AlgoVesta MCP Trading

com.algovesta由 algovesta.com 發布官方發布者v1.2.2更新於 Nov 9, 2026

Trade 16 crypto exchanges + MetaTrader 5 from your AI assistant via one MCP connection.

已驗證Streamable HTTP可網頁執行金融AI 與機器學習

概覽

AI 產生的概覽

託管式 MCP 伺服器,讓助理讀取投資組合,並在 16 家加密貨幣交易所與 MetaTrader 5 下單、改單、平倉,風險規則由伺服器端執行。

可以做什麼
  • 讀取帳戶與行情:組合概況、即時價格、成交歷史、交易所價格比較、掛單、策略清單
  • 預演與規劃:模擬下單並附上策略判定,把自然語言風控規則編譯成可審閱的策略預覽
  • 交易:開倉、全部或部分平倉、移動停損與停利、取消掛單
  • 管理策略:列出、建立與更新 TradingView 策略,實盤自動交易一律關閉
  • 回測與重播:重播 Telegram 頻道、重播自己的歷史訊號、對已平倉交易套用風控策略、依真實費用重算 TradingView 匯出、查詢排隊任務狀態
  • 稽核:驗證每個動作回傳的簽章雜湊鏈收據
適用情境
當你希望 AI 助理透過單一連線檢視並操作多個加密貨幣交易所或 MetaTrader 5 帳戶,並先在模擬餘額上排練完整流程、再考慮真實資金時使用。
執行需求
遠端 Streamable HTTP 端點,無需安裝。需要 AlgoVesta 帳號與 MCP 金鑰(私密連結)或搭配 PKCE 的 OAuth 2.1。交易所或券商帳戶須先在 AlgoVesta 面板中連結。實盤交易需要第二重驗證。
安裝前請注意
私密連結本身就是憑證,應視同密碼,外洩後立即撤銷。實盤權限可下真實訂單並動用資金,place_order、close_position、cancel_order 屬破壞性操作。交易所 API 金鑰由 AlgoVesta 保管而非助理。服務為託管且閉源,交易資料與操作會經過第三方。有呼叫頻率限制,且並非低延遲執行通道。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 AlgoVesta MCP Trading,將其新增到工作區。
  2. 連接 所需的 憑證。它們會被私密儲存,絕不會在公開頁面上展示。
  3. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/com.algovesta%2Ftrading/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。 客戶端會在首次連接時完成 OAuth 登入。

{
  "mcpServers": {
    "algovesta-trading": {
      "type": "http",
      "url": "https://api.algovesta.com/mcp"
    }
  }
}

README

AlgoVesta MCP Server

Trade 16 crypto exchanges and MetaTrader 5 from your AI assistant — over one MCP connection.

[MCP Registry] [Transport] [Auth] [Tools] [Docs license]

Documentation · Tool reference · Safety model · Tool schemas (JSON) · Product overview


AlgoVesta runs a hosted Model Context Protocol server that reaches 16 crypto exchanges and MetaTrader 5 through a single HTTPS endpoint. Claude, ChatGPT, Cursor, Claude Code, Gemini CLI or any other MCP-capable client can read balances, open and close positions, move stop-loss and take-profit, and audit its own actions.

Your risk rules are compiled to JSON and evaluated on the server, after the request leaves the model — outside the reach of anything the model can be persuaded to say. Every new key starts on a $5,000 paper balance, and every action returns an ed25519-signed, hash-chained receipt.

Hosted and closed-source. This repository is the public documentation, tool reference and client configuration set. There is nothing to install, build or self-host — you connect to the hosted endpoint.

Contents — At a glance · How it works · Quick start · Connect your client · Supported AI clients · In use · Tools · Safety model · Venues · Performance and limits · Endpoints · FAQ

At a glance

TransportRemote MCP over Streamable HTTP
AuthenticationSecret link, or OAuth 2.1 with mandatory PKCE (S256) and Dynamic Client Registration (RFC 7591)
Tools20 — 13 read-only, 3 write, 4 destructive (reference)
Venues16 crypto exchanges · MetaTrader 5 · built-in paper engine
Default scopepaper — $5,000 virtual balance, identical toolset
Live scopeIssued only after a second factor, enforced server-side
Risk policyCompiled to JSON, evaluated deterministically on the server
Audited25519-signed, hash-chained receipt per action, independently verifiable
InstallNone. Hosted endpoint.
Registrycom.algovesta/trading — server.json is that manifest

How it works

mermaid
flowchart LR    A["AI client<br/>Claude, ChatGPT, Cursor, and more"]    B["AlgoVesta MCP server<br/>scope, rate limit, idempotency"]    C{"Policy wall<br/>evaluated server-side"}    R["Refusal<br/>plus audit entry"]    D["Execution"]    E["16 crypto exchanges"]    F["MetaTrader 5<br/>managed terminals"]    G["Paper engine<br/>5,000 USD virtual"]    H["ed25519-signed receipt"]
    A -->|MCP over HTTPS| B    B --> C    C -->|violates a rule| R    C -->|allowed| D    D --> E    D --> F    D --> G    D --> H

The model is the caller, never the authority. It decides what to ask for; the server decides what happens. Your exchange API keys never leave AlgoVesta and are created without withdrawal permission — the assistant only ever holds a scoped, revocable MCP link.

Quick start

  1. Create an AlgoVesta account and open the MCP Connection tab in the panel.
  2. Generate a key. New keys default to the paper scope; the full link is shown once.
  3. Paste the link into your AI client as a custom MCP server.
https://api.algovesta.com/u/avmcp_<your-key>/mcp

That URL is a credential. Treat it like a password. If it leaks, revoke it in the panel — revocation takes effect immediately for new connections and drops open event streams within seconds.

Clients that prefer a full authorization flow can use OAuth 2.1 instead, at https://api.algovesta.com/mcp. PKCE (S256) is mandatory and Dynamic Client Registration is supported, so most clients configure themselves. See docs/AUTHENTICATION.md.

Connect your client

Six walkthroughs below; anything else uses the same URL in whatever field it calls a remote MCP server.

Claude — web, desktop, iOS, Android

Settings -> Connectors -> Add custom connector, paste the URL, then allow the tools when Claude asks. Walkthrough

Claude Code

bash
claude mcp add --transport http algovesta https://api.algovesta.com/u/avmcp_<your-key>/mcp

Walkthrough

ChatGPT

Settings -> Connectors -> Advanced -> Developer mode -> Create, transport Streamable HTTP. Custom connectors are a paid-plan feature on OpenAI's side. Walkthrough

Cursor

~/.cursor/mcp.json, or .cursor/mcp.json inside a project — file

json
{  "mcpServers": {    "algovesta": { "url": "https://api.algovesta.com/u/avmcp_<your-key>/mcp" }  }}

VS Code — GitHub Copilot

.vscode/mcp.json — file

json
{  "servers": {    "algovesta": {      "type": "http",      "url": "https://api.algovesta.com/u/avmcp_<your-key>/mcp"    }  }}

Gemini CLI

~/.gemini/settings.json — file. CLI only; the Gemini web app does not accept custom MCP servers.

json
{  "mcpServers": {    "algovesta": { "httpUrl": "https://api.algovesta.com/u/avmcp_<your-key>/mcp" }  }}

Anything else

The three config shapes you will meet, plus a curl connection check: examples/other-clients.md

Supported AI clients

This is a standard remote MCP server over Streamable HTTP, so anything that speaks remote MCP can connect. The clients below document that support themselves — each row links to the client's own configuration docs, which is where the exact field name lives.

Assistants and chat apps — 8
ClientMCP documentation
Claude — web, desktop, iOS, AndroidCustom connectors
ChatGPT — Developer mode connectorsOpenAI MCP docs
Microsoft Copilot Studio agentsExtend with MCP
Goose (Block)block.github.io/goose
LibreChatMCP in LibreChat
Open WebUIdocs.openwebui.com
Cherry Studiodocs.cherry-ai.com
Raycastraycast.com
Coding agents and IDEs — 19
ClientMCP documentation
Claude CodeClaude Code MCP
OpenAI Codex CLICodex MCP
Gemini CLIMCP servers in Gemini CLI
CursorCursor MCP
VS Code — GitHub CopilotMCP servers in VS Code
WindsurfCascade MCP
ZedZed MCP
ClineConnecting to a remote server
Roo CodeUsing MCP in Roo
Kilo CodeUsing MCP in Kilo Code
ContinueMCP deep dive
JetBrains AI AssistantMCP in JetBrains IDEs
WarpWarp MCP
Amazon Q DeveloperMCP with Amazon Q
Kiro (AWS)Kiro MCP
Sourcegraph AmpAmp manual
TraeTrae MCP
PostHog Codeposthog.com/code
Archestra.AIarchestra.ai
Frameworks, automation and developer tools — 6
ClientMCP documentation
OpenAI Agents SDKMCP in the Agents SDK
fast-agentevalstate/fast-agent
n8n — MCP Client Tool nodedocs.n8n.io
PostmanMCP requests
MCP Inspectormodelcontextprotocol/inspector
MCPJammcpjam.com

Scope of that claim. We have verified Claude end to end against this server. The others are listed because they document remote MCP support — not because we individually tested each one. Client support also moves fast, and a given client may gate connectors behind a paid plan (ChatGPT does) or behind its CLI only (the Gemini web app does not accept custom MCP servers). If a listed client misbehaves with us, or one is missing, open an issue.

What it looks like in use

You never call a tool by name. You ask in plain language; the assistant picks the tool.

You sayThe assistant reaches for
"What's in my accounts right now, and how has this month gone?"get_portfolio_context — every exchange, MT5 account and the paper book in one call — then get_trade_history
"Where is BTC trading on the exchanges I've connected?"compare_venues — measured price and, where published, bid/ask spread
"If I opened 0.05 BTC long on Binance with a 2% stop, what would it cost and would my rules allow it?"simulate_order — a dry run including the policy verdict
"OK, open it — stop 2% below, target 4% above."place_order
"Move the stop on my ETH position up to break-even."modify_position
"Close half of the SOL long."close_position — partial on crypto, full close on MT5
"Never risk more than 1% per trade, max 3 positions, stop me after a 5% daily drawdown."compile_policy — returns readable JSON you approve
"Show me the receipt for that last order and verify it."verify_receipt — signature and hash chain, against a public key you can fetch yourself
"Run my last 90 days of signals again with a 1% risk cap."simulate_policy, then get_job_status

And what it will refuse. "Turn on auto-trading for that strategy" — refused; auto_trade is not a writable field in any scope. "Trade on Kraken for me" when Kraken is not connected — VENUE_NOT_CONNECTED, not a guess. "Open it without a stop" — refused, with no saved default to fall back on.

On a paper key every one of those runs against the $5,000 virtual balance with the identical toolset, so the whole workflow can be rehearsed before real money is reachable.

Tools

20 tools. Scope read works on any key; paper / live gates the rest.

Full tool list
ToolScopeKindPurpose
get_portfolio_contextreadread-onlyEvery connected account in one call
get_market_pricereadread-onlyLive price with freshness reported
get_trade_historyreadread-onlyClosed trades and performance across crypto, MT5 and paper
compare_venuesreadread-onlyRanks your connected exchanges on measured price and spread
simulate_orderreadread-onlyDry-run including the policy verdict
place_orderpaper / livedestructiveOpens a position (live crypto: market orders only)
compile_policyreadread-onlyTurns plain-language rules into a policy preview
list_open_ordersreadread-onlyPending limit orders (paper book)
cancel_orderpaper / livedestructiveCancels a pending order
close_positionpaper / livedestructiveCloses fully or partially (MT5: full close only)
modify_positionpaper / livewriteMoves stop-loss and take-profit
list_strategiesreadread-onlyYour TradingView strategies and whether real money is on
create_strategypaper / livewriteNew strategy, always created with real money OFF
update_strategypaper / livewriteChanges strategy settings (never auto_trade)
verify_receiptreadread-onlyChecks signature and hash chain
replay_channelreadread-onlyBacktests a Telegram channel against your rules
backtest_my_signalsreadread-onlyReplays your own past signals with different settings (queued job)
simulate_policyreadread-onlyApplies a risk policy to the trades you actually closed (queued job)
import_tradingview_backtestreadread-onlyRecomputes a TradingView trade export with real fees and slippage (queued job)
get_job_statusreadread-onlyProgress and result of a queued job

Two of them deserve a note, because what they refuse to do is the point:

  • compare_venues does not route your order. It reports the live price and, on venues that publish one, the bid/ask spread. It does not know your fee tier, the order book depth or the slippage you would pay — and it says so in every response. A venue that publishes no bid/ask is listed separately rather than ranked as if its spread were zero. You still name the exchange yourself in place_order.
  • create_strategy / update_strategy cannot turn real money on. A new strategy is always created with auto_trade off, and auto_trade is not in the writable field set — an assistant cannot set it, whatever it is asked or persuaded to do. A single order is one action you can see; a strategy keeps trading after the conversation ends, so arming one stays a human decision made in the panel. ip_allowlist is refused for the same reason: it is the second factor that verifies where signals come from.

Full reference with descriptions and JSON Schemas: docs/TOOLS.md · machine-readable: tools.json

Safety model

The AI is the caller — never the authority. Full model: docs/SAFETY.md.

ControlWhat it means
Paper by defaultEvery new key starts in paper scope on a $5,000 virtual balance. Real money is a separate, deliberate act: the live scope is issued only after a second factor (TOTP, or an email code for panel-created keys; over OAuth, TOTP is required), enforced server-side with no exceptions.
Server-side policy wallMax risk per trade, order-size cap, daily-loss cap, position count, leverage cap, venue/symbol/side restrictions — compiled to JSON and evaluated deterministically after the request leaves the model. A prompt injection can change what the model sends; it cannot change how the server evaluates it.
Stop-loss is mandatoryNo stop-loss and no saved default means the order is refused. The stop cannot be removed later either. On forex/MT5, a take-profit is mandatory too.
IdempotencyEvery order-shaped tool — including the read-only simulate_order, so one key carries from simulation to placement — requires a client-generated idempotency key. Repeats replay the stored response instead of acting twice.
Signed receiptsEvery action returns an ed25519-signed, hash-chained receipt, verifiable against the public key endpoint.
Kill switch and per-key revocationFreeze everything at once, or revoke one client without touching the others.
Structural tenant isolationTools have no identity parameter at all. The account is derived from the authenticated connection, so there is no argument a confused model or an attacker could supply to reach another account.
No withdrawal pathExchange API keys are created without withdrawal permission and stay inside AlgoVesta, AES-256 encrypted. The AI only ever holds a scoped, revocable MCP link.

Venues

Crypto (16) — Binance · Bybit · OKX · KuCoin · Gate.io · Bitget · Kraken · Coinbase · BingX · Hyperliquid · Backpack · HTX · BloFin · Phemex · WOO X · CoinEx

Forex, metals, indices — MetaTrader 5, zero installation: AlgoVesta runs the MT5 terminals on its own managed servers, connected to your broker 24/7.

Simulation — built-in paper engine, $5,000 virtual.

Six exchanges — Binance, Bybit, OKX, Gate.io, KuCoin and Bitget — have been verified end to end with real money on both futures and spot, with stop-loss and take-profit confirmed on the exchange itself. Each exchange has its own quirks, and the differences are deliberate rather than gaps: Bybit and Bitget do not accept a second take-profit leg on spot; OKX spot is routed through the raw API to keep a cash account from silently becoming a margin account; Binance spot enforces a minimum notional before buying; KuCoin market buys are placed in cost mode. A venue becomes available to the AI only after you connect it — asking for one you have not connected returns VENUE_NOT_CONNECTED rather than a guess.

Performance and limits

LimitValue
All tool calls, per key60 / minute
place_order10 / minute
replay_channel5 / hour (results cached 24 h)

Measured, not marketing — figures measured in August 2026; the averages match the ones published on algovesta.com:

StageMeasured
Request intake and parsing17–67 ms (median 38, n=6)
End to end on MetaTrader 5about 1.2 seconds on average, stop-loss and take-profit included (single live demo order: 849 ms)
End to end on a crypto exchangeabout 4.1 seconds on average, stop-loss and take-profit included (single live order: 2,785 ms)
Paper enginemedian 318 ms (n=18, min 284, max 769)

Time spent inside your AI client — the model thinking, and you confirming — is not included and usually dominates. This server is not a low-latency execution venue and is not sold as one.

Endpoints

PurposeURL
MCP — secret linkhttps://api.algovesta.com/u/avmcp_<key>/mcp
MCP — OAuth 2.1https://api.algovesta.com/mcp
Live events (SSE)https://api.algovesta.com/mcp/events · /u/avmcp_<key>/events
OAuth metadata/.well-known/oauth-authorization-server · /.well-known/oauth-protected-resource
Receipt public key/mcp/receipts/pubkey
Tool schemashttps://algovesta.com/mcp/tools.json

Published in the official MCP Registry as com.algovesta/trading; server.json in this repository is that manifest.

FAQ

Can Claude, ChatGPT or Cursor actually place a real trade on my exchange account?

Yes — once you give it a key with the live scope, and that scope is only issued after a second factor. Until then the same assistant runs against a $5,000 paper balance with identical tools, so you can rehearse the entire workflow before any real money is reachable.

Do I have to give my exchange API keys to the AI?

No, and you should never do that with any tool. Your API keys stay inside AlgoVesta, encrypted, created without withdrawal permission. The assistant only ever holds an MCP link — scoped, rate-limited, policy-checked, individually revocable, and useless for moving funds off an exchange.

Can a prompt injection make the AI ignore my risk rules?

It can change what the model asks for. It does not change how the server answers: your rules are evaluated after the request leaves the model, by code the prompt never reaches, and a violation is rejected and written to the audit log. The limits of that guarantee are worth stating plainly — it covers rule evaluation, scope and account isolation, not the wording of what the assistant tells you afterwards.

What happens if the model calls place_order twice by mistake?

Nothing happens twice. Every write tool requires an idempotency key, and a repeat of the same key returns the stored response instead of acting again.

How do I stop everything immediately?

The kill switch in the panel (POST /api/mcp/freeze) stops everything at once; every tool then returns user_frozen. To cut off a single client, revoke just that key.

Examples

Ready-to-use files in examples/:

  • TradingView alert templates: six JSON messages (basic entry, multi take-profit, Pine strategy with position state, close, forex on MT5, crypto with margin and leverage) and the field reference the webhook receiver uses.
  • Telegram signal parsing corpus: 30 synthetic signal messages with the expected parse for each, for testing your own copier or seeing which formats the AlgoVesta parser is built for.
  • MCP client code: minimal Python and Node.js programs that connect with a secret link, read the portfolio and place a paper order.
  • Client configs: Cursor, VS Code, Gemini CLI.

Support

Account and trading questions: support · [email protected] Vulnerability reports: SECURITY.md Client that will not connect, or one missing from the list above: open an issue

Compliance

AlgoVesta does not generate signals, does not hold, receive or move client funds, and does not provide investment advice. Trading carries risk; automation does not remove it. Every new key starts on paper.

License

Copyright (c) 2026 AlgoVesta. Documentation and configuration examples in this repository are licensed under CC BY 4.0. The AlgoVesta MCP server itself is proprietary and hosted; this repository contains no server source code.

來源:README.md,提交 2ea82a2

工具

0
該伺服器需要登入,因此 SourceWeft 無法在沒有帳號的情況下讀取其工具,也未收錄。已連接帳號所能看到的內容可能因帳號及其權限而異。

版本歷史

3
  1. v1.2.2最新Sep 23, 2026
  2. v1.2.1Sep 22, 2026
  3. v1.2.0Sep 16, 2026

評分

已滿足適用檢查項的 85%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分