Home / MCP registry index / io.strategyarena/strategyarena
Strategy Arena
io.strategyarena/strategyarena in the official MCP registry.
Endpoint https://strategyarena.io/mcp.
The registry describes it as: Backtest trading strategies, Monte Carlo robustness, exact Pine export, sealed out-of-sample judge.
We read its 45 tools on 2026-10-21. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
explore_arena list_arena_assets list_arena_strategies search_strategies compare_arenas arena_snapshot list_strategy_templates community_arena_rankings community_arena_stats list_cuda_families get_monster_detail list_native_strategies invent_and_backtest play_public_round compare_public_ideas suggest_experiments arenascript_reference generate_arenascript_strategy repair_arenascript validate_arenascript backtest_arenascript list_arenascript_monsters get_arenascript_optimization_status get_monster_evolution_log arena_leaderboard live_match market_regime predictions backtest_strategy monte_carlo engine_robustness_check inspect_pine_export_capability describe_tradingview_partner_path export_to_tradingview get_product_contract get_public_proofs get_arena_passport get_world_arena_facts read_arena_weekly_distribution get_lab_report_demo describe_survival_audit get_strategy_hospital get_overfit_autopsy get_pine_converter_contract get_lab_desktop_handoff
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/io-strategyarena-strategyarena)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.