Limitless MCP Server

Limitless MCP Server

Prediction Market Trading on Base via Limitless Exchange Build AI-powered trading agents for Limitless prediction markets using the Model Context Protocol (MCP)

---

⚠️ Notice: Quantish is winding down. The Quantish platform (quantish.live) is shutting down. This MCP server is self-hosted and will continue to work independently, but the Quantish team will no longer be maintaining or updating this project. If you're building in the prediction market space and need real-time data infrastructure, check out polynode.dev.

---

Features

• Secure Wallet Management
• Generate new Base wallets with encrypted private key storage
• Bring Your Own Wallet (BYOW) - Import existing wallets with client-side encryption
• Private keys are encrypted with AES-256-GCM before storage

• Full Limitless Market Access
• Real-time market discovery via Limitless Exchange API
• Access to all prediction markets: Politics, Sports, Crypto, and more
• Live orderbook data and price history
• Semantic search for market discovery

• Trading Operations
• Place limit orders with EIP-712 signed authentication
• Cancel orders (single, batch, or all)
• Check and set token approvals (USDC, CTF)
• Position tracking with P&L calculations

• AI Agent Integration
• Full MCP (Model Context Protocol) support
• Works with Claude, Cursor IDE, and other MCP-compatible AI tools
• 34 pre-built trading tools organized by category

• Enterprise Security
• AES-256-GCM encryption for all sensitive data
• API key authentication with SHA-256 hashing
• Platform partner system for B2B integrations
• Rate limiting and request logging

---

Quick Start

1. Configure MCP (Cursor IDE)

Add to ~/.cursor/mcp.json:

{

"mcpServers": { "limitless": { "url": "https://limitless-mcp-server-production.up.railway.app/mcp", "headers": { "x-api-key": "YOUR_API_KEY" } } } }

2. Get Your API Key

Via MCP tool:

{

"tool": "limitless_signup", "args": { "externalId": "your-unique-id" } }

3. Start Trading

"Search for bitcoin prediction markets"

"Buy 10 YES shares at $0.60 on the BTC market" "Show my current positions" "Cancel my open orders"

---

Available MCP Tools (34 Total)

Note: All tool names are prefixed with limitless_ to avoid collisions with other MCPs.

Authentication & Setup (6 tools)

Wallet Information (4 tools)

Market Discovery (6 tools)

Trading (8 tools)

Positions (4 tools)

Transfers (3 tools)

API Key Management (3 tools)

---

Self-Hosting

Prerequisites

• Node.js 20+
• PostgreSQL 15+
• Base RPC access (mainnet.base.org)

Installation

# Clone the repository

git clone https://github.com/joinQuantish/limitless-mcp.git cd limitless-mcp

Install dependencies

npm install

Copy environment template

cp .env.example .env

Edit .env with your values (see Environment Variables below)

Generate Prisma client

npx prisma generate

Push database schema

npx prisma db push

Build and start

npm run build npm start

Environment Variables

Create a .env file with:

# Database (PostgreSQL)

DATABASE_URL="postgresql://user:password@host:5432/limitless_mcp?schema=public"

Encryption (generate with: openssl rand -hex 32)

ENCRYPTION_KEY="your-64-character-hex-encryption-key-here"

Blockchain - Base L2

BASE_RPC_URL="https://mainnet.base.org"

Limitless Exchange API

LIMITLESS_API_URL="https://api.limitless.exchange"

Server

PORT=3003 NODE_ENV=production

Admin API Key (generate with: openssl rand -hex 32)

ADMIN_API_KEY="your-admin-api-key-here"

Optional: Bot signing secret for returning user verification

BOT_SIGNING_SECRET=""

Docker Deployment

# Build the image

docker build -t limitless-mcp .

Run the container

docker run -d \ -p 3003:3003 \ -e DATABASE_URL="postgresql://..." \ -e ENCRYPTION_KEY="..." \ -e ADMIN_API_KEY="..." \ -e BASE_RPC_URL="https://mainnet.base.org" \ -e LIMITLESS_API_URL="https://api.limitless.exchange" \ -e NODE_ENV=production \ limitless-mcp

Railway Deployment

# Install Railway CLI

npm install -g @railway/cli

Login and initialize

railway login railway init

Add PostgreSQL via Railway dashboard

Set environment variables

railway variables set DATABASE_URL="postgresql://..." railway variables set ENCRYPTION_KEY="$(openssl rand -hex 32)" railway variables set ADMIN_API_KEY="$(openssl rand -hex 32)" railway variables set BASE_RPC_URL="https://mainnet.base.org" railway variables set LIMITLESS_API_URL="https://api.limitless.exchange" railway variables set NODE_ENV="production"

Deploy

railway up

---

API Reference

Health Check

curl https://your-server/health

Response:

{

"status": "healthy", "timestamp": "2026-01-17T12:00:00.000Z", "version": "1.0.0", "service": "limitless-mcp", "database": "connected", "environment": "production" }

MCP Endpoint

# List available tools

curl -X POST https://your-server/mcp \ -H "Content-Type: application/json" \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'

Call a tool (authenticated)

curl -X POST https://your-server/mcp \ -H "Content-Type: application/json" \ -H "x-api-key: pk_limitless_..." \ -d '{ "jsonrpc":"2.0", "id":1, "method":"tools/call", "params":{ "name":"limitless_get_balances", "arguments":{} } }'

Market Data API

# Get active markets

curl "https://your-server/api/markets?limit=10&page=1"

Search markets

curl "https://your-server/api/markets/search?query=bitcoin&limit=5"

Get market details

curl "https://your-server/api/markets/your-market-slug"

Get orderbook

curl "https://your-server/api/markets/your-market-slug/orderbook"

---

Security Architecture

Click to expand security details

Encryption at Rest

All sensitive data is encrypted using AES-256-GCM:

• Private keys encrypted before database storage
• Session tokens encrypted with unique IVs
• API secrets encrypted (only SHA-256 hash stored for lookup)

API Key Security

API Key Format: pk_limitless_<32 base64url chars>

API Secret Format: sk_limitless_<43 base64url chars>

• Keys are hashed with SHA-256 before storage (never stored in plaintext)
• Secrets are encrypted with AES-256-GCM
• Timing-safe comparison using crypto.timingSafeEqual

Platform Isolation (B2B)

For platform partners:

• Platform admin keys: plt_limitless_* / psk_limitless_*
• All queries scoped by platformId at database level
• Activity logging for audit trail
• User limits enforced per platform

Rate Limiting

• 60 requests/minute per API key (general)
• 30 requests/minute for user listing (platform admin)
• 5 requests/hour for platform registration

---

Secure Wallet Import (BYOW)

Import your existing MetaMask/hardware wallet securely:

Step 1: Export Your Private Key

In MetaMask: Settings > Security > Export Private Key

Step 2: Encrypt Locally

const crypto = require('crypto');

const privateKey = 'YOUR_PRIVATE_KEY_WITHOUT_0x_PREFIX'; const password = 'YourSecurePassword123!'; // min 12 chars

const salt = crypto.randomBytes(32); const iv = crypto.randomBytes(16); const derivedKey = crypto.scryptSync(password, salt, 32, { N: 16384, r: 8, p: 1 });

const cipher = crypto.createCipheriv('aes-256-gcm', derivedKey, iv); let encrypted = cipher.update(privateKey, 'utf8', 'hex'); encrypted += cipher.final('hex'); const authTag = cipher.getAuthTag().toString('hex');

console.log({ encryptedKey: ${encrypted}:${authTag}, salt: salt.toString('hex'), iv: iv.toString('hex'), publicKey: 'YOUR_WALLET_ADDRESS' });

Step 3: Import to SDK

{

"tool": "limitless_import_wallet", "args": { "encryptedKey": "...", "salt": "...", "iv": "...", "publicKey": "0x...", "password": "YourSecurePassword123!" } }

Security Note: Your raw private key NEVER leaves your machine. Only the encrypted bundle is sent to our servers, and we cannot decrypt it without your password.

---

Related Resources

---

License

PolyForm Noncommercial 1.0.0 © Quantish

---

Support

• Issues: GitHub Issues
• Email: hello@quantish.live

---

Built with precision by Quantish