Polymarket Agent MCP

Polymarket Agent MCP Server

Trade, analyze, and automate Polymarket prediction markets through AI.

The most comprehensive MCP server for Polymarket — 48 tools spanning direct trading, market discovery, smart money tracking, copy trading, backtesting, risk management, and portfolio optimization. Works with Claude Code, Cursor, or any MCP-compatible client.

Tool Overview

Quick Start

npm Install

npm install -g polymarket-agent-mcp

Docker

docker compose up

Claude Code Config

Add to ~/.claude/settings.json:

{

"mcpServers": { "polymarket": { "command": "npx", "args": ["polymarket-agent-mcp"] } } }

Usage Examples

Just talk naturally to your AI assistant:

"What are the trending markets today?"

"Search for bitcoin prediction markets"

"Buy $5 on this market"

"Score this trader — should I copy them?"

"Backtest this trader with $10 per trade"

"Show smart money flow — what are the top traders buying?"

"Set stop-loss at 0.30 on my BTC position"

"Optimize my portfolio with a balanced strategy"

"Scan for arbitrage opportunities"

"Compare these two markets side by side"

All 48 Tools

Discovery

Analysis

Trading

Copy Trading

Portfolio & Risk

Configuration

Architecture

Claude Code / Cursor / AI Client

| | MCP Protocol (stdio) v +------------------+ | MCP Server | 48 tools registered | (index.ts) | +--------+---------+ | +----+----+ | | Tools Services | | v v +-------+ +------------+ | Zod | | Backtester | | Input | | Scorer | | Valid. | | SmartFlow | +-------+ | Filter | | Tracker | | Executor | +-----+------+ | +-------+-------+ | | | Data Gamma CLOB API API API

HTTP Transport & Deployment

The server supports two transport modes:

Deployment model — read this first

This server is designed for single-tenant use. Each client runs its own instance with its own SQLite database (copytrader.db), watchlist, daily budget, trade history, and monitor loop. The stdio mode is the recommended path for most users — npx polymarket-agent-mcp or the Claude Code config above gives you a fully isolated, local-only instance.

⚠️ Do not expose an HTTP instance publicly. The server has no per-user isolation: watchlist, positions, budget, and the background monitor loop are shared across every client that connects. A public HTTP deployment is effectively a shared workspace, not a multi-tenant SaaS. If you enable live trading, a public endpoint can drain your Polymarket wallet from any caller. Always configure the HTTP bearer-token env var (see PERMISSIONS.md) and keep the endpoint behind a firewall, VPN, or auth proxy.

Starting in HTTP mode

# Flag

node dist/index.js --http

Or set PORT (defaults to 3000)

PORT=8080 node dist/index.js

Endpoints

Authentication

The HTTP transport accepts an optional bearer token gated by an environment variable — the exact name is documented in PERMISSIONS.md. When set, clients must send Authorization: Bearer on requests to /mcp; when unset the endpoint is open (suitable only for local or private networks).

Docker deployment

A prebuilt multi-arch image is published to GHCR on every release:

docker pull ghcr.io/demwick/polymarket-agent-mcp:1.7.0

Or build it yourself from the included Dockerfile:

docker build -t polymarket-mcp .

docker run -p 3000:3000 -v mcp-data:/app/data \ -e DAILY_BUDGET=50 \ polymarket-mcp

To require bearer-token auth on /mcp, also pass the HTTP bearer env var

listed in PERMISSIONS.md (e.g. -e =my-secret-key).

DB_PATH (default /app/data/copytrader.db) controls where SQLite data is persisted — mount a volume to keep it across restarts.

Configuration

All secrets stay in memory for the lifetime of the process — they are never written to the database, logs, or disk, and are only transmitted to their designated Polymarket API endpoint over HTTPS. The complete authoritative env var list, with per-variable sensitivity and scope, lives in [PERMISSIONS.md](PERMISSIONS.md) and [SECURITY.md](SECURITY.md).

Safety Features

• Configurable order size limits
• Total exposure caps
• Per-market position limits
• Minimum liquidity requirements
• Maximum spread tolerance
• Stop-loss / take-profit automation
• Preview mode (default) — no real money

Permissions & Capabilities

This package has a transparent, minimal footprint. Full disclosure: [PERMISSIONS.md](PERMISSIONS.md) — machine-readable version in .well-known/mcp/server-card.json.

| Environment | API credentials (live mode only,