ToolTrust
A0/100
Smithery

helix-song-coinex-mcp-server

mcpsmithery

@Smithery

# CoinEx MCP Server A Model Context Protocol (MCP) server that enables AI agents to interact seamlessly with the CoinEx cryptocurrency exchange. This server provides comprehensive access to market data, trading operations, and account management through a standardized MCP interface. ## Key Features - **Market Data Access**: Retrieve real-time tickers, order books, K-lines, and recent trades for both spot and futures markets - **Futures Analytics**: Access funding rates, premium indices, basis history, position tiers, and liquidation data - **Account Management**: Query account balances and manage trading positions - **Order Operations**: Place, cancel, and track orders with full history access - **Flexible Deployment**: Supports multiple transport protocols (stdio, HTTP, SSE) for various integration scenarios ## Quick Start ### Installation via http (Recommended) just add this url `https://mcp.coinex.com/mcp` to your mcp configuration in agent. for example, use this command to add it to your claude code: ``` claude mcp add --transport http coinex-mcp-server https://mcp.coinex.com/mcp ``` ### Installation via uvx (Support get balance / place order by API key) Configure your MCP client (e.g., Claude Desktop) with the following JSON: ```json { "mcpServers": { "coinex": { "command": "uvx", "args": ["coinex-mcp-server"], "env": { "COINEX_ACCESS_ID": "your_access_id_here", "COINEX_SECRET_KEY": "your_secret_key_here" } } } } ``` ### HTTP Mode Deployment by source code * install `pip install coinex-mcp-server` * start the server in HTTP mode: ```bash python -m coinex_mcp_server.main --transport http --host 127.0.0.1 --port 8000 --path /mcp --enable-http-auth ``` Pass credentials via HTTP headers: - `X-CoinEx-Access-Id: <your_access_id>` - `X-CoinEx-Secret-Key: <your_secret_key>` ## Usage Examples - **Get Market Tickers**: `list_markets(market_type="spot")` or `get_tickers(symbol="BTCUSDT")` - **Query Order Book**: `get_orderbook(symbol="BTCUSDT", limit=20)` - **Check Account Balance**: `get_account_balance()` - **Place Order**: `place_order(symbol="BTCUSDT", side="buy", type="limit", amount="0.01", price="50000")` ## Security Notes ⚠️ **Important**: - Never expose HTTP authentication in public services - Deploy with HTTPS/TLS in production environments

By Smithery | 12 findings | Scanned 5/11/2026 | tooltrust-scanner/v0.3.9

12 Info

Risk Summary

Safe With Normal Controls

Dep Visibility is the main signal, but overall risk remains within an acceptable range.

Potential impact: This finding indicates the tool should be reviewed before it is trusted.

Recommended action: No high-risk findings were detected in this scan, but you should still apply least-privilege defaults and rescan after changes.

Suggested policy: keep this tool behind manual approval, do not allow unattended runs, and re-scan after narrowing risky permissions.

Security Findings (12)

  • InfoAS-014

    ℹ️Dependency Inventory Unavailable ×12

    Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

    get_tickerget_orderbookget_klinelist_marketsget_dealsget_index_priceget_funding_rateget_funding_rate_historyget_premium_index_historyget_basis_historyget_margin_tiersget_liquidation_history

    Fix: Review and remediate the identified issue.

Scan this tool yourself

Reproduce this audit locally, integrate into CI, or let your agent audit its own tools.

Install once, then scan any MCP server:

$ curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
$ tooltrust-scanner scan --server "npx -y helix-song-coinex-mcp-server"

Adjust the package name if your npm registry name differs from the tool ID. View source

Add badge to your README

Copy this Markdown to show your ToolTrust grade on GitHub.

[![ToolTrust Grade A](https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-directory/main/docs/badges/grade-a.svg)](https://github.com/AgentSafe-AI/tooltrust-directory)