Carboncopy Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Carboncopy Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server that gives AI agents programmatic access to Carbon Copy — a Polymarket copy-trading platform.
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"carboncopy": {
"command": "npx",
"args": ["-y", "@carbon-copy/mcp"],
"env": {
"CARBONCOPY_API_KEY": "cc_your_key_here"
}
}
}
}Add to .cursor/mcp.json in your project:
{
"mcpServers": {
"carboncopy": {
"command": "npx",
"args": ["-y", "@carbon-copy/mcp"],
"env": {
"CARBONCOPY_API_KEY": "cc_your_key_here"
}
}
}
}| Tool | Description |
|---|---|
get_portfolio | Portfolio summary: balance, exposure, gross volume, and P&L |
get_portfolio_history | Paginated trade history with optional date filtering |
get_positions | Live open positions with optional filters |
| Tool | Description |
|---|---|
discover_traders | Search/filter traders by profit, ROI, win rate, volume, followers |
get_trader_performance | Detailed performance analytics and P&L history for a trader |
| Tool | Description |
|---|---|
list_traders | All followed traders with copy settings and stats |
follow_trader | Start following a trader |
get_trader | Details for a single followed trader |
update_trader | Update copy trading settings for a followed trader |
batch_update_traders | Update up to 100 followed traders in one call |
unfollow_trader | Stop following a trader |
pause_trader | Pause copy trading for a trader (without unfollowing) |
resume_trader | Resume copy trading for a paused trader |
| Tool | Description |
|---|---|
list_orders | Paginated orders with optional status/date filters |
get_order | Single order details |
get_account | Account information |
health | API health check |
| URI | Description |
|---|---|
carboncopy://portfolio | Current portfolio snapshot |
carboncopy://traders | Followed traders list |
npm install
npm run build
npm run dev # Watch mode
npm test # Run testsAll tools authenticate via CARBONCOPY_API_KEY (format: cc_<64 hex chars>). Generate keys from the Carbon Copy dashboard.
API keys carry scoped permissions (portfolio, traders, orders, markets, account). Tools return a 403 permission error if your key lacks the required scope.
You can override the default API origin with CARBONCOPY_BASE_URL (defaults to https://carboncopy.inc).
The API enforces rate limits (60 reads/min, 20 writes/min). The MCP server surfaces rate limit errors transparently — retry after the indicated delay.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.