Skip to content

io.github.rtp-coder/stake-analyzer

io.github.rtp-coder/stake-analyzerrtp-coderstreamable-httpv1.1.0Scanned

Stake Originals odds, house edge, payouts and bet verification, slot RTP and bonus drops.

13 tools: 1 can delete or cancel things, 2 do something that can't be undone, 7 change things and 3 only read.

Tools: 1 delete, 2 irreversible, 7 write, 3 read.
  • Reads private data · 2
  • Reads text others write · 0
  • Can send data out · 0
  • 3 findings

Anlyon alternative

10 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

13 tools

Deletes or cancels 1Claude Code: deny
  • stake_bonus_dropsThe newest bonus drop codes Stake posted to its official Telegram channels for Stake and Stake.us, with value, requirement and post time.1 finding

    Why it is in this group

    • The name "stake_bonus_drops" says "drop": a word for removing or ending something.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "stake_bonus_drops" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "stake_bonus_drops" says "drop": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    The newest bonus drop codes Stake posted to its official Telegram channels for Stake and Stake.us, with value, requirement and post time. Codes expire within minutes.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
Can't be undone 2Claude Code: ask
  • stake_hilo_pathPayout and odds of a HiLo path: the start card, then each guess and the card that came.1 finding

    Why it is in this group

    • The description's first verb is "payout": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "stake_hilo_path" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "payout": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Payout and odds of a HiLo path: the start card, then each guess and the card that came. The first guess carries the house edge, later guesses pay fair odds, skips deal a new card without multiplying.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_payout_oddsMultipliers and the exact chance of each result for one Stake Original at one setting, such as Mines with 3 mines and 5 gems, Keno medium risk with 5 picks, Plinko 16 rows high ris…1 finding

    Why it is in this group

    • The name "stake_payout_odds" says "payout": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "stake_payout_odds" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "stake_payout_odds" says "payout": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Multipliers and the exact chance of each result for one Stake Original at one setting, such as Mines with 3 mines and 5 gems, Keno medium risk with 5 picks, Plinko 16 rows high risk, or Dice over 50. Includes RTP, win chance and the top payout.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
Changes things 7Claude Code: ask
  • stake_chain_latestThe newest round checked on a Stake Crash, Slide or Zoo hash chain and the rounds before it, with each round's multiplier or animals.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The newest round checked on a Stake Crash, Slide or Zoo hash chain and the rounds before it, with each round's multiplier or animals. stake.com and stake.us run separate chains.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_crash_droughtsRounds since the last 2x, 10x and 100x and the longest run without each, over the newest rounds checked on a Stake Crash or Slide chain.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Rounds since the last 2x, 10x and 100x and the longest run without each, over the newest rounds checked on a Stake Crash or Slide chain. stake.com and stake.us run separate chains.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_crash_oddsChance a Stake Crash or Slide round reaches a cash-out target, the return at that target, average rounds between hits, the chance of a hit within N rounds, and the chance of an ins…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Chance a Stake Crash or Slide round reaches a cash-out target, the return at that target, average rounds between hits, the chance of a hit within N rounds, and the chance of an instant 1.00x round.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_seed_hunt_oddsHow often a Stake Original pays a given multiplier or more at a setting, and the chance at least one such payout sits inside a run of N nonces, the maths behind the Seed Hunter.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    How often a Stake Original pays a given multiplier or more at a setting, and the chance at least one such payout sits inside a run of N nonces, the maths behind the Seed Hunter.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_slot_rankingsThe most played Stake Engine slots on Stake by turnover or bet count over a range, with publisher and average bet, from Stake Engine Insights.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The most played Stake Engine slots on Stake by turnover or bet count over a range, with publisher and average bet, from Stake Engine Insights.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_verify_betsReplays Stake Originals bets from a revealed server seed, client seed and nonce with Stake's provably fair algorithm and reports each result and multiplier, up to 200 nonces per ca…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Replays Stake Originals bets from a revealed server seed, client seed and nonce with Stake's provably fair algorithm and reports each result and multiplier, up to 200 nonces per call. Returns the SHA-256 of the server seed to compare with the hash Stake showed before the seed was revealed. Needs the unhashed server seed, which Stake reveals after the pair is rotated.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_vip_progressWager left to the next Stake VIP level from a level and progress percentage or a total wagered figure, with the expected cost of that wager on the cheapest games and the sports bet…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Wager left to the next Stake VIP level from a level and progress percentage or a total wagered figure, with the expected cost of that wager on the cheapest games and the sports bet equivalent.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
Only reads 3Show 3 read-only tools
  • stake_house_edgeReturn to player, house edge and top payout for Stake Originals, computed from each game's payout table.Reads private dataNo findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "return" and "table": it reads databases.
    Description, as the server wrote it
    Return to player, house edge and top payout for Stake Originals, computed from each game's payout table. Without a game it summarises every Original; with one it lists every setting.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_list_gamesEvery Stake Original the tools cover, with its seed checker, simulator and verifier links.No findings

    Why it is in this group

    • The name "stake_list_games" says "list": a word for reading.
    Description, as the server wrote it
    Every Stake Original the tools cover, with its seed checker, simulator and verifier links. Call this first when unsure of a game id.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false
  • stake_slot_lookupFinds Stake Engine slots on Stake by name or publisher and returns each mode's published RTP, with the max multiplier and its odds where the site has computed that mode's table.Reads private dataNo findings

    Why it is in this group

    • The name "stake_slot_lookup" says "lookup": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "find" and "table": it reads databases.
    Description, as the server wrote it
    Finds Stake Engine slots on Stake by name or publisher and returns each mode's published RTP, with the max multiplier and its odds where the site has computed that mode's table.

    Annotations the server declares

    • readOnlyHint: true
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input or outbound.

Reads private data2
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • The server marks "stake_payout_odds" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "stake_payout_odds" says "payout": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • The server marks "stake_hilo_path" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "payout": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • The server marks "stake_bonus_drops" read-only (readOnlyHint: true), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "stake_bonus_drops" says "drop": a word for removing or ending something.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http stake-analyzer https://stakeanalyzer.live/mcp
claude mcp add --transport http stake-analyzer https://stakeanalyzer.live/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__stake-analyzer__stake_list_games",
      "mcp__stake-analyzer__stake_house_edge",
      "mcp__stake-analyzer__stake_slot_lookup"
    ],
    "ask": [
      "mcp__stake-analyzer__stake_payout_odds",
      "mcp__stake-analyzer__stake_crash_odds",
      "mcp__stake-analyzer__stake_verify_bets",
      "mcp__stake-analyzer__stake_chain_latest",
      "mcp__stake-analyzer__stake_seed_hunt_odds",
      "mcp__stake-analyzer__stake_vip_progress",
      "mcp__stake-analyzer__stake_hilo_path",
      "mcp__stake-analyzer__stake_crash_droughts",
      "mcp__stake-analyzer__stake_slot_rankings"
    ],
    "deny": [
      "mcp__stake-analyzer__stake_bonus_drops"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as stake-analyzer. Review it before you use it.

Capability tags behind 2 rules
  • mcp__stake-analyzer__stake_house_edge private-data
  • mcp__stake-analyzer__stake_slot_lookup private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.rtp-coder/stake-analyzer/verify?hash=8e573a9b43b9517d99ee1a7febd0c70285df22cd01cf61ec0963d12a50dcac4f" | jq -e '.changed == false'

Pinned hash 8e573a9b43b9, from Nov 1, 2026, 02:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.rtp-coder/stake-analyzer/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.rtp-coder/stake-analyzer
[![anlyon.dev](https://anlyon.dev/badge/io.github.rtp-coder/stake-analyzer.svg)](https://anlyon.dev/servers/io.github.rtp-coder/stake-analyzer)

Source: MCP Registry. Synced Nov 1, 2026, 02:18 UTC.