Is io.github.toreva/kit safe to use?

io.github.toreva/kit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.toreva/kit?

io.github.toreva/kit supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.toreva/kit do?

io.github.toreva/kit provides 17 tools: toreva_perps_long, toreva_perps_short, toreva_perps_close, toreva_perps_add_margin, toreva_perps_remove_margin and 12 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.toreva/kit?

io.github.toreva/kit is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.toreva/kit actively maintained?

io.github.toreva/kit is actively maintained — last commit was 3 days ago.

io.github.toreva/kit

@toreva/mcp

Non-custodial execution primitives for DeFi on Solana. 1 bps to open. Everything else is free.

10/wk 17 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio, http

17 tools · ~658 tok

Grade B · 0.3% of 200K ctx

Edit this pageView history

Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-toreva-kit": {
      "args": [
        "-y",
        "@toreva/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-toreva-kit)](https://mcppedia.org/s/io-github-toreva-kit)

Read me

What io.github.toreva/kit does

Non-custodial execution primitives for Solana. Best-execution routing across Jupiter Perps, Pacifica, Drift, and Flash Trade. 1 bps to open. Everything else is free.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@toreva/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @toreva/mcp against OSV.dev.

Inventory

Tools (17)

Click any tool to inspect its schema.

~658 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.toreva/kit safe to use?: io.github.toreva/kit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.toreva/kit?: io.github.toreva/kit supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.toreva/kit do?: io.github.toreva/kit provides 17 tools: toreva_perps_long, toreva_perps_short, toreva_perps_close, toreva_perps_add_margin, toreva_perps_remove_margin and 12 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.toreva/kit?: io.github.toreva/kit is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.toreva/kit actively maintained?: io.github.toreva/kit is actively maintained — last commit was 3 days ago.

Similar servers

Others in finance

View all →

Alpha Vantage Mcp95

Real-time financial market data: stocks, forex, crypto, commodities, and economic indicators

158 3

Investor Agent93

A Model Context Protocol server for building an investor agent

329 7

io.github.xkumakichi/xaip-mcp-server92

AI agents get on-chain identity, credentials, reputation, escrow, and persistent memory on XRPL.

io.github.PayRam/payram-helper-mcp91

Remote MCP server to integrate and validate self-hosted PayRam deployments.

155 17

MCP Security Weekly

Get CVE alerts and security updates for io.github.toreva/kit and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-toreva-kit": {
      "args": [
        "-y",
        "@toreva/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-toreva-kit)](https://mcppedia.org/s/io-github-toreva-kit)

Read me

What io.github.toreva/kit does

Non-custodial execution primitives for Solana. Best-execution routing across Jupiter Perps, Pacifica, Drift, and Flash Trade. 1 bps to open. Everything else is free.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@toreva/mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

toreva kit

Non-custodial execution primitives for Solana.
Best-execution routing across Jupiter Perps, Pacifica, Drift, and Flash Trade.
1 bps to open. Everything else is free.

Your agent decides. Toreva executes. Every action receipted.

Agentic perps setup

Use toreva_establish before perps execution when an agent needs delegated authority for a human wallet. The standard perps pattern is:

human wallet
  -> Toreva/Swig master authority
  -> venue-specific child capability
  -> Pacifica API agent wallet when Pacifica is selected

The human wallet remains the root owner. The Swig authority is the policy and capital-management control layer. Pacifica uses a separate API agent wallet because Pacifica REST orders require an on-curve Ed25519 signer. Toreva can create, bind, fund, route, monitor, and revoke that child capability through Toreva surfaces; the user does not need to open Pacifica.

For best execution, omit venue on toreva_perps_long or toreva_perps_short. Toreva will compare enabled venues and route by estimated all-in cost. Set venue only when you intentionally want a specific venue. Perps tools use the Gateway MCP field contract: walletAddress, token, sizeUsd, leverage, collateralToken, and collateralAmount.

The public integration packet lives in this repo:

Install

The fastest path — wires Toreva into your MCP-aware client (Claude Desktop, OpenClaw, Cursor) and authenticates you in two commands:

npx toreva init --client=claude-desktop   # or openclaw | cursor
npx toreva login

toreva init writes the Toreva MCP server stanza into your client's config file. toreva login runs the gateway's device-code flow and stores the resulting token at ~/.config/toreva/config.json (chmod 600).

Restart your MCP client and verify:

npx toreva doctor

You should see three [ OK ] lines: config_present, auth_token, mcp_call.

Per-client snippets live in examples/ — one folder per supported client (claude-desktop, openclaw, cursor).

Direct package installs (advanced)

npm install @toreva/sdk        # TypeScript client library
npm install -g @toreva/cli     # global `toreva` binary

MCP server (stdio, run-it-yourself)

TOREVA_AUTH_TOKEN=your_token npx @toreva/mcp

MCP server (remote, no install)

https://mcp.toreva.com

Authentication

toreva login is the standard path. For CI / power users, set TOREVA_AUTH_TOKEN directly to skip the device-code flow:

export TOREVA_AUTH_TOKEN=your_token
npx toreva login   # writes the token to ~/.config/toreva/config.json

Use toreva login for the standard device-code flow, or request an integration token from your Toreva contact. The Kit repository is the public source of truth for agent, SDK, CLI, Skills, and MCP integration details.

Environment variables

Var	Default	Purpose
`TOREVA_MCP_URL`	`https://mcp.toreva.com`	Gateway URL
`TOREVA_AUTH_TOKEN`	—	Skip device-code flow, persist this token
`TOREVA_CONFIG_DIR`	`~/.config/toreva`	Override on-disk config dir

Perps tools

Tool	Fee	What it does
`toreva_perps_long`	1 bps	Open long — routes to better fill
`toreva_perps_short`	1 bps	Open short — routes to better fill
`toreva_perps_close`	Free	Close position at venue
`toreva_perps_add_margin`	Free	Add margin
`toreva_perps_remove_margin`

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @toreva/mcp against OSV.dev.

Inventory

Tools (17)

Click any tool to inspect its schema.

~658 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.toreva/kit safe to use?: io.github.toreva/kit has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.toreva/kit?: io.github.toreva/kit supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.toreva/kit do?: io.github.toreva/kit provides 17 tools: toreva_perps_long, toreva_perps_short, toreva_perps_close, toreva_perps_add_margin, toreva_perps_remove_margin and 12 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.toreva/kit?: io.github.toreva/kit is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.toreva/kit actively maintained?: io.github.toreva/kit is actively maintained — last commit was 3 days ago.