Aave MCP server
53 tools · Last check that passed 27 Oct 2026, 01:50 UTC
Aave's own remote MCP server gives an agent Aave v3 and v4 markets, a wallet's positions and health factor, swaps and governance data, and builds unsigned transactions for the user's wallet to sign. Once a day, Stackduke connects to it the way any MCP client would, with no account and no sign-in, and lists its tools. It never runs them.
All 53 tools
| Tool | Counted as |
|---|---|
cancel_order | Moves money |
get_swap_quote | Moves money |
get_swappable_tokens | Moves money |
get_user_activity | Moves money |
prepare_action | Moves money |
prepare_cancel_order | Moves money |
prepare_liquidation | Moves money |
prepare_set_collateral | Moves money |
preview_action | Moves money |
submit_signed_order | Moves money |
get_aave_guide | Changes things |
get_started | Changes things |
prepare_set_emode | Changes things |
prepare_stkgho_migrate | Changes things |
get_apy_history | Said to only read |
get_asset_history | Said to only read |
get_chains | Said to only read |
get_emode_categories | Said to only read |
get_governance_proposal | Said to only read |
get_hub_assets | Said to only read |
get_hubs | Said to only read |
get_interest_rate_model | Said to only read |
get_market_history | Said to only read |
get_markets | Said to only read |
get_multichain_asset | Said to only read |
get_order_status | Said to only read |
get_pending_orders | Said to only read |
get_position_items | Said to only read |
get_proposal_payloads | Said to only read |
get_proposal_votes | Said to only read |
get_protocol_history | Said to only read |
get_reserve_details | Said to only read |
get_reserve_holders | Said to only read |
get_risk_premium | Said to only read |
get_safety_module | Said to only read |
get_sgho_preview | Said to only read |
get_sgho_vault | Said to only read |
get_spoke_configs | Said to only read |
get_transaction_processed | Said to only read |
get_user_positions | Said to only read |
get_user_rewards | Said to only read |
get_user_summary | Said to only read |
get_user_summary_history | Said to only read |
get_user_vote | Said to only read |
get_vault_activity | Said to only read |
get_vault_preview | Said to only read |
get_vaults | Said to only read |
get_wallet_balances | Said to only read |
prepare_claim_rewards | Said to only read |
prepare_order | Said to only read |
prepare_sgho_action | Said to only read |
prepare_vault_action | Said to only read |
search_governance_proposals | Said to only read |
The tools the server listed at the last check that passed, at its default address and settings, with no sign-in; an account that signs in, or other settings, may see other tools. What a tool is counted as doing is Stackduke's cautious reading of the server's labels, the tool's name and its description: where they disagree it takes whichever says the tool can do most, so it overcounts on purpose. It does not say the server is safe, and it does not list what a tool cannot do. Descriptions are not shown, because they are written for models and may try to steer them.
Recent checks
12 of the last 12 checks passed
A check passes when the server lists its tools. Checked at https://mcp.aave.com/.
Recent changes
No change seen across the last 12 checks that passed.
From the scan of 27 Oct 2026, 01:52 UTC. "Changed" and "Can do more" count changes from the last 30 days; older ones stay listed here. A change made and undone between two checks is not seen. Every check is in the scanner's public data.
Know when Aave's tools change.
One email when Aave's official MCP server adds, removes or changes tools, with what changed. Nothing else.
What to watch for
- Its prepare tools build unsigned transactions to supply, borrow, withdraw and repay, and to change collateral, claim rewards and liquidate. Aave's MCP documentation
- Aave says two tools change state: submit_signed_order and cancel_order relay orders and cancellations that the user has already authorised in a wallet. Aave's MCP safety documentation
- Aave notes that supplied assets used as collateral can be liquidated, and that the health factor does not capture every risk. Aave's MCP safety documentation
How to limit it
With Aave's own settings, as its documentation describes them. Stackduke has not tested them.
- Aave says signing happens in the user wallet, which is the last gate before anything reaches a chain, so we recommend reading each transaction there before signing. Aave's MCP safety documentation
- Run preview_action before a borrow or a withdraw, as Aave advises. It simulates the outcome and commits nothing. Aave's MCP safety documentation
What Stackduke is designed to do
Stackduke is designed to sit between your agents and their MCP servers: to check each tool call against your rules before it runs, hold the risky ones for a person to approve, and keep a record of what was decided.
It does not yet forward or block tool calls for customers. Today it reads what this server offers and publishes what changes.