// SCAN REPORT

Defillama

14 tools. 0 can modify or destroy data without limits.

Read-only server. Low risk, but rate limits prevent runaway API costs.

Last updated: 31 Jul 2026

0 can modify or destroy data

14 read-only

14 tools total

Community server · catalogue entry checked 05/07/2026 · full schemas captured for 10 of 14 tools

How to control Defillama ↓

TOOL MAP

What Defillama exposes to your agents

Read (14) Write / Execute (0) Destructive / Financial (0)

Running more than one server? Check your whole stack →

THE RISK

What can go wrong

Even read-only tools carry cost. An agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up bills.

POLICY

How to control Defillama

PolicyLayer is an MCP gateway — it sits between your AI agents and Defillama, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "get_chart__by_pool": {
    "limits": [
      {
        "counter": "get_chart__by_pool_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Defillama — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON DEFILLAMA →

Instant setup, no code required.

FULL CATALOGUE

All 14 Defillama tools

READ 14 tools

Read get_chart__by_pool Get historical APY and TVL of a pool Read get_overview_dexs List all dexs along with summaries of their volumes and dataType history data Read get_overview_dexs__by_chain List all dexs along with summaries of their volumes and dataType history data filtering by chain Read get_overview_fees List all protocols along with summaries of their fees and revenue and dataType history data Read get_overview_fees__by_chain List all protocols along with summaries of their fees and revenue and dataType history data by chain Read get_pools Retrieve the latest data for all pools, including enriched information such as predictions Read get_protocols List all protocols on defillama along with their tvl Read get_stablecoincharts_all Get historical mcap sum of all stablecoins Read get_summary_dexs__by_protocol Get summary of dex volume with historical data Read get_summary_fees__by_protocol Get summary of protocol fees and revenue with historical data Read get_tvl__by_protocol Simplified endpoint to get current TVL of a protocol Read get_v2_chains Get current TVL of all chains Read get_v2_historicalChainTvl Get historical TVL (excludes liquid staking and double counted tvl) of DeFi on all chains Read get_v2_historicalChainTvl__by_chain Get historical TVL (excludes liquid staking and double counted tvl) of a chain

FAQ

Questions about Defillama

Is the Defillama MCP server safe to use without restrictions? +

The Defillama server is primarily read-only with 14 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Defillama MCP server expose? +

14 tools across 1 categories: Read. 14 are read-only. 0 can modify, create, or delete data.

How do I enforce a policy on Defillama? +

Register the Defillama MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Defillama tool call.

Deterministic rules across all 14 Defillama tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON DEFILLAMA →

Instant setup, no code required.

14 Defillama tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Defillama's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →