Freedom Mcp MCP Server
https://twuluxmoognlwtmaoqgo.supabase.co/functions/v1/freedom-mcp
Remote
v3.3.0
Published by twuluxmoognlwtmaoqgo.supabase.co — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
Business-ops MCP for FreedomOS — finance, OKRs, customer scoring, AI agents, content. 250+ tools.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 10 = 90. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −10 | capability blast radius (critical) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 8
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: audit_brand_visibility ⇒ list_google_drive_files → get_x_post_metrics. Untrusted input is ingested, private data is read, and it can be sent to an external sink — and at least one leg is a direct schema wire (⇒), where a producer's output drops straight into a free-text parameter of the next tool, so the chain needs little agent cooperation. Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow audit_brand_visibility → list_google_drive_files → get_x_post_metrics
high Tool "request_attention_spawn" exposes command/code executionMTC-CAP-001
Tool "request_attention_spawn" appears to run shell commands or evaluate code (keyword "spawn" in tool name). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.
Fix: Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.
Location: tool request_attention_spawn
medium Unconstrained URL/host parameter "url" on "browse_url"MTC-CAP-007
Tool "browse_url" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool browse_url · inputSchema.properties.url
medium Unconstrained URL/host parameter "source_url" on "save_artifact"MTC-CAP-007
Tool "save_artifact" takes a URL/host parameter "source_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool save_artifact · inputSchema.properties.source_url
medium Unconstrained URL/host parameter "inspection_url" on "inspect_url"MTC-CAP-007
Tool "inspect_url" takes a URL/host parameter "inspection_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool inspect_url · inputSchema.properties.inspection_url
medium Unconstrained URL/host parameter "site_url" on "inspect_url"MTC-CAP-007
Tool "inspect_url" takes a URL/host parameter "site_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool inspect_url · inputSchema.properties.site_url
medium Unconstrained URL/host parameter "site_url" on "get_sitemaps"MTC-CAP-007
Tool "get_sitemaps" takes a URL/host parameter "site_url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool get_sitemaps · inputSchema.properties.site_url
low Mutating tool "request_attention_spawn" declares no destructiveHintMTC-CAP-005
Tool "request_attention_spawn" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool request_attention_spawn
Tools 313
Each tool and what it can reach — enumerated from the running server.
audit_brand_visibilityingests untrusted inputbrowse_urlingests untrusted inputdeliberateingests untrusted inputget_sitemapsingests untrusted inputget_x_post_metricsnetwork egressingest_x_post_to_pipelinenetwork egressinspect_urlingests untrusted inputlist_google_drive_filesreads sensitive dataopen_product_request_draft_prnetwork egresspost_to_xnetwork egress
Show 303 more tools ↓
request_attention_spawnruns code / shellsave_artifactingests untrusted inputsend_emailnetwork egresssend_lead_draftnetwork egresssend_slack_messagenetwork egresssubmit_product_requestnetwork egressupsert_attention_sessionreads sensitive dataack_attention_directiveno sensitive capabilityadd_agent_activityno sensitive capabilityadd_commitmentno sensitive capabilityadd_customer_evidenceno sensitive capabilityadd_leadno sensitive capabilityadd_team_memberno sensitive capabilityadjust_shopify_inventoryno sensitive capabilityagree_playbookno sensitive capabilityappend_cos_lessonno sensitive capabilityappend_cos_preferenceno sensitive capabilityappend_to_sheetno sensitive capabilityapprove_pipeline_itemno sensitive capabilityarchive_pipelineno sensitive capabilityarchive_playbookno sensitive capabilityattach_agent_keyno sensitive capabilityattach_product_request_prno sensitive capabilitybatch_update_spreadsheetno sensitive capabilitybefore_inventing_check_fono sensitive capabilitycancel_attention_directiveno sensitive capabilitycancel_commitmentno sensitive capabilitycapture_ideano sensitive capabilitychallenge_as_customerno sensitive capabilityclaim_cloudflare_previewno sensitive capabilityclaim_product_request_for_builderno sensitive capabilityclear_pipeline_learningsno sensitive capabilitycomplete_commitmentno sensitive capabilitycomplete_my_activityno sensitive capabilityconfigure_dashboardno sensitive capabilityconfirm_mcp_approvalno sensitive capabilitycreate_attention_directiveno sensitive capabilitycreate_featureno sensitive capabilitycreate_folderno sensitive capabilitycreate_google_docno sensitive capabilitycreate_icpno sensitive capabilitycreate_key_resultno sensitive capabilitycreate_meta_ad_draftno sensitive capabilitycreate_objectiveno sensitive capabilitycreate_payment_linkno sensitive capabilitycreate_pipelineno sensitive capabilitycreate_play_from_activityno sensitive capabilitycreate_playbookno sensitive capabilitycreate_shopify_discount_codeno sensitive capabilitycreate_shopify_pageno sensitive capabilitycreate_shopify_productno sensitive capabilitycreate_spreadsheetno sensitive capabilitycreate_x_ad_draftno sensitive capabilitydeactivate_agentno sensitive capabilitydecide_command_center_itemno sensitive capabilitydelete_icpno sensitive capabilitydelete_ideano sensitive capabilitydelete_key_resultno sensitive capabilitydelete_knowledgeno sensitive capabilitydelete_objectiveno sensitive capabilityderive_capabilityno sensitive capabilitydetach_agent_keyno sensitive capabilitydraft_ad_variantsno sensitive capabilitydraft_outreachno sensitive capabilitydraft_tenet_from_signalno sensitive capabilityenroll_by_segmentno sensitive capabilityensure_meta_pixelno sensitive capabilityfind_toolno sensitive capabilitygenerate_carouselno sensitive capabilitygenerate_html_visualno sensitive capabilitygenerate_image_xaino sensitive capabilitygenerate_key_resultsno sensitive capabilitygenerate_vector_imageno sensitive capabilitygenerate_videono sensitive capabilityget_activity_healthno sensitive capabilityget_actuals_vs_budgetno sensitive capabilityget_ads_performanceno sensitive capabilityget_agent_outcome_panelno sensitive capabilityget_agent_performanceno sensitive capabilityget_artifactsno sensitive capabilityget_attention_budgetno sensitive capabilityget_attention_questno sensitive capabilityget_brand_guidelinesno sensitive capabilityget_cac_strategyno sensitive capabilityget_cash_positionno sensitive capabilityget_check_telemetryno sensitive capabilityget_cloudflare_hosting_statusno sensitive capabilityget_command_center_itemno sensitive capabilityget_command_center_itemsno sensitive capabilityget_companyno sensitive capabilityget_cos_preferencesno sensitive capabilityget_credit_usageno sensitive capabilityget_decision_ledgerno sensitive capabilityget_executive_landscapeno sensitive capabilityget_factory_censusno sensitive capabilityget_factory_floorno sensitive capabilityget_financial_summaryno sensitive capabilityget_freedom_targetno sensitive capabilityget_github_app_statusno sensitive capabilityget_grain_policyno sensitive capabilityget_icpsno sensitive capabilityget_lead_pipeline_snapshotno sensitive capabilityget_monthly_trendsno sensitive capabilityget_my_channel_partner_starter_packno sensitive capabilityget_my_channel_partner_statsno sensitive capabilityget_my_companiesno sensitive capabilityget_my_profileno sensitive capabilityget_my_roleno sensitive capabilityget_okrsno sensitive capabilityget_partner_cos_onboardno sensitive capabilityget_pending_approvalsno sensitive capabilityget_playbookno sensitive capabilityget_product_contextno sensitive capabilityget_product_request_statusno sensitive capabilityget_projectionsno sensitive capabilityget_reader_expertise_interviewno sensitive capabilityget_reader_profileno sensitive capabilityget_receive_statusno sensitive capabilityget_release_ledgerno sensitive capabilityget_routing_overviewno sensitive capabilityget_search_performanceno sensitive capabilityget_setup_stateno sensitive capabilityget_shopify_customer_statsno sensitive capabilityget_shopify_orderno sensitive capabilityget_shopify_productno sensitive capabilityget_shopify_shopno sensitive capabilityget_shopify_theme_assetno sensitive capabilityget_site_listno sensitive capabilityget_spend_envelopeno sensitive capabilityget_stripe_metricsno sensitive capabilityget_subscription_statsno sensitive capabilityget_team_membersno sensitive capabilityget_team_pulseno sensitive capabilityget_team_rosterno sensitive capabilityget_top_customersno sensitive capabilityget_transactionsno sensitive capabilityget_voice_profileno sensitive capabilityget_x_ads_performanceno sensitive capabilityget_xero_reportno sensitive capabilitygrant_agent_toolno sensitive capabilitygrant_spend_envelopeno sensitive capabilityhire_agent_with_contextno sensitive capabilityingest_voice_corpusno sensitive capabilityinterview_for_hireno sensitive capabilityinvoke_integrationno sensitive capabilitylink_agent_okrsno sensitive capabilitylist_ad_accountsno sensitive capabilitylist_ad_campaignsno sensitive capabilitylist_attention_directivesno sensitive capabilitylist_attention_sessionsno sensitive capabilitylist_commitmentsno sensitive capabilitylist_corpus_inventoryno sensitive capabilitylist_cos_lessonsno sensitive capabilitylist_customer_evidenceno sensitive capabilitylist_dashboard_widgetsno sensitive capabilitylist_dealsno sensitive capabilitylist_featuresno sensitive capabilitylist_grok_bot_conversationsno sensitive capabilitylist_ideasno sensitive capabilitylist_integrationsno sensitive capabilitylist_knowledgeno sensitive capabilitylist_leadsno sensitive capabilitylist_my_workno sensitive capabilitylist_operator_cos_eventsno sensitive capabilitylist_operator_x_postsno sensitive capabilitylist_pipeline_learningsno sensitive capabilitylist_pipelinesno sensitive capabilitylist_playbooksno sensitive capabilitylist_segmentsno sensitive capabilitylist_shared_with_meno sensitive capabilitylist_shopify_contentno sensitive capabilitylist_shopify_discountsno sensitive capabilitylist_shopify_filesno sensitive capabilitylist_shopify_inventoryno sensitive capabilitylist_shopify_navigationno sensitive capabilitylist_shopify_ordersno sensitive capabilitylist_shopify_productsno sensitive capabilitylist_shopify_themesno sensitive capabilitylist_x_ad_accountsno sensitive capabilitylist_x_ad_campaignsno sensitive capabilitylist_x_chat_conversationsno sensitive capabilitylist_xero_bank_transactionsno sensitive capabilitylist_xero_contactsno sensitive capabilitymanage_responsibilitiesno sensitive capabilitypark_attention_sessionsno sensitive capabilitypin_constraintno sensitive capabilityposthog_create_vision_scannerno sensitive capabilityposthog_delete_vision_scannerno sensitive capabilityposthog_get_vision_observationno sensitive capabilityposthog_get_vision_scannerno sensitive capabilityposthog_hogqlno sensitive capabilityposthog_list_eventsno sensitive capabilityposthog_list_insightsno sensitive capabilityposthog_list_vision_observationsno sensitive capabilityposthog_list_vision_scannersno sensitive capabilityposthog_query_funnelno sensitive capabilityposthog_query_trendsno sensitive capabilityposthog_scan_sessionno sensitive capabilityposthog_update_vision_scannerno sensitive capabilitypreview_meta_adno sensitive capabilitypromote_corpus_to_contentno sensitive capabilitypropose_cos_content_atomsno sensitive capabilitypropose_talk_seedsno sensitive capabilitypropose_workno sensitive capabilitypublish_pipeline_itemno sensitive capabilitypublish_shopify_pageno sensitive capabilitypublish_shopify_productno sensitive capabilitypublish_shopify_themeno sensitive capabilityquery_lead_journeyno sensitive capabilityquery_smeno sensitive capabilityratify_capabilityno sensitive capabilityreactivate_agentno sensitive capabilityread_google_docno sensitive capabilityread_knowledgeno sensitive capabilityread_sheetno sensitive capabilityread_web_pageno sensitive capabilityrecalibrate_agent_jdno sensitive capabilityredraft_engine_playbooksno sensitive capabilityredraft_playbook_contractno sensitive capabilityremove_agent_activityno sensitive capabilityremove_backgroundno sensitive capabilityremove_dashboard_widgetno sensitive capabilityreport_feedbackno sensitive capabilityrequest_attention_closeno sensitive capabilityrequest_attention_focusno sensitive capabilityrequest_attention_transferno sensitive capabilityrequest_connectorno sensitive capabilityrequest_content_revisionno sensitive capabilityresolve_brand_guideno sensitive capabilityresolve_workno sensitive capabilityretire_featureno sensitive capabilityrevoke_agent_toolno sensitive capabilityroute_operator_hudno sensitive capabilityrun_playbookno sensitive capabilityrun_quality_checkno sensitive capabilitysave_knowledgeno sensitive capabilityscan_product_signalsno sensitive capabilitysearch_ad_targetingno sensitive capabilitysearch_connector_registryno sensitive capabilitysearch_conversationsno sensitive capabilitysearch_transactionsno sensitive capabilitysearch_x_ad_targetingno sensitive capabilitysegment_leadsno sensitive capabilityset_attention_budgetno sensitive capabilityset_cac_strategyno sensitive capabilityset_company_lifecycleno sensitive capabilityset_cos_preferencesno sensitive capabilityset_grain_policyno sensitive capabilityset_meta_ad_statusno sensitive capabilityset_offerno sensitive capabilityset_revenue_channelsno sensitive capabilityset_shopify_variant_price_draftno sensitive capabilityset_x_ad_statusno sensitive capabilityshare_commitmentno sensitive capabilityshare_knowledgeno sensitive capabilityshare_playbookno sensitive capabilitysplit_agent_activityno sensitive capabilitystart_company_receiveno sensitive capabilitystart_github_app_claimno sensitive capabilitystart_oauthno sensitive capabilitysubmit_content_to_pipelineno sensitive capabilitysuggest_collaborationno sensitive capabilitysync_stripe_conversionsno sensitive capabilitysynthesize_lead_hypothesisno sensitive capabilitytoggle_agent_scheduleno sensitive capabilitytriage_ideano sensitive capabilitytrigger_agent_activityno sensitive capabilityunpublish_shopify_productno sensitive capabilityunshare_commitmentno sensitive capabilityunshare_knowledgeno sensitive capabilityupdate_agentno sensitive capabilityupdate_agent_activityno sensitive capabilityupdate_agent_avatarno sensitive capabilityupdate_agent_skillno sensitive capabilityupdate_brand_guidelinesno sensitive capabilityupdate_commitmentno sensitive capabilityupdate_companyno sensitive capabilityupdate_featureno sensitive capabilityupdate_feature_statusno sensitive capabilityupdate_finance_noteno sensitive capabilityupdate_google_docno sensitive capabilityupdate_icpno sensitive capabilityupdate_key_resultno sensitive capabilityupdate_knowledge_sectionno sensitive capabilityupdate_leadno sensitive capabilityupdate_live_shopify_productno sensitive capabilityupdate_live_shopify_theme_fileno sensitive capabilityupdate_meta_ad_budgetno sensitive capabilityupdate_my_profileno sensitive capabilityupdate_objectiveno sensitive capabilityupdate_pipelineno sensitive capabilityupdate_pipeline_style_guideno sensitive capabilityupdate_playbookno sensitive capabilityupdate_projectionno sensitive capabilityupdate_reader_profileno sensitive capabilityupdate_sheetno sensitive capabilityupdate_shopify_page_draftno sensitive capabilityupdate_shopify_product_draftno sensitive capabilityupdate_transaction_noteno sensitive capabilityupdate_voice_profileno sensitive capabilityupdate_x_ad_budgetno sensitive capabilityupsert_shopify_theme_fileno sensitive capabilityvectorize_imageno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
Versions 2
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v3.3.0 latest |
A 90/100 | 8 | 1.13.0 | 2026-09-08 |
v3.2.0 |
A 90/100 | 9 | 1.13.0 | 2026-08-30 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan https://twuluxmoognlwtmaoqgo.supabase.co/functions/v1/freedom-mcp --onlineMore in Finance & Commerce
<img src="./public/logo.png" alt="1Money Logo" width="200"/>
Signed verification attestations for agent decisions: business, price, freshness, claim checks.
Actual Budget MCP server exposing API functionality
MCP server for Actual Budget - query and manage your personal finances through Claude
The Adyen Model Context Protocol server allows you to integrate with Adyen APIs through LLMs function calling utilizing various Clients. It currently supports the following tools:
Trusted agent-commerce hub: discover, trust-check, and route x402 payments with failover.