Freedom Mcp MCP Server
https://twuluxmoognlwtmaoqgo.supabase.co/functions/v1/freedom-mcp
Remote
v3.2.0
Published by twuluxmoognlwtmaoqgo.supabase.co — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
Business-ops MCP for FreedomOS — finance, OKRs, customer scoring, AI agents, content. 250+ tools.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 10 = 90. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −10 | capability blast radius (critical) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 9
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: browse_url ⇒ list_google_drive_files → get_x_post_metrics. Untrusted input is ingested, private data is read, and it can be sent to an external sink — and at least one leg is a direct schema wire (⇒), where a producer's output drops straight into a free-text parameter of the next tool, so the chain needs little agent cooperation. Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow browse_url → list_google_drive_files → get_x_post_metrics
high Tool "request_attention_spawn" exposes command/code executionMTC-CAP-001
Tool "request_attention_spawn" appears to run shell commands or evaluate code (keyword "spawn" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.
Fix: Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.
Location: tool request_attention_spawn
medium Unconstrained URL/host parameter "url" on "browse_url"MTC-CAP-007
Tool "browse_url" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool browse_url · inputSchema.properties.url
medium Unconstrained URL/host parameter "source_url" on "save_artifact"MTC-CAP-007
Tool "save_artifact" takes a URL/host parameter "source_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool save_artifact · inputSchema.properties.source_url
medium Unconstrained URL/host parameter "site_url" on "get_page_performance"MTC-CAP-007
Tool "get_page_performance" takes a URL/host parameter "site_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool get_page_performance · inputSchema.properties.site_url
medium Unconstrained URL/host parameter "inspection_url" on "inspect_url"MTC-CAP-007
Tool "inspect_url" takes a URL/host parameter "inspection_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool inspect_url · inputSchema.properties.inspection_url
medium Unconstrained URL/host parameter "site_url" on "inspect_url"MTC-CAP-007
Tool "inspect_url" takes a URL/host parameter "site_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool inspect_url · inputSchema.properties.site_url
medium Unconstrained URL/host parameter "site_url" on "get_sitemaps"MTC-CAP-007
Tool "get_sitemaps" takes a URL/host parameter "site_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool get_sitemaps · inputSchema.properties.site_url
low Mutating tool "request_attention_spawn" declares no destructiveHintMTC-CAP-005
Tool "request_attention_spawn" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool request_attention_spawn
Tools 234
Each tool and what it can reach — enumerated from the running server.
browse_urlingests untrusted inputcheck_my_inboxingests untrusted inputdeliberateingests untrusted inputget_page_performanceingests untrusted inputget_sitemapsingests untrusted inputget_x_post_metricsnetwork egressinspect_urlingests untrusted inputlist_google_drive_filesreads sensitive dataopen_product_request_draft_prnetwork egressrequest_attention_spawnruns code / shell
Show 224 more tools ↓
save_artifactingests untrusted inputsend_emailnetwork egresssend_lead_draftnetwork egresssend_slack_messagenetwork egresssubmit_product_requestnetwork egressupsert_attention_sessionreads sensitive dataack_attention_directiveno sensitive capabilityadd_agent_activityno sensitive capabilityadd_commitmentno sensitive capabilityadd_customer_evidenceno sensitive capabilityadd_leadno sensitive capabilityanalyze_team_needsno sensitive capabilityappend_cos_preferenceno sensitive capabilityappend_to_sheetno sensitive capabilityapprove_pipeline_itemno sensitive capabilityarchive_pipelineno sensitive capabilityattach_product_request_prno sensitive capabilityaudit_brand_visibilityno sensitive capabilitybatch_update_spreadsheetno sensitive capabilitycancel_attention_directiveno sensitive capabilitycancel_commitmentno sensitive capabilitycapture_ideano sensitive capabilitychallenge_as_customerno sensitive capabilityclaim_product_request_for_builderno sensitive capabilityclear_pipeline_learningsno sensitive capabilitycomplete_commitmentno sensitive capabilityconfigure_dashboardno sensitive capabilityconfirm_mcp_approvalno sensitive capabilitycreate_attention_directiveno sensitive capabilitycreate_featureno sensitive capabilitycreate_folderno sensitive capabilitycreate_google_docno sensitive capabilitycreate_icpno sensitive capabilitycreate_key_resultno sensitive capabilitycreate_master_planno sensitive capabilitycreate_meta_ad_draftno sensitive capabilitycreate_objectiveno sensitive capabilitycreate_pipelineno sensitive capabilitycreate_spreadsheetno sensitive capabilitycreate_tacticno sensitive capabilitydeactivate_agentno sensitive capabilitydecide_command_center_itemno sensitive capabilitydelete_icpno sensitive capabilitydelete_ideano sensitive capabilitydelete_key_resultno sensitive capabilitydelete_knowledgeno sensitive capabilitydelete_objectiveno sensitive capabilitydelete_tacticno sensitive capabilityderive_capabilityno sensitive capabilityderive_from_websiteno sensitive capabilitydraft_outreachno sensitive capabilitydraft_tenet_from_signalno sensitive capabilitygenerate_carouselno sensitive capabilitygenerate_image_xaino sensitive capabilitygenerate_key_resultsno sensitive capabilitygenerate_tacticsno sensitive capabilitygenerate_vector_imageno sensitive capabilitygenerate_videono sensitive capabilitygenerate_video_veono sensitive capabilityget_activity_healthno sensitive capabilityget_actuals_vs_budgetno sensitive capabilityget_ads_performanceno sensitive capabilityget_agent_outcome_panelno sensitive capabilityget_agent_performanceno sensitive capabilityget_artifactsno sensitive capabilityget_attention_budgetno sensitive capabilityget_brand_guidelinesno sensitive capabilityget_cac_strategyno sensitive capabilityget_cash_positionno sensitive capabilityget_check_telemetryno sensitive capabilityget_command_center_itemno sensitive capabilityget_command_center_itemsno sensitive capabilityget_companyno sensitive capabilityget_cos_preferencesno sensitive capabilityget_credit_usageno sensitive capabilityget_decision_ledgerno sensitive capabilityget_executive_landscapeno sensitive capabilityget_financial_summaryno sensitive capabilityget_freedom_targetno sensitive capabilityget_grain_policyno sensitive capabilityget_icpsno sensitive capabilityget_lead_pipeline_snapshotno sensitive capabilityget_monthly_trendsno sensitive capabilityget_my_channel_partner_linkno sensitive capabilityget_my_channel_partner_starter_packno sensitive capabilityget_my_channel_partner_statsno sensitive capabilityget_my_companiesno sensitive capabilityget_my_profileno sensitive capabilityget_next_priorityno sensitive capabilityget_okrsno sensitive capabilityget_pending_approvalsno sensitive capabilityget_product_contextno sensitive capabilityget_product_request_statusno sensitive capabilityget_projectionsno sensitive capabilityget_reader_profileno sensitive capabilityget_release_ledgerno sensitive capabilityget_routing_overviewno sensitive capabilityget_search_performanceno sensitive capabilityget_setup_stateno sensitive capabilityget_site_listno sensitive capabilityget_stripe_metricsno sensitive capabilityget_subscription_statsno sensitive capabilityget_tacticsno sensitive capabilityget_team_membersno sensitive capabilityget_team_pulseno sensitive capabilityget_team_rosterno sensitive capabilityget_top_customersno sensitive capabilityget_transactionsno sensitive capabilityget_voice_profileno sensitive capabilityget_xero_reportno sensitive capabilitygrant_agent_toolno sensitive capabilityhire_agentno sensitive capabilityhire_agent_with_contextno sensitive capabilityingest_voice_corpusno sensitive capabilityinterview_for_hireno sensitive capabilityinvoke_integrationno sensitive capabilitylink_agent_okrsno sensitive capabilitylist_ad_accountsno sensitive capabilitylist_ad_campaignsno sensitive capabilitylist_attention_directivesno sensitive capabilitylist_attention_sessionsno sensitive capabilitylist_commitmentsno sensitive capabilitylist_corpus_inventoryno sensitive capabilitylist_customer_evidenceno sensitive capabilitylist_dashboard_widgetsno sensitive capabilitylist_dealsno sensitive capabilitylist_featuresno sensitive capabilitylist_inboxno sensitive capabilitylist_integrationsno sensitive capabilitylist_knowledgeno sensitive capabilitylist_my_workno sensitive capabilitylist_pipeline_learningsno sensitive capabilitylist_pipelinesno sensitive capabilitylist_scheduled_reportsno sensitive capabilitylist_segmentsno sensitive capabilitylist_shared_with_meno sensitive capabilitylist_workspace_ideasno sensitive capabilitylist_xero_bank_transactionsno sensitive capabilitylist_xero_contactsno sensitive capabilitymanage_responsibilitiesno sensitive capabilityoriginate_content_ideasno sensitive capabilityposthog_hogqlno sensitive capabilityposthog_list_eventsno sensitive capabilityposthog_list_insightsno sensitive capabilityposthog_query_funnelno sensitive capabilityposthog_query_trendsno sensitive capabilitypreview_meta_adno sensitive capabilitypromote_corpus_to_contentno sensitive capabilitypropose_workno sensitive capabilitypublish_pipeline_itemno sensitive capabilityquery_lead_journeyno sensitive capabilityquery_smeno sensitive capabilityratify_capabilityno sensitive capabilityread_google_docno sensitive capabilityread_knowledgeno sensitive capabilityread_sheetno sensitive capabilityread_web_pageno sensitive capabilityreassign_reportsno sensitive capabilityrecalibrate_agent_jdno sensitive capabilityremove_agent_activityno sensitive capabilityremove_backgroundno sensitive capabilityremove_dashboard_widgetno sensitive capabilityreport_feedbackno sensitive capabilityrequest_connectorno sensitive capabilityrequest_content_revisionno sensitive capabilityresolve_brand_guideno sensitive capabilityresolve_workno sensitive capabilityretire_featureno sensitive capabilityrevoke_agent_toolno sensitive capabilityrun_quality_checkno sensitive capabilityrun_tacticno sensitive capabilitysave_knowledgeno sensitive capabilityscan_product_signalsno sensitive capabilitysearch_ad_targetingno sensitive capabilitysearch_connector_registryno sensitive capabilitysearch_conversationsno sensitive capabilitysearch_transactionsno sensitive capabilitysegment_leadsno sensitive capabilityset_attention_budgetno sensitive capabilityset_cac_strategyno sensitive capabilityset_cos_preferencesno sensitive capabilityset_grain_policyno sensitive capabilityset_meta_ad_statusno sensitive capabilityset_offerno sensitive capabilityset_revenue_channelsno sensitive capabilityshare_commitmentno sensitive capabilityshare_knowledgeno sensitive capabilitysubmit_content_to_pipelineno sensitive capabilitysuggest_collaborationno sensitive capabilitysuggest_next_hireno sensitive capabilitysync_stripe_conversionsno sensitive capabilitysynthesize_lead_hypothesisno sensitive capabilitytoggle_agent_scheduleno sensitive capabilitytriage_ideano sensitive capabilitytrigger_agent_activityno sensitive capabilityunshare_commitmentno sensitive capabilityunshare_knowledgeno sensitive capabilityupdate_agentno sensitive capabilityupdate_agent_activityno sensitive capabilityupdate_agent_avatarno sensitive capabilityupdate_agent_skillno sensitive capabilityupdate_brand_guidelinesno sensitive capabilityupdate_commitmentno sensitive capabilityupdate_companyno sensitive capabilityupdate_featureno sensitive capabilityupdate_feature_statusno sensitive capabilityupdate_finance_noteno sensitive capabilityupdate_google_docno sensitive capabilityupdate_icpno sensitive capabilityupdate_key_resultno sensitive capabilityupdate_knowledge_sectionno sensitive capabilityupdate_leadno sensitive capabilityupdate_meta_ad_budgetno sensitive capabilityupdate_my_profileno sensitive capabilityupdate_objectiveno sensitive capabilityupdate_pipelineno sensitive capabilityupdate_pipeline_style_guideno sensitive capabilityupdate_projectionno sensitive capabilityupdate_reader_profileno sensitive capabilityupdate_sheetno sensitive capabilityupdate_tacticno sensitive capabilityupdate_transaction_noteno sensitive capabilityupdate_voice_profileno sensitive capabilityvectorize_imageno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v3.2.0 latest |
A 90/100 | 9 | 1.10.0 | 2026-07-24 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan https://twuluxmoognlwtmaoqgo.supabase.co/functions/v1/freedom-mcp --onlineMore in Finance & Commerce
Security scan results for the 1money MCP server.
Signed verification attestations for agent decisions: business, price, freshness, claim checks.
Security scan results for the Actual MCP server.
Security scan results for the Actual Budget MCP server.
Security scan results for the Adyen MCP server.
Trusted agent-commerce hub: discover, trust-check, and route x402 payments with failover.