Limitless MCP Server

⚠️ Notice: Quantish is winding down. The Quantish platform (quantish.live) is shutting down. This MCP server is self-hosted and will continue to work independently, but the Quantish team will no longer be maintaining or updating this project. If you're building in the prediction market space and need real-time data infrastructure, check out polynode.dev.

Features

• Secure Wallet Management

  • Generate new Base wallets with encrypted private key storage
  • Bring Your Own Wallet (BYOW) - Import existing wallets with client-side encryption
  • Private keys are encrypted with AES-256-GCM before storage

• Full Limitless Market Access

  • Real-time market discovery via Limitless Exchange API
  • Access to all prediction markets: Politics, Sports, Crypto, and more
  • Live orderbook data and price history
  • Semantic search for market discovery

• Trading Operations

  • Place limit orders with EIP-712 signed authentication
  • Cancel orders (single, batch, or all)
  • Check and set token approvals (USDC, CTF)
  • Position tracking with P&L calculations

• AI Agent Integration

  • Full MCP (Model Context Protocol) support
  • Works with Claude, Cursor IDE, and other MCP-compatible AI tools
  • 34 pre-built trading tools organized by category

• Enterprise Security

  • AES-256-GCM encryption for all sensitive data
  • API key authentication with SHA-256 hashing
  • Platform partner system for B2B integrations
  • Rate limiting and request logging

Quick Start

1. Configure MCP (Cursor IDE)

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "limitless": {
      "url": "https://limitless-mcp-server-production.up.railway.app/mcp",
      "headers": {
        "x-api-key": "YOUR_API_KEY"
      }
    }
  }
}

2. Get Your API Key

Via MCP tool:

{
  "tool": "limitless_signup",
  "args": {
    "externalId": "your-unique-id"
  }
}

3. Start Trading

"Search for bitcoin prediction markets"
"Buy 10 YES shares at $0.60 on the BTC market"
"Show my current positions"
"Cancel my open orders"

Available MCP Tools (34 Total)

Note: All tool names are prefixed with limitless_ to avoid collisions with other MCPs.

Authentication & Setup (6 tools)

Wallet Information (4 tools)

Market Discovery (6 tools)

Trading (8 tools)

Positions (4 tools)

Transfers (3 tools)

API Key Management (3 tools)

Self-Hosting

Prerequisites

• Node.js 20+
• PostgreSQL 15+
• Base RPC access (mainnet.base.org)

Installation

# Clone the repository
git clone https://github.com/joinQuantish/limitless-mcp.git
cd limitless-mcp

# Install dependencies
npm install

# Copy environment template
cp .env.example .env

# Edit .env with your values (see Environment Variables below)

# Generate Prisma client
npx prisma generate

# Push database schema
npx prisma db push

# Build and start
npm run build
npm start

Environment Variables

Create a .env file with:

# Database (PostgreSQL)
DATABASE_URL="postgresql://user:password@host:5432/limitless_mcp?schema=public"

# Encryption (generate with: openssl rand -hex 32)
ENCRYPTION_KEY="your-64-character-hex-encryption-key-here"

# Blockchain - Base L2
BASE_RPC_URL="https://mainnet.base.org"

# Limitless Exchange API
LIMITLESS_API_URL="https://api.limitless.exchange"

# Server
PORT=3003
NODE_ENV=production

# Admin API Key (generate with: openssl rand -hex 32)
ADMIN_API_KEY="your-admin-api-key-here"

# Optional: Bot signing secret for returning user verification
BOT_SIGNING_SECRET=""

Docker Deployment

# Build the image
docker build -t limitless-mcp .

# Run the container
docker run -d \
  -p 3003:3003 \
  -e DATABASE_URL="postgresql://..." \
  -e ENCRYPTION_KEY="..." \
  -e ADMIN_API_KEY="..." \
  -e BASE_RPC_URL="https://mainnet.base.org" \
  -e LIMITLESS_API_URL="https://api.limitless.exchange" \
  -e NODE_ENV=production \
  limitless-mcp

Railway Deployment

# Install Railway CLI
npm install -g @railway/cli

# Login and initialize
railway login
railway init

# Add PostgreSQL via Railway dashboard

# Set environment variables
railway variables set DATABASE_URL="postgresql://..."
railway variables set ENCRYPTION_KEY="$(openssl rand -hex 32)"
railway variables set ADMIN_API_KEY="$(openssl rand -hex 32)"
railway variables set BASE_RPC_URL="https://mainnet.base.org"
railway variables set LIMITLESS_API_URL="https://api.limitless.exchange"
railway variables set NODE_ENV="production"

# Deploy
railway up

API Reference

Health Check

curl https://your-server/health

Response:

{
  "status": "healthy",
  "timestamp": "2026-01-17T12:00:00.000Z",
  "version": "1.0.0",
  "service": "limitless-mcp",
  "database": "connected",
  "environment": "production"
}

MCP Endpoint

# List available tools
curl -X POST https://your-server/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'

# Call a tool (authenticated)
curl -X POST https://your-server/mcp \
  -H "Content-Type: application/json" \
  -H "x-api-key: pk_limitless_..." \
  -d '{
    "jsonrpc":"2.0",
    "id":1,
    "method":"tools/call",
    "params":{
      "name":"limitless_get_balances",
      "arguments":{}
    }
  }'

Market Data API

# Get active markets
curl "https://your-server/api/markets?limit=10&page=1"

# Search markets
curl "https://your-server/api/markets/search?query=bitcoin&limit=5"

# Get market details
curl "https://your-server/api/markets/your-market-slug"

# Get orderbook
curl "https://your-server/api/markets/your-market-slug/orderbook"

Security Architecture

Encryption at Rest

All sensitive data is encrypted using AES-256-GCM:

• Private keys encrypted before database storage
• Session tokens encrypted with unique IVs
• API secrets encrypted (only SHA-256 hash stored for lookup)

API Key Security

API Key Format: pk_limitless_<32 base64url chars>
API Secret Format: sk_limitless_<43 base64url chars>

• Keys are hashed with SHA-256 before storage (never stored in plaintext)
• Secrets are encrypted with AES-256-GCM
• Timing-safe comparison using crypto.timingSafeEqual

Platform Isolation (B2B)

For platform partners:

• Platform admin keys: plt_limitless_* / psk_limitless_*
• All queries scoped by platformId at database level
• Activity logging for audit trail
• User limits enforced per platform

Rate Limiting

• 60 requests/minute per API key (general)
• 30 requests/minute for user listing (platform admin)
• 5 requests/hour for platform registration

Secure Wallet Import (BYOW)

Import your existing MetaMask/hardware wallet securely:

Step 1: Export Your Private Key

In MetaMask: Settings > Security > Export Private Key

Step 2: Encrypt Locally

const crypto = require('crypto');

const privateKey = 'YOUR_PRIVATE_KEY_WITHOUT_0x_PREFIX';
const password = 'YourSecurePassword123!'; // min 12 chars

const salt = crypto.randomBytes(32);
const iv = crypto.randomBytes(16);
const derivedKey = crypto.scryptSync(password, salt, 32, { N: 16384, r: 8, p: 1 });

const cipher = crypto.createCipheriv('aes-256-gcm', derivedKey, iv);
let encrypted = cipher.update(privateKey, 'utf8', 'hex');
encrypted += cipher.final('hex');
const authTag = cipher.getAuthTag().toString('hex');

console.log({
  encryptedKey: `${encrypted}:${authTag}`,
  salt: salt.toString('hex'),
  iv: iv.toString('hex'),
  publicKey: 'YOUR_WALLET_ADDRESS'
});

Step 3: Import to SDK

{
  "tool": "limitless_import_wallet",
  "args": {
    "encryptedKey": "...",
    "salt": "...",
    "iv": "...",
    "publicKey": "0x...",
    "password": "YourSecurePassword123!"
  }
}

Security Note: Your raw private key NEVER leaves your machine. Only the encrypted bundle is sent to our servers, and we cannot decrypt it without your password.

Related Resources

License

PolyForm Noncommercial 1.0.0 © Quantish

Support

• Issues: GitHub Issues
• Email: hello@quantish.live