Opus places its own orders. Sets its own stop-losses, take-profits, and trailing stops. Schedules its own time-based alerts to wake itself up later. Records every decision into an audit trail before the order hits the wire. Survives container restarts with full state intact.

Trading is real money.WhenDERIBIT_TEST_MODE=false, every mutating tool call hits the live Deribit exchange. Use the kill switch (DERIBIT_TRADING_ENABLED=false), the testnet (DERIBIT_TEST_MODE=true), and the per-callconfirm_live_trade=truerequirement on Mainnet. Set hard caps onDERIBIT_MAX_AMOUNT_andDERIBIT_MAX_NOTIONAL_USD.You are responsible for what your model does with this access.

Pre-trade decision audit.Mutating tools require adecision_idminted byrecord_decision, validated against the database before the Deribit call. Every order writes a row intoorder_auditbeforeandafter the call. Thedecision_idrides through Deribit as the orderlabel, so post-hoc analysis joins trivially.

Self-scheduling alerts.The agent callsset_price_alertfor threshold/cross/percentage-change conditions,set_time_alertto schedule its own future wakeups (e.g."check funding in 4 hours"), and the alert engine fires asynchronously through the same channel pipeline.

record_decision(...) → did_entry, did_sl buy(BTC-PERPETUAL, amount=10, order_type="market", decision_id=did_entry, confirm_live_trade=true) sell(BTC-PERPETUAL, amount=10, order_type="stop_market", trigger="mark_price", trigger_price=<mark0.97>, reduce_only=true, decision_id=did_sl, confirm_live_trade=true)

Example — exchange-side breakout bracket with asymmetric trigger feeds. Entry waits forlast_priceto cross 80100 (clean market touch), then SL/TP protect onmark_price(wick-resistant). The bracket sits on Deribit until the entry fires, so wake-latency and MCP downtime do not miss the setup:

record_decision( instrument="BTC-PERPETUAL", reasoning="80100 break-up + 79200 reclaim long", action_taken="place_bracket", ) → did place_bracket( decision_id=did, instrument="BTC-PERPETUAL", side="buy", amount=10, entry_type="stop_market", entry_trigger_price=80100, # break trigger sl_type="stop_market", sl_trigger_price=79200, # reclaim invalid tp_type="take_market", tp_trigger_price=82500, trigger_source="mark_price", # default for SL + TP legs entry_trigger_source="last_price", # entry uses real-trade prints confirm_live_trade=true, )

Abuywhoseentry_trigger_priceis already at or below current price is rejected before the Deribit call (mirror logic forsell). The current-price read bypasses the cache so a stale WS feed cannot mask the divergence.

This server runs as a long-lived container exposing streamable-http MCP. Stdio (MCP_TRANSPORT=stdio) is supported for local dev or direct stdio launchers.

# 1) Configure cp .env.example .env # Edit: DERIBIT_API_KEY/SECRET, TELEGRAM_BOT_TOKEN/CHAT_ID, # MCP_SHARED_SECRET (openssl rand -hex 32), # DERIBIT_EVENT_ADMIN_TOKEN (openssl rand -hex 32), # trading limits if you flip TRADING_ENABLED=true # 2) Pull the published image and start docker compose pull docker compose up -d # 3) Health curl http://<deribit-host>:8000/health # → {"ok":true} # 4) Open the operator dashboard # http://<deribit-host>:8000/dashboard/ # Use DERIBIT_EVENT_ADMIN_TOKEN when the dashboard asks for a token. # 5) Wire it into your MCP client / gateway: # transport: streamable-http # url: http://<deribit-host>:8000/mcp/ # headers: {"X-Deribit-MCP-Secret": "<MCP_SHARED_SECRET>"} # 6) Verify everything end-to-end on the testnet # See SMOKE-PLAYBOOK.md — designed for autonomous execution by # another Claude Code session against test.deribit.com. Run it # BEFORE you ever flip DERIBIT_TEST_MODE=false.

For local development of the container image, setDERIBIT_MCP_IMAGE=deribit-mcp-server:localand rundocker compose up -d --buildfrom a checkout.

/mcpand/sseare protected byMCP_SHARED_SECRET— only callers with the correctX-Deribit-MCP-Secretheader reach the MCP surface./events/*uses per-consumer Bearer tokens for the sidecar pipeline and can be exposed across a private network (e.g. Tailscale, VPN, overlay) to wherever the sidecar runs.

All configuration lives in.env. Settings are validated at startup — the container fails fast on missing or inconsistent values.

DERIBIT_TRADING_ENABLED=falseis the safe default. Mutating tools (buy,sell,edit_order,cancel_order,cancel_all_orders,close_position,place_bracket,create_combo) refuse to run unless trading is explicitly enabledandall four limits below are positive numbers.

On Mainnet (DERIBIT_TEST_MODE=false), each mutating tool call also requiresconfirm_live_trade=true— defense against accidental Mainnet calls from a session configured for testnet.

Telegram for the human user, outbox for the agent wakeup pipeline:

These variables are consumed bydocker-compose.yml, not by the Python app itself:

When an alert withnotification_channel="outbox"fires, the server writes a payload-allowlisted event to theevent_outboxtable. The sidecar plugin running on the Claude machine:
- Holds a long stream open atGET /events/stream?consumer_id=<id>(Bearer auth, per-consumer token).
- Receives the event as NDJSON.
- Emitsnotifications/claude/channelwithcontent=payload.messageandmeta= identifier-keyed metadata (alert_id,instrument,severity,event_id,event_type).
- CallsPOST /events/{event_id}/ackso the server stops re-delivering.

# Mint or rotate a consumer token curl -sS -X POST http://<deribit-host>:8000/events/register \ -H "Authorization: Bearer $DERIBIT_EVENT_ADMIN_TOKEN" \ -H "Content-Type: application/json" \ -d '{"consumer_id":"<uuid4>","display_name":"trading-claude-laptop"}'

Single SQLite database mounted on a host volume. Tables:

Unit tests(tests/, ~200 cases): trading guards including amount/notional limits per instrument family, cancel_all routing, decision repo + outcome enum, idempotency cache, outbox dedupe + allowlist, news persistence/dedupe/push routing, mass-cancel audit semantics, http_app shared-secret middleware, lifespan passthrough, GET-array bracket encoding.

# Container health docker logs deribit-mcp --tail 30 curl http://<deribit-host>:8000/health # Inspect the MCP tool list directly curl -s -X POST http://<deribit-host>:8000/mcp/ \ -H "X-Deribit-MCP-Secret: $MCP_SHARED_SECRET" \ -H "Accept: application/json, text/event-stream" \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' # Inspect SQLite directly (read-only) docker exec deribit-mcp sqlite3 'file:/data/deribit.db?mode=ro' \ "SELECT id,instrument,condition,status FROM alerts ORDER BY created_at DESC LIMIT 10" # Inspect deliveries for a sidecar consumer docker exec deribit-mcp sqlite3 'file:/data/deribit.db?mode=ro' \ "SELECT consumer_id,event_id,delivered_at,acked_at,attempts \ FROM event_deliveries ORDER BY delivered_at DESC LIMIT 5" # Trigger a synthetic outbox event (server-side, useful for sidecar tests) docker exec deribit-mcp python3 -c " import asyncio from src.persistence import Database from src.event_outbox import EventOutboxRepo async def main(): db = Database('/data/deribit.db'); await db.connect() repo = EventOutboxRepo(db) eid = await repo.insert_event( 'price_alert_triggered', {'message':'manual smoke','alert_id':'manual','instrument':'BTC-PERPETUAL'}, severity='info', ) print('inserted', eid) await db.close() asyncio.run(main()) "

Deribit and Coinbase are trademarks of their respective owners. This project is independent and is not affiliated with, endorsed by, or sponsored by Deribit, Deribit B.V., Coinbase, or Coinbase Global, Inc.

This software talks to a live derivatives exchange. Trading cryptocurrency derivatives carries substantial risk of loss. Nothing in this repository is financial advice. The authors accept no liability for any losses, missed alerts, model errors, sidecar disconnects, or any other consequence of using this software.You are responsible for what your model does with this access.Use the testnet, the kill switch, and the trading caps. Read the code before you flipDERIBIT_TRADING_ENABLED=true.

Coinrule Agentic Trading MCP enables investors to create, backtest, execute, and manage trading agents through natural language across stocks, crypto and ETFs

Remote MCP server for historical crypto & prediction-market data: search ~500K instruments, live market stats (OHLC, turnover, spreads, depth, slippage) and tick-data purchase. Keyless for catalog & stats; optional OAuth for account tools. Endpoint: https://cryptostruct.com/mcp

Read-only MCP server for your Evibe investment portfolio + live market data (holdings, performance, dividends, benchmarks, screeners). Works with Claude & ChatGPT.