Loading…
Live financial data for AI agents: FX rates, crypto prices, stocks, news, and URL reading.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The mcp-server-platform MCP server exposes 20 tools, focused primarily on web capabilities. Its published description reads: "Live financial data for AI agents: FX rates, crypto prices, stocks, news, and URL reading". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates mcp-server-platform F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Data-exfiltration parameters" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check mcp-server-platform's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add mcp-server-platform to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp-server-295985738387.europe-west1.run.app/mcp-payStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Retrieves real-time stock price quotes and company information for any publicly traded company via the Finnhub API. Returns current price, intraday high and low, percentage change from previous close,
Performs precise financial calculations across six calculation types entirely locally with no external API dependency. compound_interest computes the final value and total interest earned on a princip
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: finnhub_stock_quote
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
uires a Finnhub API key to be configured on the server. {"type":"objectRecommendationRemove side-channel parameters; constrain tool inputs.
tool: finnhub_stock_quote
A tool description tries to alter the model’s use of another tool.
ency_convert or currency_fx_lite. Requires a Finnhub API key to be configured onRecommendationDescriptions must describe only their own tool.
tool: financial_calculator
A tool description tries to alter the model’s use of another tool.
nalysis. Prefer financial_calculator_lite when only the single headline result is neededRecommendationDescriptions must describe only their own tool.
tool: currency_rates
A tool description tries to alter the model’s use of another tool.
rements. Prefer currency_fx_lite when ECB sourcing is not required and only a liRecommendationDescriptions must describe only their own tool.
tool: stripe_payments
A tool description tries to alter the model’s use of another tool.
king data — use open_banking_transactions instead. Do not use for generic bank account hiRecommendationDescriptions must describe only their own tool.
tool: currency_fx_lite
A tool description tries to alter the model’s use of another tool.
providers. Use currency_rates when a historical rate from a specific past datRecommendationDescriptions must describe only their own tool.
tool: financial_calculator_lite
A tool description tries to alter the model’s use of another tool.
ight variant of financial_calculator — it returns only the result number rather thanRecommendationDescriptions must describe only their own tool.
tool: currency_convert
A tool description tries to alter the model’s use of another tool.
t metadata. Use currency_rates when the conversion must use a historical rateRecommendationDescriptions must describe only their own tool.
tool: open_banking_transactions
A tool description tries to alter the model’s use of another tool.
stigation — use stripe_payments instead. Requires a TrueLayer access token; retRecommendationDescriptions must describe only their own tool.
tool: stock_price_lite
A tool description tries to alter the model’s use of another tool.
cy prices — use crypto_price for full market data (price, volume, market capRecommendationDescriptions must describe only their own tool.
tool: crypto_price
A tool description tries to alter the model’s use of another tool.
D to EUR) — use currency_convert instead. Do not use when historical price dataRecommendationDescriptions must describe only their own tool.
tool: crypto_price_lite
A tool description tries to alter the model’s use of another tool.
ight variant of crypto_price that omits extended market data (market cap, voRecommendationDescriptions must describe only their own tool.
tool: bank_accounts
A tool description tries to alter the model’s use of another tool.
alances. Prefer stripe_payments when the source of payments is a Stripe merchanRecommendationDescriptions must describe only their own tool.
tool: currency_convert_lite
A tool description tries to alter the model’s use of another tool.
providers. Use currency_rates when a historical rate from a specific past datRecommendationDescriptions must describe only their own tool.
tool: web_news_headlines
A tool description tries to alter the model’s use of another tool.
c article — use web_url_reader instead, passing the article URL returned by thRecommendationDescriptions must describe only their own tool.
tool: stripe_payment_records
A tool description tries to alter the model’s use of another tool.
ight variant of stripe_payments — it returns a simple records array rather thanRecommendationDescriptions must describe only their own tool.
tool: crypto_fx_rates
A tool description tries to alter the model’s use of another tool.
ency_convert or currency_fx_lite when both currencies are fiat — those tools useRecommendationDescriptions must describe only their own tool.
tool: currency_convert_open
A tool description tries to alter the model’s use of another tool.
ency_convert or currency_rates when ECB-auditable Frankfurter rates are requirRecommendationDescriptions must describe only their own tool.
tool: web_url_reader
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: web_url_reader
A tool description tries to alter the model’s use of another tool.
RLs returned by web_news_headlines to this tool to read full article content. Do nRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: web_url_reader
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "web_url_reader"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Retrieves live and historical fiat currency exchange rates from the Frankfurter API (sourced from the European Central Bank). Supports both real-time conversion and historical rate lookup for any past
Retrieves live payment data from a Stripe account via the Stripe API. Supports four query types: recent_payments returns the latest payment intents with status, amount, and currency; failed_charges re
Discovers the most relevant tools available on this MCP server for a given task using local semantic search (MiniLM-L6-v2 embeddings). Accepts a plain-English description of what needs to be accomplis
Converts a foreign exchange (FX) amount between two fiat currencies using live mid-market rates. Returns the converted amount and the exchange rate applied. Use currency_fx_lite when only the numeric
Performs common financial calculations locally with no external API dependency. Supports compound interest, loan repayment, return on investment (ROI), present value, future value, and break-even anal
Converts a monetary amount from one currency to another using live exchange rates sourced from the Frankfurter API (European Central Bank data). Returns the converted amount, the exact exchange rate a
Retrieves bank account balances and transaction history via PSD2 Open Banking (TrueLayer), covering 300+ UK and European banks. Returns the account balance, ISO 4217 currency code, and up to 100 recen
Retrieves the current trading price for a publicly listed stock by ticker symbol. Returns the current price as a single numeric value. This is a lightweight variant of stock_quote — it omits intraday
Converts time between timezones. Useful for time conversion tasks. Use when you need to convert 3:45 PM EST to Pacific Time for a meeting schedule; or find what time it will be in Tokyo when it's 9 AM
Retrieves real-time price data for any cryptocurrency listed on CoinGecko. Returns the current price in any fiat currency, 24-hour percentage change, market capitalisation, and 24-hour trading volume.
Retrieves the current spot price and 24-hour change for any cryptocurrency using the CoinGecko public API. Returns price, percentage change, and a timestamp. This is a lightweight variant of crypto_pr
Retrieves bank account details and recent transaction history via a connected bank API integration. Returns a list of transactions for the specified account, or for all linked accounts when no account
Converts a monetary amount between any two fiat currencies using live exchange rates from the Frankfurter API (European Central Bank data). Returns the converted amount and the exchange rate applied.
Retrieves the latest real-time news headlines and article summaries from BBC News and The Guardian across nine topic categories. Returns structured articles with headline, description, source name, ar
Retrieves payment and charge records from a Stripe merchant account. Returns a list of payment records filtered by the requested query type. Use stripe_payment_records when an agent needs to review re
Converts an amount between any cryptocurrency and fiat currency pair, or between two cryptocurrencies, using real-time exchange rates sourced from CoinAPI. Supports all crypto-to-fiat (BTC/USD, ETH/EU
Converts a monetary amount between two fiat currencies using live exchange rates from an open currency exchange API. Returns the converted amount and the rate applied. Use currency_convert_open as an
Fetches any public web page and returns clean, readable plain text stripped of HTML, navigation, scripts, advertisements, and boilerplate. Returns the page title, meta description, word count, and mai