Skip to content

Macro Index

by macroindex.org · remote · no sign-in to list tools · v1.0.0 · published by org.macroindex

Neutral, cited central-bank rate decisions, calendars, inflation releases and bond auctions.

Final · 2Changes · 4
CompareRegistry entry

7 tools: 2 do something that can't be undone, 4 change things and 1 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http macroindex https://macroindex.org/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnupcoming_decisions

    The server marks "upcoming_decisions" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • Warnupcoming_auctions

    The server marks "upcoming_auctions" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Can't be undone 2Claude Code: ask
  • upcoming_auctionsGovernment bond auctions in a date window, soonest first: US Treasury, the German Finanzagentur and the Italian Treasury, calendar and results.Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "upcoming_auctions" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Government bond auctions in a date window, soonest first: US Treasury, the German Finanzagentur and the Italian Treasury, calendar and results. Each has the auction day, closeAt (the bidding deadline in UTC), instrument, tenor, CUSIP/ISIN and size once known, status (scheduled, announced, held, cancelled), the issuer's result page and its format, and the result (yield, bid-to-cover, allotted) only once the issuer has published it. Facts only, no forecasts.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • upcoming_decisionsPolicy-rate decisions in a date window, soonest first: decision day (local to the bank), announcement time in UTC where the bank publishes one, whether the date is on the bank's ca…Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "upcoming_decisions" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Policy-rate decisions in a date window, soonest first: decision day (local to the bank), announcement time in UTC where the bank publishes one, whether the date is on the bank's calendar, moved or unscheduled, the rate going in, and the decision once observed. Covers 21 central banks (Banco Central do Brasil, Bank Indonesia, Bank of Canada, Bank of England, Bank of Japan, Bank of Korea, Bank of Mexico, Central Bank of the Republic of Türkiye, Czech National Bank, European Central Bank, Federal Reserve (Federal Open Market Committee), Magyar Nemzeti Bank, Narodowy Bank Polski, Norges Bank, People's Bank of China, Reserve Bank of Australia, Reserve Bank of India, Reserve Bank of New Zealand, South African Reserve Bank, Sveriges Riksbank, Swiss National Bank) and 2 inflation release series.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
Changes things 4Claude Code: ask
  • check_questionIs a question about a rate decision or a government bond auction settleable, when, and on which source?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Is a question about a rate decision or a government bond auction settleable, when, and on which source? Finds the bank (or the auction issuer, tenor) and the date in the text. Refuses a decision or auction that has not been observed: a decision settles only after its statement is observed on the bank's own page, an auction only once the issuer's result is recorded (it says when bidding closes, closeAt in UTC, and on which result page). Also says when the source has not yet met the reads bar (5 right, 0 wrong).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • dataset_healthFreshness per bank (last observed decision, next meeting, days to it, whether its decision statement is resolvable) and the publisher-gate warnings.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Freshness per bank (last observed decision, next meeting, days to it, whether its decision statement is resolvable) and the publisher-gate warnings. Use to judge how far to trust an answer.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • resolution_sourcesThe kinds of page a bank publishes (decision statement, calendar, rate history, press feed): where each URL is found, its pattern (for recognising a page, never for building one), …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The kinds of page a bank publishes (decision statement, calendar, rate history, press feed): where each URL is found, its pattern (for recognising a page, never for building one), a real example, the reads recorded on it, and whether it is resolvable.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • submit_correctionReport a mistake with the URL of the bank's own page that proves it.Can send data outNo findings

    Why it is in this group

    • The name "submit_correction" says "submit": a word for a change.

    What it can reach

    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Report a mistake with the URL of the bank's own page that proves it. The report is public and is checked like any other claim; it never changes the data by itself. Returns the report id and where to follow it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 1Claude Code: allow
  • bank_statusOne bank: the policy rate in force and since when, the last observed decision with its statement, the next meeting, past facts computed from observed decisions only (days since the…Reads private dataNo findings

    Why it is in this group

    • The name "bank_status" says "status": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "meeting": it reads calendars.
    Description, as the server wrote it
    One bank: the policy rate in force and since when, the last observed decision with its statement, the next meeting, past facts computed from observed decisions only (days since the last change, consecutive holds, counts of past move sizes), freshness and data warnings.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http macroindex https://macroindex.org/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__macroindex__bank_status"
    ],
    "ask": [
      "mcp__macroindex__upcoming_decisions",
      "mcp__macroindex__check_question",
      "mcp__macroindex__upcoming_auctions",
      "mcp__macroindex__resolution_sources",
      "mcp__macroindex__submit_correction",
      "mcp__macroindex__dataset_health"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as macroindex. Review it before you use it.

Capability tags behind 4 rules
  • mcp__macroindex__upcoming_decisions outbound
  • mcp__macroindex__bank_status private-data
  • mcp__macroindex__upcoming_auctions outbound
  • mcp__macroindex__submit_correction outbound