# `pro.tradermatrix/free` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/pro.tradermatrix/free
- JSON: https://anlyon.dev/api/v1/servers/pro.tradermatrix/free
- Version: 1.0.0 (active)
- Publisher: pro.tradermatrix (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:54:36.799Z

Title and description, as the publisher wrote them:

```untrusted-server-text
TraderMatrix Free Gapper Scanner
Free, keyless pre-market and after-hours low-float gapper scanner from TraderMatrix.
```

Scanned 2026-10-21T19:20:06.366Z over streamable-http.

**6 tools: 6 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 0 | ask |
| Only reads | read | 6 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | none |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | none |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

No check matched anything in these tool definitions.


## Only reads (6)

Looks things up and changes nothing. Claude Code: allow.

### `get_cross_asset_regime`

- The name "get_cross_asset_regime" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Cross-asset regime read, derived values only: 60-session stock-bond and
dollar-stock return correlations (-1..1), 20-session percent changes of the
gold/S&P ratio, copper/gold ratio and WTI crude, the VIX/VIX3M ratio with a
contango / backwardation word (above 1.0 = backwardation), and the MOVE/VIX ratio
(rate vol vs equity vol). Raw index and commodity levels are not published; a leg
that cannot be computed is null and named in unavailable[]. Self-caching
(15 min). No parameters.
```

### `get_macro_liquidity`

- The name "get_macro_liquidity" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
US-government macro and liquidity series: Fed net liquidity (balance sheet
minus Treasury General Account minus reverse repo, USD trillions, weekly, with the
4-week percent change), 10-year real yield, 10-year breakeven inflation, 5y5y
forward inflation and the effective fed funds rate (percent, each with its prior
value and date), the Treasury yield curve (1M-30Y) with the 10Y-2Y spread history
(percentage points, negative = inverted), private nonresidential fixed investment
(CAPEX, USD billions SAAR) and CFTC E-mini S&P 500 positioning by trader class
(net contracts). Federal Reserve, NY Fed, Treasury, BEA, CFTC and Chicago Fed
sources only; third-party-licensed credit-spread series are not included.
Self-caching (6 h). No parameters.
```

### `get_market_breadth`

- The name "get_market_breadth" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
S&P 500 breadth, derived aggregates only: the percent of index members above
their 20-, 50- and 200-day moving averages (0-100), a breadth zone for the 50- and
200-day readings (washed_out / weak / mixed / healthy / extended), advancers and
decliners, new 52-week highs and lows with the net count, the member count, and a
one-sentence read. The index level and its change are not published. stale is true
when the live read failed and the last stored close is served. Self-caching.
No parameters.
```

### `get_market_health_history`

- The name "get_market_health_history" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Market Health history: the composite risk-score snapshots for the last 30
days (hourly, with flips7d = label changes in the last 7 days), a ~30-session
derived line series per detector (percent vs moving average, ratios vs their
MAs, N-day percent changes and spreads — never raw prices), and signalChanges:
which scored detectors changed status since the previous trading day's last
snapshot. Every line carries a unit string. The junk-credit-spread detector has
no lines (its source series is third-party licensed) and economic-calendar events
are not included. Self-caching (15 min). No parameters.
```

### `get_market_valuation`

- The name "get_market_valuation" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
S&P 500 valuation verdict from a discounted-earnings (equity-risk-premium)
model: verdict (Very cheap / Cheap / Fair value / Rich / Very rich), the equity
risk premium the market currently implies (impliedErpPct, in percent — lower
means richer), the zone on the ladder, how far the market sits above (+) or below
(-) the Fair value band in percent, and five ERP bands each with its erpPct, its
fair value relative to the Fair value band, and the market's percent distance
from it. All values are percentages; index-point fair values, the index level and
the earnings inputs are intentionally not published. A model, not a forecast.
Self-caching (30 min). No parameters.
```

### `get_premarket_gappers`

- The name "get_premarket_gappers" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Gapper Scanner (FREE preview) — 5-pillar low-float momentum gap scan
(gap >=10%, price $1-$100, float <=100M, premarket volume >=50k; relative volume ranks the board and news is flagged; independent implementation, defaults differ from any educator's published
criteria). Finds cheap small-cap stocks gapping up hard, flagging which have a
news catalyst.

This free, no-key endpoint auto-picks the live session — pre-market gappers
during 04:00-09:30 ET, after-hours gainers during 16:00-20:00 ET — and returns
the top 10 on the default filters (up >=10% vs the session's
reference close, price $1-$100, float <=100M shares, extended-hours volume >=50k).

Each gapper: symbol, name, sector, last (extended-hours price), changePct (TRUE
gap vs the reference close), atr, rvol (DERIVED premarket relative volume =
premarketVolume / avgVolume, i.e. what fraction of a normal FULL day's volume has
already traded — NOT TradingView's regular-session relative volume, which is
meaningless before the bell), premarketVolume (extended-hours volume), avgVolume,
float, rsi, and hasNews (a boolean catalyst flag — headline text and article
links are not served here). Ranked by cleared pillars first, then premarket relative volume descending. The result echoes
'session'.

Want to force a session, tune the filters, pull up to 50 names, and unlock the
full 51-tool connector (live options flow, GEX magnet levels, unusual activity,
wheel screeners)? Get a TraderMatrix API key — see the '_upgrade' field.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `free`:

```json
{
  "permissions": {
    "allow": [
      "mcp__free__get_premarket_gappers",
      "mcp__free__get_market_health_history",
      "mcp__free__get_market_valuation",
      "mcp__free__get_macro_liquidity",
      "mcp__free__get_cross_asset_regime",
      "mcp__free__get_market_breadth"
    ],
    "ask": [],
    "deny": []
  }
}
```

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-10-22T15:12:44.206Z, unchanged since 2026-10-22T15:12:44.206Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `0` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `https://api.tradermatrix.pro/.well-known/oauth-protected-resource` |
| Authorization servers | `https://api.tradermatrix.pro` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `yes` |
| Client ID metadata documents | `no` |