Openmm MCP

What is Openmm MCP?

Openmm MCP is a Model Context Protocol server that exposes market data, account, trading, and strategy tools from the OpenMM trading SDK to AI agents via any MCP client. It can be used locally with an encrypted vault or as a hosted, pay-per-use service.

How to use Openmm MCP?

Install globally via npm install -g @qbtlabs/openmm-mcp, run openmm-mcp --setup to configure your MCP client, then openmm-init to create an encrypted vault, and finally openmm serve to start the server. Alternatively, connect to the hosted server at mcp.openmm.io and pay per tool call with USDC on Base.

Key features of Openmm MCP

• Encrypted vault (AES-256-GCM + PBKDF2) stores credentials
• No API keys or private keys in config files or client memory
• Unix socket isolation (/tmp/openmm.sock mode 0600)
• Policy engine for spending limits on private key access
• x402 USDC payments for hosted usage on Base L2
• 15 tools: market data, account, trading, Cardano DEX, and strategies
• Compatible with Claude Desktop, Claude Code, Cursor, Windsurf

Use cases of Openmm MCP

• AI agent retrieves real-time BTC/USDT ticker from MEXC
• Place a limit order for ETH on Kraken via natural language
• Start a grid trading strategy for INDY/USDT with defined parameters
• Check aggregated Cardano token prices from DEX pools
• Manage account balances and open orders across multiple exchanges

FAQ from Openmm MCP

Which exchanges are supported?

mexc, gateio, bitget, kraken, binance, coinbase, and okx.

How does the hosted payment system work?

The server returns a 402 Payment Required with a price, the local openmm serve signs an EIP-3009 authorization (gasless), and the server submits payment on-chain in USDC on Base.

Where are credentials stored?

Credentials are encrypted in ~/.openmm/vault.enc using AES-256-GCM with PBKDF2. The vault password is entered interactively and never stored in any config file or environment variable.

What are the runtime requirements?

Node.js version 20 or later is required for local usage.

How is security enforced?

The vault is encrypted, the socket has mode 0600, keys are used inline via signAndWipe() and never enter the MCP client process, and spending limits are checked before the private key is accessed.