The Stall MCP Server
https://the-stall.intuitek.ai/mcp
Remote
v4.97.0
Published by the-stall.intuitek.ai — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
x402 MCP chassis — 26 pay-per-call tools: finance, market data, AI utilities. USDC on Base.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 5
medium Unconstrained URL/host parameter "url" on "agent-access-check"MTC-CAP-007
Tool "agent-access-check" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool agent-access-check · inputSchema.properties.url
medium Unconstrained URL/host parameter "url" on "page-links"MTC-CAP-007
Tool "page-links" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool page-links · inputSchema.properties.url
medium Unconstrained URL/host parameter "url" on "podcast-intel"MTC-CAP-007
Tool "podcast-intel" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool podcast-intel · inputSchema.properties.url
medium Unconstrained URL/host parameter "url" on "rss-reader"MTC-CAP-007
Tool "rss-reader" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool rss-reader · inputSchema.properties.url
medium Unconstrained URL/host parameter "url" on "web-scrape-links"MTC-CAP-007
Tool "web-scrape-links" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool web-scrape-links · inputSchema.properties.url
Tools 302
Each tool and what it can reach — enumerated from the running server.
agent-access-checkingests untrusted inputapp-store-intelingests untrusted inputcrypto-news-impactingests untrusted inputearthquake-intelingests untrusted inputhf-model-searchingests untrusted inputnews-sentimentingests untrusted inputnft-metadataingests untrusted inputnonprofit-intelingests untrusted inputnpm-lookupingests untrusted inputnpm-trendsingests untrusted input
Show 292 more tools ↓
page-linksingests untrusted inputpodcast-intelingests untrusted inputpypi-intelingests untrusted inputpypi-lookupingests untrusted inputrss-readeringests untrusted inputtechnical-indicatorsingests untrusted inputtvmaze-intelingests untrusted inputweb-scrape-linksingests untrusted inputyoutube-playlistingests untrusted inputaction-receiptno sensitive capabilityactivist-investor-intelno sensitive capabilityaddress-intelno sensitive capabilityaddress-securityno sensitive capabilityagent-kya-scoreno sensitive capabilityagriculture-briefno sensitive capabilityai-image-genno sensitive capabilityai-pipeline-briefno sensitive capabilityair-qualityno sensitive capabilityanalyst-ratingsno sensitive capabilityanalyst-upgradesno sensitive capabilityarxiv-intelno sensitive capabilityaudio-transcribeno sensitive capabilityaudio-transcribe-longno sensitive capabilityaudio-transcribe-shortno sensitive capabilityaviation-weatherno sensitive capabilitybalance-sheetno sensitive capabilitybase-seasonno sensitive capabilityblock-intelno sensitive capabilitybonds-briefno sensitive capabilitybreadcrumb-extractorno sensitive capabilitybtc-game-theoryno sensitive capabilitybtc-miner-econno sensitive capabilitybtc-systems-theoryno sensitive capabilitycapital-allocation-scoreno sensitive capabilitycash-flow-statementno sensitive capabilitycdp-market-depthno sensitive capabilitychain-pulseno sensitive capabilitychangelog-generateno sensitive capabilitychromatic-dispersionno sensitive capabilitycity-lookupno sensitive capabilityclassic-novelsno sensitive capabilityclinical-trialsno sensitive capabilitycode-api-surfaceno sensitive capabilitycode-security-scanno sensitive capabilitycode-test-detectorno sensitive capabilitycommodity-futuresno sensitive capabilitycompany-due-diligenceno sensitive capabilitycompany-intelno sensitive capabilitycompany-research-bundleno sensitive capabilityconcentration-risk-scoreno sensitive capabilitycongressional-tradesno sensitive capabilityconsumer-briefno sensitive capabilitycontent-analyzeno sensitive capabilitycontent-moderationno sensitive capabilitycot-positioningno sensitive capabilitycountry-infono sensitive capabilitycredit-spreadsno sensitive capabilitycron-parserno sensitive capabilitycross-chain-bridge-statusno sensitive capabilitycrypto-briefno sensitive capabilitycrypto-equity-briefno sensitive capabilitycrypto-fear-greedno sensitive capabilitycrypto-fiat-priceno sensitive capabilitycrypto-momentum-packno sensitive capabilitycrypto-news-equity-briefno sensitive capabilitycrypto-pulseno sensitive capabilitycrypto-stock-pulseno sensitive capabilitycrypto-top-moversno sensitive capabilitycurrency-formatno sensitive capabilitycve-intelno sensitive capabilitydb-perf-intelno sensitive capabilitydcf-scenariono sensitive capabilitydcf-valuationno sensitive capabilitydefi-market-pulseno sensitive capabilitydefi-portfoliono sensitive capabilitydefi-state-packno sensitive capabilitydefi-yield-strategiesno sensitive capabilitydefi-yieldsno sensitive capabilitydefillama-coin-priceno sensitive capabilitydefillama-packno sensitive capabilitydefillama-protocolno sensitive capabilitydex-pair-searchno sensitive capabilitydex-swap-quoteno sensitive capabilitydex-trending-poolsno sensitive capabilitydictionary-intelno sensitive capabilitydividend-calendarno sensitive capabilitydividend-intelno sensitive capabilitydns-lookupno sensitive capabilitydocument-qa-prepno sensitive capabilitydomain-availabilityno sensitive capabilitydomain-whoisno sensitive capabilitydrug-intelno sensitive capabilityearnings-briefno sensitive capabilityearnings-calendarno sensitive capabilityearnings-estimatesno sensitive capabilityearnings-intel-bundleno sensitive capabilityearnings-qualityno sensitive capabilityearnings-reactionno sensitive capabilityearnings-surprisesno sensitive capabilityeconomic-calendarno sensitive capabilityeconomic-momentumno sensitive capabilityemail-verifyno sensitive capabilityenergy-briefno sensitive capabilityens-lookupno sensitive capabilityentity-clearanceno sensitive capabilityequity-briefno sensitive capabilityequity-fundamentalsno sensitive capabilityequity-quality-screenno sensitive capabilityequity-sentimentno sensitive capabilityequity-technicalsno sensitive capabilityequity-watchlist-briefno sensitive capabilityerc20-snapshotno sensitive capabilityetf-holdingsno sensitive capabilityeth-blockno sensitive capabilityevm-log-eventsno sensitive capabilityevm-nonceno sensitive capabilityevm-token-securityno sensitive capabilityfact-checkno sensitive capabilityfda-recall-watchno sensitive capabilityfdic-bank-intelno sensitive capabilityfec-donor-intelno sensitive capabilityfederal-contract-intelno sensitive capabilityfederal-register-searchno sensitive capabilityflight-trackerno sensitive capabilityfomc-trackerno sensitive capabilityforex-historicalno sensitive capabilityforex-ratesno sensitive capabilityform-144-intelno sensitive capabilityfred-queryno sensitive capabilityfunding-ratesno sensitive capabilitygas-estimateno sensitive capabilitygas-pricesno sensitive capabilitygeocodeno sensitive capabilitygeopolitical-briefno sensitive capabilitygithub-intelno sensitive capabilitygithub-org-intelno sensitive capabilitygithub-repo-intelno sensitive capabilitygithub-trendingno sensitive capabilitygitleaks-scanno sensitive capabilityglobal-equity-indicesno sensitive capabilitygov-votesno sensitive capabilitygovernment-contract-intelno sensitive capabilityguidance-qualityno sensitive capabilityhealthcare-briefno sensitive capabilityhedge-fund-holdingsno sensitive capabilityhn-searchno sensitive capabilityhousing-briefno sensitive capabilityhttp-headersno sensitive capabilityhuggingface-intelno sensitive capabilityimage-detectno sensitive capabilityimf-country-outlookno sensitive capabilityincome-statementsno sensitive capabilityinflation-intelno sensitive capabilityinsider-tradesno sensitive capabilityinsider-trading-intelno sensitive capabilityinstitutional-ownershipno sensitive capabilityinstitutional-ownership-intelno sensitive capabilityintel-packno sensitive capabilityintl-stock-priceno sensitive capabilityip-intelno sensitive capabilityipo-calendarno sensitive capabilityjson-extractno sensitive capabilitykimchi-premiumno sensitive capabilitykorean-crypto-moversno sensitive capabilitykorean-market-moversno sensitive capabilitylabor-briefno sensitive capabilitylabor-marketno sensitive capabilitylbo-modelno sensitive capabilitylegal-searchno sensitive capabilitylimitless-marketsno sensitive capabilityllm-proxyno sensitive capabilitymacro-briefno sensitive capabilitymacro-indicatorsno sensitive capabilitymanufacturing-briefno sensitive capabilitymarket-breadthno sensitive capabilitymarket-gexno sensitive capabilitymarket-intelligenceno sensitive capabilitymarket-moversno sensitive capabilitymarket-overviewno sensitive capabilitymarket-regime-intelno sensitive capabilitymarket-sentimentno sensitive capabilitymeme-generatorno sensitive capabilitymeme-radarno sensitive capabilitymerger-acquisition-intelno sensitive capabilitymetals-briefno sensitive capabilitymodel-research-briefno sensitive capabilitynpi-lookupno sensitive capabilityopen-food-intelno sensitive capabilityoptions-chainno sensitive capabilityoptions-flow-unusualno sensitive capabilityoptions-iv-snapshotno sensitive capabilityoptions-snapshotno sensitive capabilitypage-intelno sensitive capabilitypatent-intelno sensitive capabilitypeer-benchmarkingno sensitive capabilitypingno sensitive capabilityplace-detailsno sensitive capabilitypolicy-compile-ano sensitive capabilitypolicy-compile-bno sensitive capabilitypolicy-impact-mapperno sensitive capabilitypolygon-defi-priceno sensitive capabilitypolymarket-accuracy-scoreno sensitive capabilitypolymarket-category-performanceno sensitive capabilitypolymarket-crypto-updownno sensitive capabilitypolymarket-intelno sensitive capabilitypolymarket-sentiment-shiftno sensitive capabilitypolymarket-whale-entriesno sensitive capabilityportfolio-rebalanceno sensitive capabilityportfolio-synthesisno sensitive capabilitypre-earnings-briefno sensitive capabilityprediction-marketsno sensitive capabilityprediction-stock-pulseno sensitive capabilityprice-target-consensusno sensitive capabilityprotocol-revenue-leadersno sensitive capabilitypubmed-intelno sensitive capabilityreadable-contentno sensitive capabilityreddit-intelno sensitive capabilityregex-testerno sensitive capabilityresearch-automation-briefno sensitive capabilityresearch-paper-searchno sensitive capabilityresearch-synthesisno sensitive capabilityretail-sector-briefno sensitive capabilityrevenue-growth-intelno sensitive capabilitysanctions-screeningno sensitive capabilitysec-filing-intelno sensitive capabilitysec-full-text-searchno sensitive capabilitysec-insider-tradesno sensitive capabilitysector-rotationno sensitive capabilitysecurity-reconno sensitive capabilitysemgrep-sastno sensitive capabilityshort-interest-intelno sensitive capabilityshort-volume-intelno sensitive capabilitysocial-intelno sensitive capabilitysocial-momentumno sensitive capabilitysolana-token-riskno sensitive capabilitysolana-tx-explainerno sensitive capabilitysolar-intelno sensitive capabilitysports-predictionno sensitive capabilitysports-scoresno sensitive capabilityssl-certno sensitive capabilitystablecoin-watchno sensitive capabilitystackoverflow-intelno sensitive capabilitystall-payment-negotiateno sensitive capabilitystock-briefno sensitive capabilitystock-compareno sensitive capabilitystock-monitor-builderno sensitive capabilitystock-ohlcvno sensitive capabilitystock-price-multino sensitive capabilitystock-screenerno sensitive capabilitystrategy-signalno sensitive capabilitysupply-chain-briefno sensitive capabilitytech-briefno sensitive capabilitytimezoneno sensitive capabilitytoken-top-holdersno sensitive capabilitytreasury-auction-calendarno sensitive capabilitytreasury-yieldsno sensitive capabilitytwitter-intelno sensitive capabilitytx-explainerno sensitive capabilitytx-intelno sensitive capabilityunit-converterno sensitive capabilityus-stock-historyno sensitive capabilityusgs-earthquakeno sensitive capabilityvc-funding-intelno sensitive capabilityvision-analyzeno sensitive capabilityvolatility-briefno sensitive capabilityvuln-intelno sensitive capabilitywacc-calculatorno sensitive capabilitywallet-balanceno sensitive capabilitywallet-credit-scoreno sensitive capabilitywallet-screenerno sensitive capabilitywayback-intelno sensitive capabilityweatherno sensitive capabilityweather-alertsno sensitive capabilityweather-equity-briefno sensitive capabilityweather-historyno sensitive capabilityweather-research-briefno sensitive capabilityweb-change-monitorno sensitive capabilityweb-company-intelno sensitive capabilitywhale-radarno sensitive capabilitywikipedia-intelno sensitive capabilityworld-bank-datano sensitive capabilityx402-endpoint-intelno sensitive capabilityyield-farming-activeno sensitive capabilityyoutube-channel-analyticsno sensitive capabilityyoutube-channel-intelno sensitive capabilityyoutube-commentsno sensitive capabilityyoutube-intelno sensitive capabilityyoutube-keyword-researchno sensitive capabilityyoutube-niche-intelno sensitive capabilityyoutube-revenue-estimateno sensitive capabilityyoutube-searchno sensitive capabilityyoutube-video-analyticsno sensitive capability
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v4.97.0 latest |
A 97/100 | 5 | 1.13.0 | 2026-09-08 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan https://the-stall.intuitek.ai/mcp --onlineMore in Finance & Commerce
<img src="./public/logo.png" alt="1Money Logo" width="200"/>
Signed verification attestations for agent decisions: business, price, freshness, claim checks.
Actual Budget MCP server exposing API functionality
MCP server for Actual Budget - query and manage your personal finances through Claude
The Adyen Model Context Protocol server allows you to integrate with Adyen APIs through LLMs function calling utilizing various Clients. It currently supports the following tools:
Trusted agent-commerce hub: discover, trust-check, and route x402 payments with failover.