Loading…
Crypto market intelligence with regime detection, funding rates, DeFi yields, and trading signals.
Do not connect
The assessed surface is high-risk. Remediate the findings before connecting.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The fia-signals-x402 MCP server exposes 8 tools, focused primarily on network and developer capabilities. Its published description reads: "Crypto market intelligence with regime detection, funding rates, DeFi yields, and trading signals". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates fia-signals-x402 D+ — the assessed surface is high-risk and should be remediated before use. Its most notable findings include "Cross-tool shadowing" and "No authorization on a public remote server". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check fia-signals-x402's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add fia-signals-x402 to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://x402.fiasignals.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Free live preview for Fia's paid contract_risk/token-safety checkout path.
Rate-limited no-spend token-safety preview plus paid /token-safety x402 upgrade metadata.
Return paid x402 endpoint, 0.50 USDC bundled risk-pack upsell, and ACP contract_risk checkout metadata without making a payment.
Alias for token_safety_batch_checkout using the /pre-trade-risk/batch buyer-facing path. Metadata only; no payment is made.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: pre_trade_risk_batch_checkout
A tool description tries to alter the model’s use of another tool.
Alias for token_safety_batch_checkout using the /pre-trade-risk/batch buyer-facing paRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: guarded_swap_execute_dry_run_checkout
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "guarded_swap_execute_dry_run_checkout"RecommendationScope tools to the minimum needed.
tool: token_safety_check_acp_checkout
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "token_safety_check_acp_checkout"RecommendationScope tools to the minimum needed.
tool: offer_angle_ping_acp_checkout
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "offer_angle_ping_acp_checkout"RecommendationScope tools to the minimum needed.
AWS's official fully managed remote server that provides real-time access to comprehensive AWS documentation, API references, troubleshooting guides, and architectural guidance across multiple knowledge sources including What's New posts, Builder Center content, blog posts, and Well-Architected frameworks for building applications, managing infrastructure, and learning AWS services through natural language queries.
Search live events, conference weeks, host cities, venues, and artist tour schedules.
Live verifiable on-chain data for the $BOBAI token on BNB Chain.
Identity certification, public registry, reputation scoring, and x402 micropayments for AI agents built on Base and Solana.
Search 11M+ products across SG, SEA, and US. Agent-native catalog for AI shopping agents.
Return paid x402 contract-risk batch endpoint, 0.50 USDC bundled risk-pack upsell, and ACP contract_risk checkout metadata without making a payment.
Return the free Virtuals ACP direct-buy job-create handoff packet for guarded_swap_execute_dry_run before a Base swap. Metadata only; ACP payment/job creation is buyer-controlled.
Return the free Virtuals ACP direct-buy job-create handoff packet for token_safety_check before a token swap. Metadata only; ACP payment/job creation is buyer-controlled.
Return the free Virtuals ACP direct-buy job-create handoff packet for offer_angle_ping. Metadata only; ACP payment/job creation is buyer-controlled.