MCP Kraken MCP Server

If you already use MCP Kraken, the mcp kraken mcp server is the piece that lets your assistant work with it directly. An MCP server that exposes the Kraken cryptocurrency exchange Spot REST API over HTTP, secured with bearer tokens you manage locally.

Available tools

The toolset is worth reading before you wire it up, because it tells you what the integration is really for:

• Account — get_account_balance, get_extended_balance,
• Trading — get_open_orders, get_closed_orders, query_orders,
• Funding — get_deposit_methods, get_deposit_addresses,
• Earn — list_earn_strategies, list_earn_allocations, allocate_earn,
• Subaccounts — create_subaccount, account_transfer
• Deposit — deposit
• Withdraw — withdraw

Installation

Setup follows the usual MCP pattern — install or clone the server, register it in your client's configuration file, restart the client.

Credentials and setup notes

Configuration is passed through the environment: KRAKEN_API_KEY, KRAKEN_API_SECRET, KRAKEN_BASE_URL, MCP_KRAKEN_HOST, MCP_KRAKEN_PATH. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

• Python >=3.12 - uv for dependency management - just for the dev command runner (optional) - A Kraken Spot API key — generate one in Account → Security → API. The permissions you enable on the key directly determine which MCP tools succeed (see Permissions

Where it fits

Among the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. MCP Kraken's toolset — Account, Trading, Funding and 4 more — is a fair guide to whether it matches your workflow. It is maintained by xavierbeheydt; worth a glance at recent repository activity before you build anything load-bearing on it.

SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.

Worth knowing first

• It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
• Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
• Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.