Security & Testing

kestrel.markets

An MCP server for parsing, validating, and simulating Kestrel threat hunting source code, with grading of blotters.

x402 supported2 endpoints60 known toolsFirst detected August 6, 2026Last detected August 18, 2026

ENDPOINT 1

https://mcp.kestrel.markets/mcp

No auth detected

MCP server metadata

Name: kestrel-markets
Version: 0.4

Capabilities

tools

Server instructions

Kestrel Markets MCP face (ADR-0019). Anonymous, read-only projection of the canonical HTTP contract. Use tools/list to discover the projected operations.

Known tools 30

capability_discovery

Capability + price-sheet discovery

Inferred read-only

catalog

List the free curated catalog

Inferred read-only

validate

Parse and validate Kestrel source, fail-closed

Inferred read-only

simulate

Run a free deterministic sim Session

Inferred read-only

grade

Produce a certified Grade over Blotters

Inferred read-only

proof

Shareable proof of a certified result

Inferred read-only

offers

Re-fetch a 402 Offer

Inferred read-only

fleet_list

List the pod tree + hosted-agent roster (org-level View)

Inferred read-only

pod_get

Get one pod-tree node (detail)

Inferred read-only

pod_create

Structure a new allocating pod / book (DELEGATE)

Inferred read-only

fleet_rollup

Rolled-up portfolio telemetry over a subtree

Inferred read-only

fleet_events

Cursor-resumable SSE stream of org-level fleet events (Wake)

Inferred read-only

agent_hire

Hire + assign a hosted trading agent to a book (DELEGATE — the new seam)

Inferred read-only

agent_assign_mandate

Assign / revise a hosted agent's Mandate (DELEGATE)

Inferred read-only

agent_reallocate

Reallocate budget / re-derive the agent's Envelope (DELEGATE)

Inferred read-only

agent_arm

Arm a hosted agent so it may act within its Mandate (DELEGATE)

Inferred read-only

agent_disarm

Disarm a hosted agent (safety — authority-reducing)

Inferred read-only

agent_fire

Fire a hosted agent = REVOKE its Envelope subtree (GRADE→reallocation)

Inferred read-only

agent_grade

Get a hosted agent's latest certified live Grade (GRADE)

Inferred read-only

leaderboard_get

The PRIVATE fleet leaderboard (the PM dashboard)

Inferred read-only

pm_authority_request

Request portfolio-manager (PM) authority in-band (PLAT-ADR-0031 §1).

Inferred read-only

agent_register

Self-register as an autonomous agent (PLAT-ADR-0021 tier 1).

Inferred read-only

agent_self_get

Read your OWN trader record (PLAT-ADR-0031 §4): mandate, envelope, arm-state, and brief (when present).

Inferred read-only

capability_refresh

Refresh your durable capability BEFORE it expires (PLAT-ADR-0021 slice 2).

Inferred read-only

pm_inbox_list

List your PM inbox (PLAT-ADR-0031 §4): the PENDING suspended Operations in your subtree — escalations awaiting a decision.

Inferred read-only

session_status

Report the seat this connection is attached to: seat id, seat name, attach scope, and current seat state (watchlist, subscriptions, launched Episodes by reference, event count).

Inferred read-only

session_attach

Attach this connection to a seat by id or by alias.

Inferred read-only

session_detach

Detach this connection from its seat.

Inferred read-only

session_list

List the seats this connection has attached to, each with seat id, seat name, attach scope, and whether it is the current attachment.

Inferred read-only

session_frame

Render the seat this connection is attached to as a frame: the fixed-width Terminal screen (watchlist, subscriptions, launched Episodes by reference, event count) as both text and a monospace image.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.kestrel-markets]
url = "https://mcp.kestrel.markets/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "kestrel-markets": {
      "type": "http",
      "url": "https://mcp.kestrel.markets/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: kestrel-markets
Remote MCP URL: https://mcp.kestrel.markets/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "kestrel-markets": {
      "url": "https://mcp.kestrel.markets/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "kestrel-markets": {
      "type": "http",
      "url": "https://mcp.kestrel.markets/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "kestrel-markets",
  "transport": "streamable-http",
  "url": "https://mcp.kestrel.markets/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 2

https://kestrel.markets/mcp

No auth detected

MCP server metadata

Name: kestrel-markets
Version: 0.4

Capabilities

tools

Server instructions

Kestrel Markets MCP face (ADR-0019). Anonymous, read-only projection of the canonical HTTP contract. Use tools/list to discover the projected operations.

Known tools 30

capability_discovery

Capability + price-sheet discovery

Inferred read-only

catalog

List the free curated catalog

Inferred read-only

validate

Parse and validate Kestrel source, fail-closed

Inferred read-only

simulate

Run a free deterministic sim Session

Inferred read-only

grade

Produce a certified Grade over Blotters

Inferred read-only

proof

Shareable proof of a certified result

Inferred read-only

offers

Re-fetch a 402 Offer

Inferred read-only

fleet_list

List the pod tree + hosted-agent roster (org-level View)

Inferred read-only

pod_get

Get one pod-tree node (detail)

Inferred read-only

pod_create

Structure a new allocating pod / book (DELEGATE)

Inferred read-only

fleet_rollup

Rolled-up portfolio telemetry over a subtree

Inferred read-only

fleet_events

Cursor-resumable SSE stream of org-level fleet events (Wake)

Inferred read-only

agent_hire

Hire + assign a hosted trading agent to a book (DELEGATE — the new seam)

Inferred read-only

agent_assign_mandate

Assign / revise a hosted agent's Mandate (DELEGATE)

Inferred read-only

agent_reallocate

Reallocate budget / re-derive the agent's Envelope (DELEGATE)

Inferred read-only

agent_arm

Arm a hosted agent so it may act within its Mandate (DELEGATE)

Inferred read-only

agent_disarm

Disarm a hosted agent (safety — authority-reducing)

Inferred read-only

agent_fire

Fire a hosted agent = REVOKE its Envelope subtree (GRADE→reallocation)

Inferred read-only

agent_grade

Get a hosted agent's latest certified live Grade (GRADE)

Inferred read-only

leaderboard_get

The PRIVATE fleet leaderboard (the PM dashboard)

Inferred read-only

pm_authority_request

Request portfolio-manager (PM) authority in-band (PLAT-ADR-0031 §1).

Inferred read-only

agent_register

Self-register as an autonomous agent (PLAT-ADR-0021 tier 1).

Inferred read-only

agent_self_get

Read your OWN trader record (PLAT-ADR-0031 §4): mandate, envelope, arm-state, and brief (when present).

Inferred read-only

capability_refresh

Refresh your durable capability BEFORE it expires (PLAT-ADR-0021 slice 2).

Inferred read-only

pm_inbox_list

List your PM inbox (PLAT-ADR-0031 §4): the PENDING suspended Operations in your subtree — escalations awaiting a decision.

Inferred read-only

session_status

Report the seat this connection is attached to: seat id, seat name, attach scope, and current seat state (watchlist, subscriptions, launched Episodes by reference, event count).

Inferred read-only

session_attach

Attach this connection to a seat by id or by alias.

Inferred read-only

session_detach

Detach this connection from its seat.

Inferred read-only

session_list

List the seats this connection has attached to, each with seat id, seat name, attach scope, and whether it is the current attachment.

Inferred read-only

session_frame

Render the seat this connection is attached to as a frame: the fixed-width Terminal screen (watchlist, subscriptions, launched Episodes by reference, event count) as both text and a monospace image.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.kestrel-markets]
url = "https://kestrel.markets/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "kestrel-markets": {
      "type": "http",
      "url": "https://kestrel.markets/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: kestrel-markets
Remote MCP URL: https://kestrel.markets/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "kestrel-markets": {
      "url": "https://kestrel.markets/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "kestrel-markets": {
      "type": "http",
      "url": "https://kestrel.markets/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "kestrel-markets",
  "transport": "streamable-http",
  "url": "https://kestrel.markets/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.