Polymarket MCP — Live Markets & Prices

• Analyzed: May 14, 2026, 10:56 AM
• Findings: 1
• Version: 1.1.0
• Hash: 246214081436865b2e523bc7f2a550929e9d36c3d47274e9bd6533746eab1ebe
• Source: palm
• External report: View on VirusTotal

Findings (1)

The polymarket-live-markets skill bundle is a legitimate, read-only MCP server designed to fetch prediction market data from Polymarket's official Gamma and CLOB v2 APIs. Analysis of the source code (server.ts, server.js, and server.py) confirms that it only performs standard HTTP GET requests to authorized endpoints (gamma-api.polymarket.com and clob.polymarket.com) and contains no evidence of data exfiltration, malicious execution, or prompt injection. The included test scripts (test.mjs and test-direct.mjs) are standard for local development and do not pose a security risk.