QuantToGo【说法百科】
com.quanttogo/quanttogo-mcpquanttogo.comstreamable-httpv1.0.1Scanned
QuantToGo【说法百科】的 MCP 服务：A 股持仓风险读数、持有理由核对、每天替你盯着的风控单。
8 tools: 8 change things.
- Reads private data · 0
- Reads text others write · 0
- Can send data out · 3
- No findings
Anlyon alternative
8 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
8 tools
Changes things 8Claude Code: ask
create_risk_order建一张风控单（替用户盯着）。必须有理由：reasons 至少一个标签，没有理由不建——先用 verify_reasons 问清楚。建好后每天收盘后检查理由、过热档、警戒线，有变化才告诉她。警戒线三档 guard_k：1.0（紧，正常波动约四成会碰到）、1.5（默认）、2.0（松）。需要手机号：和网站是同一个账户，没有就按这个手机号新建。同一标的已有在盯的单不…Can send data outNo findings
Why it is in this group
- The name "create_risk_order" says "create": a word for a change.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it 建一张风控单（替用户盯着）。必须有理由：reasons 至少一个标签，没有理由不建——先用 verify_reasons 问清楚。建好后每天收盘后检查理由、过热档、警戒线，有变化才告诉她。警戒线三档 guard_k：1.0（紧，正常波动约四成会碰到）、1.5（默认）、2.0（松）。需要手机号：和网站是同一个账户，没有就按这个手机号新建。同一标的已有在盯的单不会重复建。
evidence_card广成子的证据卡（可选）：某个申万一级行业今天的机会分、证据充分度和打分依据，只读。No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it 广成子的证据卡（可选）：某个申万一级行业今天的机会分、证据充分度和打分依据，只读。
ledger_review台账复盘：红灯亮了之后真的跌了吗。返回最近几次红灯（亮灯日、行业、到今天/三个月内的最大跌幅、有没有跌过 5%）、历史比例和样本数、今天亮起和熄灭的红灯。No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it 台账复盘：红灯亮了之后真的跌了吗。返回最近几次红灯（亮灯日、行业、到今天/三个月内的最大跌幅、有没有跌过 5%）、历史比例和样本数、今天亮起和熄灭的红灯。
login用手机号登录/注册。和网站 QuantToGo 是同一套账户：手机号查到就是她，查不到就按这个手机号新建（限时免费）。返回账户状态。只有建单、查我的单需要；查读数、市场、台账不需要。Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it 用手机号登录/注册。和网站 QuantToGo 是同一套账户：手机号查到就是她，查不到就按这个手机号新建（限时免费）。返回账户状态。只有建单、查我的单需要；查读数、市场、台账不需要。
market_now今天的市场环境：全市场过热档、大盘波动档、亮红灯的行业（过热档高且大盘波动不高）、新亮和熄灭的红灯、31 个申万一级行业按过热档排序和各自三个月内跌 ≥15% 的概率。No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it 今天的市场环境：全市场过热档、大盘波动档、亮红灯的行业（过热档高且大盘波动不高）、新亮和熄灭的红灯、31 个申万一级行业按过热档排序和各自三个月内跌 ≥15% 的概率。
my_risk_orders查我的风控单：这个手机号名下在盯的、碰线的、已结束的单，每张的警戒线、仓位、理由、建单以来涨跌、今天的过热档和概率。Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it 查我的风控单：这个手机号名下在盯的、碰线的、已结束的单，每张的警戒线、仓位、理由、建单以来涨跌、今天的过热档和概率。
risk_check查风险读数（鸿钧老祖）。给一个 A 股标的：个股名字或 6 位代码、申万一级行业名、ETF/基金名字或代码、宽基指数名。返回：三个月内跌 ≥15% 的概率、平时的概率、它自己历史的概率、在不在安全区、最坏情况、过热档和红灯、警戒线三档（1.0/1.5/2.0 倍波动带）、按哪个标的代算。用户看到的标的一律写「名字（代码）」。No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it 查风险读数（鸿钧老祖）。给一个 A 股标的：个股名字或 6 位代码、申万一级行业名、ETF/基金名字或代码、宽基指数名。返回：三个月内跌 ≥15% 的概率、平时的概率、它自己历史的概率、在不在安全区、最坏情况、过热档和红灯、警戒线三档（1.0/1.5/2.0 倍波动带）、按哪个标的代算。用户看到的标的一律写「名字（代码）」。
verify_reasons核对持有理由。把用户说的理由对到九类里（周期反转、趋势延续、估值见底、产业受益、龙头集中、高股息防守、超跌反弹、题材热度、避险），返回每条理由今天成立/不成立/已证伪，以及依据的数字。如果用户的理由属于「大家都在买 / 朋友推荐 / 别人说的 / 听说有消息 / 等回本 / 拿了很久 / 这是用途」这七类，这不算能每天检查的理由，返回对应的一句话，请把那句话…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it 核对持有理由。把用户说的理由对到九类里（周期反转、趋势延续、估值见底、产业受益、龙头集中、高股息防守、超跌反弹、题材热度、避险），返回每条理由今天成立/不成立/已证伪，以及依据的数字。如果用户的理由属于「大家都在买 / 朋友推荐 / 别人说的 / 听说有消息 / 等回本 / 拿了很久 / 这是用途」这七类，这不算能每天检查的理由，返回对应的一句话，请把那句话转给用户并再问一次真正的理由。
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out3
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http quanttogo https://mcp.quanttogo.com/v2claude mcp add --transport http quanttogo https://mcp.quanttogo.com/v2Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [],
"ask": [
"mcp__quanttogo__risk_check",
"mcp__quanttogo__verify_reasons",
"mcp__quanttogo__create_risk_order",
"mcp__quanttogo__my_risk_orders",
"mcp__quanttogo__market_now",
"mcp__quanttogo__ledger_review",
"mcp__quanttogo__evidence_card",
"mcp__quanttogo__login"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as quanttogo. Review it before you use it.
Capability tags behind 3 rules
- mcp__quanttogo__create_risk_order outbound
- mcp__quanttogo__my_risk_orders outbound
- mcp__quanttogo__login outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.quanttogo/quanttogo-mcp/verify?hash=8d4482cdf62f652998b24bbf4133ff15664866a841bdfee280d09fcc6f0fc1ac" | jq -e '.changed == false'Pinned hash 8d4482cdf62f, from Oct 24, 2026, 18:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.quanttogo/quanttogo-mcp/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.quanttogo/quanttogo-mcp)Source: MCP Registry · repository. Synced Oct 24, 2026, 18:17 UTC.