Philidor DeFi Vault Risk Analytics

Official10 toolsLive

by Philidor-Labs · TypeScript

Search 700+ DeFi vaults, compare risk scores, analyze protocols. No API key needed.

io.philidor/defi-vaults MCP Server

This MCP server searches 700+ DeFi vaults to compare risk scores and analyze protocols. It operates as an MCP tool provider and is described as requiring no API key. Hosted at mcp.philidor.io, it is presented as an MIT-licensed TypeScript-based server compatible with Model Context Protocol (MCP).

🛠️ Key Features

Search 700+ DeFi vaults
Compare risk scores
Analyze protocols
No API key needed
Tooling count: 10

🚀 Use Cases

Evaluate and compare DeFi vault risk profiles
Summarize protocol-level information for vault selection
Provide data to AI agents via MCP

⚡ Developer Benefits

MCP-compatible server (Model Context Protocol)
Hosted deployment at mcp.philidor.io
TypeScript implementation

⚠️ Limitations

Catalog data provided here does not specify individual tool names or parameters (only total toolCount: 10).

Topics

aaveai-toolsclaudecryptodefiethereummcpmcp-servermodel-context-protocolmorphoriskvaultsyield

Captured live from the server via tools/list.

search_vaults

Search and filter DeFi vaults by chain, protocol, asset, risk tier, TVL, and more. Returns a paginated list with risk scores and APR.

Parameters10

query	string	optional	Search by vault name, symbol, asset, protocol, or curator
chain	string	optional	Filter by chain name (e.g. Ethereum, Base, Arbitrum)
protocol	string	optional	Filter by protocol ID (e.g. morpho, aave, aave-v4, yearn, beefy, spark, compound, nest)
asset	string	optional	Filter by asset symbol (e.g. USDC, WETH)
riskTier	string	optional	Filter by risk tier: Prime, Core, or Edge
minTvl	number	optional	Minimum TVL in USD
depositable	boolean	optional	Filter by current ability to accept new deposits. When true, vaults whose depositability is not yet indexed are still included; when false, only vaults whose maxDeposit on-chain is zero (caps reached, paused, or supply queue saturated) are returned.
sortBy	string	optional	Sort field: tvl_usd, apr_net, name, last_synced_at
sortOrder	string	optional	Sort order: asc or desc
limit	number	optional	Max results (default 10, max 50)

Raw schema

{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "Search by vault name, symbol, asset, protocol, or curator"
    },
    "chain": {
      "type": "string",
      "description": "Filter by chain name (e.g. Ethereum, Base, Arbitrum)"
    },
    "protocol": {
      "type": "string",
      "description": "Filter by protocol ID (e.g. morpho, aave, aave-v4, yearn, beefy, spark, compound, nest)"
    },
    "asset": {
      "type": "string",
      "description": "Filter by asset symbol (e.g. USDC, WETH)"
    },
    "riskTier": {
      "type": "string",
      "description": "Filter by risk tier: Prime, Core, or Edge"
    },
    "minTvl": {
      "type": "number",
      "description": "Minimum TVL in USD"
    },
    "depositable": {
      "type": "boolean",
      "description": "Filter by current ability to accept new deposits. When true, vaults whose depositability is not yet indexed are still included; when false, only vaults whose maxDeposit on-chain is zero (caps reached, paused, or supply queue saturated) are returned."
    },
    "sortBy": {
      "type": "string",
      "description": "Sort field: tvl_usd, apr_net, name, last_synced_at"
    },
    "sortOrder": {
      "type": "string",
      "description": "Sort order: asc or desc"
    },
    "limit": {
      "type": "number",
      "description": "Max results (default 10, max 50)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

get_vault

Get detailed information about a specific DeFi vault including risk breakdown, recent events, and historical snapshots. Lookup by ID or by network + address.

Parameters3

id	string	optional	Vault ID (e.g. morpho-1-0x...)
network	string	optional	Network slug (e.g. ethereum, base, arbitrum)
address	string	optional	Vault contract address (0x...)

Raw schema

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Vault ID (e.g. morpho-1-0x...)"
    },
    "network": {
      "type": "string",
      "description": "Network slug (e.g. ethereum, base, arbitrum)"
    },
    "address": {
      "type": "string",
      "description": "Vault contract address (0x...)"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

get_vault_risk_breakdown

Get a detailed breakdown of a vault's risk vectors: Asset Composition, Platform and Strategy, Control and Governance, and History scores with sub-metrics.

Parameters2

network	string	required	Network slug (e.g. ethereum, base, arbitrum)
address	string	required	Vault contract address (0x...)

Raw schema

{
  "type": "object",
  "properties": {
    "network": {
      "type": "string",
      "description": "Network slug (e.g. ethereum, base, arbitrum)"
    },
    "address": {
      "type": "string",
      "description": "Vault contract address (0x...)"
    }
  },
  "required": [
    "network",
    "address"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

compare_vaults

Compare 2-3 DeFi vaults side-by-side on TVL, APR, risk score, risk tier, audited status, and more.

Parameters1

vaults

array

required

Array of 2-3 vaults to compare

Raw schema

{
  "type": "object",
  "properties": {
    "vaults": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "network": {
            "type": "string",
            "description": "Network slug (e.g. ethereum, base)"
          },
          "address": {
            "type": "string",
            "description": "Vault contract address (0x...)"
          }
        },
        "required": [
          "network",
          "address"
        ],
        "additionalProperties": false
      },
      "minItems": 2,
      "maxItems": 3,
      "description": "Array of 2-3 vaults to compare"
    }
  },
  "required": [
    "vaults"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

find_safest_vaults

Find the highest risk-scored DeFi vaults, optionally filtered by asset, chain, or minimum TVL. Returns the top 10 audited vaults sorted by Philidor risk score (higher = lower assessed risk; scores are not a safety guarantee).

Parameters3

asset	string	optional	Filter by asset symbol (e.g. USDC, WETH)
chain	string	optional	Filter by chain name (e.g. Ethereum, Base)
minTvl	number	optional	Minimum TVL in USD

Raw schema

{
  "type": "object",
  "properties": {
    "asset": {
      "type": "string",
      "description": "Filter by asset symbol (e.g. USDC, WETH)"
    },
    "chain": {
      "type": "string",
      "description": "Filter by chain name (e.g. Ethereum, Base)"
    },
    "minTvl": {
      "type": "number",
      "description": "Minimum TVL in USD"
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

get_protocol_info

Get detailed information about a DeFi protocol including TVL, vault count, versions, auditors, and security incidents.

Parameters1

protocolId

string

required

Protocol ID (e.g. morpho, aave, aave-v4, yearn, beefy, spark, compound, nest)

Raw schema

{
  "type": "object",
  "properties": {
    "protocolId": {
      "type": "string",
      "description": "Protocol ID (e.g. morpho, aave, aave-v4, yearn, beefy, spark, compound, nest)"
    }
  },
  "required": [
    "protocolId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

get_curator_info

Get detailed information about a vault curator including their managed vaults, TVL, chain distribution, and performance.

Parameters1

curatorId

string

required

Curator ID

Raw schema

{
  "type": "object",
  "properties": {
    "curatorId": {
      "type": "string",
      "description": "Curator ID"
    }
  },
  "required": [
    "curatorId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

get_market_overview

Get a high-level overview of the DeFi vault market: total TVL, vault count, risk distribution, and TVL by protocol.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "$schema": "http://json-schema.org/draft-07/schema#"
}

explain_risk_score

Explain what a Philidor risk score means, including the tier (Prime/Core/Edge), how it is calculated, and what the thresholds are.

Parameters1

score

number

required

Risk score (0-10) to explain

Raw schema

{
  "type": "object",
  "properties": {
    "score": {
      "type": "number",
      "minimum": 0,
      "maximum": 10,
      "description": "Risk score (0-10) to explain"
    }
  },
  "required": [
    "score"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

list_vaults_with_incidents

List all vaults that had a recent critical incident (last 365 days). Critical = severity Critical or incident_severity major. Results are sorted by TVL descending, then by time since event ascending (most recent first).

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "$schema": "http://json-schema.org/draft-07/schema#"
}

README.md18 KBView on GitHub

Philidor MCP Server

DeFi vault risk analytics for AI agents

Search 700+ DeFi vaults across Morpho, Aave, Yearn, Beefy, and Spark. Compare risk scores, analyze protocols, run due diligence — all through natural language.

No API key required. No installation needed.

Quick Start • Cursor Plugin • Tools • Example Prompts • Risk Framework • Agent Skill

Why Philidor?

Most DeFi data tools give you raw numbers. Philidor gives your AI agent institutional-grade risk intelligence.

Feature	Philidor	DefiLlama MCP	Generic DeFi APIs
Vault risk scores (0–10)	✅	❌	❌
Risk vector decomposition	✅	❌	❌
Vault comparison	✅	❌	❌
Curator intelligence	✅	❌	❌
Protocol security history	✅	❌	Partial
Due diligence prompts	✅	❌	❌
Portfolio risk assessment	✅	❌	❌
No API key needed	✅	✅	Varies
Hosted (zero install)	✅	❌	❌

Quick Start

Remote Server (Recommended)

Connect directly to the hosted server — zero installation, always up to date:

code

https://mcp.philidor.io/api/mcp

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

json

{
  "mcpServers": {
    "philidor": {
      "url": "https://mcp.philidor.io/api/mcp"
    }
  }
}

Claude Code

bash

claude mcp add philidor --transport http https://mcp.philidor.io/api/mcp

Cursor

Add to .cursor/mcp.json:

json

{
  "mcpServers": {
    "philidor": {
      "url": "https://mcp.philidor.io/api/mcp"
    }
  }
}

Windsurf

Add to your MCP settings:

json

{
  "mcpServers": {
    "philidor": {
      "serverUrl": "https://mcp.philidor.io/api/mcp"
    }
  }
}

Docker (stdio)

bash

docker run -i --rm ghcr.io/philidor-labs/philidor-mcp

Local (stdio)

bash

git clone https://github.com/Philidor-Labs/philidor-mcp.git
cd philidor-mcp
npm install
npm start

Tools

14 tools for vault discovery, risk analysis, lending markets, loop venue checks, and protocol research.

`search_vaults`

Search and filter DeFi vaults by chain, protocol, asset, risk tier, TVL, and more.

Parameter	Type	Description
`query`	string	Search by vault name, symbol, asset, protocol, or curator
`chain`	string	Filter by chain name or slug (Ethereum, Base, Solana, ...)
`protocol`	string	Protocol ID: `aave`, `morpho`, `spark`, `compound`, `yearn`, `beefy`, `uniswap`, `nest`, `maple`, `kamino`
`protocolVersion`	string	Generation filter (`v3`, `v4`, ...); use with `protocol=aave` for Aave V4
`asset`	string	Filter by asset symbol (USDC, WETH, ...)
`riskTier`	string	Filter by risk tier: Prime, Core, or Edge
`minTvl`	number	Minimum TVL in USD
`depositable`	boolean	Filter by current deposit capacity
`sortBy`	string	Sort field: tvl_usd, apr_net, name, last_synced_at
`sortOrder`	string	Sort order: asc or desc
`limit`	number	Max results (default 10, max 50)

`get_vault`

Get detailed information about a specific vault including risk breakdown, recent events, and historical snapshots. Lookup by id or by network + address.

Parameter	Type	Description
`id`	string	Vault ID (e.g. `morpho-1-0x...`)
`network`	string	Network slug (ethereum, base, arbitrum, solana)
`address`	string	Vault address (`0x` hex or Solana base58)

`get_vault_risk_breakdown`

Detailed breakdown of a vault's four risk vectors: Asset Composition, Platform and Strategy, Control and Governance, and History.

Parameter	Type	Description
`network`	string	Network slug
`address`	string	Vault address

`list_markets`

List lending markets (Aave/Spark pools, Aave V4 spokes, Compound Comet, Morpho Blue pairs, Kamino K-Lend). Aave V4 spokes that share a liquidity hub are grouped under composed hub parents (e.g. aave-v4-1-hub-core).

Parameter	Type	Description
`protocol`	string	`aave`, `spark`, `compound`, `morpho`, `kamino`
`version`	string	`v3`, `v4`, or `klend`
`chain`	number/string	Chain id or slug
`limit`	number	1–100 (default 20)
`sortBy`	string	`total_supplied_usd`, `total_borrowed_usd`, `reserve_count`, `name`

`get_market`

One market with every reserve (supplied, supply APR, borrowed, borrow APR, utilization, tier). Accepts spoke ids and composed hub ids.

Parameter	Type	Description
`marketId`	string	Market id from `list_markets`

`get_market_events`

Published risk events for one lending market. Hub ids union spoke feeds.

Parameter	Type	Description
`marketId`	string	Market id from `list_markets`
`limit`	number	1–100 (default 20)

`check_loop_venue`

Underwrite a collateral/debt loop on one market: score, tier, utilization, borrow APR, deposit status, and recent incidents for both legs. Does not compute health factor and does not prepare transactions.

Parameter	Type	Description
`marketId`	string	Market id from `list_markets`
`collateral`	string	Collateral asset symbol
`debt`	string	Debt asset symbol

`compare_vaults`

Side-by-side comparison of 2–3 vaults on TVL, APR, risk score, risk tier, and audit status.

Parameter	Type	Description
`vaults`	array	Array of 2–3 objects with `network` and `address`

`find_safest_vaults`

Find the top 10 audited vaults sorted by Philidor risk score (higher = lower assessed risk; not a safety guarantee).

Parameter	Type	Description
`asset`	string	Filter by asset symbol
`chain`	string	Filter by chain name
`minTvl`	number	Minimum TVL in USD

`get_protocol_info`

Protocol details including TVL, vault count, versions, auditors, bug bounties, and security incidents.

Parameter	Type	Description
`protocolId`	string	Protocol ID (`aave`, `morpho`, `spark`, `compound`, `yearn`, `beefy`, `uniswap`, `nest`, `maple`, `kamino`)

`get_curator_info`

Curator details including managed vaults, TVL, chain distribution, and performance metrics.

Parameter	Type	Description
`curatorId`	string	Curator ID

`get_market_overview`

High-level DeFi vault market statistics: total TVL, vault count, risk distribution, and TVL by protocol. No parameters required.

`explain_risk_score`

Explain what a specific risk score means, including the tier, calculation method, and thresholds.

Parameter	Type	Description
`score`	number	Risk score (0–10)

`list_vaults_with_incidents`

List all vaults that had a recent critical incident (last 365 days). Sorted by TVL descending, then by recency. No parameters required.

Resources

URI	Description
`philidor://methodology`	The Vector Risk Framework v4.1 documentation
`philidor://supported-chains`	Supported blockchain networks with vault counts
`philidor://supported-protocols`	Supported DeFi protocols with TVL data

Prompts

Prompt	Description
`vault_due_diligence`	Comprehensive due diligence report for a vault
`portfolio_risk_assessment`	Portfolio-level risk analysis across positions
`defi_yield_comparison`	Yield comparison with risk-adjusted analysis
`review_loop_venue`	Loop venue review, then hand off to a protocol MCP

Example Prompts

Once connected, try asking your AI assistant:

Discovery

"Find the safest USDC vaults with at least $10M TVL"

"What Morpho vaults are available on Base?"

"Show me the DeFi market overview"

Analysis

"Run due diligence on the Steakhouse USDC vault on Ethereum"

"Compare the top 3 USDC vaults by risk score"

"What's the risk breakdown for this vault: ethereum/0x..."

Portfolio

"Assess my portfolio: 50% in Morpho Steakhouse USDC, 30% in Aave USDC, 20% in Yearn USDC"

"Which protocols have had security incidents?"

"What does a risk score of 8.5 mean?"

Risk Scoring

Philidor uses the Vector Risk Framework v4.1 to decompose vault risk into three measurable vectors:

code

Final Score = 40% Asset + 40% Platform + 20% Governance

Asset Composition (40%)

Quality of underlying collateral. Blue-chip assets (ETH, USDC) score highest. Factors include oracle reliability, liquidity depth, and peg stability.

Platform Code (40%)

Code maturity measured by:

Lindy Score — time-based safety (>2 years ≈ 9/10)
Audit Density — number and quality of audits
Dependency Risk — multiplicative penalties for risky dependencies
Incident Penalty — caps score after security incidents

Governance (20%)

Exit window for users:

Control	Score
Immutable contract	10/10
7+ day timelock	9/10
No timelock	1/10

Risk Tiers

Tier	Score	Meaning
Prime	8.0–10.0	Institutional-grade — mature code, multiple audits, safe governance
Core	5.0–7.9	Moderate safety — audited but newer or flexible governance
Edge	0.0–4.9	Higher risk — requires careful due diligence

Architecture

code

┌──────────────────┐     ┌─────────────────┐     ┌──────────────┐
│  Claude / Cursor  │────▶│  Philidor MCP   │────▶│ Philidor API │
│  Windsurf / etc.  │◀────│  Server         │◀────│              │
└──────────────────┘     └─────────────────┘     └──────┬───────┘
                          14 tools, 3 resources,         │
                          4 prompts                      │
                                                   ┌────▼────┐
                                                   │ On-chain │
                                                   │  data    │
                                                   └─────────┘

Transport: Streamable HTTP (remote) or stdio (local/Docker)
API: Calls the Philidor Public API — no API key needed
Stateless: Fresh server instance per request, no session state
Data: 700+ vaults across Ethereum, Base, Arbitrum, Polygon, Optimism, and Avalanche

Cursor Marketplace Plugin

This repository packages a Cursor plugin that connects the agent to the hosted Philidor MCP server and loads five workflow skills. The plugin does not embed an API key. Philidor stays read-only: it scores vaults and lending venues, and it does not compute a health factor or prepare a transaction.

The plugin points at the hosted server, which is ahead of the stdio server in this repo:

code

https://mcp.philidor.io/api/mcp

Transport is Streamable HTTP. A live initialize plus tools/list against that URL returns 14 tools, 3 resources (philidor://methodology, philidor://supported-chains, philidor://supported-protocols), and 4 prompts (vault_due_diligence, portfolio_risk_assessment, defi_yield_comparison, review_loop_venue). src/server.ts registers the same 14 tools.

Piece	Path
Manifest	`.cursor-plugin/plugin.json`
Marketplace index	`.cursor-plugin/marketplace.json` (one plugin, source `.`)
MCP connector	`mcp.json`
Logo	`assets/logo.svg` (primary pawn mark from philidor.io/brand-assets)
Skills	`skills/vault-due-diligence`, `skills/pre-deposit-safety-check`, `skills/risk-adjusted-yield`, `skills/market-incident-monitoring`, `skills/philidor-api-handoff`

Product page: philidor.io/mcp. Docs: MCP server, quickstart, tools, resources, prompts.

Install

After the plugin is listed, open Customize in Cursor, find Philidor, and choose Install (project or user scope). That loads the skills and the hosted MCP server together.

Until then, connect the same server without the plugin by adding this to .cursor/mcp.json:

json

{
  "mcpServers": {
    "philidor": {
      "url": "https://mcp.philidor.io/api/mcp"
    }
  }
}

To try the plugin from a local checkout, copy this repo to ~/.cursor/plugins/local/philidor (the folder must contain .cursor-plugin/plugin.json), then run Developer: Reload Window and confirm the skills and MCP server under Customize. Local plugin imports have to be allowed. A marketplace plugin with the same name takes precedence over the local copy.

Example prompts

"Run due diligence on the Gauntlet USDC vault on Ethereum."
"Which Prime USDC vaults on Ethereum still accept deposits, and how do their scores compare to APR?"
"Check looping weETH against USDC on Aave V4 Ethereum Main before I borrow."
"List the largest Aave V4 markets by supplied value and any recent events on the one I pick."
"Which vaults had a critical incident in the last year?"
"I need basket constituents and the oracle freshness feed. Is that on the free MCP or the API?"

Skills tell the agent to copy vault ids, network slugs, addresses, and market ids from tool results, and not to invent risk numbers. Loop checks call check_loop_venue, then stop. Health factor and unsigned transactions belong to the protocol MCP (Aave is https://mcp.aave.com). Baskets, oracle vectors, enriched assets, the event stream, and Risk Graph look-through are outside the free MCP. The philidor-api-handoff skill sends those questions to API Access and Plans and pricing without quoting a price.

Submission checklist

Do not submit from this fork until a reviewer accepts the pull request. Listing is a manual review at cursor.com/marketplace/publish. The repository must be public. Cursor reviews the open-source tree and each later update.

Agent Skill

Install the Philidor MCP skill into your coding agent via skills.sh:

bash

npx skills add philidor-labs/philidor-mcp

This gives your agent full knowledge of all tools, resources, prompts, recommended workflows, and best practices for DeFi vault analysis.

Also Available

Interface	Description	Link
CLI	Terminal-based vault intelligence — scriptable, pipeable, agent-sandboxed	philidor-cli
OpenClaw Skill	Skill definition for the OpenClaw agent platform	npm

Supported Protocols

Morpho, Aave (v3/v4), Spark, Compound, Yearn, Beefy, Uniswap, Nest, Maple, Kamino — with more being added regularly.

See the full list at app.philidor.io.

Development

bash

git clone https://github.com/Philidor-Labs/philidor-mcp.git
cd philidor-mcp
npm install
npm start

The server connects to the public Philidor API by default. To use a custom endpoint:

bash

PHILIDOR_API_URL=http://localhost:3003 npm start

License

MIT

Install

Tools (10)

search_vaultsget_vaultget_vault_risk_breakdowncompare_vaultsfind_safest_vaultsget_protocol_infoget_curator_infoget_market_overview

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://mcp.philidor.io/api/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "defi-vaults": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.philidor.io/api/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.

io.philidor/defi-vaults MCP Server

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

search_vaults

get_vault

get_vault_risk_breakdown

compare_vaults

find_safest_vaults

get_protocol_info

get_curator_info

get_market_overview

explain_risk_score

list_vaults_with_incidents

Philidor MCP Server

DeFi vault risk analytics for AI agents

Why Philidor?

Quick Start

Remote Server (Recommended)

Claude Desktop

Claude Code

Cursor

Windsurf

Docker (stdio)

Local (stdio)

Tools

search_vaults

get_vault

get_vault_risk_breakdown

list_markets

get_market

get_market_events

check_loop_venue

compare_vaults

find_safest_vaults

get_protocol_info

get_curator_info

get_market_overview

explain_risk_score

list_vaults_with_incidents

Resources

Prompts

Example Prompts

Risk Scoring

Asset Composition (40%)

Platform Code (40%)

Governance (20%)

Risk Tiers

Architecture

Cursor Marketplace Plugin

Install

Example prompts

Submission checklist

Agent Skill

Also Available

Supported Protocols

Development

Links

License

Install

Remote endpoint

Related servers

`search_vaults`

`get_vault`

`get_vault_risk_breakdown`

`list_markets`

`get_market`

`get_market_events`

`check_loop_venue`

`compare_vaults`

`find_safest_vaults`

`get_protocol_info`

`get_curator_info`

`get_market_overview`

`explain_risk_score`

`list_vaults_with_incidents`