A connection to Rubin, a self-custody crypto exchange for spot trading and perpetual contracts. Self-custody means the exchange is designed so users retain control of their funds.

Use it to read crypto balances, open positions, and orders, and to trade spot assets or perpetual contracts.

It gives an agent access to trading information and actions through the exchange's remote service. The input does not specify safeguards, supported assets, or trading limits.

exchange — MCP server for Claude Code and Codex by rubin-trade

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo

git clone --depth 1 https://github.com/rubin-trade/rubin-mainnet-mcp

Made for: Claude Code, Codex, Cursor, Gemini CLI, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/mcp/rubin-trade/rubin-mainnet-mcp/exchange/github.svg)](https://agentmods.dev/mcp/rubin-trade/rubin-mainnet-mcp/exchange)

Your own site

<a href="https://agentmods.dev/mcp/rubin-trade/rubin-mainnet-mcp/exchange"><img src="https://agentmods.dev/badge/mcp/rubin-trade/rubin-mainnet-mcp/exchange/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/mcp/rubin-trade/rubin-mainnet-mcp/exchange"><img src="https://agentmods.dev/badge/mcp/rubin-trade/rubin-mainnet-mcp/exchange.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session not measured What this adds to a session before it is invoked.

When invoked not measured Not applicable: nothing here is loaded into a session.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Security

Grade A, and why

exchange scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

server.json · 6 lines

What it actually says

{
  "exchange": {
    "url": "https://mcp.mainnet.rubin.trade/mcp",
    "type": "streamable-http"
  }
}

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

10d ago First seen · 6 lines scan A d47355d35119

Subscribe to this mod's changes

exchange is an MCP server published in the GitHub repository rubin-trade/rubin-mainnet-mcp (0 stars, last pushed 2mo ago), licensed MIT. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Finance and fintech Web3 and blockchain ai-agents crypto-exchange defi dex mcp model-context-protocol

tegro-finance-mcp

Model Context Protocol server for the Tegro Finance DEX on TON — let an AI assistant read pools, token prices, swap quotes and liquid-staking (stgTON) rates. Read-only, no keys, no signing. Built on @tegroton/tegro-finance. Runs locally from the @tegroton/tegro-finance-mcp npm package.

TegroTON/tegro-finance-mcp · not measured

hyperliquid

A server that exposes a set of tools for interacting with the Hyperliquid decentralized exchange. It simplifies trading operations by providing a high-level API for placing, canceling, and modifying orders, as well as managing account settings and retrieving market data. Runs locally from the hyperliquid-mcp Python…

erscoder/hyperliquid-mcp · not measured

uniswap-mcp

Uniswap - 17 tools for swap quotes, liquidity pools, and trading data. Remote server at uniswap.mcp.junct.dev.

junct-bot/uniswap-mcp · not measured

agent-wallet-mcp

Non-custodial Solana MCP: compare yields, buy tokenized US stocks (xStocks) & Ondo USDY. You sign. Runs locally from the @kaditang/agent-wallet-mcp npm package. Needs 1 environment variable to run.

kaditang/agent-wallet-mcp · not measured

suwappu

Cross-chain DEX for AI agents. Swap tokens across 7+ chains. Runs locally from the @suwappu/mcp-server npm package. Needs 1 environment variable to run.

0xSoftBoi/suwappubot · not measured

verdictswarm

Every tool has an answer — your agent needs a decision. MCP server for the VerdictSwarm pre-trade check: a machine-readable avoid/caution/clear before your agent trades, plus intended-size exit feasibility and holder-cluster attribution on Solana. Runs locally from the verdictswarm-mcp Python package. Needs 3…

sentien-labs/verdictswarm-mcp · not measured