Install
$ agentstack add mcp-deloraprotocol-delora-mcp ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.5 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.5. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Delora MCP
MCP (Model Context Protocol) server for the Delora API: cross-chain quotes, supported chains, tokens, and tools.
Install
npm install
Configuration
Copy env.example to .env and adjust:
| Variable | Description | Default | |----------|-------------|---------| | DELORA_API_URL | Delora API base URL | https://api.delora.build | | DELORA_API_KEY | Optional API key forwarded to Delora API as x-api-key | unset | | MCP_TRANSPORT | stdio or http | stdio | | PORT | HTTP server port (when MCP_TRANSPORT=http) | 3000 | | HOST | HTTP bind address | 0.0.0.0 |
When DELORA_API_KEY is set, the MCP server forwards it to Delora API as the x-api-key header. In HTTP mode, the server also accepts incoming x-api-key or Authorization: Bearer ... headers and forwards the resolved key upstream. For HTTP requests, incoming headers take priority over DELORA_API_KEY. For stdio, DELORA_API_KEY remains the way to provide the key.
Run
Stdio (default) — for Cursor/IDE MCP over stdio:
npm run dev
# or
npm run build && npm start
HTTP — for streamable HTTP (e.g. behind a reverse proxy):
npm run dev:http
# or
npm run build && npm run start:http
Server listens on http://0.0.0.0:3000/mcp.
Cursor configuration
Stdio:
{
"mcpServers": {
"delora": {
"command": "node",
"args": ["/path/to/delora-mcp/dist/index.js"]
}
}
}
Streamable HTTP (e.g. after deploying to https://mcp.delora.build):
{
"mcpServers": {
"delora": {
"url": "https://mcp.delora.build/mcp",
"transport": "streamable-http",
"headers": {
"x-api-key": "YOUR_API_KEY"
}
}
}
}
You can also use Authorization: Bearer YOUR_API_KEY instead of x-api-key when your MCP client supports custom HTTP headers.
Docker
Build and run:
docker build -t delora-mcp .
docker run -p 3000:3000 -e MCP_TRANSPORT=http delora-mcp
For production behind a domain (e.g. mcp.delora.build): run the container with MCP_TRANSPORT=http and put nginx/traefik (or another reverse proxy) in front with HTTPS; then use the URL https://mcp.delora.build/mcp with streamable-http in Cursor.
API
- Delora API — base URL for all
/v1/*endpoints (quotes, chains, tokens, tools, token).
Tools
| Tool | Description | |------|-------------| | get_instructions | Returns this guide (call first for workflow). | | get_quote | GET /v1/quotes — cross-chain quote. | | get_chains | GET /v1/chains — supported chains. | | get_tools | GET /v1/tools — available tools. | | get_tokens | GET /v1/tokens — supported tokens. | | get_token | GET /v1/token — single token by chain + token. |
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: DeloraProtocol
- Source: DeloraProtocol/delora-mcp
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.5 Imported from the upstream source.