Optionscanner

ai.optionscanner/optionscanneroptionscanner.aistreamable-httpv4.1.3Scanned 24 hours ago

Free options calculators and the Optionscanner Learn library for any AI assistant. No account.

10 tools: 7 change things and 3 only read.

Reads private data · 0
Reads text others write · 0
Can send data out · 0
2 findings

Tools listed without sign-in. Remote posture

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

10 tools

Changes things 7Creates or changes something that can be changed back.Claude Code: ask

credit_spreadBull put or bear call credit spread figures: width, maximum profit and loss, breakeven, return on risk, credit-to-width, and the model's chance of profit when implied volatility an…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Bull put or bear call credit spread figures: width, maximum profit and loss, breakeven, return on risk, credit-to-width, and the model's chance of profit when implied volatility and days are given.
Annotations the server declares
- title: Credit spread calculator
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
debit_spreadCall or put debit spread figures: width, maximum profit and loss, breakeven, reward to risk, debit-to-width, and the model's chance of profit when implied volatility and days are g…1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "debit_spread" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
  What this check looks for
Description, as the server wrote it
Call or put debit spread figures: width, maximum profit and loss, breakeven, reward to risk, debit-to-width, and the model's chance of profit when implied volatility and days are given.
Annotations the server declares
- title: Debit spread calculator
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
expected_moveThe one and two standard deviation price ranges the options market is pricing for a stock over a horizon, from the stock price, implied volatility and days ahead.1 finding
Why it is in this group
- The name "expected_move" says "move": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "expected_move" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "expected_move" says "move": a word for a change.
  What this check looks for
Description, as the server wrote it
The one and two standard deviation price ranges the options market is pricing for a stock over a horizon, from the stock price, implied volatility and days ahead.
Annotations the server declares
- title: Expected move
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
position_sizeHow many contracts fit a risk budget: account equity, the percent of it risked per trade, and the worst case per contract give the dollar budget, the contract count and the share o…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
How many contracts fit a risk budget: account equity, the percent of it risked per trade, and the worst case per contract give the dollar budget, the contract count and the share of equity at risk.
Annotations the server declares
- title: Position size
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
probability_of_profitThe model probability that a stock finishes above or below a price level (a breakeven or a short strike) by a date, from implied volatility, under the lognormal the options market …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The model probability that a stock finishes above or below a price level (a breakeven or a short strike) by a date, from implied volatility, under the lognormal the options market implies.
Annotations the server declares
- title: Probability of profit
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
profit_calculatorPrice any options trade with up to eight legs: maximum profit and loss, breakevens, net credit or debit, the model's chance of profit at expiration and the expected move.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Price any options trade with up to eight legs: maximum profit and loss, breakevens, net credit or debit, the model's chance of profit at expiration and the expected move. Pass a strategy name (for example iron_condor or bull_put_spread) to build standard legs from the stock price, or pass the legs yourself with strikes and prices. Ask it for the max loss on a spread, the breakeven on a straddle, or the chance a condor finishes profitable. Returns a link that opens the same trade in the Optionscanner calculator.
Annotations the server declares
- title: Options profit calculator
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
what_ifWhat a trade is worth if the stock moves, time passes or implied volatility changes: profit or loss on a chosen date at a chosen stock price, the same at expiration, and the change…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
What a trade is worth if the stock moves, time passes or implied volatility changes: profit or loss on a chosen date at a chosen stock price, the same at expiration, and the change for one more day, one more volatility point and a one dollar move. Use it for questions like what happens to my condor if the stock drops ten percent next week.
Annotations the server declares
- title: WHAT IF on an options trade
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 3Looks things up and changes nothing.Show 3 read-only tools

learn_readThe full text of one Learn article, glossary term, calculator page or research page by slug, as Markdown with its link.No findings
Why it is in this group
- The name "learn_read" says "read": a word for reading.
Description, as the server wrote it
The full text of one Learn article, glossary term, calculator page or research page by slug, as Markdown with its link. Use learn_search first when the slug is unknown.
Annotations the server declares
- title: Read a Learn page
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
learn_searchFind the Learn article, glossary term, calculator or research page that answers an options question: strategies, the greeks, implied volatility, IV rank, probability of profit, rol…No findings
Why it is in this group
- The name "learn_search" says "search": a word for reading.
Description, as the server wrote it
Find the Learn article, glossary term, calculator or research page that answers an options question: strategies, the greeks, implied volatility, IV rank, probability of profit, rolling, assignment, the wheel, screening rules and more. Returns titles, summaries and links.
Annotations the server declares
- title: Search the Optionscanner Learn library
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_strategiesThe eleven standard structures the calculator knows (long call and put, covered call, cash-secured put, the four vertical spreads, iron condor, straddle, strangle), each built on a…No findings
Why it is in this group
- The name "list_strategies" says "list": a word for reading.
Description, as the server wrote it
The eleven standard structures the calculator knows (long call and put, covered call, cash-secured put, the four vertical spreads, iron condor, straddle, strangle), each built on an example stock price with its legs, maximum profit and loss, breakevens and chance of profit, with a link to open each one.
Annotations the server declares
- title: List the standard options strategies
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 22, 2026, 14:20 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 7
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: not observed
RFC 9728 protected resource metadata: not observed
Authorization servers: not observed
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

WarnThe whole server
The endpoint served tools/list without credentials, and the list has 7 tools that change things (7 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://optionscanner.ai/mcp: tools/list returned 10 tools to an anonymous client, including profit_calculator (write), what_if (write), expected_move (write), credit_spread (write), debit_spread (write) and 2 more
What this check looks for

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnexpected_move
The server marks "expected_move" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "expected_move" says "move": a word for a change.
What this check looks for
Warndebit_spread
The server marks "debit_spread" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 4.1.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http optionscanner https://optionscanner.ai/mcp

claude mcp add --transport http optionscanner https://optionscanner.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__optionscanner__list_strategies",
      "mcp__optionscanner__learn_search",
      "mcp__optionscanner__learn_read"
    ],
    "ask": [
      "mcp__optionscanner__profit_calculator",
      "mcp__optionscanner__what_if",
      "mcp__optionscanner__expected_move",
      "mcp__optionscanner__credit_spread",
      "mcp__optionscanner__debit_spread",
      "mcp__optionscanner__probability_of_profit",
      "mcp__optionscanner__position_size"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as optionscanner. Review it before you use it.

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/ai.optionscanner/optionscanner/verify?hash=1ca5b385c8cb38e2d7bc617d05049b5662699cf02e0571467a8501bcb043c280" | jq -e '.changed == false'

Pinned hash 1ca5b385c8cb, from Oct 21, 2026, 18:41 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/ai.optionscanner/optionscanner/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/ai.optionscanner/optionscanner.svg)](https://anlyon.dev/servers/ai.optionscanner/optionscanner)

Source: MCP Registry. Synced Oct 21, 2026, 17:42 UTC.