Skip to content

MCP servers › io.github.bck-stack › sitecheck-crypto-finance

MCP server · registry snapshot 2026-10-24 · last tested 2026-10-24

io.github.bck-stack/sitecheck-crypto-finance

128 pay-per-call agent tools: crypto, DeFi, on-chain and finance data tools. x402 — the publisher's description

1 of 2 record checks metRead-only · tools listed 2026-10-24version 1.0.0streamable HTTP128 tools

Summary

io.github.bck-stack/sitecheck-crypto-finance is a remote MCP server listed in the official MCP registry at version 1.0.0. On 2026-10-24 ProtocolProbe connected to it in read-only mode and read its inventory: 128 tools, 0 resources and 0 prompts.

Record checks

1 of 2 record checks met · 7 do not apply

  • met: Registry entry is active and says how to run it
  • not met: Source repository link opens
  • not applicable: Repository is not archived
  • not applicable: Code pushed to the repository in the 90 days before our check
  • not applicable: Repository publishes a security policy (SECURITY.md)
  • not applicable: Package names its licence with a standard (SPDX) identifier
  • not applicable: The version the registry lists can be installed and is not withdrawn
  • not applicable: npm package carries build provenance (attestation)
  • not applicable: No known critical or high advisory in the package or its dependencies

From public records, not a safety rating. Each check with its reason

Key facts

Runs
remote (hosted by the publisher)
Transport
streamable HTTP
Sign-in
none needed to open a session
Tools
128
Last tested
2026-10-24

Add to your client

How fresh this is

Live-tested
yes, a real session (not a text-only review)
Last tested
2026-10-24
Mode
read-only (no tool calls)
Latest version
1.0.0, published 2026-10-23 (registry, as of the 2026-10-24 snapshot)
First listed version
2026-10-23 (earliest version still in the registry; older removed versions would be earlier)
Registry data
snapshot 2026-10-24
Package and repository
checked 2026-10-24
Engine
mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-23, listed on 2026-10-24 with version 1.0.0 (published 2026-10-23).

Source: the official MCP Registry list on 2026-10-23 and on 2026-10-24.

What it is

What does this server offer?

Observed inventory
128tools
0resources
0prompts

None of its 128 tools are described as changing anything. For 128 the reading was uncertain, so no mark is shown.

  • crypto_smart_contract_verify

    “EVM contract verification status from Sourcify (open, no key): match type (exact/partial), compiler, contract name, ABI function and event counts, proxy implementations.”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • addressstringrequired“Contract address, 0x + 40 hex characters”
    • chainIdstring“EVM chain id as a number (default 1 = Ethereum mainnet)”
  • crypto_honeypot_detector

    “EVM token honeypot check from honeypot.is: simulated buy/sell success, honeypot verdict, buy/sell/transfer tax, risk flags, open-source status and the main DEX pair liquidity.”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • addressstringrequired“Token contract address, 0x + 40 hex characters”
    • chainIdstring“EVM chain id (default 1 = Ethereum)”
  • crypto_dex_pool_liquidity

    “Live DEX pool snapshot from DexScreener for one pool address on one chain (Uniswap, Raydium, Curve and other DEXes DexScreener indexes): USD liquidity, token reserves, price, 24h volume and transacti…”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 2 required
    • chainstringrequired“DexScreener chain slug, e.g.”
    • poolstringrequired“Pool/pair address on that chain”
  • crypto_defillama_tvl_oracle

    “Current total value locked (TVL, USD) of one DeFi protocol from DefiLlama, by protocol slug (e.g.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • protocolstringrequired“DefiLlama protocol slug, lowercase letters, digits and dashes”
  • crypto_defillama_stablecoins

    “Stablecoin market cap (circulating USD), 1/7/30-day circulating change (mint/burn proxy), peg price and depeg % from DefiLlama.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • symbolsstring“Comma-separated stablecoin tickers, up to 10 (default: 10 largest)”
  • crypto_defillama_yields

    “DeFi pool APY (total, base, reward), TVL, 7/30-day APY change and impermanent-loss estimate (il7d, ilRisk) from DefiLlama.”

    Publisher declares: read-only yes · open-world yes

    3 inputs
    • projectstring“DefiLlama project slug, e.g.”
    • chainstring“Chain name as DefiLlama writes it, e.g.”
    • symbolstring“Token symbol or pair text, e.g.”
  • crypto_whale_alert_transfers

    “Bitcoin large transactions in the latest block from mempool.space: total output in BTC, fee, txid and block height, filtered by minBtc.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • minBtcstring“Minimum total output in BTC, 0.01 to 10000 (default 1)”
    • limitstring“How many transactions to return, 1 to 25 (default 10)”
  • crypto_token_holder_concentration

    “Ethereum ERC-20 holder concentration from Blockscout: top 100 holders' share of total supply, top 10 share, and a Gini coefficient over those 100 balances.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • addressstringrequired“ERC-20 token contract on Ethereum mainnet, 0x + 40 hex characters”
  • crypto_aave_lending_markets

    “Aave v3 Ethereum main-market reserves: supply and borrow APY, utilization, max LTV, liquidation threshold, supply/borrow caps status, frozen/paused flags, total supplied and available liquidity.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • symbolstring“Reserve token symbol, e.g.”
  • crypto_compound_market_stats

    “Compound v3 (Comet) market stats on Ethereum read on-chain: utilization, supply and borrow APY, total supply and borrow of the base asset, and every collateral asset with its borrow and liquidation c…”

    Publisher declares: read-only yes · open-world yes

    1 input
    • marketstring“usdc (default) or weth”
  • crypto_nft_floor_wash_detector

    “ERC-721 collection activity on Ethereum from Blockscout: name, holder count, supply and the newest 50 transfers, with round-trip transfers (a token sent A to B and straight back to A) flagged as poss…”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • addressstringrequired“ERC-721 contract address on Ethereum, 0x + 40 hex characters”
  • crypto_cross_chain_bridge_flows

    “Cross-chain transfer volume from Wormholescan (Wormhole network): USD and token counts grouped by source to destination chain over the newest N transfers (1 to 100).”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many of the newest transfers to read, 1 to 100 (default 50)”
Show 88 more tools
  • crypto_solana_token_extensions

    “Solana SPL mint audit from the chain: program (Token or Token-2022), authorities, supply and decimals, plus Token-2022 extensions with risk flags for permanent delegate, transfer hook, transfer fee, …”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • mintstringrequired“Solana mint address (base58, 32 to 44 characters)”
  • crypto_mev_block_analytics

    “Ethereum MEV-Boost delivered blocks from the Flashbots relay: proposer payment in ETH (block value), transaction count, gas used vs limit, and builder pubkeys with block counts.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many of the newest delivered blocks, 1 to 50 (default 10)”
  • crypto_ethereum_gas_telemetry

    “Ethereum EIP-1559 gas per recent block: base fee (gwei), gas used ratio, and priority fee (tip) percentiles at 10/50/90 from eth_feeHistory, plus the next block's base fee.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • blockCountstring“How many recent blocks, 1 to 20 (default 5)”
  • crypto_token_vesting_schedule

    “Token emission and unlock schedule per allocation label (team, investors, rewards, etc.) from DefiLlama emissions data, by protocol slug: last unlock day and amount, next scheduled unlock (if any in …”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • protocolstringrequired“DefiLlama emissions slug, lowercase, e.g.”
  • crypto_coingecko_market_depth

    “CoinGecko per-exchange market depth for one coin: USD cost to move price up 2% and down 2% (liquidity), 24h volume in USD, last price and bid-ask spread, for the 15 highest-volume trading pairs.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • coinstringrequired“CoinGecko coin id, e.g.”
  • crypto_coinmarketcap_listings

    “Recently added tokens on CoinMarketCap (public new-listings page): name, symbol, date added, price, 24h change, 24h volume and market cap, from the page's embedded data.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many newest listings, 1 to 100 (default 10)”
  • crypto_fear_greed_index

    “Crypto Fear & Greed Index (0-100) from alternative.me: today's value and label, change vs yesterday and vs 7 days ago, 7-day average, and a sentiment momentum label (rising, falling, flat).”

    Publisher declares: read-only yes · open-world yes

    1 input
    • daysstring“How many daily values to read, 8 to 30 (default 30; needs at least 8 for the 7-day figures)”
  • crypto_bitcoin_mempool_stats

    “Bitcoin mempool congestion from mempool.space: unconfirmed transaction count and size, recommended fee rates in sat/vB, difficulty-adjustment progress and estimated retarget date, and blocks until th…”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_bitcoin_hashrate_difficulty

    “Bitcoin network hashrate (EH/s) with the last 3 daily averages, current difficulty, difficulty-epoch progress and expected change, and miner revenue over the last 144 blocks (about one day): total re…”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_ethereum_staking_rewards

    “Ethereum proof-of-stake yield snapshot: Lido stETH APR (protocol-wide, after Lido fees) and the beacon chain's finalized and justified epochs with the finality flag.”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_solana_validator_cluster

    “Solana validator snapshot from the public RPC: active and delinquent validator counts, total active stake in SOL, stake-weighted commission, cluster skip rate over the latest epoch block production, …”

    Publisher declares: read-only yes · open-world yes

    1 input
    • topstring“How many top validators by stake to list, 1 to 25 (default 5)”
  • crypto_lido_steth_peg

    “Lido stETH vs ETH peg from public USD prices (DefiLlama coins API): stETH and ETH price, discount or premium in %, plus Lido's total stETH staked and market cap.”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_makerdao_vault_status

    “Sky (MakerDAO) savings rates and peg: sUSDS and sDAI savings APY and TVL on Ethereum (DefiLlama yields), DAI and USDS USD price and depeg %, and circulating supply.”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_crypto_fundraising_rounds

    “Recent crypto and Web3 venture funding rounds (project, date, round type, amount and valuation in USD, lead and other investors, category, chains) from DefiLlama's public Raises page.”

    Publisher declares: read-only yes · open-world yes

    8 inputs
    • daysstring“Look back this many days, 1 to 365 (default 30).”
    • sincestring“Optional start date YYYY-MM-DD”
    • investorstring“Optional investor name filter (lead or other), e.g.”
    • categorystring“Optional category filter, e.g.”
    • chainstring“Optional chain filter, e.g.”
    • roundstring“Optional round filter, e.g.”
    • minAmountUsdstring“Optional minimum amount in USD”
    • limitstring“Rows to return, 1 to 100 (default 20)”
  • crypto_binance_orderbook_depth

    “Binance spot order book snapshot for one pair: best bid and ask, spread, USD depth within 1% and 2% of mid price (from the returned levels only), and 24h volume, change and high/low.”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • symbolstringrequired“Binance spot pair, e.g.”
    • limitstring“Levels per side: 5, 10, 20, 50 or 100 (default 100)”
  • crypto_coinbase_spot_exchange

    “Coinbase Exchange (US spot) order book for one product: best bid and ask, spread, USD depth within 1% and 2% of mid (aggregated level-2 levels only), 24h base volume, 24h RFQ (institutional request-f…”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • productstringrequired“Coinbase product id such as BTC-USD or ETH-USD”
  • crypto_deribit_options_skew

    “Deribit BTC or ETH options for one expiry (default: nearest unexpired): at-the-money implied volatility (mark IV), and an IV skew at ±10% moneyness (put at 0.9x spot minus call at 1.1x spot, in IV po…”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • currencystring“BTC or ETH (default BTC)”
    • expirystring“Expiry as Deribit writes it, e.g.”
  • crypto_crypto_liquidations_feed

    “OKX perpetual-swap liquidations for one underlying (e.g.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • ulystring“OKX underlying, e.g.”
  • crypto_debank_wallet_portfolio

    “Multi-chain wallet net worth with DeFi positions and debt (40+ EVM chains and Solana, data from the Zerion API): total value in USD split by wallet, deposited, borrowed, locked and staked, top chains…”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • addressstringrequired“EVM address 0x… or Solana address (required)”
    • limitstring“Protocol positions to return, 1 to 100 (default 50)”
  • crypto_zapper_token_balances

    “Token balances of an EVM wallet across chains from Blockscout explorers: native coin and ERC-20 holdings with amount, USD price and USD value (largest first), plus per-chain and overall USD totals.”

    Publisher declares: read-only yes · open-world yes

    3 inputs, 1 required
    • addressstringrequired“EVM wallet address (0x + 40 hex characters)”
    • chainsstring“Comma list from ethereum, optimism, gnosis, base, arbitrum, polygon (default: every chain available)”
    • limitstring“Tokens per chain, 1 to 50 (default 20)”
  • crypto_zerion_dna_feed

    “On-chain wallet portfolio and performance from Zerion across 40+ EVM chains and Solana: total value in USD, split by position type (wallet, deposited, borrowed, locked, staked) and by chain, 1-day ch…”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • addressstringrequired“EVM address 0x… or Solana address (required)”
    • periodstring“Optional value chart: hour, day, week, month, 3months, 6months, year, 5years or max”
  • crypto_etherscan_label_cloud

    “Etherscan public address-label cloud: entity labels (e.g.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • namestring“Optional case-insensitive part of a label name, e.g.”
    • limitstring“How many labels, 1 to 100 (default 10)”
  • crypto_solscan_account_tokens

    “Solana account inventory: SOL balance, every SPL token account (Token and Token-2022 programs) with mint, amount, decimals and frozen state, token name, symbol, USD price and value for the largest ho…”

    Publisher declares: read-only yes · open-world yes

    3 inputs, 1 required
    • addressstringrequired“Solana wallet address (base58, required)”
    • limitstring“Token accounts to return, 1 to 100 (default 20; non-zero balances, largest USD value first)”
    • signaturesstring“Latest signatures to return, 0 to 50 (default 10)”
  • crypto_basescan_contract_events

    “Recent event logs of a contract on Base (chain 8453) from public RPC: block, time order, transaction hash, log index, event name (signature database), topics and data, with ERC-20/721 Transfer and Ap…”

    Publisher declares: read-only yes · open-world yes

    4 inputs, 1 required
    • addressstringrequired“Contract address 0x… (e.g.”
    • blocksinteger“How many recent blocks to scan, 1-5000 (default 500; Base makes a block every 2 s)”
    • topic0string“Optional event signature hash (0x + 64 hex) to keep only that event, e.g.”
    • limitinteger“Max logs returned, newest first, 1-200 (default 50)”
  • crypto_arbiscan_l2_rollup

    “Arbitrum One rollup batch postings to Ethereum L1 and the L1 gas they incurred: the latest SequencerBatchDelivered events on the SequencerInbox with batch number, L1 block and time, data location (bl…”

    Publisher declares: read-only yes · open-world yes

    1 input
    • batchesstring“How many latest batches, 1 to 10 (default 5)”
  • crypto_optimism_superchain_tx

    “OP Mainnet (Optimism) recent blocks from the public RPC: transactions per block, gas used per block, block time, and the transaction rate over the last N blocks (1 to 10).”

    Publisher declares: read-only yes · open-world yes

    1 input
    • blocksstring“How many latest blocks to read, 2 to 10 (default 5)”
  • crypto_polygon_pos_checkpoints

    “Polygon PoS checkpoints from the Heimdall API: the latest K checkpoints (1 to 10) with their Bor block range, timestamp and proposer, plus the average spacing in blocks and seconds.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • countstring“How many latest checkpoints, 1 to 10 (default 3)”
  • crypto_chainlink_price_feeds

    “Chainlink on-chain price feed (ETH/USD or BTC/USD, Ethereum mainnet): latest round answer in USD, round id, and the start and update times with the age of the last update in seconds.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • feedstring“eth-usd or btc-usd (default eth-usd)”
  • crypto_pyth_network_oracles

    “Pyth Network oracle prices with confidence bands, read on-chain from Pyth's Solana push feeds: price, confidence interval (absolute and %), EMA price and EMA confidence, publish time and age in secon…”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • symbolsstring“Comma-separated Pyth symbols, e.g.”
    • liststring“true to list the available symbols instead”
  • crypto_uniswap_v3_ticks

    “Uniswap V3 liquidity distribution for an Ethereum pool, read on-chain: tokens, fee tier, tick spacing, current tick and price (both directions, decimals applied), in-range liquidity, and every initia…”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • poolstring“Uniswap V3 pool address on Ethereum (default USDC/WETH 0.05%)”
    • wordsstring“Tick-bitmap words to scan each side of the price, 1 to 5 (default 2; one word = 256 tick spacings)”
  • crypto_curve_gauge_weights

    “Curve Finance gauges on one chain (default Ethereum): CRV emission APR range, CRV inflation rate per second and working supply per gauge, with the pool name and addresses.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • chainstring“Curve blockchainId, e.g.”
    • limitstring“How many gauges, 1 to 50 (default 10)”
  • crypto_convex_vlcvx_voting

    “Convex Finance (cvx.eth) governance on Snapshot: the newest proposals (1 to 20) with title, state, start and end time, number of votes and the top two choice scores.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many newest proposals, 1 to 20 (default 5)”
  • crypto_balancer_v2_pools

    “Balancer V2 pools by total liquidity (USD): pool name, type (weighted, stable, composable stable, and others), token symbols with weights where the pool has them, 24h volume and address.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many pools, 1 to 20 (default 5)”
  • crypto_sushiswap_route_quotes

    “SushiSwap route quote for an exact-input swap on one EVM chain: amount out, swap price, price impact, gas spent and the tokens in the route.”

    Publisher declares: read-only yes · open-world yes

    5 inputs, 3 required
    • chainIdstring“EVM chain id (default 1)”
    • tokenInstringrequired“Token to sell, 0x address (use the wrapped token for native ETH)”
    • tokenOutstringrequired“Token to buy, 0x address”
    • amountInstringrequired“Amount to sell in the token's smallest unit (wei for 18 decimals)”
    • senderstring“Optional sender address for the API (quote unaffected)”
  • crypto_1inch_pathfinder_quotes

    “Best swap quote for a token pair on an EVM chain, compared across two public DEX aggregators (KyberSwap and Velora/ParaSwap): amount out, USD values, estimated gas in USD, price impact against the in…”

    Publisher declares: read-only yes · open-world yes

    4 inputs, 3 required
    • chainstring“ethereum, base, arbitrum, optimism, polygon, bsc or avalanche (default ethereum)”
    • tokenInstringrequired“Token to sell: contract address, or native for the chain's coin”
    • tokenOutstringrequired“Token to buy: contract address, or native”
    • amountstringrequired“Amount of tokenIn in whole units, e.g.”
  • crypto_cowswap_batch_auctions

    “CoW Protocol (Ethereum) latest batch auction result: auction id and block window, number of solver solutions, the winning solution (solver, score, ranking, settlement tx), and the top five solutions …”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_jupiter_solana_routing

    “Jupiter aggregator quote on Solana for an exact-input swap: input and output amounts in base units, price impact %, USD value, slippage, and the AMM route legs (venue labels).”

    Publisher declares: read-only yes · open-world yes

    4 inputs, 3 required
    • inputMintstringrequired“Mint to sell (base58), e.g.”
    • outputMintstringrequired“Mint to buy (base58)”
    • amountstringrequired“Amount to sell in the smallest unit (lamports for SOL)”
    • slippageBpsstring“Slippage tolerance in basis points, 1 to 1000 (default 50)”
  • crypto_circle_cctp_transfers

    “Circle CCTP (USDC cross-chain transfer) fast-burn allowance and the fee tiers for one source-to-destination domain pair.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • sourcestring“CCTP source domain id, e.g.”
    • destinationstring“CCTP destination domain id, e.g.”
  • crypto_tether_treasury_burns

    “USDT (Ethereum) supply changes from the USDT contract's own events over the last N blocks (1 to 200000, about 4 weeks): Tether issues (Issue), redemptions (Redeem) and destroyed funds of blacklisted …”

    Publisher declares: read-only yes · open-world yes

    1 input
    • blocksstring“How many latest Ethereum blocks to scan, 1 to 200000 (default 50000, about one week)”
  • crypto_crypto_hack_rekt_database

    “Rekt News leaderboard of the largest crypto hacks and exploits: rank, incident name, audit status as listed, loss in USD and date, from the public page (top 1 to 50).”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many top incidents, 1 to 50 (default 10)”
  • crypto_sanctioned_crypto_wallets

    “OFAC SDN list digital-currency addresses (from the Remarks field 'Digital Currency Address - <CODE> <address>'): list up to 200 entries with currency code, address and sanctioned entity name, optiona…”

    Publisher declares: read-only yes · open-world yes

    3 inputs
    • currencystring“Optional currency code such as XBT, ETH, TRX, USDT”
    • addressstring“Optional address to check against the list”
    • limitstring“How many entries to return, 1 to 200 (default 20)”
  • crypto_tornado_cash_anonymity

    “Tornado Cash ETH pools (0.1, 1, 10, 100 ETH): current pool balance, contract code presence, and an approximate anonymity set = balance divided by denomination (deposits not yet withdrawn, if nothing …”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_hyperliquid_perps_depth

    “Hyperliquid L1 perpetual market snapshot for one coin: best bid and ask, spread, USD depth within 1% of mid (from the 20 returned levels per side), mark and oracle prices, hourly funding rate, open i…”

    Publisher declares: read-only yes · open-world yes

    1 input
    • coinstring“Hyperliquid perp name, e.g.”
  • crypto_dydx_chain_markets

    “dYdX v4 (Cosmos app-chain) perpetual market for one ticker: status, oracle price, 24h price change, 24h USD volume and trade count, hourly funding rate, initial and maintenance margin, and open inter…”

    Publisher declares: read-only yes · open-world yes

    1 input
    • tickerstring“dYdX market ticker, e.g.”
  • crypto_gmx_v2_glv_vaults

    “GMX v2 (Arbitrum) GLV liquidity vaults: each vault's name, vault token address, long and short collateral tokens, whether it is listed, and listing date.”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_blast_gold_points

    “Blast L2 native yield from the chain itself: for the rebasing USDB (stablecoin yield) and WETH (ETH staking yield) predeploy contracts, total supply and share price — the cumulative native-yield mult…”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_scroll_l2_zk_proofs

    “Scroll (zkEVM L2) network statistics from its public explorer: total blocks and transactions, average block time, gas prices, network utilization and today's transactions, plus the newest blocks (1 t…”

    Publisher declares: read-only yes · open-world yes

    1 input
    • blocksstring“How many newest blocks, 1 to 10 (default 3)”
  • crypto_zksync_era_hyperchains

    “zkSync Era rollup batches from the public block explorer API: the newest N batches (1 to 20) with batch number, time, status (sealed, committed, proven, executed), L1 and L2 transaction counts, and t…”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many of the newest batches, 1 to 20 (default 5)”
  • crypto_linea_consensys_rollup

    “Linea zkEVM rollup telemetry from the public Linea RPC: latest sequencer block, safe block and finalized block (proven and finalized on Ethereum L1) with numbers, times and transaction counts, the fi…”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_mantle_da_eigenlayer

    “Mantle Network L2 telemetry from the public Mantle RPC: latest block, safe block (its batch is posted to Ethereum/EigenDA) and finalized block with numbers, times and transaction counts, the head-to-…”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_berachain_pol_validators

    “Berachain Proof-of-Liquidity telemetry from the public Berachain RPC: total BGT (Bera Governance Token) supply read from the BGT contract — BGT is minted only as PoL rewards, so its growth is the emi…”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • crypto_ton_blockchain_jettons

    “TON jetton (token) masters from TON Center's public API: the newest N jetton masters (1 to 10) with raw address, total supply in base units, mintable flag, admin address and metadata URI.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many jetton masters, 1 to 10 (default 5)”
  • crypto_sui_move_objects

    “Sui mainnet current epoch from the public GraphQL API: epoch number, reference gas price (MIST per gas unit), epoch start and end time, and total checkpoints.”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • finance_kalshi_prediction_markets

    “Kalshi (US regulated prediction exchange) open events and their markets: event title, category, series, and per market the question, yes/no bid and ask, last price (= implied probability), 24h and to…”

    Publisher declares: read-only yes · open-world yes

    3 inputs
    • seriesstring“Optional Kalshi series ticker, e.g.”
    • categorystring“Optional category filter (case-insensitive substring), e.g.”
    • limitstring“How many events, 1 to 100 (default 10)”
  • finance_yahoo_finance

    “Yahoo Finance quote and daily history for one ticker (stocks, ETFs, indices, FX, crypto symbols) from Yahoo's public chart endpoint.”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • symbolstringrequired“Yahoo ticker, e.g.”
    • rangestring“History range: 1d, 5d, 1mo, 3mo, 6mo, 1y, 2y, 5y, 10y, ytd, max (default 5d)”
  • finance_sec_form_d

    “Latest SEC Form D filings (private securities offerings, Reg D) from EDGAR's public search index: filer name, CIK, filing date, state and accession number.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • querystring“Optional words to match in filer names or filing text, e.g.”
    • limitstring“How many filings, 1 to 20 (default 10)”
  • finance_pitchbook_investors

    “PitchBook public profile of an investor, lender or advisor: name, description, public quick facts (type, year founded, professionals, investments, exits, AUM when shown), headquarters address and the…”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • idstringrequired“PitchBook profile id, e.g.”
    • kindstring“investor (default), advisor or company”
  • finance_stooq_historical_stocks

    “Daily historical prices for a US stock, ETF or index: date, open, high, low, close and volume, newest first, for any date range up to 10 years back (max 1,000 rows per call).”

    Publisher declares: read-only yes · open-world yes

    5 inputs, 1 required
    • symbolstringrequired“US ticker, e.g.”
    • assetClassstring“stock (default), etf or index”
    • fromstring“Start date YYYY-MM-DD (default 30 days ago)”
    • tostring“End date YYYY-MM-DD (default today)”
    • limitstring“Rows, 1 to 1000 (default 100)”
  • finance_pitchbook_scraper_fund_data

    “PitchBook public fund profile: fund name, description, quick facts as PitchBook shows them publicly (strategy, status, manager, size, vintage, dry powder when public), domicile address, and the profi…”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • idstringrequired“PitchBook fund id, e.g.”
  • finance_tradingview_ideas

    “TradingView public trading ideas: the latest published idea titles and their chart links, read from the public ideas page.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many ideas, 1 to 30 (default 10)”
  • dev_morningstar

    “Morningstar quote page data for a US stock, ETF or mutual fund: name, ticker, Morningstar star rating, key statistics shown free on the page (stocks: previous close, day and 52-week range, bid/ask, m…”

    Publisher declares: read-only yes · open-world yes

    3 inputs, 2 required
    • typestringrequired“stock, etf or fund”
    • tickerstringrequired“Ticker, e.g.”
    • exchangestring“Morningstar exchange code (default xnas for stocks/funds, arcx for ETFs; e.g.”
  • finance_etf_com

    “ETF.com profile for a US-listed ETF: name, issuer, one-line strategy description, inception date, expense ratio, assets under management, benchmark, index tracked, category and fee note.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • symbolstringrequired“ETF ticker, e.g.”
  • finance_bstock

    “B-Stock wholesale liquidation auctions (US marketplace, all sellers): total live lots and 20 per page with listing id, title, storefront (seller), categories, condition, inventory type, units, pallet…”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • pagenumber“Result page 1-40 (default 1)”
    • categorystring“Optional: keep only lots whose categories contain this text, e.g.”
  • finance_sec_iapd

    “Search the SEC Investment Adviser Public Disclosure (IAPD) database by firm name: CRD number, firm name and other names, SEC adviser (801-) and broker-dealer (8-) numbers, adviser and broker-dealer r…”

    Publisher declares: read-only yes · open-world yes

    3 inputs, 1 required
    • namestringrequired“Firm name words, e.g.”
    • limitstring“Firms to return, 1 to 50 (default 20)”
    • pagestring“Page number from 1 (default 1)”
  • finance_tradingview_screener

    “TradingView stock screener results for one market (default america): symbol, last price and daily change, in TradingView's default order.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • marketstring“america (default), crypto, forex or global”
    • limitstring“How many rows, 1 to 50 (default 10)”
  • finance_stockanalysis

    “StockAnalysis company identity for one stock ticker: company name, legal name, ticker and the page description, read from the schema.org JSON-LD on the public stock page.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • symbolstringrequired“Stock ticker, e.g.”
  • finance_nasdaq_short_interest

    “Short interest history for a Nasdaq-listed stock from Nasdaq.com (FINRA twice-monthly settlement data): settlement date, shares sold short, average daily share volume and days to cover, newest first …”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • symbolstringrequired“Nasdaq-listed ticker, e.g.”
    • limitstring“Reports to return, 1 to 24 (default 12)”
  • finance_fec_campaign_finance_contributions

    “US federal campaign contributions (FEC Schedule A itemized receipts) from the official OpenFEC API, by contributor name, employer, committee ID or state for a two-year cycle: contributor, employer, o…”

    Publisher declares: read-only yes · open-world yes

    7 inputs
    • contributorstring“Contributor name, e.g.”
    • employerstring“Contributor employer, e.g.”
    • committeeIdstring“Receiving committee ID, e.g.”
    • statestring“Contributor state, e.g.”
    • cyclestring“Two-year period ending year, e.g.”
    • minAmountstring“Minimum amount in USD”
    • limitstring“Results, 1 to 100 (default 20)”
  • finance_binance_prices

    “Binance spot last price for one trading pair (for example BTCUSDT), from Binance's public ticker endpoint.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • symbolstringrequired“Binance pair, e.g.”
  • finance_nerdwallet

    “NerdWallet best credit card rankings for a category (cash-back, travel, balance-transfer, 0-apr, rewards, student, secured, business...): rank, card name, the 'best for' label, annual fee, NerdWallet…”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • categorystringrequired“Ranking slug as in nerdwallet.com/best/credit-cards/<slug>, e.g.”
  • finance_fdic_bank

    “FDIC-insured bank institutions in one US state from the FDIC BankFind API: name, certificate number, address, ZIP, charter class and whether the bank is active.”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • statestringrequired“US state name as FDIC writes it, e.g.”
    • limitstring“How many institutions, 1 to 50 (default 10)”
  • dev_investing_com_economic_calendar

    “Investing.com economic calendar for a date range (up to 7 days): each release with UTC time, country, currency, event name, category, importance (low/medium/high), reference period, actual, forecast …”

    Publisher declares: read-only yes · open-world yes

    6 inputs
    • fromstring“First day, YYYY-MM-DD (default today, UTC)”
    • tostring“Last day, YYYY-MM-DD, at most 7 days after from (default = from)”
    • countrystring“Two-letter country code, e.g.”
    • currencystring“Currency code, e.g.”
    • minImportancestring“low (default), medium or high”
    • limitstring“Releases, 1 to 500 (default 200)”
  • finance_indexmundi

    “IndexMundi monthly commodity price table for one commodity (default gold), read from the public commodity page: month and price as IndexMundi publishes them.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • commoditystring“IndexMundi commodity slug, e.g.”
    • monthsstring“How many latest months, 1 to 60 (default 12)”
  • finance_finviz

    “Finviz quote snapshot for one stock ticker: the key statistics table as label and value pairs (market cap, P/E, price, change, volume and similar), read from the public quote page.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • symbolstringrequired“Stock ticker, e.g.”
  • finance_sec_investment_adviser

    “Investment adviser firm record from the SEC IAPD (Form ADV) by CRD number or firm name: legal and other names, adviser status, SEC file number, latest Form ADV filing date and PDF link, office addres…”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • crdstring“Firm CRD number, e.g.”
    • namestring“Or a firm name; the first active adviser match is used”
  • finance_leboncoin

    “leboncoin.fr classified-ads search (all of France): result totals (all / private / pro) and 35 ads per page with ad id, title, price (EUR), category, city, zip, department, region, latitude/longitude…”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • querystringrequired“Search words in French, e.g.”
    • pagenumber“Result page 1-100 (default 1)”
  • finance_huobi_tickers

    “HTX (formerly Huobi) 24h ticker for one market (e.g.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • symbolstringrequired“HTX market in lowercase, e.g.”
  • finance_bank_of_england_iadb

    “Bank of England official daily statistics (IADB) for one series code (default XUDLUSS) over the last N days, from the Bank's CSV download.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • seriesstring“Bank of England series code, e.g.”
    • daysstring“How many calendar days back to fetch, 1 to 365 (default 30)”
  • finance_iex_cloud_public

    “Real-time US stock, ETF or index quote (replacement for the closed IEX Cloud public quote): company name, exchange, last sale price, net and % change, bid/ask price and size, volume, last trade time,…”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • symbolstringrequired“US ticker, e.g.”
    • assetClassstring“stock (default), etf or index”
  • finance_ffiec_bank_institutions

    “US FDIC-insured banks (FDIC BankFind call-report data): name, FDIC cert, Fed RSSD ID, location, total assets, deposits and net income (USD), ROA and ROE, report date, charter class, regulator, office…”

    Publisher declares: read-only yes · open-world yes

    7 inputs
    • namestring“Optional words of the bank name, e.g.”
    • statestring“Optional 2-letter state, e.g.”
    • certstring“Optional FDIC certificate number for one bank”
    • activestring“true (default) for active banks, false for closed/merged ones, all for both”
    • sortstring“assets (default), deposits, name or established”
    • limitstring“Banks to return, 1 to 100 (default 25)”
    • pagestring“Page number from 1 (default 1)”
  • finance_curve_finance_pools

    “Curve Finance pools on Ethereum (all but the tiniest, as Curve's 'big' list): pool name, total USD value locked in the pool, and each coin with its USD price and balance, sorted by pool size.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • searchstring“Optional text to match in the pool name, e.g.”
    • limitstring“How many pools, 1 to 50 (default 10)”
  • finance_hyperliquid_perp_funding

    “Hyperliquid perpetual futures snapshot for one coin (e.g.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • coinstringrequired“Perp coin name as Hyperliquid lists it, e.g.”
  • finance_mempool_bitcoin

    “Bitcoin network snapshot from mempool.space: recommended fee rates (sat/vB) for fastest, half-hour, hour and economy confirmation, plus the current chain tip height.”

    Publisher declares: read-only yes · open-world yes

    Takes no inputs.

  • finance_coingecko

    “CoinGecko spot prices for up to 10 coins (by CoinGecko id, e.g.”

    Publisher declares: read-only yes · open-world yes

    2 inputs, 1 required
    • idsstringrequired“Comma-separated CoinGecko ids, up to 10 (e.g.”
    • vsstring“Quote currency code, e.g.”
  • finance_gemini_tickers

    “Gemini crypto exchange public ticker for one market (e.g.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • symbolstringrequired“Gemini market, lowercase, e.g.”
  • finance_mexc_tickers

    “MEXC spot last price for one pair (e.g.”

    Publisher declares: read-only yes · open-world yes

    1 input, 1 required
    • symbolstringrequired“MEXC spot pair, e.g.”
  • finance_cryptorank_projects

    “CryptoRank top crypto projects by rank: name, symbol, type, price, market cap, fully diluted valuation, 24h volume, 24h high/low, supply and all-time high, from CryptoRank's API v2.”

    Publisher declares: read-only yes · open-world yes

    1 input
    • limitstring“How many projects, 1 to 100 (default 10)”
  • finance_coinbase_assets

    “Currency list from Coinbase's public v2 API: currency code, name and minimum size, optionally filtered by a name or code fragment.”

    Publisher declares: read-only yes · open-world yes

    2 inputs
    • searchstring“Optional text to match in the code or name, e.g.”
    • limitstring“How many results, 1 to 100 (default 20)”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 128 tools are listed. Read 2026-10-24.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

No AI reading was available for this server's tools (the two runs did not agree, or the listing was not reviewed).

Counted from the listing

Parameters with a description
100% of 217
Tools with a description
100% of 128
Typical description length
385 characters

The tool set

Counted from the listing

Tools
128
Size of the list
about 31,498 tokens for an agent to load (characters ÷ 4)
Naming
128 of 128 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 0 of 128 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-24 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai
Settings → Connectors → Add custom connector, then paste:
https://api.chainmarket-api.workers.dev/mcp
Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json
{
  "mcpServers": {
    "sitecheck-crypto-finance": {
      "url": "https://api.chainmarket-api.workers.dev/mcp"
    }
  }
}
VS Code · .vscode/mcp.json
{
  "servers": {
    "sitecheck-crypto-finance": {
      "type": "http",
      "url": "https://api.chainmarket-api.workers.dev/mcp"
    }
  }
}
VS Code (command line) · Bash or zsh terminal (macOS, Linux)
code --add-mcp '{"name":"sitecheck-crypto-finance","type":"http","url":"https://api.chainmarket-api.workers.dev/mcp"}'
Claude Code
claude mcp add --transport http sitecheck-crypto-finance https://api.chainmarket-api.workers.dev/mcp
Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+
npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.chainmarket-api.workers.dev/mcp --transport http
  • The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
  • The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry saysWe foundResultSource · date
Remote endpoint api.chainmarket-api.workers.dev/mcpSession openedmatchesour test · 2026-10-24
No credential declared as requiredOpened a session without any credentialmatchesour test · 2026-10-24

Choosing

Record checks

Public records · not a safety rating

1 of 2 record checks met · 7 do not apply

  • MetRegistry entry is active and says how to run itActive, with a package or a remote address.
  • Not metSource repository link opensThe registry entry gives no repository link.
  • Does not applyRepository is not archivedNo public GitHub repository to read.
  • Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
  • Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
  • Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
  • Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
  • Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
  • Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-24. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.bck-stack/sitecheck-crypto-finance

Answered from the data above

Does io.github.bck-stack/sitecheck-crypto-finance need an API key or sign-in?

It opened a session without any credential on 2026-10-24. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.bck-stack/sitecheck-crypto-finance been security tested?

Partly. 2 of the 14 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-24
  1. Inventory: exercised
  2. Hidden instructions: exercised
  3. Real execution: not run · our policy
  4. Secret leak: not run · nothing to check it against
  5. Internal addresses: not run · our policy
  6. Unconfirmed changes: not run · our policy
  7. Bad input: not run · our policy
  8. Model requests: not run · nothing to check it against
  9. Sensitive questions: not run · nothing to check it against
  10. Folder boundary: not run · our policy
  11. Log leaks: not run · nothing to check it against
  12. Hidden content: not run · nothing to check it against
  13. Fake assistant turns: not applicable
  14. Token passthrough: not applicable
  15. Token audience: not applicable
  16. Sign-in redirect: not run · our policy
  17. Consent handling: not testable from outside
  18. Sign-in metadata: not applicable

2 exercised12 not run (reason given)4 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2
  • 1Inventory
    tool-list
    Reads the declared tools, resources and prompts.exercised
  • 2Hidden instructions
    description-poisoning
    Looks for hidden instructions in tool descriptions.exercised
Not run, with the reason · 12
  • 3Real execution
    real-execution
    Calls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 4Secret leak
    canary-leak
    Plants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 5Internal addresses
    ssrf
    Checks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 6Unconfirmed changes
    write-without-confirmation
    Checks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 7Bad input
    error-handling
    Sends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 8Model requests
    sampling
    Checks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 9Sensitive questions
    elicitation-sensitive-data
    Checks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 10Folder boundary
    root-boundary
    Checks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
  • 11Log leaks
    logging-side-channel
    Checks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
  • 12Hidden content
    audience-hiding
    Checks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
  • 16Sign-in redirect
    open-redirect
    Checks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
  • 17Consent handling
    confused-deputy
    Checks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside
Does not apply to this server · 4
  • 13Fake assistant turns
    fake-assistant-turn
    Checks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
  • 14Token passthrough
    token-passthrough
    Checks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
  • 15Token audience
    token-audience-validation
    Checks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
  • 18Sign-in metadata
    oauth-url-scheme
    Checks the published sign-in metadata for unsafe URLs.No sign-in (OAuth) metadata is published, so there are no sign-in addresses to check.not applicable

Source: our own test, 2026-10-24, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

  1. 0 msStarted a read-only session with the server's remote endpoint
  2. 422 msConnected after 0 redirects. No credential was sent or needed.
  3. Read the inventory: 128 tools, 0 resources, 0 prompts.
  4. 1,437 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified
pending: added in the weekly update
listed 2026-10-24; not classified yet
Pricing modelAI-classified
pending: added in the weekly update
the website is not read yet
Programming language
does not apply
no existing GitHub repository (server declares no repository link, so there is nothing to fetch)
Hosting type
registry · 2026-10-24
MCP capability
tools
our test · 2026-10-24
Transport
streamable HTTP
registry · 2026-10-24
Required credentials
none declared
registry · no declaration is not a guarantee
Package registry
does not apply
remote-only server: no package is shipped, so there is no package registry
Freshness
0–30 days
registry updatedAt · 2026-10-24
Lifecycle status
registry · 2026-10-24
License class
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Integrity hash
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Signature / provenance
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Dependency advisories
does not apply
ships no package, so there are no dependencies to audit
Popularity
does not apply
remote-only server: ships no package, so there is nothing to look up in a package registry
Publisher signals
not stated
no readable GitHub owner to describe
Maintenance
does not apply
server declares no repository link, so there is nothing to fetch
Environment
the publisher's infrastructure
where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.bck-stack/sitecheck-crypto-finance: MCP server record.” Data checked 2026-10-24. https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-crypto-finance

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

ProtocolProbe: 1 of 2 record checks met

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.bck-stack/sitecheck-crypto-finance)](https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-crypto-finance)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology