BotOrNot

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Is a trading bot legit? Sourced bot fact sheets, regulator scam records and on-chain results.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "BotOrNot": {
      "url": "https://getbotornot.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (12)

• check_bot read-only

  Check a trading bot name or website/domain against BotOrNot's sourced bot directory and every regulator scam record (SEC, CFTC and a state regulator crypto scam tracker). Returns a verdict (watchlist_match, documented_bot, both, no_record) with source URLs. no_record is NOT proof of safety.

  Parameters:

  • query (required) — string — Bot name or website, e.g. "3Commas" or "web3-cryptohopper.com"

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• get_bot read-only

  Full sourced fact sheet for one documented bot by slug (see list_bots): pricing, markets, custody model, red flags with sources, report card, impostor scam reports.

  Parameters:

  • slug (required) — string

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• get_report_card read-only

  The rule-based BotOrNot report card for a bot (Clear record, Caution, Red flags, Closed, Limited data) with the exact sourced facts and rule ids that produced it. Not a rating or investment advice; payouts never change it.

  Parameters:

  • slug (required) — string

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• get_prediction_markets read-only

  Prediction-market venues (Kalshi, Polymarket US, Gemini Predictions) with their CFTC status and official sources, plus the documented prediction-market bots and their report cards.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• list_bots read-only

  List documented trading bots (slug, name, category, report card, official_url). Optionally filter by category or report card result.

  Parameters:

  • result — string
  • category — string — Exact category name, e.g. "Prediction market bots"

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• compare_bots read-only

  Side-by-side sourced facts and report cards for two bots by slug. No winner is picked.

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• search_scams read-only

  Search regulator scam and enforcement records (SEC, CFTC and a state regulator crypto scam tracker) by name, website or keyword. Every record has an official source URL. Regulator complaints are allegations until resolved.

  Parameters:

  • query (required) — string
  • limit — integer

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• check_website read-only

  Scam signals for a website: exact matches in a state regulator scam tracker, look-alikes of real bot domains (typos, homoglyphs, brand+words), domain age from public RDAP, HTTPS, and optional red-flag phrases in pasted text. Signals, not a verdict.

  Parameters:

  • url (required) — string
  • text — string — Optional text from the site or message to scan for regulator-listed red-flag phrases

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• get_changes read-only

  Recent change events: new regulator cases, new state scam-tracker reports, bot shutdowns, report-card changes and keyword-matched SEC/CFTC releases. Optionally filter by bot slug.

  Parameters:

  • bot — string
  • limit — integer

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• check_telegram read-only

  Check a Telegram @handle or t.me link: is it an official handle of a listed trading bot (verified on the bot's own site or docs), a known impersonator listed by the bot's own docs, a look-alike, or not in our records? Matches include custody model and incident history. A match is NOT a safety rating; unknown is not proof of a scam.

  Parameters:

  • handle (required) — string — @handle, t.me/ link or tg://resolve link

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• get_incidents read-only

  Verified security incidents (hacks, exploits, key leaks) at trading bots: date, what happened, users affected, estimated loss as named in the sources, refund status and source URLs. Optionally filter by bot slug.

  Parameters:

  • bot — string — Bot slug, e.g. "maestro"
  • limit — integer

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• get_leaderboard read-only

  Hyperliquid vault leaderboard from on-chain data: open vaults with >= $100k TVL ranked by 30-day PnL (USD). Refreshed daily. Past results do not predict future ones.

  Parameters:

  • limit — integer

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.