SiteCheck Crypto & Finance
io.github.bck-stack/sitecheck-crypto-financebck-stackstreamable-httpv1.0.0Scanned
128 pay-per-call agent tools: crypto, DeFi, on-chain and finance data tools. x402
128 tools: 4 do something that can't be undone, 122 change things and 2 only read.
- Reads private data · 2
- Reads text others write · 128
- Can send data out · 2
- 9 findings
Anlyon alternative
126 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
128 tools
Can't be undone 4Claude Code: ask
crypto_circle_cctp_transfersCircle CCTP (USDC cross-chain transfer) fast-burn allowance and the fee tiers for one source-to-destination domain pair.Reads text others write1 finding
Why it is in this group
- The name "crypto_circle_cctp_transfers" says "transfer": a word for a change that another call does not undo.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The server marks "crypto_circle_cctp_transfers" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_circle_cctp_transfers" says "transfer": a word for a change that another call does not undo.
Description, as the server wrote it Circle CCTP (USDC cross-chain transfer) fast-burn allowance and the fee tiers for one source-to-destination domain pair. Narrowed: the attestation status of a specific transfer needs its burn transaction hash, which this tool does not take, so per-transfer attestation is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_whale_alert_transfersBitcoin large transactions in the latest block from mempool.space: total output in BTC, fee, txid and block height, filtered by minBtc.Reads text others write1 finding
Why it is in this group
- The name "crypto_whale_alert_transfers" says "transfer": a word for a change that another call does not undo.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The server marks "crypto_whale_alert_transfers" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_whale_alert_transfers" says "transfer": a word for a change that another call does not undo.
Description, as the server wrote it Bitcoin large transactions in the latest block from mempool.space: total output in BTC, fee, txid and block height, filtered by minBtc. Bitcoin only (no ETH or SOL). Covers the first 25 transactions of the tip block; output total includes change, so it is transaction size, not one wallet's transfer. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
dev_investing_com_economic_calendarInvesting.com economic calendar for a date range (up to 7 days): each release with UTC time, country, currency, event name, category, importance (low/medium/high), reference period…Reads text others writeCan send data out1 finding
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Findings
- Warn
The server marks "dev_investing_com_economic_calendar" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it Investing.com economic calendar for a date range (up to 7 days): each release with UTC time, country, currency, event name, category, importance (low/medium/high), reference period, actual, forecast and previous values with unit, Investing's actual-vs-forecast verdict, preliminary flag and the publishing source. Filter by country code, currency or minimum importance. Read from the API the Investing.com calendar page calls. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_stooq_historical_stocksDaily historical prices for a US stock, ETF or index: date, open, high, low, close and volume, newest first, for any date range up to 10 years back (max 1,000 rows per call).Reads text others writeCan send data out1 finding
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Findings
- Warn
The server marks "finance_stooq_historical_stocks" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it Daily historical prices for a US stock, ETF or index: date, open, high, low, close and volume, newest first, for any date range up to 10 years back (max 1,000 rows per call). Data from Nasdaq.com's public historical quotes API (Stooq blocks automated downloads). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Changes things 122Claude Code: ask
crypto_1inch_pathfinder_quotesBest swap quote for a token pair on an EVM chain, compared across two public DEX aggregators (KyberSwap and Velora/ParaSwap): amount out, USD values, estimated gas in USD, price im…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Best swap quote for a token pair on an EVM chain, compared across two public DEX aggregators (KyberSwap and Velora/ParaSwap): amount out, USD values, estimated gas in USD, price impact against the input's USD value and the pools/DEXes used, plus which aggregator gives more. Chains: Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche. Indicative quotes, not executable orders. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_aave_lending_marketsAave v3 Ethereum main-market reserves: supply and borrow APY, utilization, max LTV, liquidation threshold, supply/borrow caps status, frozen/paused flags, total supplied and availa…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Aave v3 Ethereum main-market reserves: supply and borrow APY, utilization, max LTV, liquidation threshold, supply/borrow caps status, frozen/paused flags, total supplied and available liquidity. Filter by symbol, or get the first 20 reserves. Ethereum main market only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_arbiscan_l2_rollupArbitrum One rollup batch postings to Ethereum L1 and the L1 gas they incurred: the latest SequencerBatchDelivered events on the SequencerInbox with batch number, L1 block and time…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Arbitrum One rollup batch postings to Ethereum L1 and the L1 gas they incurred: the latest SequencerBatchDelivered events on the SequencerInbox with batch number, L1 block and time, data location (blob or calldata), poster, execution gas, blob gas, gas prices and fees in ETH, plus totals. Read from Ethereum mainnet via Etherscan API V2. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_balancer_v2_poolsBalancer V2 pools by total liquidity (USD): pool name, type (weighted, stable, composable stable, and others), token symbols with weights where the pool has them, 24h volume and ad…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Balancer V2 pools by total liquidity (USD): pool name, type (weighted, stable, composable stable, and others), token symbols with weights where the pool has them, 24h volume and address. Top 1 to 20. Values are as the Balancer API reports them; some pools show implausible liquidity and are not corrected. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_basescan_contract_eventsRecent event logs of a contract on Base (chain 8453) from public RPC: block, time order, transaction hash, log index, event name (signature database), topics and data, with ERC-20/…Reads text others write1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The input schema at properties.address.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.address.description: "...(e.g. USDC on Base 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)"
Description, as the server wrote it Recent event logs of a contract on Base (chain 8453) from public RPC: block, time order, transaction hash, log index, event name (signature database), topics and data, with ERC-20/721 Transfer and Approval decoded to from/to/value. Look back up to 5,000 blocks (~2.8 h); optional event-signature filter. Internal transactions are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_berachain_pol_validatorsBerachain Proof-of-Liquidity telemetry from the public Berachain RPC: total BGT (Bera Governance Token) supply read from the BGT contract — BGT is minted only as PoL rewards, so it…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Berachain Proof-of-Liquidity telemetry from the public Berachain RPC: total BGT (Bera Governance Token) supply read from the BGT contract — BGT is minted only as PoL rewards, so its growth is the emitted amount — plus latest, safe and finalized blocks, finality lag, gas price (gwei), gas used % and average block time over the last 20 blocks. Per-gauge and per-validator splits are not read and not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_binance_orderbook_depthBinance spot order book snapshot for one pair: best bid and ask, spread, USD depth within 1% and 2% of mid price (from the returned levels only), and 24h volume, change and high/lo…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Binance spot order book snapshot for one pair: best bid and ask, spread, USD depth within 1% and 2% of mid price (from the returned levels only), and 24h volume, change and high/low. Up to 100 levels per side. Snapshot only; Binance market data, not a merged multi-exchange book. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_bitcoin_hashrate_difficultyBitcoin network hashrate (EH/s) with the last 3 daily averages, current difficulty, difficulty-epoch progress and expected change, and miner revenue over the last 144 blocks (about…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bitcoin network hashrate (EH/s) with the last 3 daily averages, current difficulty, difficulty-epoch progress and expected change, and miner revenue over the last 144 blocks (about one day): total reward incl. fees in BTC, fee share and average reward per block. Network-wide figures from mempool.space, not per-miner. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_bitcoin_mempool_statsBitcoin mempool congestion from mempool.space: unconfirmed transaction count and size, recommended fee rates in sat/vB, difficulty-adjustment progress and estimated retarget date, …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bitcoin mempool congestion from mempool.space: unconfirmed transaction count and size, recommended fee rates in sat/vB, difficulty-adjustment progress and estimated retarget date, and blocks until the next halving (every 210,000 blocks). Current snapshot only; no history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_blast_gold_pointsBlast L2 native yield from the chain itself: for the rebasing USDB (stablecoin yield) and WETH (ETH staking yield) predeploy contracts, total supply and share price — the cumulativ…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Blast L2 native yield from the chain itself: for the rebasing USDB (stablecoin yield) and WETH (ETH staking yield) predeploy contracts, total supply and share price — the cumulative native-yield multiplier since launch (e.g. 1.126 = 12.6% earned) — plus latest/safe/finalized blocks, finality lag, gas price and block time. Blast Gold / DApp points are allocated off-chain by Blast and have no public API, so they are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_chainlink_price_feedsChainlink on-chain price feed (ETH/USD or BTC/USD, Ethereum mainnet): latest round answer in USD, round id, and the start and update times with the age of the last update in second…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Chainlink on-chain price feed (ETH/USD or BTC/USD, Ethereum mainnet): latest round answer in USD, round id, and the start and update times with the age of the last update in seconds. Only the two feeds listed here are supported. Heartbeat and deviation thresholds are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_coinbase_spot_exchangeCoinbase Exchange (US spot) order book for one product: best bid and ask, spread, USD depth within 1% and 2% of mid (aggregated level-2 levels only), 24h base volume, 24h RFQ (inst…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Coinbase Exchange (US spot) order book for one product: best bid and ask, spread, USD depth within 1% and 2% of mid (aggregated level-2 levels only), 24h base volume, 24h RFQ (institutional request-for-quote) volume, last price and 24h high/low. Coinbase Exchange data only, not Coinbase Advanced or other venues. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_coingecko_market_depthCoinGecko per-exchange market depth for one coin: USD cost to move price up 2% and down 2% (liquidity), 24h volume in USD, last price and bid-ask spread, for the 15 highest-volume …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it CoinGecko per-exchange market depth for one coin: USD cost to move price up 2% and down 2% (liquidity), 24h volume in USD, last price and bid-ask spread, for the 15 highest-volume trading pairs. Each row is one exchange pair, not a merged order book. Data is CoinGecko's, updated on its own schedule. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_coinmarketcap_listingsRecently added tokens on CoinMarketCap (public new-listings page): name, symbol, date added, price, 24h change, 24h volume and market cap, from the page's embedded data.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Recently added tokens on CoinMarketCap (public new-listings page): name, symbol, date added, price, 24h change, 24h volume and market cap, from the page's embedded data. Exchange volume rank is not on this page and is not reported. Reads the public page, not the paid API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_compound_market_statsCompound v3 (Comet) market stats on Ethereum read on-chain: utilization, supply and borrow APY, total supply and borrow of the base asset, and every collateral asset with its borro…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Compound v3 (Comet) market stats on Ethereum read on-chain: utilization, supply and borrow APY, total supply and borrow of the base asset, and every collateral asset with its borrow and liquidation collateral factors, liquidation factor and supply cap. Markets: usdc (cUSDCv3) or weth (cWETHv3). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_convex_vlcvx_votingConvex Finance (cvx.eth) governance on Snapshot: the newest proposals (1 to 20) with title, state, start and end time, number of votes and the top two choice scores.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Convex Finance (cvx.eth) governance on Snapshot: the newest proposals (1 to 20) with title, state, start and end time, number of votes and the top two choice scores. Votes are the Snapshot tallies. vlCVX lock balances and per-wallet voting power are not in this source and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_cowswap_batch_auctionsCoW Protocol (Ethereum) latest batch auction result: auction id and block window, number of solver solutions, the winning solution (solver, score, ranking, settlement tx), and the …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it CoW Protocol (Ethereum) latest batch auction result: auction id and block window, number of solver solutions, the winning solution (solver, score, ranking, settlement tx), and the top five solutions by ranking. Order details and clearing prices are not returned in this summary. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_cross_chain_bridge_flowsCross-chain transfer volume from Wormholescan (Wormhole network): USD and token counts grouped by source to destination chain over the newest N transfers (1 to 100).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Cross-chain transfer volume from Wormholescan (Wormhole network): USD and token counts grouped by source to destination chain over the newest N transfers (1 to 100). A recent window, not total bridge TVL or long-term trends. Transfers with no USD price are counted but not summed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_crypto_fundraising_roundsRecent crypto and Web3 venture funding rounds (project, date, round type, amount and valuation in USD, lead and other investors, category, chains) from DefiLlama's public Raises pa…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Recent crypto and Web3 venture funding rounds (project, date, round type, amount and valuation in USD, lead and other investors, category, chains) from DefiLlama's public Raises page. Filter by date window, investor, category, chain, round or minimum amount. Amounts are as DefiLlama lists them and can be missing for undisclosed rounds; new rounds appear within days. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_crypto_hack_rekt_databaseRekt News leaderboard of the largest crypto hacks and exploits: rank, incident name, audit status as listed, loss in USD and date, from the public page (top 1 to 50).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Rekt News leaderboard of the largest crypto hacks and exploits: rank, incident name, audit status as listed, loss in USD and date, from the public page (top 1 to 50). Root-cause write-ups and attack technique (e.g. flash loans) are not in the list and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_crypto_liquidations_feedOKX perpetual-swap liquidations for one underlying (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it OKX perpetual-swap liquidations for one underlying (e.g. BTC-USD): the most recent 100 filled forced liquidations, split into long and short liquidated USD value, with the largest events. Covers OKX only, and the window is the latest 100 events, not a fixed 24h total. Other exchanges' liquidation streams are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_curve_gauge_weightsCurve Finance gauges on one chain (default Ethereum): CRV emission APR range, CRV inflation rate per second and working supply per gauge, with the pool name and addresses.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Curve Finance gauges on one chain (default Ethereum): CRV emission APR range, CRV inflation rate per second and working supply per gauge, with the pool name and addresses. Sorted by CRV APR, top 1 to 50. Relative gauge weights and bribe yields are not in this source and are not reported. Small pools can show very high APR. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_debank_wallet_portfolioMulti-chain wallet net worth with DeFi positions and debt (40+ EVM chains and Solana, data from the Zerion API): total value in USD split by wallet, deposited, borrowed, locked and…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Multi-chain wallet net worth with DeFi positions and debt (40+ EVM chains and Solana, data from the Zerion API): total value in USD split by wallet, deposited, borrowed, locked and staked, top chains, and every protocol position (protocol, chain, type such as deposit, loan, staked, reward or locked, token, amount and USD value) grouped by protocol, with total debt. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_defillama_stablecoinsStablecoin market cap (circulating USD), 1/7/30-day circulating change (mint/burn proxy), peg price and depeg % from DefiLlama.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Stablecoin market cap (circulating USD), 1/7/30-day circulating change (mint/burn proxy), peg price and depeg % from DefiLlama. Pass symbols (e.g. USDT,USDC) or leave empty for the 10 largest. Net change is a change in circulating supply, not separate mint and burn events. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_defillama_tvl_oracleCurrent total value locked (TVL, USD) of one DeFi protocol from DefiLlama, by protocol slug (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Current total value locked (TVL, USD) of one DeFi protocol from DefiLlama, by protocol slug (e.g. aave, uniswap-v3). Returns the single current TVL number only; chain breakdown and history are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_defillama_yieldsDeFi pool APY (total, base, reward), TVL, 7/30-day APY change and impermanent-loss estimate (il7d, ilRisk) from DefiLlama.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it DeFi pool APY (total, base, reward), TVL, 7/30-day APY change and impermanent-loss estimate (il7d, ilRisk) from DefiLlama. Filter by project, chain and symbol; returns up to 20 pools by TVL. APY is DefiLlama's estimate, not a guaranteed return. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_deribit_options_skewDeribit BTC or ETH options for one expiry (default: nearest unexpired): at-the-money implied volatility (mark IV), and an IV skew at ±10% moneyness (put at 0.9x spot minus call at …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Deribit BTC or ETH options for one expiry (default: nearest unexpired): at-the-money implied volatility (mark IV), and an IV skew at ±10% moneyness (put at 0.9x spot minus call at 1.1x spot, in IV points). This is a moneyness skew, not a 25-delta skew: Deribit's summary has no delta, so per-strike delta calls are not made. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_dex_pool_liquidityLive DEX pool snapshot from DexScreener for one pool address on one chain (Uniswap, Raydium, Curve and other DEXes DexScreener indexes): USD liquidity, token reserves, price, 24h v…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Live DEX pool snapshot from DexScreener for one pool address on one chain (Uniswap, Raydium, Curve and other DEXes DexScreener indexes): USD liquidity, token reserves, price, 24h volume and transactions, FDV. Slippage is not computed. Data is DexScreener's aggregate, not raw on-chain reads. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_dydx_chain_marketsdYdX v4 (Cosmos app-chain) perpetual market for one ticker: status, oracle price, 24h price change, 24h USD volume and trade count, hourly funding rate, initial and maintenance mar…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it dYdX v4 (Cosmos app-chain) perpetual market for one ticker: status, oracle price, 24h price change, 24h USD volume and trade count, hourly funding rate, initial and maintenance margin, and open interest in base units and an approximate USD value at the oracle price. Indexer data only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_ethereum_gas_telemetryEthereum EIP-1559 gas per recent block: base fee (gwei), gas used ratio, and priority fee (tip) percentiles at 10/50/90 from eth_feeHistory, plus the next block's base fee.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Ethereum EIP-1559 gas per recent block: base fee (gwei), gas used ratio, and priority fee (tip) percentiles at 10/50/90 from eth_feeHistory, plus the next block's base fee. Gas used by contract is not included (this RPC does not give it). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_ethereum_staking_rewardsEthereum proof-of-stake yield snapshot: Lido stETH APR (protocol-wide, after Lido fees) and the beacon chain's finalized and justified epochs with the finality flag.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Ethereum proof-of-stake yield snapshot: Lido stETH APR (protocol-wide, after Lido fees) and the beacon chain's finalized and justified epochs with the finality flag. Validator queue and churn are not in these sources and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_etherscan_label_cloudEtherscan public address-label cloud: entity labels (e.g.Reads text others write1 finding
Why it is in this group
- The name "crypto_etherscan_label_cloud" says "label": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The server marks "crypto_etherscan_label_cloud" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_etherscan_label_cloud" says "label": a word for a change.
Description, as the server wrote it Etherscan public address-label cloud: entity labels (e.g. Binance, 0x Protocol) with counts of tagged accounts, transactions and tokens, from the label page's embedded data. Filter by name or take the top labels by total. Does not list individual deposit wallets and does not separate CEX deposit tags from other labels. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_fear_greed_indexCrypto Fear & Greed Index (0-100) from alternative.me: today's value and label, change vs yesterday and vs 7 days ago, 7-day average, and a sentiment momentum label (rising, fallin…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Crypto Fear & Greed Index (0-100) from alternative.me: today's value and label, change vs yesterday and vs 7 days ago, 7-day average, and a sentiment momentum label (rising, falling, flat). Daily; the source updates once a day. Attribution to alternative.me is requested by the source. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_gmx_v2_glv_vaultsGMX v2 (Arbitrum) GLV liquidity vaults: each vault's name, vault token address, long and short collateral tokens, whether it is listed, and listing date.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it GMX v2 (Arbitrum) GLV liquidity vaults: each vault's name, vault token address, long and short collateral tokens, whether it is listed, and listing date. Trader net exposure, vault APY and GM market composition are not in this response and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_honeypot_detectorEVM token honeypot check from honeypot.is: simulated buy/sell success, honeypot verdict, buy/sell/transfer tax, risk flags, open-source status and the main DEX pair liquidity.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it EVM token honeypot check from honeypot.is: simulated buy/sell success, honeypot verdict, buy/sell/transfer tax, risk flags, open-source status and the main DEX pair liquidity. EVM only (no Solana). Simulation results can change with pool state; not financial advice. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_hyperliquid_perps_depthHyperliquid L1 perpetual market snapshot for one coin: best bid and ask, spread, USD depth within 1% of mid (from the 20 returned levels per side), mark and oracle prices, hourly f…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Hyperliquid L1 perpetual market snapshot for one coin: best bid and ask, spread, USD depth within 1% of mid (from the 20 returned levels per side), mark and oracle prices, hourly funding rate, open interest in USD and 24h notional volume. Public market data only; vault PnL is not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_jupiter_solana_routingJupiter aggregator quote on Solana for an exact-input swap: input and output amounts in base units, price impact %, USD value, slippage, and the AMM route legs (venue labels).Reads text others write1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The input schema at properties.inputMint.description contains a 43-character base64 string.
What this check looks forMatched text
inputSchema.properties.inputMint.description: "...g. SOL wrapped mint So11111111111111111111111111111111111111112"
Description, as the server wrote it Jupiter aggregator quote on Solana for an exact-input swap: input and output amounts in base units, price impact %, USD value, slippage, and the AMM route legs (venue labels). Quote only, no transaction. Amounts stay in the token's smallest unit (decimals are not looked up). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_lido_steth_pegLido stETH vs ETH peg from public USD prices (DefiLlama coins API): stETH and ETH price, discount or premium in %, plus Lido's total stETH staked and market cap.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Lido stETH vs ETH peg from public USD prices (DefiLlama coins API): stETH and ETH price, discount or premium in %, plus Lido's total stETH staked and market cap. The two prices can be quoted a few minutes apart. Curve pool balances and the Lido withdrawal queue are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_linea_consensys_rollupLinea zkEVM rollup telemetry from the public Linea RPC: latest sequencer block, safe block and finalized block (proven and finalized on Ethereum L1) with numbers, times and transac…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Linea zkEVM rollup telemetry from the public Linea RPC: latest sequencer block, safe block and finalized block (proven and finalized on Ethereum L1) with numbers, times and transaction counts, the finality lag in blocks and seconds, gas price (gwei), base fee, gas used % of limit and average block time over the last 20 blocks. Batch/proof IDs are not exposed by the RPC and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_mantle_da_eigenlayerMantle Network L2 telemetry from the public Mantle RPC: latest block, safe block (its batch is posted to Ethereum/EigenDA) and finalized block with numbers, times and transaction c…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Mantle Network L2 telemetry from the public Mantle RPC: latest block, safe block (its batch is posted to Ethereum/EigenDA) and finalized block with numbers, times and transaction counts, the head-to-safe and head-to-finalized lags in blocks and seconds, gas price (gwei), base fee, gas used % of limit and average block time over the last 20 blocks. Treasury AUM and per-blob EigenDA statistics are not in the RPC and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_mev_block_analyticsEthereum MEV-Boost delivered blocks from the Flashbots relay: proposer payment in ETH (block value), transaction count, gas used vs limit, and builder pubkeys with block counts.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Ethereum MEV-Boost delivered blocks from the Flashbots relay: proposer payment in ETH (block value), transaction count, gas used vs limit, and builder pubkeys with block counts. Covers the newest blocks only (1 to 50). Sandwich volume is not in this source and is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_nft_floor_wash_detectorERC-721 collection activity on Ethereum from Blockscout: name, holder count, supply and the newest 50 transfers, with round-trip transfers (a token sent A to B and straight back to…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it ERC-721 collection activity on Ethereum from Blockscout: name, holder count, supply and the newest 50 transfers, with round-trip transfers (a token sent A to B and straight back to A) flagged as possible wash signals. No sale prices, floor price or royalties: this source does not provide them. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_optimism_superchain_txOP Mainnet (Optimism) recent blocks from the public RPC: transactions per block, gas used per block, block time, and the transaction rate over the last N blocks (1 to 10).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it OP Mainnet (Optimism) recent blocks from the public RPC: transactions per block, gas used per block, block time, and the transaction rate over the last N blocks (1 to 10). Sequencer revenue and Superchain-wide totals are not in this RPC and are not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_polygon_pos_checkpointsPolygon PoS checkpoints from the Heimdall API: the latest K checkpoints (1 to 10) with their Bor block range, timestamp and proposer, plus the average spacing in blocks and seconds…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Polygon PoS checkpoints from the Heimdall API: the latest K checkpoints (1 to 10) with their Bor block range, timestamp and proposer, plus the average spacing in blocks and seconds. Checkpoints are the Ethereum-anchored root commitments. State-sync logs are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_pyth_network_oraclesPyth Network oracle prices with confidence bands, read on-chain from Pyth's Solana push feeds: price, confidence interval (absolute and %), EMA price and EMA confidence, publish ti…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Pyth Network oracle prices with confidence bands, read on-chain from Pyth's Solana push feeds: price, confidence interval (absolute and %), EMA price and EMA confidence, publish time and age in seconds, feed id and account, for up to 20 symbols (BTCUSD, ETHUSD, SOLUSD, gold XAUUSD, stablecoins, LST rates; ~65 feeds). Call with list=true for every available symbol. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_sanctioned_crypto_walletsOFAC SDN list digital-currency addresses (from the Remarks field 'Digital Currency Address - <CODE> <address>'): list up to 200 entries with currency code, address and sanctioned e…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it OFAC SDN list digital-currency addresses (from the Remarks field 'Digital Currency Address - <CODE> <address>'): list up to 200 entries with currency code, address and sanctioned entity name, optionally filtered by currency or checked for one address. Covers the current SDN.CSV only; the list is not complete for every chain, and a miss is not proof an address is clean. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_scroll_l2_zk_proofsScroll (zkEVM L2) network statistics from its public explorer: total blocks and transactions, average block time, gas prices, network utilization and today's transactions, plus the…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Scroll (zkEVM L2) network statistics from its public explorer: total blocks and transactions, average block time, gas prices, network utilization and today's transactions, plus the newest blocks (1 to 10) with gas use and transaction counts. Narrowed: proof and batch-finalization status is not in this public API and is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_smart_contract_verifyEVM contract verification status from Sourcify (open, no key): match type (exact/partial), compiler, contract name, ABI function and event counts, proxy implementations.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it EVM contract verification status from Sourcify (open, no key): match type (exact/partial), compiler, contract name, ABI function and event counts, proxy implementations. Only verified contracts; source files are not returned. Unverified contracts give a 404. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_solana_token_extensionsSolana SPL mint audit from the chain: program (Token or Token-2022), authorities, supply and decimals, plus Token-2022 extensions with risk flags for permanent delegate, transfer h…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Solana SPL mint audit from the chain: program (Token or Token-2022), authorities, supply and decimals, plus Token-2022 extensions with risk flags for permanent delegate, transfer hook, transfer fee, default frozen state and mint close. Reads the mint account only; it does not check holders or liquidity. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_solana_validator_clusterSolana validator snapshot from the public RPC: active and delinquent validator counts, total active stake in SOL, stake-weighted commission, cluster skip rate over the latest epoch…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Solana validator snapshot from the public RPC: active and delinquent validator counts, total active stake in SOL, stake-weighted commission, cluster skip rate over the latest epoch block production, and the top validators by stake with their commission and skip rate. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_solscan_account_tokensSolana account inventory: SOL balance, every SPL token account (Token and Token-2022 programs) with mint, amount, decimals and frozen state, token name, symbol, USD price and value…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Solana account inventory: SOL balance, every SPL token account (Token and Token-2022 programs) with mint, amount, decimals and frozen state, token name, symbol, USD price and value for the largest holdings (Jupiter token data), and the latest transaction signatures with time and status. Read from Solana RPC. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_sui_move_objectsSui mainnet current epoch from the public GraphQL API: epoch number, reference gas price (MIST per gas unit), epoch start and end time, and total checkpoints.Reads text others write1 finding
Why it is in this group
- The name "crypto_sui_move_objects" says "move": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The server marks "crypto_sui_move_objects" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_sui_move_objects" says "move": a word for a change.
Description, as the server wrote it Sui mainnet current epoch from the public GraphQL API: epoch number, reference gas price (MIST per gas unit), epoch start and end time, and total checkpoints. Shared objects and package ids are not included: the public JSON-RPC is deprecated and this tool does not query object lists. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_sushiswap_route_quotesSushiSwap route quote for an exact-input swap on one EVM chain: amount out, swap price, price impact, gas spent and the tokens in the route.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it SushiSwap route quote for an exact-input swap on one EVM chain: amount out, swap price, price impact, gas spent and the tokens in the route. Quote only, no transaction data. The API needs a sender address; if none is given, a fixed placeholder address is sent and nothing is signed or executed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_tether_treasury_burnsUSDT (Ethereum) supply changes from the USDT contract's own events over the last N blocks (1 to 200000, about 4 weeks): Tether issues (Issue), redemptions (Redeem) and destroyed fu…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it USDT (Ethereum) supply changes from the USDT contract's own events over the last N blocks (1 to 200000, about 4 weeks): Tether issues (Issue), redemptions (Redeem) and destroyed funds of blacklisted addresses (DestroyedBlackFunds), with counts, totals and the latest and largest events. On-chain events only, not Tether's treasury reports. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_token_holder_concentrationEthereum ERC-20 holder concentration from Blockscout: top 100 holders' share of total supply, top 10 share, and a Gini coefficient over those 100 balances.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Ethereum ERC-20 holder concentration from Blockscout: top 100 holders' share of total supply, top 10 share, and a Gini coefficient over those 100 balances. Gini is over the top 100 only, not all holders. Ethereum mainnet only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_token_vesting_scheduleToken emission and unlock schedule per allocation label (team, investors, rewards, etc.) from DefiLlama emissions data, by protocol slug: last unlock day and amount, next scheduled…Reads text others write1 finding
Why it is in this group
- The name "crypto_token_vesting_schedule" says "schedule": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
The server marks "crypto_token_vesting_schedule" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_token_vesting_schedule" says "schedule": a word for a change.
Description, as the server wrote it Token emission and unlock schedule per allocation label (team, investors, rewards, etc.) from DefiLlama emissions data, by protocol slug: last unlock day and amount, next scheduled unlock (if any in the data), and total unlocked to date. Amounts are in tokens. Coverage depends on DefiLlama having the protocol's emissions file. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_ton_blockchain_jettonsTON jetton (token) masters from TON Center's public API: the newest N jetton masters (1 to 10) with raw address, total supply in base units, mintable flag, admin address and metada…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it TON jetton (token) masters from TON Center's public API: the newest N jetton masters (1 to 10) with raw address, total supply in base units, mintable flag, admin address and metadata URI. Jetton holder balances and Toncoin staking are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_tornado_cash_anonymityTornado Cash ETH pools (0.1, 1, 10, 100 ETH): current pool balance, contract code presence, and an approximate anonymity set = balance divided by denomination (deposits not yet wit…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Tornado Cash ETH pools (0.1, 1, 10, 100 ETH): current pool balance, contract code presence, and an approximate anonymity set = balance divided by denomination (deposits not yet withdrawn, if nothing else moved the balance). Ethereum pools only; no relayer or multi-chain data. Sanctioned protocol data, read for its public on-chain state. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_uniswap_v3_ticksUniswap V3 liquidity distribution for an Ethereum pool, read on-chain: tokens, fee tier, tick spacing, current tick and price (both directions, decimals applied), in-range liquidit…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Uniswap V3 liquidity distribution for an Ethereum pool, read on-chain: tokens, fee tier, tick spacing, current tick and price (both directions, decimals applied), in-range liquidity, and every initialized tick within a window around the price with its price, liquidityNet and the active liquidity of the range above it — the shape of concentrated liquidity. Default pool: USDC/WETH 0.05%. Price: $0.003 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_zapper_token_balancesToken balances of an EVM wallet across chains from Blockscout explorers: native coin and ERC-20 holdings with amount, USD price and USD value (largest first), plus per-chain and ov…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Token balances of an EVM wallet across chains from Blockscout explorers: native coin and ERC-20 holdings with amount, USD price and USD value (largest first), plus per-chain and overall USD totals. Ethereum, Optimism and Gnosis by default; Base, Arbitrum and Polygon when the operator's free Blockscout key is set. Prices are Blockscout's; airdropped tokens can be spam. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_zerion_dna_feedOn-chain wallet portfolio and performance from Zerion across 40+ EVM chains and Solana: total value in USD, split by position type (wallet, deposited, borrowed, locked, staked) and…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it On-chain wallet portfolio and performance from Zerion across 40+ EVM chains and Solana: total value in USD, split by position type (wallet, deposited, borrowed, locked, staked) and by chain, 1-day change, lifetime PnL (realized, unrealized, total gain and %, invested, fees) and, with a period, the value history chart (up to 60 points). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
crypto_zksync_era_hyperchainszkSync Era rollup batches from the public block explorer API: the newest N batches (1 to 20) with batch number, time, status (sealed, committed, proven, executed), L1 and L2 transa…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it zkSync Era rollup batches from the public block explorer API: the newest N batches (1 to 20) with batch number, time, status (sealed, committed, proven, executed), L1 and L2 transaction counts, and the chain ids where each step was posted. Hyperchain (other zkSync chains) data is not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
dev_morningstarMorningstar quote page data for a US stock, ETF or mutual fund: name, ticker, Morningstar star rating, key statistics shown free on the page (stocks: previous close, day and 52-wee…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Morningstar quote page data for a US stock, ETF or mutual fund: name, ticker, Morningstar star rating, key statistics shown free on the page (stocks: previous close, day and 52-week range, bid/ask, market cap, P/E, P/S, dividend yield, sector, industry, style box, employees), top-10 holdings with weight, market value and sector plus portfolio date (ETFs/funds), and the analyst report headline. Subscriber-only values are omitted. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_alpha_vantage_publicAlpha Vantage global quote for one stock or ETF ticker: price, open/high/low, volume, previous close and change, from Alpha Vantage's free API.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Alpha Vantage global quote for one stock or ETF ticker: price, open/high/low, volume, previous close and change, from Alpha Vantage's free API. Needs a free Alpha Vantage API key (ALPHAVANTAGE_API_KEY); free keys are rate limited. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_asian_dev_bank_dataAsian Development Bank financing (loans, grants, technical assistance) from ADB's official IATI data via d-portal.org: IATI activity id, ADB project number and link, title, recipie…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Asian Development Bank financing (loans, grants, technical assistance) from ADB's official IATI data via d-portal.org: IATI activity id, ADB project number and link, title, recipient country, status, start/end dates, committed and disbursed USD, description. Filter by country (ISO2) and title words; newest start first. Open data, no key. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_bank_of_england_iadbBank of England official daily statistics (IADB) for one series code (default XUDLUSS) over the last N days, from the Bank's CSV download.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bank of England official daily statistics (IADB) for one series code (default XUDLUSS) over the last N days, from the Bank's CSV download. Values as published; no interpretation of the series. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_bcb_brazil_central_bankBrazil Central Bank (BCB) SGS time series: the latest N values of one series number (default 12), with dates and values as published.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Brazil Central Bank (BCB) SGS time series: the latest N values of one series number (default 12), with dates and values as published. Series numbers are listed in the BCB SGS catalogue. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_binance_pricesBinance spot last price for one trading pair (for example BTCUSDT), from Binance's public ticker endpoint.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Binance spot last price for one trading pair (for example BTCUSDT), from Binance's public ticker endpoint. Only the last price is returned; no order book or history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_bitfinex_tickersBitfinex spot ticker for one or more pairs (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bitfinex spot ticker for one or more pairs (e.g. tBTCUSD,tETHUSD): bid, ask, last, 24h change and volume, from Bitfinex's public v2 ticker endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_bitget_tickersBitget spot ticker for one pair (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bitget spot ticker for one pair (e.g. BTCUSDT): last price, bid/ask, 24h high/low, volumes and 24h change, from Bitget's public v2 market endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_bitstamp_tickersBitstamp spot ticker for one pair (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bitstamp spot ticker for one pair (e.g. btcusd, btceur): last, bid, ask, 24h open/high/low, volume and VWAP, from Bitstamp's public ticker endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_bitvavo_tickersBitvavo (Dutch exchange) last price for one market such as BTC-EUR, from Bitvavo's public ticker endpoint.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bitvavo (Dutch exchange) last price for one market such as BTC-EUR, from Bitvavo's public ticker endpoint. Last price only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_bstockB-Stock wholesale liquidation auctions (US marketplace, all sellers): total live lots and 20 per page with listing id, title, storefront (seller), categories, condition, inventory …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it B-Stock wholesale liquidation auctions (US marketplace, all sellers): total live lots and 20 per page with listing id, title, storefront (seller), categories, condition, inventory type, units, pallets, manufacturers, current / opening bid, next minimum bid, number of bids, typical selling price, currency, start and end time, seller city/state/zip, shipment type, manifest flag, image and auction link. From bstock.com via a residential proxy. Price: $0.02 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coinbase_assetsCurrency list from Coinbase's public v2 API: currency code, name and minimum size, optionally filtered by a name or code fragment.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Currency list from Coinbase's public v2 API: currency code, name and minimum size, optionally filtered by a name or code fragment. Reference data only; no prices. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coinbase_exchange_productsCoinbase Exchange trading products (pairs) with status and minimum order sizes, filtered by quote currency (default USD).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Coinbase Exchange trading products (pairs) with status and minimum order sizes, filtered by quote currency (default USD). Lists what can be traded; no prices. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coinbase_orderbook_candlesCoinbase Exchange OHLCV candles for one product (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Coinbase Exchange OHLCV candles for one product (e.g. BTC-USD) at 1m, 5m, 15m, 1h, 6h or 1d granularity, plus the current best bid and ask. Latest candles only (Coinbase returns up to 300 per call). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coincap_ratesExchange rates against the US dollar for about 170 fiat currencies and 400+ cryptocurrencies (Coinbase public rates): symbol, name, fiat or crypto, USD value of one unit and units …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Exchange rates against the US dollar for about 170 fiat currencies and 400+ cryptocurrencies (Coinbase public rates): symbol, name, fiat or crypto, USD value of one unit and units per USD. All rates, a fiat/crypto filter, or one currency by symbol (EUR, BTC, TRY) or name (euro, bitcoin, turkish-lira). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coingeckoCoinGecko spot prices for up to 10 coins (by CoinGecko id, e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it CoinGecko spot prices for up to 10 coins (by CoinGecko id, e.g. bitcoin,ethereum) in one currency, with 24h change. Prices are CoinGecko's aggregated spot prices; no history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coinlore_cryptoCoinLore ranked crypto list: USD price, market cap, 24h volume and 1h/24h/7d changes for the top N coins (N from 1 to 100).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it CoinLore ranked crypto list: USD price, market cap, 24h volume and 1h/24h/7d changes for the top N coins (N from 1 to 100). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coinmarketcapCoinMarketCap ranked crypto listing: name, symbol, USD price, market cap, 24h volume and 24h change for the top N coins.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it CoinMarketCap ranked crypto listing: name, symbol, USD price, market cap, 24h volume and 24h change for the top N coins. Read from the JSON that coinmarketcap.com itself loads (undocumented; can change without notice). Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_coinpaprika_tickersCoinPaprika top crypto tickers by market rank: USD price, 24h volume, market cap and percent changes (1h, 24h, 7d).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it CoinPaprika top crypto tickers by market rank: USD price, 24h volume, market cap and percent changes (1h, 24h, 7d). The first N coins by rank, N from 1 to 100. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_cryptorank_projectsCryptoRank top crypto projects by rank: name, symbol, type, price, market cap, fully diluted valuation, 24h volume, 24h high/low, supply and all-time high, from CryptoRank's API v2…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it CryptoRank top crypto projects by rank: name, symbol, type, price, market cap, fully diluted valuation, 24h volume, 24h high/low, supply and all-time high, from CryptoRank's API v2. Up to the top 100. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_curve_finance_poolsCurve Finance pools on Ethereum (all but the tiniest, as Curve's 'big' list): pool name, total USD value locked in the pool, and each coin with its USD price and balance, sorted by…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Curve Finance pools on Ethereum (all but the tiniest, as Curve's 'big' list): pool name, total USD value locked in the pool, and each coin with its USD price and balance, sorted by pool size. Optional name filter. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_dataroma_superinvestorsDataroma superinvestor portfolios: manager and firm name, portfolio value, number of stocks and the top holdings' tickers, read from Dataroma's public manager table.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Dataroma superinvestor portfolios: manager and firm name, portfolio value, number of stocks and the top holdings' tickers, read from Dataroma's public manager table. Snapshot of the public page; not investment advice. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_defirate_yieldsDeFi lending and liquidity pool yields from DefiLlama: APY, base and reward APY, TVL, for pools filtered by chain or project, sorted by TVL.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it DeFi lending and liquidity pool yields from DefiLlama: APY, base and reward APY, TVL, for pools filtered by chain or project, sorted by TVL. Data is DefiLlama's own estimates and changes often. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_dia_crypto_oracleDIA crypto price oracle: current USD price for one asset symbol (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it DIA crypto price oracle: current USD price for one asset symbol (e.g. BTC, ETH), yesterday's price and volume, from DIA's public quotation endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_etf_comETF.com profile for a US-listed ETF: name, issuer, one-line strategy description, inception date, expense ratio, assets under management, benchmark, index tracked, category and fee…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it ETF.com profile for a US-listed ETF: name, issuer, one-line strategy description, inception date, expense ratio, assets under management, benchmark, index tracked, category and fee note. From etf.com's public fund pages (their structured data) via a residential proxy. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_fdic_bankFDIC-insured bank institutions in one US state from the FDIC BankFind API: name, certificate number, address, ZIP, charter class and whether the bank is active.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it FDIC-insured bank institutions in one US state from the FDIC BankFind API: name, certificate number, address, ZIP, charter class and whether the bank is active. Institution data only; no financial statements. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_fec_campaign_finance_contributionsUS federal campaign contributions (FEC Schedule A itemized receipts) from the official OpenFEC API, by contributor name, employer, committee ID or state for a two-year cycle: contr…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it US federal campaign contributions (FEC Schedule A itemized receipts) from the official OpenFEC API, by contributor name, employer, committee ID or state for a two-year cycle: contributor, employer, occupation, city/state/ZIP, amount, date, committee, receipt type, memo and filing image link, newest first, with total count. FEC law forbids using contributor names for solicitation or commercial purposes. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_ffiec_bank_institutionsUS FDIC-insured banks (FDIC BankFind call-report data): name, FDIC cert, Fed RSSD ID, location, total assets, deposits and net income (USD), ROA and ROE, report date, charter class…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it US FDIC-insured banks (FDIC BankFind call-report data): name, FDIC cert, Fed RSSD ID, location, total assets, deposits and net income (USD), ROA and ROE, report date, charter class, regulator, office counts, holding company, website, established date, active flag and closing date. Search by name, filter by state and active status, sort by assets, deposits, name or age; or look up one bank by cert. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_finvizFinviz quote snapshot for one stock ticker: the key statistics table as label and value pairs (market cap, P/E, price, change, volume and similar), read from the public quote page.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Finviz quote snapshot for one stock ticker: the key statistics table as label and value pairs (market cap, P/E, price, change, volume and similar), read from the public quote page. Values are as Finviz shows them, possibly delayed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_gemini_tickersGemini crypto exchange public ticker for one market (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Gemini crypto exchange public ticker for one market (e.g. btcusd): bid, ask, last price and 24h volume. Market data only; no order book or history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_gov_uk_bank_holidaysUK public (bank) holidays from GOV.UK for England and Wales, Scotland or Northern Ireland, optionally for one year.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it UK public (bank) holidays from GOV.UK for England and Wales, Scotland or Northern Ireland, optionally for one year. Official list published by GOV.UK; dates only, no working-day calculation. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_huobi_tickersHTX (formerly Huobi) 24h ticker for one market (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it HTX (formerly Huobi) 24h ticker for one market (e.g. btcusdt): open, high, low, close, bid/ask, base and quote volume and trade count, from HTX's public market tickers endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_hyperliquid_perp_fundingHyperliquid perpetual futures snapshot for one coin (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Hyperliquid perpetual futures snapshot for one coin (e.g. BTC): mark, oracle and mid price, hourly funding rate, open interest and 24h volume, from Hyperliquid's public info API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_iex_cloud_publicReal-time US stock, ETF or index quote (replacement for the closed IEX Cloud public quote): company name, exchange, last sale price, net and % change, bid/ask price and size, volum…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Real-time US stock, ETF or index quote (replacement for the closed IEX Cloud public quote): company name, exchange, last sale price, net and % change, bid/ask price and size, volume, last trade time, market status (pre-market, open, after-hours, closed) with the regular-session close, day high/low, 52-week range and upcoming earnings date. Data from Nasdaq.com's public quote API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_indexmundiIndexMundi monthly commodity price table for one commodity (default gold), read from the public commodity page: month and price as IndexMundi publishes them.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it IndexMundi monthly commodity price table for one commodity (default gold), read from the public commodity page: month and price as IndexMundi publishes them. Prices are as shown on the page; units follow that page. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_kalshi_prediction_marketsKalshi (US regulated prediction exchange) open events and their markets: event title, category, series, and per market the question, yes/no bid and ask, last price (= implied proba…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Kalshi (US regulated prediction exchange) open events and their markets: event title, category, series, and per market the question, yes/no bid and ask, last price (= implied probability), 24h and total volume, open interest, close time and rules. Filter by series ticker (e.g. KXFED, KXBTC) or category text. From Kalshi's official public market-data API via a proxy; prices in USD per $1 contract. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_leboncoinleboncoin.fr classified-ads search (all of France): result totals (all / private / pro) and 35 ads per page with ad id, title, price (EUR), category, city, zip, department, region,…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it leboncoin.fr classified-ads search (all of France): result totals (all / private / pro) and 35 ads per page with ad id, title, price (EUR), category, city, zip, department, region, latitude/longitude, seller name and type, first publication date, photo count and first photo, boosted flag and ad link. From leboncoin.fr via a stealth proxy. Price: $0.03 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_mempool_bitcoinBitcoin network snapshot from mempool.space: recommended fee rates (sat/vB) for fastest, half-hour, hour and economy confirmation, plus the current chain tip height.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Bitcoin network snapshot from mempool.space: recommended fee rates (sat/vB) for fastest, half-hour, hour and economy confirmation, plus the current chain tip height. Live network data; no prices. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_mexc_tickersMEXC spot last price for one pair (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it MEXC spot last price for one pair (e.g. BTCUSDT), from MEXC's public ticker endpoint. Last price only; no order book or history. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_nasdaq_short_interestShort interest history for a Nasdaq-listed stock from Nasdaq.com (FINRA twice-monthly settlement data): settlement date, shares sold short, average daily share volume and days to c…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Short interest history for a Nasdaq-listed stock from Nasdaq.com (FINRA twice-monthly settlement data): settlement date, shares sold short, average daily share volume and days to cover, newest first (about one year of reports), plus the change versus the previous report. Only Nasdaq-listed symbols are supported by the source. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_nerdwalletNerdWallet best credit card rankings for a category (cash-back, travel, balance-transfer, 0-apr, rewards, student, secured, business...): rank, card name, the 'best for' label, ann…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it NerdWallet best credit card rankings for a category (cash-back, travel, balance-transfer, 0-apr, rewards, student, secured, business...): rank, card name, the 'best for' label, annual fee, NerdWallet star rating, image and link. From nerdwallet.com's public 'best credit cards' pages via a residential proxy; rankings are NerdWallet's editorial picks. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_nomics_cryptoCrypto market tickers (replacement for the closed Nomics ticker API): rank, name, symbol, price, 24h volume, market cap, circulating/total/max supply, % change over 15m, 1h, 24h, 7…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Crypto market tickers (replacement for the closed Nomics ticker API): rank, name, symbol, price, 24h volume, market cap, circulating/total/max supply, % change over 15m, 1h, 24h, 7d, 30d, 1y, all-time high price/date and distance from it, in USD or another quote (EUR, GBP, JPY, TRY, BTC, ETH). Top coins by rank, or specific CoinPaprika ids (btc-bitcoin, eth-ethereum). Data from CoinPaprika's public API. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_norges_bank_norwayNorges Bank daily exchange rate of one foreign currency in NOK (NOK per 1 unit of the currency), from Norges Bank's SDMX-JSON data API.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Norges Bank daily exchange rate of one foreign currency in NOK (NOK per 1 unit of the currency), from Norges Bank's SDMX-JSON data API. Last N observations; business days only. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_ofr_short_term_funding_monitorOFR Short-term Funding Monitor daily series from the US Office of Financial Research, for one mnemonic (default FNYR-SOFR-A, the SOFR rate in percent): the latest N observations.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it OFR Short-term Funding Monitor daily series from the US Office of Financial Research, for one mnemonic (default FNYR-SOFR-A, the SOFR rate in percent): the latest N observations. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_pendle_finance_markets_v2Pendle Finance active yield markets on Ethereum: name, expiry date, implied APY, aggregated APY and liquidity, from Pendle's public v2 API.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Pendle Finance active yield markets on Ethereum: name, expiry date, implied APY, aggregated APY and liquidity, from Pendle's public v2 API. Sorted as Pendle returns them; use limit to cap the list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_phemex_tickersPhemex perpetual-contract ticker for one symbol (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Phemex perpetual-contract ticker for one symbol (e.g. BTCUSDT): last price, mark and index price, funding rate, open interest and 24h volume, from Phemex's public md/v2 endpoint. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_pitchbook_investorsPitchBook public profile of an investor, lender or advisor: name, description, public quick facts (type, year founded, professionals, investments, exits, AUM when shown), headquart…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it PitchBook public profile of an investor, lender or advisor: name, description, public quick facts (type, year founded, professionals, investments, exits, AUM when shown), headquarters address and the profile's FAQ answers. Takes the PitchBook profile id (e.g. 10075-24 from pitchbook.com/profiles/investor/10075-24). Via a premium residential proxy; subscriber-only data is not included. Price: $0.005 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_pitchbook_scraper_fund_dataPitchBook public fund profile: fund name, description, quick facts as PitchBook shows them publicly (strategy, status, manager, size, vintage, dry powder when public), domicile add…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it PitchBook public fund profile: fund name, description, quick facts as PitchBook shows them publicly (strategy, status, manager, size, vintage, dry powder when public), domicile address, and the profile's FAQ answers (manager, type, status, notable and latest investments). Takes the PitchBook fund id (e.g. 11230-30F from pitchbook.com/profiles/fund/11230-30F). Via a premium residential proxy; subscriber-only performance data is not included. Price: $0.005 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_sec_form_dLatest SEC Form D filings (private securities offerings, Reg D) from EDGAR's public search index: filer name, CIK, filing date, state and accession number.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Latest SEC Form D filings (private securities offerings, Reg D) from EDGAR's public search index: filer name, CIK, filing date, state and accession number. Lists filings only; the offering amounts are not parsed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_sec_form4Recent SEC Form 4 insider filings (officers, directors, 10% owners reporting trades) for one company CIK, from EDGAR's public submissions index.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Recent SEC Form 4 insider filings (officers, directors, 10% owners reporting trades) for one company CIK, from EDGAR's public submissions index. Lists filings with dates and links; transaction amounts are not parsed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_sec_investment_adviserInvestment adviser firm record from the SEC IAPD (Form ADV) by CRD number or firm name: legal and other names, adviser status, SEC file number, latest Form ADV filing date and PDF …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Investment adviser firm record from the SEC IAPD (Form ADV) by CRD number or firm name: legal and other names, adviser status, SEC file number, latest Form ADV filing date and PDF link, office address, SEC / state / exempt-reporting registration flags, registration history, state notice filings and brochure list, plus the IAPD page. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_sec_nport_mutual_fund_holdingsRecent SEC NPORT-P filings (monthly mutual fund and ETF portfolio reports) for one fund-company CIK, from EDGAR's public submissions index: filing date, period and accession number…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Recent SEC NPORT-P filings (monthly mutual fund and ETF portfolio reports) for one fund-company CIK, from EDGAR's public submissions index: filing date, period and accession number. Holdings inside the XML are not parsed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_stockanalysisStockAnalysis company identity for one stock ticker: company name, legal name, ticker and the page description, read from the schema.org JSON-LD on the public stock page.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it StockAnalysis company identity for one stock ticker: company name, legal name, ticker and the page description, read from the schema.org JSON-LD on the public stock page. Financial figures are not included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_stocktwits_trending_symbolsStocktwits trending stock symbols right now: ticker, company title, exchange, watchlist count and trending score.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Stocktwits trending stock symbols right now: ticker, company title, exchange, watchlist count and trending score. A popularity list from social posts, not a recommendation. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_tase_tel_aviv_listingsTel Aviv Stock Exchange (TASE) end-of-day data, 30 securities per page in TASE's order: security ID, ISIN, symbol, name, type (share, bond, warrant, ETF...), last price, % change, …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Tel Aviv Stock Exchange (TASE) end-of-day data, 30 securities per page in TASE's order: security ID, ISIN, symbol, name, type (share, bond, warrant, ETF...), last price, % change, base/open/high/low, deals, turnover (ILS thousands), units, market value, monthly and annual yield, bond details (redemption, linkage, coupon) where relevant, trade date and total count. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_tradingview_ideasTradingView public trading ideas: the latest published idea titles and their chart links, read from the public ideas page.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it TradingView public trading ideas: the latest published idea titles and their chart links, read from the public ideas page. Community opinions, not investment advice; no prices are computed. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_tradingview_screenerTradingView stock screener results for one market (default america): symbol, last price and daily change, in TradingView's default order.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it TradingView stock screener results for one market (default america): symbol, last price and daily change, in TradingView's default order. Read-only scanner query; no filters beyond market and count. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_whitebit_tickersWhiteBIT exchange spot ticker for one market (e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WhiteBIT exchange spot ticker for one market (e.g. BTC_USDT): last price, 24h change and volumes, from WhiteBIT's public v4 ticker list. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_world_bankWorld Bank indicator values for one country by year, e.g.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it World Bank indicator values for one country by year, e.g. GDP in current US dollars (NY.GDP.MKTP.CD), from the World Bank open data API. Annual data; the latest years can be missing or revised. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_yahoo_financeYahoo Finance quote and daily history for one ticker (stocks, ETFs, indices, FX, crypto symbols) from Yahoo's public chart endpoint.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Yahoo Finance quote and daily history for one ticker (stocks, ETFs, indices, FX, crypto symbols) from Yahoo's public chart endpoint. Prices are delayed or end-of-day per Yahoo; no fundamentals or company lists are included. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Only reads 2Show 2 read-only tools
crypto_makerdao_vault_statusSky (MakerDAO) savings rates and peg: sUSDS and sDAI savings APY and TVL on Ethereum (DefiLlama yields), DAI and USDS USD price and depeg %, and circulating supply.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "crypto_makerdao_vault_status" says "status": a word for reading.
What it can reach
- private-dataThe name "crypto_makerdao_vault_status" says "status" and "vault": it reads secrets.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Sky (MakerDAO) savings rates and peg: sUSDS and sDAI savings APY and TVL on Ethereum (DefiLlama yields), DAI and USDS USD price and depeg %, and circulating supply. Vault collateralization is not in these sources and is not reported. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
finance_sec_iapdSearch the SEC Investment Adviser Public Disclosure (IAPD) database by firm name: CRD number, firm name and other names, SEC adviser (801-) and broker-dealer (8-) numbers, adviser …Reads private dataReads text others writeNo findings
Why it is in this group
- The description's first verb is "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "database": it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "search" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it Search the SEC Investment Adviser Public Disclosure (IAPD) database by firm name: CRD number, firm name and other names, SEC adviser (801-) and broker-dealer (8-) numbers, adviser and broker-dealer registration status, whether disclosures (regulatory or legal events) exist, FINRA registrations, branch count, office city/state/country and the IAPD summary URL; plus the total number of matches. Price: $0.002 in USDC per successful call, paid with x402 (Base, Solana or Arc); failed calls are not charged.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
512 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 outbound tools breaks every one.
- Reads private data2
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write128
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- crypto_1inch_pathfinder_quotes
- crypto_aave_lending_markets
- crypto_arbiscan_l2_rollup
- crypto_balancer_v2_pools
- crypto_basescan_contract_events
- crypto_berachain_pol_validators
- crypto_binance_orderbook_depth
- crypto_bitcoin_hashrate_difficulty
- crypto_bitcoin_mempool_stats
- crypto_blast_gold_points
- crypto_chainlink_price_feeds
- crypto_circle_cctp_transfers
- and 116 more
- Can send data out2
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
{
"permissions": {
"deny": [
"mcp__sitecheck-crypto-finance__dev_investing_com_economic_calendar",
"mcp__sitecheck-crypto-finance__finance_stooq_historical_stocks"
]
}
}Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
The server marks "crypto_whale_alert_transfers" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_whale_alert_transfers" says "transfer": a word for a change that another call does not undo.
The server marks "crypto_token_vesting_schedule" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_token_vesting_schedule" says "schedule": a word for a change.
The server marks "crypto_etherscan_label_cloud" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_etherscan_label_cloud" says "label": a word for a change.
The input schema at properties.address.description contains a 42-character base64 string.
What this check looks forMatched text
inputSchema.properties.address.description: "...(e.g. USDC on Base 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913)"
The input schema at properties.inputMint.description contains a 43-character base64 string.
What this check looks forMatched text
inputSchema.properties.inputMint.description: "...g. SOL wrapped mint So11111111111111111111111111111111111111112"
The server marks "crypto_circle_cctp_transfers" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_circle_cctp_transfers" says "transfer": a word for a change that another call does not undo.
Show 3 more findingsShow fewer
The server marks "crypto_sui_move_objects" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "crypto_sui_move_objects" says "move": a word for a change.
The server marks "finance_stooq_historical_stocks" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
The server marks "dev_investing_com_economic_calendar" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http sitecheck-crypto-finance https://api.chainmarket-api.workers.dev/mcp?ref=registryclaude mcp add --transport http sitecheck-crypto-finance https://api.chainmarket-api.workers.dev/mcp?ref=registryRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__sitecheck-crypto-finance__crypto_makerdao_vault_status",
"mcp__sitecheck-crypto-finance__finance_sec_iapd"
],
"ask": [
"mcp__sitecheck-crypto-finance__crypto_smart_contract_verify",
"mcp__sitecheck-crypto-finance__crypto_honeypot_detector",
"mcp__sitecheck-crypto-finance__crypto_dex_pool_liquidity",
"mcp__sitecheck-crypto-finance__crypto_defillama_tvl_oracle",
"mcp__sitecheck-crypto-finance__crypto_defillama_stablecoins",
"mcp__sitecheck-crypto-finance__crypto_defillama_yields",
"mcp__sitecheck-crypto-finance__crypto_whale_alert_transfers",
"mcp__sitecheck-crypto-finance__crypto_token_holder_concentration",
"mcp__sitecheck-crypto-finance__crypto_aave_lending_markets",
"mcp__sitecheck-crypto-finance__crypto_compound_market_stats",
"mcp__sitecheck-crypto-finance__crypto_nft_floor_wash_detector",
"mcp__sitecheck-crypto-finance__crypto_cross_chain_bridge_flows",
"mcp__sitecheck-crypto-finance__crypto_solana_token_extensions",
"mcp__sitecheck-crypto-finance__crypto_mev_block_analytics",
"mcp__sitecheck-crypto-finance__crypto_ethereum_gas_telemetry",
"mcp__sitecheck-crypto-finance__crypto_token_vesting_schedule",
"mcp__sitecheck-crypto-finance__crypto_coingecko_market_depth",
"mcp__sitecheck-crypto-finance__crypto_coinmarketcap_listings",
"mcp__sitecheck-crypto-finance__crypto_fear_greed_index",
"mcp__sitecheck-crypto-finance__crypto_bitcoin_mempool_stats",
"mcp__sitecheck-crypto-finance__crypto_bitcoin_hashrate_difficulty",
"mcp__sitecheck-crypto-finance__crypto_ethereum_staking_rewards",
"mcp__sitecheck-crypto-finance__crypto_solana_validator_cluster",
"mcp__sitecheck-crypto-finance__crypto_lido_steth_peg",
"mcp__sitecheck-crypto-finance__crypto_crypto_fundraising_rounds",
"mcp__sitecheck-crypto-finance__crypto_binance_orderbook_depth",
"mcp__sitecheck-crypto-finance__crypto_coinbase_spot_exchange",
"mcp__sitecheck-crypto-finance__crypto_deribit_options_skew",
"mcp__sitecheck-crypto-finance__crypto_crypto_liquidations_feed",
"mcp__sitecheck-crypto-finance__crypto_debank_wallet_portfolio",
"mcp__sitecheck-crypto-finance__crypto_zapper_token_balances",
"mcp__sitecheck-crypto-finance__crypto_zerion_dna_feed",
"mcp__sitecheck-crypto-finance__crypto_etherscan_label_cloud",
"mcp__sitecheck-crypto-finance__crypto_solscan_account_tokens",
"mcp__sitecheck-crypto-finance__crypto_basescan_contract_events",
"mcp__sitecheck-crypto-finance__crypto_arbiscan_l2_rollup",
"mcp__sitecheck-crypto-finance__crypto_optimism_superchain_tx",
"mcp__sitecheck-crypto-finance__crypto_polygon_pos_checkpoints",
"mcp__sitecheck-crypto-finance__crypto_chainlink_price_feeds",
"mcp__sitecheck-crypto-finance__crypto_pyth_network_oracles",
"mcp__sitecheck-crypto-finance__crypto_uniswap_v3_ticks",
"mcp__sitecheck-crypto-finance__crypto_curve_gauge_weights",
"mcp__sitecheck-crypto-finance__crypto_convex_vlcvx_voting",
"mcp__sitecheck-crypto-finance__crypto_balancer_v2_pools",
"mcp__sitecheck-crypto-finance__crypto_sushiswap_route_quotes",
"mcp__sitecheck-crypto-finance__crypto_1inch_pathfinder_quotes",
"mcp__sitecheck-crypto-finance__crypto_cowswap_batch_auctions",
"mcp__sitecheck-crypto-finance__crypto_jupiter_solana_routing",
"mcp__sitecheck-crypto-finance__crypto_circle_cctp_transfers",
"mcp__sitecheck-crypto-finance__crypto_tether_treasury_burns",
"mcp__sitecheck-crypto-finance__crypto_crypto_hack_rekt_database",
"mcp__sitecheck-crypto-finance__crypto_sanctioned_crypto_wallets",
"mcp__sitecheck-crypto-finance__crypto_tornado_cash_anonymity",
"mcp__sitecheck-crypto-finance__crypto_hyperliquid_perps_depth",
"mcp__sitecheck-crypto-finance__crypto_dydx_chain_markets",
"mcp__sitecheck-crypto-finance__crypto_gmx_v2_glv_vaults",
"mcp__sitecheck-crypto-finance__crypto_blast_gold_points",
"mcp__sitecheck-crypto-finance__crypto_scroll_l2_zk_proofs",
"mcp__sitecheck-crypto-finance__crypto_zksync_era_hyperchains",
"mcp__sitecheck-crypto-finance__crypto_linea_consensys_rollup",
"mcp__sitecheck-crypto-finance__crypto_mantle_da_eigenlayer",
"mcp__sitecheck-crypto-finance__crypto_berachain_pol_validators",
"mcp__sitecheck-crypto-finance__crypto_ton_blockchain_jettons",
"mcp__sitecheck-crypto-finance__crypto_sui_move_objects",
"mcp__sitecheck-crypto-finance__finance_kalshi_prediction_markets",
"mcp__sitecheck-crypto-finance__finance_yahoo_finance",
"mcp__sitecheck-crypto-finance__finance_sec_form_d",
"mcp__sitecheck-crypto-finance__finance_pitchbook_investors",
"mcp__sitecheck-crypto-finance__finance_stooq_historical_stocks",
"mcp__sitecheck-crypto-finance__finance_pitchbook_scraper_fund_data",
"mcp__sitecheck-crypto-finance__finance_tradingview_ideas",
"mcp__sitecheck-crypto-finance__dev_morningstar",
"mcp__sitecheck-crypto-finance__finance_etf_com",
"mcp__sitecheck-crypto-finance__finance_bstock",
"mcp__sitecheck-crypto-finance__finance_tradingview_screener",
"mcp__sitecheck-crypto-finance__finance_stockanalysis",
"mcp__sitecheck-crypto-finance__finance_nasdaq_short_interest",
"mcp__sitecheck-crypto-finance__finance_fec_campaign_finance_contributions",
"mcp__sitecheck-crypto-finance__finance_binance_prices",
"mcp__sitecheck-crypto-finance__finance_nerdwallet",
"mcp__sitecheck-crypto-finance__finance_fdic_bank",
"mcp__sitecheck-crypto-finance__dev_investing_com_economic_calendar",
"mcp__sitecheck-crypto-finance__finance_indexmundi",
"mcp__sitecheck-crypto-finance__finance_finviz",
"mcp__sitecheck-crypto-finance__finance_sec_investment_adviser",
"mcp__sitecheck-crypto-finance__finance_leboncoin",
"mcp__sitecheck-crypto-finance__finance_huobi_tickers",
"mcp__sitecheck-crypto-finance__finance_bank_of_england_iadb",
"mcp__sitecheck-crypto-finance__finance_iex_cloud_public",
"mcp__sitecheck-crypto-finance__finance_ffiec_bank_institutions",
"mcp__sitecheck-crypto-finance__finance_curve_finance_pools",
"mcp__sitecheck-crypto-finance__finance_hyperliquid_perp_funding",
"mcp__sitecheck-crypto-finance__finance_mempool_bitcoin",
"mcp__sitecheck-crypto-finance__finance_coingecko",
"mcp__sitecheck-crypto-finance__finance_gemini_tickers",
"mcp__sitecheck-crypto-finance__finance_mexc_tickers",
"mcp__sitecheck-crypto-finance__finance_cryptorank_projects",
"mcp__sitecheck-crypto-finance__finance_coinbase_assets",
"mcp__sitecheck-crypto-finance__finance_stocktwits_trending_symbols",
"mcp__sitecheck-crypto-finance__finance_tase_tel_aviv_listings",
"mcp__sitecheck-crypto-finance__finance_sec_form4",
"mcp__sitecheck-crypto-finance__finance_coincap_rates",
"mcp__sitecheck-crypto-finance__finance_coinlore_crypto",
"mcp__sitecheck-crypto-finance__finance_bitvavo_tickers",
"mcp__sitecheck-crypto-finance__finance_coinbase_exchange_products",
"mcp__sitecheck-crypto-finance__finance_bitfinex_tickers",
"mcp__sitecheck-crypto-finance__finance_bitstamp_tickers",
"mcp__sitecheck-crypto-finance__finance_coinpaprika_tickers",
"mcp__sitecheck-crypto-finance__finance_dia_crypto_oracle",
"mcp__sitecheck-crypto-finance__finance_defirate_yields",
"mcp__sitecheck-crypto-finance__finance_pendle_finance_markets_v2",
"mcp__sitecheck-crypto-finance__finance_bcb_brazil_central_bank",
"mcp__sitecheck-crypto-finance__finance_norges_bank_norway",
"mcp__sitecheck-crypto-finance__finance_dataroma_superinvestors",
"mcp__sitecheck-crypto-finance__finance_nomics_crypto",
"mcp__sitecheck-crypto-finance__finance_alpha_vantage_public",
"mcp__sitecheck-crypto-finance__finance_ofr_short_term_funding_monitor",
"mcp__sitecheck-crypto-finance__finance_sec_nport_mutual_fund_holdings",
"mcp__sitecheck-crypto-finance__finance_coinbase_orderbook_candles",
"mcp__sitecheck-crypto-finance__finance_coinmarketcap",
"mcp__sitecheck-crypto-finance__finance_asian_dev_bank_data",
"mcp__sitecheck-crypto-finance__finance_gov_uk_bank_holidays",
"mcp__sitecheck-crypto-finance__finance_world_bank",
"mcp__sitecheck-crypto-finance__finance_whitebit_tickers",
"mcp__sitecheck-crypto-finance__finance_phemex_tickers",
"mcp__sitecheck-crypto-finance__finance_bitget_tickers"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sitecheck-crypto-finance. Review it before you use it.
Capability tags behind 128 rules
- mcp__sitecheck-crypto-finance__crypto_smart_contract_verify untrusted-input
- mcp__sitecheck-crypto-finance__crypto_honeypot_detector untrusted-input
- mcp__sitecheck-crypto-finance__crypto_dex_pool_liquidity untrusted-input
- mcp__sitecheck-crypto-finance__crypto_defillama_tvl_oracle untrusted-input
- mcp__sitecheck-crypto-finance__crypto_defillama_stablecoins untrusted-input
- mcp__sitecheck-crypto-finance__crypto_defillama_yields untrusted-input
- mcp__sitecheck-crypto-finance__crypto_whale_alert_transfers untrusted-input
- mcp__sitecheck-crypto-finance__crypto_token_holder_concentration untrusted-input
- mcp__sitecheck-crypto-finance__crypto_aave_lending_markets untrusted-input
- mcp__sitecheck-crypto-finance__crypto_compound_market_stats untrusted-input
- mcp__sitecheck-crypto-finance__crypto_nft_floor_wash_detector untrusted-input
- mcp__sitecheck-crypto-finance__crypto_cross_chain_bridge_flows untrusted-input
- mcp__sitecheck-crypto-finance__crypto_solana_token_extensions untrusted-input
- mcp__sitecheck-crypto-finance__crypto_mev_block_analytics untrusted-input
- mcp__sitecheck-crypto-finance__crypto_ethereum_gas_telemetry untrusted-input
- mcp__sitecheck-crypto-finance__crypto_token_vesting_schedule untrusted-input
- mcp__sitecheck-crypto-finance__crypto_coingecko_market_depth untrusted-input
- mcp__sitecheck-crypto-finance__crypto_coinmarketcap_listings untrusted-input
- mcp__sitecheck-crypto-finance__crypto_fear_greed_index untrusted-input
- mcp__sitecheck-crypto-finance__crypto_bitcoin_mempool_stats untrusted-input
- mcp__sitecheck-crypto-finance__crypto_bitcoin_hashrate_difficulty untrusted-input
- mcp__sitecheck-crypto-finance__crypto_ethereum_staking_rewards untrusted-input
- mcp__sitecheck-crypto-finance__crypto_solana_validator_cluster untrusted-input
- mcp__sitecheck-crypto-finance__crypto_lido_steth_peg untrusted-input
- mcp__sitecheck-crypto-finance__crypto_makerdao_vault_status private-data, untrusted-input
- mcp__sitecheck-crypto-finance__crypto_crypto_fundraising_rounds untrusted-input
- mcp__sitecheck-crypto-finance__crypto_binance_orderbook_depth untrusted-input
- mcp__sitecheck-crypto-finance__crypto_coinbase_spot_exchange untrusted-input
- mcp__sitecheck-crypto-finance__crypto_deribit_options_skew untrusted-input
- mcp__sitecheck-crypto-finance__crypto_crypto_liquidations_feed untrusted-input
- mcp__sitecheck-crypto-finance__crypto_debank_wallet_portfolio untrusted-input
- mcp__sitecheck-crypto-finance__crypto_zapper_token_balances untrusted-input
- mcp__sitecheck-crypto-finance__crypto_zerion_dna_feed untrusted-input
- mcp__sitecheck-crypto-finance__crypto_etherscan_label_cloud untrusted-input
- mcp__sitecheck-crypto-finance__crypto_solscan_account_tokens untrusted-input
- mcp__sitecheck-crypto-finance__crypto_basescan_contract_events untrusted-input
- mcp__sitecheck-crypto-finance__crypto_arbiscan_l2_rollup untrusted-input
- mcp__sitecheck-crypto-finance__crypto_optimism_superchain_tx untrusted-input
- mcp__sitecheck-crypto-finance__crypto_polygon_pos_checkpoints untrusted-input
- mcp__sitecheck-crypto-finance__crypto_chainlink_price_feeds untrusted-input
- mcp__sitecheck-crypto-finance__crypto_pyth_network_oracles untrusted-input
- mcp__sitecheck-crypto-finance__crypto_uniswap_v3_ticks untrusted-input
- mcp__sitecheck-crypto-finance__crypto_curve_gauge_weights untrusted-input
- mcp__sitecheck-crypto-finance__crypto_convex_vlcvx_voting untrusted-input
- mcp__sitecheck-crypto-finance__crypto_balancer_v2_pools untrusted-input
- mcp__sitecheck-crypto-finance__crypto_sushiswap_route_quotes untrusted-input
- mcp__sitecheck-crypto-finance__crypto_1inch_pathfinder_quotes untrusted-input
- mcp__sitecheck-crypto-finance__crypto_cowswap_batch_auctions untrusted-input
- mcp__sitecheck-crypto-finance__crypto_jupiter_solana_routing untrusted-input
- mcp__sitecheck-crypto-finance__crypto_circle_cctp_transfers untrusted-input
- mcp__sitecheck-crypto-finance__crypto_tether_treasury_burns untrusted-input
- mcp__sitecheck-crypto-finance__crypto_crypto_hack_rekt_database untrusted-input
- mcp__sitecheck-crypto-finance__crypto_sanctioned_crypto_wallets untrusted-input
- mcp__sitecheck-crypto-finance__crypto_tornado_cash_anonymity untrusted-input
- mcp__sitecheck-crypto-finance__crypto_hyperliquid_perps_depth untrusted-input
- mcp__sitecheck-crypto-finance__crypto_dydx_chain_markets untrusted-input
- mcp__sitecheck-crypto-finance__crypto_gmx_v2_glv_vaults untrusted-input
- mcp__sitecheck-crypto-finance__crypto_blast_gold_points untrusted-input
- mcp__sitecheck-crypto-finance__crypto_scroll_l2_zk_proofs untrusted-input
- mcp__sitecheck-crypto-finance__crypto_zksync_era_hyperchains untrusted-input
- mcp__sitecheck-crypto-finance__crypto_linea_consensys_rollup untrusted-input
- mcp__sitecheck-crypto-finance__crypto_mantle_da_eigenlayer untrusted-input
- mcp__sitecheck-crypto-finance__crypto_berachain_pol_validators untrusted-input
- mcp__sitecheck-crypto-finance__crypto_ton_blockchain_jettons untrusted-input
- mcp__sitecheck-crypto-finance__crypto_sui_move_objects untrusted-input
- mcp__sitecheck-crypto-finance__finance_kalshi_prediction_markets untrusted-input
- mcp__sitecheck-crypto-finance__finance_yahoo_finance untrusted-input
- mcp__sitecheck-crypto-finance__finance_sec_form_d untrusted-input
- mcp__sitecheck-crypto-finance__finance_pitchbook_investors untrusted-input
- mcp__sitecheck-crypto-finance__finance_stooq_historical_stocks untrusted-input, outbound
- mcp__sitecheck-crypto-finance__finance_pitchbook_scraper_fund_data untrusted-input
- mcp__sitecheck-crypto-finance__finance_tradingview_ideas untrusted-input
- mcp__sitecheck-crypto-finance__dev_morningstar untrusted-input
- mcp__sitecheck-crypto-finance__finance_etf_com untrusted-input
- mcp__sitecheck-crypto-finance__finance_bstock untrusted-input
- mcp__sitecheck-crypto-finance__finance_sec_iapd private-data, untrusted-input
- mcp__sitecheck-crypto-finance__finance_tradingview_screener untrusted-input
- mcp__sitecheck-crypto-finance__finance_stockanalysis untrusted-input
- mcp__sitecheck-crypto-finance__finance_nasdaq_short_interest untrusted-input
- mcp__sitecheck-crypto-finance__finance_fec_campaign_finance_contributions untrusted-input
- mcp__sitecheck-crypto-finance__finance_binance_prices untrusted-input
- mcp__sitecheck-crypto-finance__finance_nerdwallet untrusted-input
- mcp__sitecheck-crypto-finance__finance_fdic_bank untrusted-input
- mcp__sitecheck-crypto-finance__dev_investing_com_economic_calendar untrusted-input, outbound
- mcp__sitecheck-crypto-finance__finance_indexmundi untrusted-input
- mcp__sitecheck-crypto-finance__finance_finviz untrusted-input
- mcp__sitecheck-crypto-finance__finance_sec_investment_adviser untrusted-input
- mcp__sitecheck-crypto-finance__finance_leboncoin untrusted-input
- mcp__sitecheck-crypto-finance__finance_huobi_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_bank_of_england_iadb untrusted-input
- mcp__sitecheck-crypto-finance__finance_iex_cloud_public untrusted-input
- mcp__sitecheck-crypto-finance__finance_ffiec_bank_institutions untrusted-input
- mcp__sitecheck-crypto-finance__finance_curve_finance_pools untrusted-input
- mcp__sitecheck-crypto-finance__finance_hyperliquid_perp_funding untrusted-input
- mcp__sitecheck-crypto-finance__finance_mempool_bitcoin untrusted-input
- mcp__sitecheck-crypto-finance__finance_coingecko untrusted-input
- mcp__sitecheck-crypto-finance__finance_gemini_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_mexc_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_cryptorank_projects untrusted-input
- mcp__sitecheck-crypto-finance__finance_coinbase_assets untrusted-input
- mcp__sitecheck-crypto-finance__finance_stocktwits_trending_symbols untrusted-input
- mcp__sitecheck-crypto-finance__finance_tase_tel_aviv_listings untrusted-input
- mcp__sitecheck-crypto-finance__finance_sec_form4 untrusted-input
- mcp__sitecheck-crypto-finance__finance_coincap_rates untrusted-input
- mcp__sitecheck-crypto-finance__finance_coinlore_crypto untrusted-input
- mcp__sitecheck-crypto-finance__finance_bitvavo_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_coinbase_exchange_products untrusted-input
- mcp__sitecheck-crypto-finance__finance_bitfinex_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_bitstamp_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_coinpaprika_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_dia_crypto_oracle untrusted-input
- mcp__sitecheck-crypto-finance__finance_defirate_yields untrusted-input
- mcp__sitecheck-crypto-finance__finance_pendle_finance_markets_v2 untrusted-input
- mcp__sitecheck-crypto-finance__finance_bcb_brazil_central_bank untrusted-input
- mcp__sitecheck-crypto-finance__finance_norges_bank_norway untrusted-input
- mcp__sitecheck-crypto-finance__finance_dataroma_superinvestors untrusted-input
- mcp__sitecheck-crypto-finance__finance_nomics_crypto untrusted-input
- mcp__sitecheck-crypto-finance__finance_alpha_vantage_public untrusted-input
- mcp__sitecheck-crypto-finance__finance_ofr_short_term_funding_monitor untrusted-input
- mcp__sitecheck-crypto-finance__finance_sec_nport_mutual_fund_holdings untrusted-input
- mcp__sitecheck-crypto-finance__finance_coinbase_orderbook_candles untrusted-input
- mcp__sitecheck-crypto-finance__finance_coinmarketcap untrusted-input
- mcp__sitecheck-crypto-finance__finance_asian_dev_bank_data untrusted-input
- mcp__sitecheck-crypto-finance__finance_gov_uk_bank_holidays untrusted-input
- mcp__sitecheck-crypto-finance__finance_world_bank untrusted-input
- mcp__sitecheck-crypto-finance__finance_whitebit_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_phemex_tickers untrusted-input
- mcp__sitecheck-crypto-finance__finance_bitget_tickers untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.github.bck-stack/sitecheck-crypto-finance/verify?hash=c44171c8d0bafa6b205568df85c0e93f5eb62fb61aa190b3f5a662dc67648f6d" | jq -e '.changed == false'Pinned hash c44171c8d0ba, from Oct 23, 2026, 18:19 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.github.bck-stack/sitecheck-crypto-finance/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.github.bck-stack/sitecheck-crypto-finance)Source: MCP Registry. Synced Oct 23, 2026, 18:18 UTC.