accueil / serveurs / Finance & Paiement / trade.quote/mcp
trade.quote/mcp
serveur MCP (Model Context Protocol) · quote-trade-mcp 1.5.14
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que trade.quote/mcp est sûr ?
Au dernier audit MCP Hub, le serveur MCP « trade.quote/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 25 outils
- quote_trade_account≈ 244 tokens
Withdraw step 1 / anytime account check. GET /api/account with per-request X-MBX-APIKEY. Inspect available balances before withdraw. No live trading action.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_account", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_api_discovery≈ 464 tokens
Read once to learn efficient direct REST/WebSocket use: routes, signing, streaming, cumulative depth, and client execution controls. Public guidance only; no upstream calls.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_api_discovery", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rest": {}, "bases": {}, "purpose": "texte", "workflow": [], "webSocket": {}, "releaseDate": "texte", "discoveryUrl": "texte", "documentation": {}, "schemaVersion": "texte", "serverVersion": "texte", "depthSemantics": {}, "executionControls": []}} - quote_trade_api_manifest≈ 1697 tokens
Explains that MCP is only a tool/schema adapter around the existing Quote.Trade APIs, and returns local servlet guardrail configuration.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_api_manifest", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"tools": [], "wsBase": "texte", "adapter": "texte", "apiBase": "texte", "version": "texte", "releaseDate": "texte", "servletOnly": true, "mcpPublicUrl": "texte", "allowLeverage": true, "depositAssets": [], "allowedSymbols": [], "maxNotionalUsd": "texte"}} - quote_trade_cancel_order≈ 566 tokens
Cancel one order by orderId. POST /api/cancelOrder. Identifies exactly one order via the matching engine's single-order cancel path - NOT a mass-cancel. There is no quote_trade_cancel_all: the upstream mass-cancel action's scope for edge-case parameters could not be verified from this codebase alone and is intentionally not exposed through MCP. Requires tradingEnabled, allowedSymbols (same allowlist as quote_trade_place_order), and a trade-scoped API key. No notional check applies: a cancellation has none. humanApproved/approvalText are agent friction only.
Paramètres, retour & exemple (6)
Paramètresside· string · optionnel
Optional BUY or SELL, matching the original order. Passed through if given.symbol· string · requis
Instrument symbol the order was placed on, such as BTC.account· integer · optionnel
Quote.Trade account/user id. Optional (defaults to account init-param, QUOTE_TRADE_ACCOUNT, or 0).orderId· integer · requis
The order id returned by quote_trade_place_order.approvalText· string · requis
Agent-supplied confirmation friction (not a security control). Must exactly equal: APPROVE QUOTE.TRADE CANCEL ORDERhumanApproved· boolean · requis
Agent-supplied confirmation friction (not a security control). Must be true; enableTrading remains authoritative.
Exemple d'appel{"name": "quote_trade_cancel_order", "arguments": {"symbol": "texte", "orderId": 1, "approvalText": "texte", "humanApproved": true}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_depth≈ 306 tokens
Trade step 3. GET /api/depth?symbol=SYMBOL&limit=N. Use depth quantity to choose a suitable limit price before placing an order.
Paramètres, retour & exemple (2)
Paramètreslimit· integer · optionnel
Optional maximum levels per side. Positive values are enforced by MCP; omitted/nonpositive uses upstream depth.symbol· string · requis
Instrument symbol from quote_trade_instruments, such as BTC or ETH.
Exemple d'appel{"name": "quote_trade_depth", "arguments": {"symbol": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_exchange_info≈ 362 tokens
Call GET /api/exchangeInfo and return a paginated slice of trading symbols plus rate limits/server time. Upstream has no pagination, so this adapter filters/slices locally. Default limit=50, max=200. Prefer quote_trade_instruments for compact tradable-pair discovery.
Paramètres, retour & exemple (3)
Paramètresskip· integer · optionnel
Number of matching symbols to skip before returning. Default 0.limit· integer · optionnel
Max symbols to return. Default 50, max 200.symbols· string · optionnel
Optional comma-separated symbol filter, e.g. BTC,ETH,SOL. When set, pagination applies to the filtered list.
Exemple d'appel{"name": "quote_trade_exchange_info", "arguments": {"skip": 1, "limit": 1, "symbols": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_challenge≈ 314 tokens
Optional wallet login/register step 1 (not required for trading with an existing API key). POST /api/getChallenge with a wallet address (login). Returns challenge text and isNewUser. Step 2: sign the challenge with the wallet outside MCP. Step 3: quote_trade_logon. No API key required.
Paramètres, retour & exemple (1)
Paramètreslogin· string · requis
Wallet address used as login, e.g. 0x15b65a49faf9a4047e912d7de4a77fe24c7cf483.
Exemple d'appel{"name": "quote_trade_get_challenge", "arguments": {"login": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_deposit_address≈ 300 tokens
Deposit step 1. GET /api/getDepositAddress?symbol=ASSET and return chain + contract/address. Supported assets: USDC and USDT (mainnet), XUSDC (USDC on XDC). Step 2 is transferring funds to that address outside MCP (no backend call).
Paramètres, retour & exemple (1)
Paramètressymbol· string · requis
Deposit asset symbol: USDC or USDT (mainnet), or XUSDC (USDC on XDC network).
Exemple d'appel{"name": "quote_trade_get_deposit_address", "arguments": {"symbol": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_deposit_history≈ 255 tokens
Anytime deposit check. POST /api/getDepositHistory with per-request X-MBX-APIKEY. Requires a trade-scoped API key (same scope as quote_trade_place_order). Read-only: no live trading action.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_get_deposit_history", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_index_positions≈ 301 tokens
Anytime position check. POST /api/getIndexPositions with per-request X-MBX-APIKEY. Distinct from quote_trade_get_positions: index/basket instrument positions rather than regular instrument positions. Optional assetType filter. Read-only: no live trading action.
Paramètres, retour & exemple (1)
ParamètresassetType· string · optionnel
Optional index/basket asset type filter. Omit for all.
Exemple d'appel{"name": "quote_trade_get_index_positions", "arguments": {"assetType": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_order_history≈ 303 tokens
Anytime order check. POST /api/getOrderHistory with per-request X-MBX-APIKEY. Full order history, or one order's history with optional orderId. Requires a trade-scoped API key (same scope as quote_trade_place_order). Read-only: no live trading action.
Paramètres, retour & exemple (1)
ParamètresorderId· integer · optionnel
Optional order id to narrow to one order's history. Omit for the full order history.
Exemple d'appel{"name": "quote_trade_get_order_history", "arguments": {"orderId": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_order_status≈ 281 tokens
Anytime order check. POST /api/orderStatus with per-request X-MBX-APIKEY. Query the status of an order previously placed with quote_trade_place_order. Read-only: no live trading action.
Paramètres, retour & exemple (1)
ParamètresorderId· integer · requis
The order id returned by quote_trade_place_order.
Exemple d'appel{"name": "quote_trade_get_order_status", "arguments": {"orderId": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_orders≈ 355 tokens
Anytime order check. POST /api/getOrders with per-request X-MBX-APIKEY. Read-only: no live trading action. Requires read entitlement on API keys that carry one.
Paramètres, retour & exemple (4)
Paramètreslimit· integer · optionnel
Optional maximum number of orders to return.symbol· string · optionnel
Optional instrument symbol filter, such as BTC. Omit for all symbols.endTime· integer · optionnel
Optional inclusive end of a time range, epoch milliseconds.startTime· integer · optionnel
Optional inclusive start of a time range, epoch milliseconds.
Exemple d'appel{"name": "quote_trade_get_orders", "arguments": {"limit": 1, "symbol": "texte", "endTime": 1, "startTime": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_positions≈ 266 tokens
Anytime position check. GET /api/positions with per-request X-MBX-APIKEY. Reconcile current positions when starting or reconnecting, per the direct-discovery guide (quote_trade_api_discovery / rest.privateReads). No live trading action.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_get_positions", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_risk≈ 251 tokens
Anytime risk check. POST /api/getRisk with per-request X-MBX-APIKEY. Margin/equity/unrealized-PnL summary for the authenticated account. Read-only: no live trading action.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_get_risk", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_user_wallets≈ 258 tokens
Anytime wallet check. POST /api/getUserWallets with per-request X-MBX-APIKEY. On-chain addresses previously seen depositing to the authenticated account. Read-only: no live trading action.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_get_user_wallets", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_get_withdraw_requests≈ 282 tokens
Anytime withdrawal check. POST /api/getWithdrawRequests with per-request X-MBX-APIKEY. Inspect the status of withdrawals already submitted (including via quote_trade_withdraw). Requires a trade-scoped API key. Read-only: no live trading action, and this tool cannot cancel a withdrawal.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_get_withdraw_requests", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_instruments≈ 303 tokens
Trade step 1. GET /api/getInstrumentPairs — paginated tradable symbols/instruments. Default limit=50, max=200. Use skip to page. Pick a symbol from this response for ticker/depth/order calls.
Paramètres, retour & exemple (2)
Paramètresskip· integer · optionnel
Number of instruments to skip before returning. Default 0.limit· integer · optionnel
Max instruments to return. Default 50, max 200.
Exemple d'appel{"name": "quote_trade_instruments", "arguments": {"skip": 1, "limit": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_logon≈ 482 tokens
Optional wallet login/register step 3 (not required if the agent already has an API key). Pass challenge + wallet signature from steps 1–2. isNewUser=true -> POST /api/registerUser; else POST /api/logon. On success, map body.requestToken/requestSecret to X-MBX-APIKEY / X-MBX-APISECRET; use body.id as account. Wallet signing stays outside MCP.
Paramètres, retour & exemple (3)
Paramètreschallenge· string · requis
Challenge text returned by quote_trade_get_challenge (Sign auth token: ...).isNewUser· boolean · optionnel
From quote_trade_get_challenge. true -> registerUser; false -> logon. If omitted, logon is tried first then registerUser on failure.signature· string · requis
Wallet signature of the challenge text (0x-prefixed hex).
Exemple d'appel{"name": "quote_trade_logon", "arguments": {"challenge": "texte", "signature": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte", "nextStep": "texte", "credentialMapping": {}}} - quote_trade_order_preview≈ 941 tokens
Optional before live trade. Normalize/validate a BUY/SELL order locally without sending it.
Paramètres, retour & exemple (9)
Paramètresside· string · requis
BUY or SELL.type· string · optionnel
LIMIT only in this adapter.price· number · requis
Limit price chosen after quote_trade_depth.symbol· string · requis
Instrument symbol from quote_trade_instruments, such as BTC.account· integer · optionnel
Quote.Trade account/user id. Optional for preview (defaults to account init-param, QUOTE_TRADE_ACCOUNT, or 0). Required for live place_order.quantity· number · requis
Order quantity.timestamp· integer · optionnel
Optional client timestamp in milliseconds.disableLeverage· integer · optionnel
1 disables leverage; 0 enables leverage/shorting only if server allowLeverage is true.paymentCurrency· string · optionnel
Payment currency such as USDT.
Exemple d'appel{"name": "quote_trade_order_preview", "arguments": {"side": "texte", "price": 1, "symbol": "texte", "quantity": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"safety": "texte", "endpoint": "texte", "priceUsd": 1, "willSend": true, "destination": "texte", "priceSource": "texte", "requestBody": {}, "symbolAllowed": true, "tradingEnabled": true, "notionalWarning": "texte", "estimatedNotional": 1, "estimatedQuantity": 1}} - quote_trade_place_order≈ 625 tokens
Trade step 4. POST /api/order with a suitable price after instruments/ticker/depth. Requires tradingEnabled, allowedSymbols (* or explicit list; empty denies), and API credentials. No MCP USD notional cap applies. Sending X-MBX-APISECRET to this MCP host grants it full signing authority. humanApproved/approvalText are agent friction only.
Paramètres, retour & exemple (11)
Paramètresside· string · requis
BUY or SELL.type· string · optionnel
LIMIT only in this adapter.price· number · requis
Limit price chosen after quote_trade_depth.symbol· string · requis
Instrument symbol from quote_trade_instruments, such as BTC.account· integer · requis
Quote.Trade account/user id. Optional for preview (defaults to account init-param, QUOTE_TRADE_ACCOUNT, or 0). Required for live place_order.quantity· number · requis
Order quantity.timestamp· integer · optionnel
Optional client timestamp in milliseconds.approvalText· string · requis
Agent-supplied confirmation friction (not a security control). Must exactly equal: APPROVE QUOTE.TRADE LIVE ORDERhumanApproved· boolean · requis
Agent-supplied confirmation friction (not a security control). Must be true; enableTrading remains authoritative.disableLeverage· integer · optionnel
1 disables leverage; 0 enables leverage/shorting only if server allowLeverage is true.paymentCurrency· string · optionnel
Payment currency such as USDT.
Exemple d'appel{"name": "quote_trade_place_order", "arguments": {"side": "texte", "price": 1, "symbol": "texte", "account": 1, "quantity": 1, "approvalText": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_status≈ 226 tokens
Call GET /api/status and return system status, server time, contracts URL, and feature flags.
Paramètres, retour & exemple (0)
Exemple d'appel{"name": "quote_trade_status", "arguments": {}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_ticker≈ 266 tokens
Trade step 2. GET /api/ticker?symbol=SYMBOL for a symbol from quote_trade_instruments. Returns last price, bid, ask, lastUpdateId.
Paramètres, retour & exemple (1)
Paramètressymbol· string · requis
Instrument symbol from quote_trade_instruments, such as BTC or ETH.
Exemple d'appel{"name": "quote_trade_ticker", "arguments": {"symbol": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_withdraw≈ 570 tokens
Withdraw step 3. POST /api/sendWithdrawWithVTokenRequest for stablecoins only (USDC|USDT|XUSDC) to the user's own login wallet (no toAddress). Not available for BTC/ETH/other assets. Requires a full-access API key with withdraw entitlement (trade-only keys are rejected by Quote.Trade), tradingEnabled, and allowedWithdrawAssets (independent of the trading allowedSymbols allowlist). No MCP USD notional cap applies. humanApproved/approvalText are agent friction only.
Paramètres, retour & exemple (6)
Paramètressymbol· string · requis
Stablecoin to withdraw: USDC, USDT, or XUSDC only (not BTC/ETH/other).account· integer · requis
Quote.Trade account/user id. Optional for preview (defaults to account init-param, QUOTE_TRADE_ACCOUNT, or 0). Required for live withdraw.quantity· string · requis
Scaled integer quantity as string (API format). Example: "20000000" with quantity_scale=6 means 20 USDC.approvalText· string · requis
Agent-supplied confirmation friction (not a security control). Must exactly equal: APPROVE QUOTE.TRADE LIVE WITHDRAWhumanApproved· boolean · requis
Agent-supplied confirmation friction (not a security control). Must be true; enableTrading remains authoritative.quantity_scale· integer · requis
Decimal scale for quantity. Example: 6 for USDC.
Exemple d'appel{"name": "quote_trade_withdraw", "arguments": {"symbol": "texte", "account": 1, "quantity": "texte", "approvalText": "texte", "humanApproved": true, "quantity_scale": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "body": "texte", "method": "texte", "status": 1, "endpoint": "texte"}} - quote_trade_withdraw_preview≈ 896 tokens
Optional before live withdraw. Stablecoins only: USDC, USDT, or XUSDC (not BTC/ETH/other). Own login wallet only (no toAddress). estimatedNotional is USD at $1 peg. Trade-only API keys cannot withdraw — use a full-access key with withdraw entitlement.
Paramètres, retour & exemple (4)
Paramètressymbol· string · requis
Stablecoin to withdraw: USDC, USDT, or XUSDC only (not BTC/ETH/other).account· integer · optionnel
Quote.Trade account/user id. Optional for preview (defaults to account init-param, QUOTE_TRADE_ACCOUNT, or 0). Required for live withdraw.quantity· string · requis
Scaled integer quantity as string (API format). Example: "20000000" with quantity_scale=6 means 20 USDC.quantity_scale· integer · requis
Decimal scale for quantity. Example: 6 for USDC.
Exemple d'appel{"name": "quote_trade_withdraw_preview", "arguments": {"symbol": "texte", "quantity": "texte", "quantity_scale": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"safety": "texte", "endpoint": "texte", "priceUsd": 1, "willSend": true, "destination": "texte", "priceSource": "texte", "requestBody": {}, "symbolAllowed": true, "tradingEnabled": true, "notionalWarning": "texte", "estimatedNotional": 1, "estimatedQuantity": 1}}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».