through the guardian, each checked against the policy and the mandate the user signed on their phone. The process outlives this call and keeps running after the terminal closes, until copy_stop or the days run out.

Input parameters:

- `at_end` (string): What becomes of its positions when the days run out: keep (the default, left as they are) or close (closed at market, reduce-only); copy_stop keeps them either way
- `budget` (number): Simulated USD for this copy (default 1000)
- `days` (number): How long it copies (default 7, at most 30)
- `fixed_margin` (number): With fixed: the USD of margin for each opening, at most the budget
- `leader` (string, required): The trader to copy (0x...)
- `live` (boolean): On the real account instead of simulation: needs the guardian unlocked by the user and a mandate they signed naming this trader, with room in its copy budget
- `max_scale` (number): With proportional: at most this many times the leader's size (default 1)
- `percent` (number): With percent: the share of the copy's equity used as the margin of each opening
- `sizing` (string): How each opening is sized: proportional (the default: the leader's size times the copy's equity over the leader's, at most max_scale times the leader's size), mirror (the leader's size), percent (tha…

### `copy_stop` (~57 tokens)

Stop a copy

Stop the background process copying a trader, or every one; the result stays in copy_status with all: true.

Input parameters:

- `all` (boolean): Every copy (instead of leader)
- `leader` (string): The trader copied (0x...)

### `copy_status` (~38 tokens)

Copies in simulation

The copies in simulation: each one's equity and gain, running or (with all) ended.

Input parameters:

- `all` (boolean): The ended copies too

### `copy_resume` (~26 tokens)

Resume the copies

Start a background process again for each copy left paused (after a restart of the computer).

### `pilot_status` (~53 tokens)

The pilot

The pilot that trades on its own in the guardian: running and when it thinks next, paused and why, or ended. Read only: no tool arms, stops or resumes it; the user does, in their terminal.

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/locker-protocol-agentic/locker-protocol-agent-wallet-hyperliquid-trader-mcp#diagnostics

## Score history

- 2026-10-18: 65
- 2026-10-17: 65
- 2026-10-16: 64
- 2026-10-15: 49
- 2026-10-14: 34
- 2026-10-13: 34
- 2026-10-12: 34
- 2026-10-11: 34
- 2026-10-09: 34

## Common questions

### What is the Locker Protocol Agentic MCP server?

Locker Protocol Agentic is an MCP server listed in the public MCP registry as io.github.locker-protocol/agentic. Hyperliquid perps for AI agents. The agent trades; the keys stay offline in Locker Vault. This page covers its npm package (@locker-protocol/agent-wallet-hyperliquid-trader-mcp).

### Is the Locker Protocol Agentic MCP server safe to use?

Locker Protocol Agentic scores 65 out of 100 on VerifyMCP. We recorded 2 known advisories against it as of 18 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Locker Protocol Agentic MCP server expose?

Locker Protocol Agentic exposes 42 tools: perps_venues, perps_markets, perps_quote, perps_positions, perps_balance, and 37 more. Their descriptions and schemas cost roughly 4,238 tokens of context every time the server is loaded.

### Is the Locker Protocol Agentic MCP server still maintained?

Locker Protocol Agentic is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- npm package: https://www.npmjs.com/package/@locker-protocol/agent-wallet-hyperliquid-trader-mcp
- Socket report: https://socket.dev/npm/package/@locker-protocol/agent-wallet-hyperliquid-trader-mcp
- Repository: https://github.com/locker-protocol/agentic
- Website: https://hyperagentictrader.com/
- Changelog RSS feed: https://verifymcp.io/servers/locker-protocol-agentic/locker-protocol-agent-wallet-hyperliquid-trader-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/locker-protocol-agentic/locker-protocol-agent-wallet-hyperliquid-trader-mcp.json
- HTML version of this page: https://verifymcp.io/servers/locker-protocol-agentic/locker-protocol-agent-wallet-hyperliquid-trader-mcp