Philidor DeFi Vault Risk Analytics

Philidor MCP Server

DeFi vault risk analytics for AI agents

Search 700+ DeFi vaults across Morpho, Aave, Yearn, Beefy, and Spark. Compare risk scores, analyze protocols, run due diligence — all through natural language.

No API key required. No installation needed.

Quick Start • Cursor Plugin • Tools • Example Prompts • Risk Framework • Agent Skill

---

Key material

Philidor never accepts keys. Never send private keys, session keys, seeds, or mnemonics to any Philidor API or MCP input. Inputs carrying key material receive a structured refusal before tool, prompt, or resource handlers run. The API and MCP return data only; they do not build, sign, or broadcast transactions. Keys and execution stay in the client-side SDK.

A 32-byte pool identifier and a private key can have the same shape. Documented identifier fields still accept exact identifiers; never paste a key into them.

Why Philidor?

Most DeFi data tools give you raw numbers. Philidor gives your AI agent institutional-grade risk intelligence.

---

Quick Start

Remote Server (Recommended)

Connect directly to the hosted server — zero installation, always up to date:

https://mcp.philidor.io/api/mcp

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{

"mcpServers": { "philidor": { "url": "https://mcp.philidor.io/api/mcp" } } }

Claude Code

claude mcp add philidor --transport http https://mcp.philidor.io/api/mcp

Cursor

Add to .cursor/mcp.json:

{

"mcpServers": { "philidor": { "url": "https://mcp.philidor.io/api/mcp" } } }

Windsurf

Add to your MCP settings:

{

"mcpServers": { "philidor": { "serverUrl": "https://mcp.philidor.io/api/mcp" } } }

Docker (stdio)

docker run -i --rm ghcr.io/philidor-labs/philidor-mcp

Local (stdio)

git clone https://github.com/Philidor-Labs/philidor-mcp.git

cd philidor-mcp npm install npm start

---

Tools

15 standalone tools for vault discovery, risk analysis, lending markets, loop venue checks, policy attestations, and protocol research.

check_policy

Check positions against your own limits and constraints. Returns the API's compliance attestation: compliance, violations, policy_hash, findings, and snapshotId. With issue: true, an issued attestation also includes attestation_id, signerAddress, and verification_url (GET /v1/graph/attestation/{id}/verify). No risk figures are recalculated. Missing, malformed, or partial responses produce an error. The legacy verdict appears only as deprecated_verdict; use compliance.

For local stdio/Docker, set PHILIDOR_API_KEY in the server process environment to your Philidor API credential. Keep it out of tool arguments, chat, and source control. This is not a wallet key. Without an eligible key the tool returns a structured refusal with the API's required plan, x402 price (when available), and upgrade link. It does not pay automatically. The hosted plugin uses its own documented client authentication.

No Philidor policy is preselected. This reports conformity with your policy; it does not recommend a vault. Philidor does not prepare transactions and never accepts wallet keys. Execution stays in the client-side SDK.

search_vaults

Search and filter DeFi vaults by chain, protocol, asset, risk tier, TVL, and more.

get_vault

Get detailed information about a specific vault including risk breakdown, recent events, and historical snapshots. Lookup by id or by network + address.

get_vault_risk_breakdown

Detailed breakdown of a vault's four risk vectors: Asset Composition, Platform and Strategy, Control and Governance, and History.

list_markets

List lending markets (Aave/Spark pools, Aave V4 spokes, Compound Comet, Morpho Blue pairs, Kamino K-Lend). Aave V4 spokes that share a liquidity hub are grouped under composed hub parents (e.g. aave-v4-1-hub-core).

get_market

One market with every reserve (supplied, supply APR, borrowed, borrow APR, utilization, tier). Accepts spoke ids and composed hub ids.

get_market_events

Published risk events for one lending market. Hub ids union spoke feeds.

check_loop_venue

Underwrite a collateral/debt loop on one market: score, tier, utilization, borrow APR, deposit status, and recent incidents for both legs. Does not compute health factor and does not prepare transactions.

compare_vaults

Side-by-side comparison of 2–3 vaults on TVL, APR, risk score, risk tier, and audit status.

find_safest_vaults

Find the top 10 audited vaults sorted by Philidor risk score (higher = lower assessed risk; not a safety guarantee).

get_protocol_info

Protocol details including TVL, vault count, versions, auditors, bug bounties, and security incidents.

get_curator_info

Curator details including managed vaults, TVL, chain distribution, and performance metrics.

get_market_overview

High-level DeFi vault market statistics: total TVL, vault count, risk distribution, and TVL by protocol. No parameters required.

explain_risk_score

Explain what a specific risk score means, including the tier, calculation method, and thresholds.

list_vaults_with_incidents

List all vaults that had a recent critical incident (last 365 days). Sorted by TVL descending, then by recency. No parameters required.

---

Resources

Prompts

---

Example Prompts

Once connected, try asking your AI assistant:

Discovery

"Find the safest USDC vaults with at least $10M TVL"

"What Morpho vaults are available on Base?"

"Show me the DeFi market overview"

Analysis

"Run due diligence on the Steakhouse USDC vault on Ethereum"

"Compare the top 3 USDC vaults by risk score"

"What's the risk breakdown for this vault: ethereum/0x..."

Portfolio

"Assess my portfolio: 50% in Morpho Steakhouse USDC, 30% in Aave USDC, 20% in Yearn USDC"

"Which protocols have had security incidents?"

"What does a risk score of 8.5 mean?"

---

Risk Scoring

Philidor uses the Vector Risk Framework v4.1 to decompose vault risk into three measurable vectors:

Final Score = 40