Skip to content

v0.1.7 — first public release

Choose a tag to compare

View all tags
@cejor6 cejor6 released this 31 May 18:52
· 56 commits to main since this release
v0.1.7
331f89e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The first public release of kalshi-mcp-server — a Model Context Protocol server for Kalshi prediction markets. Works with any MCP client (Claude Desktop, Claude Code, Cursor, Zed, Continue, Cline, Goose) over local stdio, or hosted remotely over Streamable HTTP with a bundled OAuth proxy.

Warning

This software places real trades when you enable trading against a production account. Markets carry financial risk, and LLMs make mistakes. Read DISCLAIMER.md before connecting a funded account. Defaults are read-only against the demo environment.

Highlights

  • 26 tools spanning market discovery, order books, candlesticks, trades, positions, fills, settlements, account balance, and order management.
  • Native RSA-PSS request signing — no third-party SDK; canonical timestamp + METHOD + path message, ms timestamps, per the Kalshi API spec.
  • Token-bucket rate limiting matching Kalshi's tier model (basic → prime), auto-hydrated from /account/limits at startup.
  • Layered safety controls — read-only by default, KALSHI_TRADING_ENABLED=0 gate, KALSHI_ALLOW_PROD=1 gate for production, a daily order cap, and a two-step prepare → confirm flow so an LLM can never place an order in a single call.
  • Separate demo / prod endpoints and key pairs, fail-closed.
  • Remote hosting — Streamable HTTP transport with a bundled GitHub OAuth proxy (OAuth 2.1 + PKCE + Dynamic Client Registration), GitHub-login allowlist, and Upstash Redis for client persistence. See DEPLOY.md.

Install

pipx install kalshi-mcp-server

Also published as a multi-arch image at ghcr.io/cejor6/kalshi-mcp-server:v0.1.7. Setup and client config for each MCP client is in the README.

Supply-chain & CI

  • PyPI Trusted Publishing via OIDC — no long-lived token.
  • All third-party GitHub Actions pinned to commit SHAs.
  • CodeQL, gitleaks secret scanning, dependency review, and pre-commit detect-secrets on every PR.

Changelog (0.1.0 → 0.1.7)

  • 0.1.7 — Hash-pin all third-party GitHub Actions to commit SHAs (#24)
  • 0.1.6 — PyPI Trusted Publishing on tag push (#23)
  • 0.1.5 — Model-agnostic docs reframe; clearer hosting decision flow (#22)
  • 0.1.4 — Render deploy hook on tag push; DEPLOY.md correction (#16)
  • 0.1.3 — 13 fixes from an end-to-end testing pass: response compaction, ticker validation, 3xx handling, startup rate-limit hydration (#15)
  • 0.1.2 — Install [oauth] extras in the published image (#11)
  • 0.1.1 — Bind to 0.0.0.0 in the published image so remote hosts can route (#10)
  • 0.1.0 — Initial server: tools, RSA-PSS auth, rate limiting, safety controls, WebSocket live-data client (#7), OAuth proxy (#8)

Full changelog: https://github.com/cejor6/kalshi-mcp-server/commits/v0.1.7

MIT licensed. Not affiliated with Kalshi.

Assets 2
Loading