Skip to content
anlyon.devby Anlyon

falcon.sol

io.github.ygfalcon/falcon-solygfalconstreamable-httpv0.2.0Scanned

Solana wallet risk, payee checks, SEC comps, LBO/credit models via one MCP, x402 pay per call.

20 tools: 10 change things and 10 only read.

Tools: 0 delete, 0 irreversible, 10 write, 10 read.
  • Reads private data · 3
  • Reads text others write · 20
  • Can send data out · 3
  • 6 findings

Anlyon alternative

10 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

20 tools

Changes things 10Claude Code: ask
  • extract_documentFull extraction of all pages.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Full extraction of all pages. Costs $0.03 USDC (x402). [falcon.sol docs. Paid: $0.03 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • price_notefalcon.sol structures: structured-note pricing for crypto.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    falcon.sol structures: structured-note pricing for crypto. Send a JSON term sheet (autocallable, barrier reverse convertible, range accrual, principal-protected, shark fin) on BTC, ETH or SOL; get the fair coupon or participation, probabilities (autocall per observation, knock-in, loss), greeks, a spot x vol scenario grid and payoff-diagram data. Monte Carlo on live Deribit implied vol. Free preview; full quote $0.02 USDC via x402 on Solana or Base. Costs $0.02 USDC (x402). [falcon.sol structures. Paid: $0.02 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • spread_bank_statementBank statement → every transaction + underwriting metrics (ADB, NSF, MCA/loan positions, revenue trend, DSCR inputs, tamper flags).Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Bank statement → every transaction + underwriting metrics (ADB, NSF, MCA/loan positions, revenue trend, DSCR inputs, tamper flags). Costs $0.40 USDC (x402). [falcon.sol docs. Paid: $0.40 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • suggest_peersfalcon.sol: Free: SIC-based peer tickers for a US company, ranked by revenue closeness, ready to pass to get_comps.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    falcon.sol: Free: SIC-based peer tickers for a US company, ranked by revenue closeness, ready to pass to get_comps. [falcon.sol comps. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • token_check_demoFree demo.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free demo. Try free, then pay per call. Pass one Solana token mint and get a real rug-check: riskScore, riskLevel, a one-line verdict, the top risk flags, liquidity, market cap, age, and pump.fun status. Uses free public data only. Cached 60 seconds per mint and rate-limited to 20 calls a minute per client. The paid routes return every flag, the full on-chain checks, and wallet intelligence. [falcon.sol solana-wallet-intel. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • wallet_fundingUse this when you need a wallet's first SOL funder and whether other wallets look like the same operator.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The input schema at properties.address.description contains a 44-character base64 string.

      Matched text

      inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

      What this check looks for
    Description, as the server wrote it
    Use this when you need a wallet's first SOL funder and whether other wallets look like the same operator. Find a wallet's first SOL funder, flag wallets that share that funder or a CEX deposit address, and return a cluster id with plain-language sybil risk reasons. Labeled exchange hot wallets are not used as a cluster. Optional peers compares up to 8 other wallets. Costs $0.009 USDC (9000 base units) via x402. The same price is charged for HTTP GET /wallet/funding. An unpaid HTTP call returns 402 even when the query is missing or invalid. A signed call with invalid arguments is rejected before settlement and is not charged. A successful result can set cached, stale, and cacheAgeMs. stale true means a previous result was served while a refresh runs or the upstream failed. You are charged only when the tool result is not an error. [falcon.sol solana-wallet-intel. Paid: $0.009 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • wallet_profileUse this when you need priced holdings and windowed PnL for one Solana wallet.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The input schema at properties.address.description contains a 44-character base64 string.

      Matched text

      inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

      What this check looks for
    Description, as the server wrote it
    Use this when you need priced holdings and windowed PnL for one Solana wallet. Holdings valued in USD, a short plain-language summary, windowed realized and unrealized PnL, win rate, and evidence-backed labels such as active memecoin trader. Includes copyTradeScore and copyTradeGrade: copy-return after a 3s delay and a 3.6% round trip, win rate, sample-size shrinkage, and bot or insider penalties. The score is null when no close lasted at least 3 seconds. txLimit is an integer from 5 to 25 and defaults to 20. Call free wallet_preview first if you only need SOL balance and last-active time, or wallet_quick for a cheaper copy-trade screen. Costs $0.009 USDC (9000 base units) via x402. The same price is charged for HTTP GET /wallet/profile. An unpaid HTTP call returns 402 even when the query is missing or invalid. A signed call with invalid arguments is rejected before settlement and is not charged. A successful result can set cached, stale, and cacheAgeMs. stale true means a previous result was served while a refresh runs or the upstream failed. You are charged only when the tool result is not an error. [falcon.sol solana-wallet-intel. Paid: $0.009 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • wallet_quickUse this for a cheap copy-trade screen before paying for a full profile.Reads text others write1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The input schema at properties.address.description contains a 44-character base64 string.

      Matched text

      inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

      What this check looks for
    Description, as the server wrote it
    Use this for a cheap copy-trade screen before paying for a full profile. Cheap copy-trade screen for one wallet: windowed realized PnL, win rate, closed trades, last active time, bot, exchange, net-winner and dormant flags, plus copyTradeScore and copyTradeGrade (copy-return after a 3s delay and a 3.6% round trip, win rate, sample-size shrinkage, bot and insider penalties). Free teaser at /wallet/preview; full report at /wallet/profile. Costs $0.002 USDC (2000 base units) via x402. The same price is charged for HTTP GET /wallet/quick. An unpaid HTTP call returns 402 even when the query is missing or invalid. A signed call with invalid arguments is rejected before settlement and is not charged. A successful result can set cached, stale, and cacheAgeMs. stale true means a previous result was served while a refresh runs or the upstream failed. You are charged only when the tool result is not an error. [falcon.sol solana-wallet-intel. Paid: $0.002 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • wallet_quick_batchQuick screen (windowed realized PnL, win rate, copyTradeScore, copyTradeGrade, bot, exchange, net-winner and dormant flags) for up to 10 Solana wallets in one paid call, ranked by …Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Quick screen (windowed realized PnL, win rate, copyTradeScore, copyTradeGrade, bot, exchange, net-winner and dormant flags) for up to 10 Solana wallets in one paid call, ranked by realized PnL. Pass addresses comma-separated. Costs $0.015 USDC (15000 base units) via x402. The same price is charged for HTTP GET /wallet/quick/batch. An unpaid HTTP call returns 402 even when the query is missing or invalid. A signed call with invalid arguments is rejected before settlement and is not charged. A successful result can set cached, stale, and cacheAgeMs. stale true means a previous result was served while a refresh runs or the upstream failed. You are charged only when the tool result is not an error. [falcon.sol solana-wallet-intel. Paid: $0.015 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 10Show 10 read-only tools
  • get_compsfalcon.sol: Trading comps table (market cap, EV, EV/Revenue, EV/EBITDA, P/E, P/FCF, margins, peer medians) for up to 12 tickers.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_comps" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "table": it reads databases.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    falcon.sol: Trading comps table (market cap, EV, EV/Revenue, EV/EBITDA, P/E, P/FCF, margins, peer medians) for up to 12 tickers. Costs $0.05 USDC (x402). [falcon.sol comps. Paid: $0.05 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_creditfalcon.sol: Lev-fin credit comps (leverage, coverage, FCF/debt, debt capacity, rated structures, memo) for up to 12 tickers.Reads text others writeNo findings

    Why it is in this group

    • The name "get_credit" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    falcon.sol: Lev-fin credit comps (leverage, coverage, FCF/debt, debt capacity, rated structures, memo) for up to 12 tickers. Costs $0.24 USDC (x402). [falcon.sol comps. Paid: $0.24 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_financialsfalcon.sol: Standardized financials (up to 15 FY + TTM, balance sheet, ratios, XBRL provenance) from SEC EDGAR.Reads text others writeNo findings

    Why it is in this group

    • The name "get_financials" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    falcon.sol: Standardized financials (up to 15 FY + TTM, balance sheet, ratios, XBRL provenance) from SEC EDGAR. Costs $0.01 USDC (x402). [falcon.sol comps. Paid: $0.01 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_lbofalcon.sol: LBO snapshot (sources & uses, 3 structures, IRR/MOIC, IRR grid, memo) for a US ticker, exit at peer-median EV/EBITDA.Reads text others writeNo findings

    Why it is in this group

    • The name "get_lbo" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    falcon.sol: LBO snapshot (sources & uses, 3 structures, IRR/MOIC, IRR grid, memo) for a US ticker, exit at peer-median EV/EBITDA. Costs $4.49 USDC (x402). [falcon.sol comps. Paid: $4.49 USDC per call via x402 (Base or Solana). Unpaid calls return x402 PaymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • market_snapshotFree: live spot, Deribit implied vol (DVOL) and 30d realized vol for BTC, ETH or SOL.Reads text others writeNo findings

    Why it is in this group

    • The name "market_snapshot" says "snapshot": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free: live spot, Deribit implied vol (DVOL) and 30d realized vol for BTC, ETH or SOL. [falcon.sol structures. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • pingFree health check.Reads text others writeNo findings

    Why it is in this group

    • The name "ping" says "ping": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free health check. Does not spend USDC. Confirms the MCP server is up and does not read a wallet. [falcon.sol solana-wallet-intel. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • preview_documentFree: extract page 1 of a PDF (auto-detects invoice/receipt/PO/W-9/bank statement) with per-field confidence.Reads private dataReads text others writeCan send data outNo findings

    Why it is in this group

    • The name "preview_document" says "preview": a word for reading.

    What it can reach

    • private-dataThe name "preview_document" says "preview" and "document": it reads documents.
    • private-dataThe input names a file (input.file_base64), and the tool reads: it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Free: extract page 1 of a PDF (auto-detects invoice/receipt/PO/W-9/bank statement) with per-field confidence. [falcon.sol docs. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • preview_financialsfalcon.sol: Free: latest fiscal-year revenue and net income for a US ticker or CIK, from SEC EDGAR.Reads text others writeNo findings

    Why it is in this group

    • The name "preview_financials" says "preview": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    falcon.sol: Free: latest fiscal-year revenue and net income for a US ticker or CIK, from SEC EDGAR. [falcon.sol comps. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • preview_noteFree indicative quote: fair coupon/participation rounded to 0.5%, probabilities, payoff diagram.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "preview_note" says "preview": a word for reading.

    What it can reach

    • private-dataThe name "preview_note" says "preview" and "note": it reads notes.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free indicative quote: fair coupon/participation rounded to 0.5%, probabilities, payoff diagram. [falcon.sol structures. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • wallet_previewFree teaser.Reads text others write1 finding

    Why it is in this group

    • The name "wallet_preview" says "preview": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The input schema at properties.address.description contains a 44-character base64 string.

      Matched text

      inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

      What this check looks for
    Description, as the server wrote it
    Free teaser. Call this before any paid wallet tool. Returns SOL balance, last active time, how many transactions landed in the last 24 hours, and a dormant or recently-active label. Does not spend USDC. Pass one base58 Solana address. Invalid addresses return an error and do not ask for payment. Upgrade to wallet_quick for a copy-trade screen, wallet_profile for priced holdings, or wallet_funding for the first SOL funder and cluster. [falcon.sol solana-wallet-intel. Free, no payment.]

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

180 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write20
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__falcon-sol__extract_document",
      "mcp__falcon-sol__preview_document",
      "mcp__falcon-sol__spread_bank_statement"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

5 warn1 info
  • Warnwallet_preview

    The input schema at properties.address.description contains a 44-character base64 string.

    Matched text

    inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

    What this check looks for
  • Warnwallet_profile

    The input schema at properties.address.description contains a 44-character base64 string.

    Matched text

    inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

    What this check looks for
  • Warntoken_trending

    The server marks "token_trending" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

    What this check looks for
  • Warnwallet_funding

    The input schema at properties.address.description contains a 44-character base64 string.

    Matched text

    inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

    What this check looks for
  • Warnwallet_quick

    The input schema at properties.address.description contains a 44-character base64 string.

    Matched text

    inputSchema.properties.address.description: "...aracters). Example: HD1ryR3dYSXBVNGfJZydbpmnChiE1wrAQkupWWtHt4pM"

    What this check looks for
  • Infotoken_trending

    The description is 2,302 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...ymentRequirements; pay with an x402-MCP client (_meta "x402/payment") and retry.]"

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http falcon-sol https://falcon-sol-agents.vercel.app/mcp
claude mcp add --transport http falcon-sol https://falcon-sol-agents.vercel.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__falcon-sol__ping",
      "mcp__falcon-sol__wallet_preview",
      "mcp__falcon-sol__preview_financials",
      "mcp__falcon-sol__get_financials",
      "mcp__falcon-sol__get_comps",
      "mcp__falcon-sol__get_credit",
      "mcp__falcon-sol__get_lbo",
      "mcp__falcon-sol__preview_note",
      "mcp__falcon-sol__market_snapshot"
    ],
    "ask": [
      "mcp__falcon-sol__token_check_demo",
      "mcp__falcon-sol__wallet_profile",
      "mcp__falcon-sol__token_trending",
      "mcp__falcon-sol__wallet_funding",
      "mcp__falcon-sol__wallet_quick",
      "mcp__falcon-sol__wallet_quick_batch",
      "mcp__falcon-sol__suggest_peers",
      "mcp__falcon-sol__preview_document",
      "mcp__falcon-sol__extract_document",
      "mcp__falcon-sol__spread_bank_statement",
      "mcp__falcon-sol__price_note"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as falcon-sol. Review it before you use it.

Capability tags behind 20 rules
  • mcp__falcon-sol__ping untrusted-input
  • mcp__falcon-sol__wallet_preview untrusted-input
  • mcp__falcon-sol__token_check_demo untrusted-input
  • mcp__falcon-sol__wallet_profile untrusted-input
  • mcp__falcon-sol__token_trending untrusted-input
  • mcp__falcon-sol__wallet_funding untrusted-input
  • mcp__falcon-sol__wallet_quick untrusted-input
  • mcp__falcon-sol__wallet_quick_batch untrusted-input
  • mcp__falcon-sol__preview_financials untrusted-input
  • mcp__falcon-sol__suggest_peers untrusted-input
  • mcp__falcon-sol__get_financials untrusted-input
  • mcp__falcon-sol__get_comps private-data, untrusted-input
  • mcp__falcon-sol__get_credit untrusted-input
  • mcp__falcon-sol__get_lbo untrusted-input
  • mcp__falcon-sol__preview_document private-data, untrusted-input, outbound
  • mcp__falcon-sol__extract_document untrusted-input, outbound
  • mcp__falcon-sol__spread_bank_statement untrusted-input, outbound
  • mcp__falcon-sol__preview_note private-data, untrusted-input
  • mcp__falcon-sol__market_snapshot untrusted-input
  • mcp__falcon-sol__price_note untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.ygfalcon/falcon-sol/verify?hash=abee8567c56a56de9f67966be865f794f49cf7e5059e284bb087430111546465" | jq -e '.changed == false'

Pinned hash abee8567c56a, from Oct 28, 2026, 17:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.ygfalcon/falcon-sol/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.ygfalcon/falcon-sol
[![anlyon.dev](https://anlyon.dev/badge/io.github.ygfalcon/falcon-sol.svg)](https://anlyon.dev/servers/io.github.ygfalcon/falcon-sol)

Source: MCP Registry · repository. Synced Oct 28, 2026, 17:18 UTC.