Server data from the Official MCP Registry
GhostSwap — non-custodial crypto swaps across 1,600+ coins.
GhostSwap — non-custodial crypto swaps across 1,600+ coins.
Remote endpoints: streamable-http: https://mcp.ghostswap.io/mcp sse: https://mcp.ghostswap.io/sse
The MCP server is well-designed with proper authentication, secure credential handling, and appropriate input validation. Credentials are read from environment variables (not hardcoded), requests include proper authorization headers, and the codebase is clean and maintainable. Minor findings around error handling and logging practices do not significantly impact the security posture. The server appropriately scopes its network access to the GhostSwap API and handles user inputs safely. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity).
3 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
From the project's GitHub README.
The official multi-LLM agent integration pack for GhostSwap — a no-KYC crypto-to-crypto swap engine supporting 1,600+ coins.
Drop the GhostSwap Partners API into any AI agent or coding assistant in one line — Claude, ChatGPT, Cursor, Windsurf, Gemini, GitHub Copilot, Continue.dev, OpenAI Agents SDK, LangChain, LlamaIndex, or any MCP-compatible client.
This repo bundles every common distribution surface in one place: an MCP server, a Claude Skill, an OpenAPI 3.1 spec for ChatGPT GPT Actions, project rules for Cursor, an AGENTS.md for the 23+ tools that follow that standard, and symlinked files for Copilot / Windsurf / others. Pick the section for your runtime below.
About GhostSwap: https://ghostswap.io is a no-KYC, non-custodial crypto-to-crypto exchange built on a partner-revenue-share model. Wallets, dApps, exchanges, and affiliate sites can integrate the Partners API to earn 0–4 % on every swap their users complete, with USDT payouts and no liquidity management on the partner's side.
Option A — MCP server (recommended for Desktop)
Add to ~/.claude/claude_desktop_config.json:
{
"mcpServers": {
"ghostswap": {
"command": "npx",
"args": ["-y", "@ghostswapio/mcp"],
"env": {
"GHOSTSWAP_PUBLIC_KEY": "gspk_live_...",
"GHOSTSWAP_SECRET": "gssk_live_..."
}
}
}
}
Restart Claude Desktop. 7 typed tools appear under the ghostswap server.
Option B — Claude Code plugin
/plugin marketplace add ghostswap1/ghostswap-agents
/plugin install ghostswap-partners-api@ghostswap1/ghostswap-agents
Option C — Skill into ~/.claude/skills/
git clone https://github.com/ghostswap1/ghostswap-agents.git
cp -r ghostswap-agents/skills/ghostswap-partners-api ~/.claude/skills/
Full canonical SKILL.md also mirrored at https://partners.ghostswap.io/skill.md.
MCP (recommended — typed tools, one-click) — add to .cursor/mcp.json in your project (or ~/.cursor/mcp.json globally):
{
"mcpServers": {
"ghostswap": {
"command": "npx",
"args": ["-y", "@ghostswapio/mcp"],
"env": {
"GHOSTSWAP_PUBLIC_KEY": "gspk_live_...",
"GHOSTSWAP_SECRET": "gssk_live_..."
}
}
}
}
Project rules (always-on prose conventions) — drop .cursor/rules/main.mdc from this repo into your own project. Or just clone this repo and let Cursor read it as a workspace.
MCP — add to ~/.codeium/windsurf/mcp_config.json (same JSON as the Claude / Cursor block above).
Rules — copy AGENTS.md to your project root (or symlink it to .windsurfrules). Windsurf auto-loads both.
Add to ~/.continue/config.yaml:
mcpServers:
- name: ghostswap
command: npx
args: ["-y", "@ghostswapio/mcp"]
env:
GHOSTSWAP_PUBLIC_KEY: gspk_live_...
GHOSTSWAP_SECRET: gssk_live_...
https://partners-api.ghostswap.io/openapi.json
<public_key>:<secret> (single string, colon-separated)https://ghostswap.io/privacyFull step-by-step in gpt-action/README.md, including suggested GPT Instructions copy.
Drop AGENTS.md at your repo root (or copy .github/copilot-instructions.md — they're symlinked in this repo).
For tool access (typed function calls), use the MCP server via your IDE's MCP plugin.
Gemini CLI reads AGENTS.md natively — drop AGENTS.md at your repo root.
For Gemini Code Assist, copy AGENTS.md to .gemini/styleguide.md.
For tool access, use the MCP server (Gemini API + Vertex AI added MCP support in March 2026).
In your project's .aider.conf.yml:
read: AGENTS.md # or wherever you've placed this file
Aider auto-loads it as read-only context every session.
from agents import Agent, Runner
from agents.mcp import MCPServerStdio
ghostswap_mcp = MCPServerStdio(
params={
"command": "npx",
"args": ["-y", "@ghostswapio/mcp"],
"env": {
"GHOSTSWAP_PUBLIC_KEY": "gspk_live_...",
"GHOSTSWAP_SECRET": "gssk_live_...",
},
},
)
agent = Agent(
name="SwapBot",
mcp_servers=[ghostswap_mcp],
instructions="You help users execute crypto-to-crypto swaps.",
)
import { experimental_createMCPClient, generateText, openai } from 'ai';
import { Experimental_StdioMCPTransport } from 'ai/mcp-stdio';
const client = await experimental_createMCPClient({
transport: new Experimental_StdioMCPTransport({
command: 'npx',
args: ['-y', '@ghostswapio/mcp'],
env: { GHOSTSWAP_PUBLIC_KEY: '…', GHOSTSWAP_SECRET: '…' },
}),
});
const { text } = await generateText({
model: openai('gpt-4o'),
tools: await client.tools(),
prompt: 'Quote a 0.01 BTC → ETH swap for me.',
});
Via OpenAPI (the simpler path):
import yaml, requests
from langchain_community.agent_toolkits.openapi.toolkit import OpenAPIToolkit
from langchain_community.tools.json.tool import JsonSpec
spec = yaml.safe_load(requests.get("https://partners-api.ghostswap.io/openapi.yaml").text)
toolkit = OpenAPIToolkit.from_llm(
llm=...,
json_spec=JsonSpec(dict_=spec),
requests_wrapper=..., # add your Authorization: Bearer header here
)
Via MCP (cleaner — uses the @ghostswapio/mcp server):
from langchain_mcp_adapters.client import MultiServerMCPClient
client = MultiServerMCPClient({
"ghostswap": {
"command": "npx",
"args": ["-y", "@ghostswapio/mcp"],
"env": {
"GHOSTSWAP_PUBLIC_KEY": "gspk_live_...",
"GHOSTSWAP_SECRET": "gssk_live_...",
},
"transport": "stdio",
}
})
tools = await client.get_tools()
from llama_index.tools.mcp import McpToolSpec, BasicMCPClient
mcp_client = BasicMCPClient(
"npx", args=["-y", "@ghostswapio/mcp"],
env={"GHOSTSWAP_PUBLIC_KEY": "...", "GHOSTSWAP_SECRET": "..."},
)
tools = McpToolSpec(client=mcp_client).to_tool_list()
Or use the OpenAPI spec with RestAPIToolSpec.
The server is a standard stdio MCP server. Any client that speaks MCP v2024-11-05 works:
npx -y @ghostswapio/mcp
Pass GHOSTSWAP_PUBLIC_KEY and GHOSTSWAP_SECRET via env vars.
Or, for HTTP-style integrations, use the OpenAPI spec directly:
curl https://partners.ghostswap.io/skill.md | pbcopy
Paste into the chat with "Build me a Node.js integration based on this." — the SKILL.md is plain markdown with a ~120-line working reference proxy. Works in any LLM.
ghostswap-agents/
├── README.md ← you are here
├── AGENTS.md ← Source of truth (agents.md standard, 23+ tools)
├── CLAUDE.md → AGENTS.md ← symlink for Claude Code
├── .github/
│ └── copilot-instructions.md → ../AGENTS.md ← symlink for GitHub Copilot
├── .windsurfrules → AGENTS.md ← symlink for Windsurf
├── .cursor/
│ ├── rules/main.mdc ← Cursor project rules
│ └── mcp.json ← Cursor MCP config
├── .claude-plugin/
│ └── plugin.json ← Claude Code plugin manifest
├── skills/
│ └── ghostswap-partners-api/
│ └── SKILL.md ← Claude Agent Skill (mirror of /skill.md)
├── openapi/
│ ├── openapi.yaml ← OpenAPI 3.1 (source of truth)
│ └── openapi.json ← Same, JSON
├── mcp-server/ ← Published as @ghostswapio/mcp on npm
│ ├── src/index.ts
│ ├── package.json
│ ├── manifest.json ← DXT/MCPB for one-click Claude Desktop
│ └── README.md
└── gpt-action/
└── README.md ← Step-by-step for ChatGPT GPT builder
| Built-in to 13+ runtimes out of the box | Claude (Desktop / Code / .ai), Cursor, Windsurf, Continue.dev, ChatGPT (Custom GPT + GPT Actions), GitHub Copilot, Gemini (Code Assist + CLI), Aider, OpenAI Agents SDK, Vercel AI SDK, LangChain, LlamaIndex, plus any generic MCP client. One repo covers everything. |
| MIT-licensed, vendor-controlled | The pack is open source. Fork it, modify it, vendor it inside your own integration. No "developer-tier" tax, no plan-gated tools. |
| The integration is non-custodial | GhostSwap routes liquidity and signs upstream. Partners never custody user funds and never hold signing keys. The credential proves "this swap counts towards your commission" — nothing else. |
| Partner revenue from the first swap | Set your fee 0–4 % at application time. Earn USDT on every completed swap your integration generates, paid once the balance reaches $100. No upfront cost, no minimum volume. |
| Production-quality machine-readable surface | The OpenAPI 3.1 spec covers every endpoint with full request/response schemas, x-openai-isConsequential flags, and documented Idempotency-Key + RateLimit-* headers. ChatGPT GPT Actions, LangChain, LlamaIndex, and openapi-generator-based SDKs all consume it directly. |
| Mirrors the GhostSwap brand on every surface | Every install path links back to https://ghostswap.io and https://partners.ghostswap.io/docs — same docs, same vocabulary, same error envelope, regardless of which runtime the developer is on. |
| ghostswap-agents | Generic OpenAPI proxy | Self-hosted swap bot | |
|---|---|---|---|
| Multi-LLM coverage (MCP + OpenAPI + SKILL + AGENTS) | ✅ Bundled | ⚠️ OpenAPI only | ❌ Hand-written |
| No-KYC swap engine behind it | ✅ 1,600+ coins | ❌ Bring-your-own | ❌ Bring-your-own |
| Partner revenue share | ✅ 0–4 % | ❌ | ❌ |
| USDT payouts handled for you | ✅ | ❌ | ❌ |
| Idempotency baked in | ✅ Idempotency-Key required | ⚠️ Depends on origin | ❌ DIY |
| Live OpenAPI URL for ChatGPT GPT Actions | ✅ https://partners-api.ghostswap.io/openapi.json | ⚠️ Host it yourself | ❌ |
| MIT-licensed | ✅ | ⚠️ Varies | ⚠️ Varies |
If you're shipping in a chat-style assistant (Claude Desktop, ChatGPT, Cursor's chat), use the MCP server — it gives the agent typed tools instead of a wall of markdown. If you're embedding into a Custom GPT or a server-side LangChain pipeline, use the OpenAPI spec. If you're writing Claude Code workflows, use the SKILL.md. The README has copy-pasteable install snippets for all of them.
To execute real swaps, yes — sign up at https://partners.ghostswap.io/sign-up, submit the application form, wait for admin approval (usually under 24 hours), then issue a credential from the dashboard. To just explore the OpenAPI spec, browse the SKILL.md, or run the MCP server's list_currencies tool (which doesn't require a partner-specific credential to discover), no account is needed.
This repo is a thin distribution layer — it does not host the API. The actual API lives at https://partners-api.ghostswap.io. Everything in this repo just wraps that API in formats different AI runtimes know how to consume.
Yes — published by the GhostSwap team to https://github.com/ghostswap1/ghostswap-agents and to npm as @ghostswapio/mcp. MIT-licensed.
Yes. It runs over stdio (the standard MCP transport) and just calls the public REST API. Build it with cd mcp-server && npm install && npm run build && node dist/index.js. Forward your GHOSTSWAP_PUBLIC_KEY and GHOSTSWAP_SECRET env vars and you're set.
The canonical spec is served live at https://partners-api.ghostswap.io/openapi.json and reflects the deployed API. The copy in openapi/ of this repo is updated whenever the API changes; the GitHub Actions CI lints it on every PR. If you're consuming this for ChatGPT GPT Actions, point your GPT at the live URL rather than the repo so you get updates automatically.
Every POST /v1/swaps response includes a payinAddress — the deposit address the end-user funds. The swap progresses through statuses (waiting → confirming → exchanging → sending → finished) which you poll via GET /v1/swaps/{id}. The full lifecycle is documented in the SKILL.md and at https://partners.ghostswap.io/docs/concepts/status-lifecycle.
create_swap after a network error?Reuse the same Idempotency-Key you sent on the first attempt. GhostSwap deduplicates and returns the original swap — no duplicate is created. Regenerating the key on retry is the most common source of partner-side bugs; the MCP server's create_swap tool description and the SKILL.md both call this out explicitly.
A DEX requires the user to have a wallet, sign every transaction, and pay gas. GhostSwap is non-custodial in the sense that GhostSwap never holds user funds longer than the swap takes, but the user only needs to send a single on-chain transaction to a deposit address. No wallet integration, no signing flow, no gas-fee UX — that's why it's a popular choice for wallets and apps where the swap is a feature, not the product.
End-users transact with GhostSwap directly through the deposit address. Partners are responsible for their own jurisdiction's compliance posture (terms of service, AML/KYC if their product otherwise requires it, etc.). For high-volume or unusual transaction patterns, GhostSwap may place a swap on hold for AML review — the SKILL.md describes how to surface this state to end-users (direct them to support@ghostswap.io).
Email support@ghostswap.io with the subject prefix [security] ghostswap-agents: — do not file a public GitHub issue. Full process in SECURITY.md.
A server-to-server REST API for non-custodial crypto swaps. End-users send funds to a deposit address you return; the destination wallet receives the swapped funds. GhostSwap handles all upstream liquidity, signing, and clearing — you never hold signing keys. Partners earn a 0–4 % markup (set at application time) on every completed swap, paid out in USDT (≥ $100 threshold).
| Supported coins | 1,600+ |
| Auth | Bearer (gspk_live_…:gssk_live_…) |
| Modes | Float-rate (default) and fixed-rate (locked) |
| Rate limits | 30 RPS per credential, 120 RPS per IP |
| Idempotency | Idempotency-Key header required on POST /v1/swaps |
| Status polling | GET /v1/swaps/{id} — terminal: finished / failed / refunded / overdue / expired |
| Refund | Optional for float, required for fixed |
| Payouts | USDT, $100 minimum, 1–3 business-day admin review |
Full reference: https://partners.ghostswap.io/docs.
/dashboard/api-credentials → copy the gspk_live_… public key and gssk_live_… secret.Once you have credentials, all the runtimes above work in <5 minutes.
If you don't want to integrate the API at all, every approved partner also gets a referral link:
https://ghostswap.io/?ref=<your-slug>
End-users who click get a 30-day cookie attribution; any swap they complete on ghostswap.io credits you 1 % of the volume. No code on your end — just share the URL. Pick your slug from the dashboard after approval.
git pull # in your local clone
# Or, for the npm package:
npm update -g @ghostswapio/mcp
# Or, for the Claude Code plugin:
/plugin update ghostswap-partners-api
The OpenAPI spec at https://partners-api.ghostswap.io/openapi.json always reflects the live API. The SKILL.md and AGENTS.md are kept in sync with every GhostSwap docs deploy.
| Surface | URL |
|---|---|
| 🔗 Live docs | https://partners.ghostswap.io/docs |
| 🔗 OpenAPI 3.1 spec (JSON) | https://partners-api.ghostswap.io/openapi.json |
| 🔗 OpenAPI 3.1 spec (YAML) | https://partners-api.ghostswap.io/openapi.yaml |
| 🔗 Anthropic Agent Skill | https://partners.ghostswap.io/skill.md |
| 🔗 LLM index | https://partners.ghostswap.io/llms.txt |
| 🔗 Full corpus for context-stuffing | https://partners.ghostswap.io/llms-full.txt |
| 🔗 Sign up | https://partners.ghostswap.io/sign-up |
| 💬 Telegram | https://t.me/ghostswap1 |
| support@ghostswap.io |
MIT. Use it, fork it, ship it.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.