io.github.arhancanli/canli-mcp

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

The AI items cover 3 of 3 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found these. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

{
  "mcpServers": {
    "canli-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "canli-mcp@0.6.0"
      ]
    }
  }
}

{
  "mcpServers": {
    "canli-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "canli-mcp@0.6.0"
      ]
    }
  }
}

{
  "servers": {
    "canli-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "canli-mcp@0.6.0"
      ]
    }
  }
}

code --add-mcp '{"name":"canli-mcp","type":"stdio","command":"npx","args":["-y","canli-mcp@0.6.0"]}'

claude mcp add --transport stdio canli-mcp -- npx -y canli-mcp@0.6.0

npx @modelcontextprotocol/inspector@2.11.0 -- npx -y canli-mcp@0.6.0

Settings → Connectors → Add custom connector, then paste:
https://canlicapital.com/mcp/canli

{
  "mcpServers": {
    "canli-mcp": {
      "url": "https://canlicapital.com/mcp/canli"
    }
  }
}

{
  "servers": {
    "canli-mcp": {
      "type": "http",
      "url": "https://canlicapital.com/mcp/canli"
    }
  }
}

code --add-mcp '{"name":"canli-mcp","type":"http","url":"https://canlicapital.com/mcp/canli"}'

claude mcp add --transport http canli-mcp https://canlicapital.com/mcp/canli

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://canlicapital.com/mcp/canli --transport http

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Facts about the publisher. We do not turn them into a trust score.

Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

• io.github.mnemox-ai/tradememory-protocolalso has tools that runs code or commands, reads or searchescompare with this one
• io.github.agent-next/polymarket-paper-traderPolymarket Paper Traderalso has tools that runs code or commands, reads or searchescompare with this one
• com.payram/mcpPayRamalso has tools that runs code or commands, reads or searchescompare with this one
• io.github.longsizhuo/openinvestopenInvestalso has tools that runs code or commands, reads or searchescompare with this one
• ai.vaaya/mcpVaayaalso has tools that runs code or commands, reads or searchescompare with this one
• ai.ekwo/mcpEkwo OS — open source accounting: ledger, invoices and VAT on your own Supabase or Postgresalso has tools that runs code or commands, reads or searchescompare with this one

Active servers whose topic is also “finance-and-payments” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Open without sign-in

It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 4 of the 15 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Source: our own test, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

The steps in order, as the test record holds them.

1. 0 msStarted a read-only session with the server's remote endpoint
2. 644 msConnected after 0 redirects. No credential was sent or needed.
3. Read the inventory: 3 tools, 15 resources, 35 prompts.
4. 11,559 msFinished: 4 checks exercised.

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.