BotOrNot

com.getbotornotPublished by getbotornot.comOfficial publisherv2.0.0Updated Oct 24, 2026

Is a trading bot legit? Sourced bot fact sheets, regulator scam records and on-chain results.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingFinanceSecurity & Monitoring

Overview

AI-generated overview

BotOrNot lets an assistant check whether a trading bot is legitimate, with sourced fact sheets, regulator scam records and on-chain performance data.

What you can do
List and filter documented trading bots, fetch one bot's full sourced fact sheet, and compare two bots side by side. Check a bot name, website or domain, and a Telegram handle or link, flagging official handles, known impersonators and look-alike domains. Search SEC, CFTC and state crypto scam-tracker records and review verified security incidents. Get rule-based report cards, plus prediction-market venues and their documented bots. Review recent change events and read the Hyperliquid vault leaderboard from on-chain data.
When to use it
Use it when a user asks whether a trading bot, prediction-market venue or Telegram handle is legitimate, or wants regulator scam and enforcement records or verified security incidents. Also useful for comparing two bots on sourced facts or checking on-chain Hyperliquid vault performance.
Requirements
Remote MCP endpoint; no local package to install. No authentication, environment variables or headers are declared. Network access to the service is needed, and domain-age checks rely on public RDAP lookups.
Before you install
Results are informational only: no_record is not proof of safety, report cards are not ratings or investment advice, regulator complaints are allegations until resolved, and past leaderboard results do not predict future ones. Checks send bot names, domains, Telegram handles or pasted text to a third-party service. The server only reads data and does not place trades or move funds.

Installation

In SourceWeft

  1. Open BotOrNot in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.getbotornot%2Fbotornot/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "botornot": {
      "type": "http",
      "url": "https://getbotornot.com/mcp"
    }
  }
}

Tools

12

check_bot

Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC and a state regulator crypto scam tracker). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.

Parametersqueryrequired

get_bot

Full sourced fact sheet for one documented bot by slug (see list_bots): pricing, markets, custody model, red flags with sources, report card, impostor scam reports.

Parametersslugrequired

get_report_card

The rule-based BotOrNot report card for a bot (Clear record, Caution, Red flags, Closed, Limited data) with the exact sourced facts and rule ids that produced it. Not a rating or investment advice; payouts never change it.

Parametersslugrequired

get_prediction_markets

Prediction-market venues (Kalshi, Polymarket US, Gemini Predictions) with their CFTC status and official sources, plus the documented prediction-market bots and their report cards.

Takes no parameters.

list_bots

List documented trading bots (slug, name, category, report card, official_url). Optionally filter by category or report card result.

Parametersresultcategory

compare_bots

Side-by-side sourced facts and report cards for two bots by slug. No winner is picked.

Parametersarequiredbrequired

search_scams

Search regulator scam and enforcement records (SEC, CFTC and a state regulator crypto scam tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.

Parameterslimitqueryrequired

check_website

Scam signals for a website: exact matches in a state regulator scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.

Parametersurlrequiredtext

get_changes

Recent change events: new regulator cases, new state scam-tracker reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.

Parametersbotlimit

check_telegram

Check a Telegram @handle or t.me link: is it an official handle of a listed trading bot (verified on the bot's own site or docs), a known impersonator listed by the bot's own docs, a look-alike, or not in our records? Matches include custody model and incident history. A match is NOT a safety rating; unknown is not proof of a scam.

Parametershandlerequired

get_incidents

Verified security incidents (hacks, exploits, key leaks) at trading bots: date, what happened, users affected, estimated loss as named in the sources, refund status and source URLs. Optionally filter by bot slug.

Parametersbotlimit

get_leaderboard

Hyperliquid vault leaderboard from on-chain data: open vaults with >= $100k TVL ranked by 30-day PnL (USD). Refreshed daily. Past results do not predict future ones.

Parameterslimit

Version history

1
  1. v2.0.0LatestOct 16, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.