The official toolkit for AI agents to trade on Toobit.

Trade with natural language — from market queries to order execution. Built-in MCP Server + CLI, fully open-source, runs locally, your keys never leave your device.

Total: 66+ MCP tools

Connect to Claude, Cursor, VS Code, or any MCP-compatible AI client.

Trade directly from the terminal. Supports piping, cron jobs, and scripting.

Plug-and-play modules for AI clients that support the Skills protocol. See agent-skills.

npm install -g toobit-trade-mcp toobit-trade-cli

toobit config init

Or manually create ~/.toobit/config.toml:

default_profile = "live"

[profiles.live]
api_key    = "your-api-key"
secret_key = "your-secret-key"

Get API Key: Toobit API Key Creation Guide

toobit-trade-mcp setup --client <client>

# Market data (no API key needed)
toobit market ticker --symbol BTCUSDT
toobit market candles --symbol BTCUSDT --interval 1h --limit 10
toobit market funding-rate --symbol BTC-SWAP-USDT

# Spot trading
toobit spot place --symbol BTCUSDT --side BUY --type MARKET --quantity 0.001

# Futures trading (use contract symbol format: BTC-SWAP-USDT)
toobit futures place --symbol BTC-SWAP-USDT --side BUY_OPEN --orderType MARKET --quantity 1 --leverage 10
toobit futures positions

# Account
toobit account balance

Toobit uses different symbol formats for spot and futures:

Important: Futures endpoints (funding rate, mark price, open interest, etc.) require the contract symbol format BTC-SWAP-USDT. Using spot format BTCUSDT will return empty data or errors.

1. Local execution — Keys stored locally in ~/.toobit/config.toml, signatures computed locally
2. Config hot-reload — MCP server automatically detects changes to config.toml on every request (via file mtime check). No restart needed after rotating API keys. Invalid configs are rejected and the previous valid config stays active.
3. Read-only mode (--read-only) — Data queries only
4. Module control (--modules) — Load only the modules you need
5. Audit logging — All calls logged to ~/.toobit/logs/ with auto-redacted parameters
6. Input sanitization — clientOrderId uses whitelist [a-zA-Z0-9_\-.] to prevent injection attacks

Security tip: Never paste your API Key or Secret Key into AI chat. Use sub-account API keys with minimum required permissions.

agent-toobit-kit/
├── packages/
│   ├── core/          # Shared core library
│   ├── mcp/           # toobit-trade-mcp — MCP server
│   └── cli/           # toobit-trade-cli — CLI tool
├── docs/
│   └── landing/       # Landing page
├── config.toml.example
└── README.md

pnpm install
pnpm build

MIT License