Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

loop-mcp

15 pay-per-call Bitcoin and developer tools, paid in sats over Lightning (L402).The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: The server only speaks the first MCP version (2024-11-05).

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 562 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 16 tools say they only read.
Endpointhttps://mcp.loopxxi.com/mcp

Website Streamable HTTP · protocol 2024-11-05 · server version 2.5.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 16 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Warning: The server only speaks the first MCP version (2024-11-05).

    Newer versions (latest 2025-11-25) add tool safety labels, structured output and a safer authorization model.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (16)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • btc_priceGet the current Bitcoin price in USD and other major currencies. Source: mempool.space. Real-time. Each reading carries source (the URL read), fetched_at (UTC, RFC 3339) and source_sha256 (SHA-256 of…Read-only
  • btc_send_decisionReturns a composited send-or-wait recommendation for a Bitcoin transaction. Fetches live mempool and fee data, then outputs a machine-actionable verdict (SEND_NOW, WAIT, or URGENT_ONLY) with fee rate…Read-only
  • lightning_address_resolveResolve a Lightning Address (user@domain.com) to a payable BOLT11 invoice for a given amount. Handles the full LNURL-pay protocol internally. Returns the invoice plus min/max sendable amounts for val…Read-only
  • tx_decode_explainFetch a Bitcoin transaction by txid and return a structured, agent-ready summary: type (P2WPKH/P2TR/P2SH/etc.), input/output counts, fees, fee rate in sat/vB, confirmation status, RBF flag, SegWit/Ta…Read-only
  • optimal_send_windowBitcoin transaction timing intelligence. Returns a congestion forecast for the next 1-4h, a recommended UTC send window when fees are projected at/below your target, a fee trajectory (rising/stable/f…Read-only
  • json_validateValidate JSON, identify its root type, and return normalized JSON plus a SHA-256 content hash.Read-only
  • json_extractExtract one value from JSON using a simple dot path with array indexes, for example users[0].email.Read-only
  • csv_to_jsonConvert CSV, TSV, semicolon, or pipe-delimited text into structured JSON with bounded row output.Read-only
  • text_analyzeReturn deterministic text statistics, estimated tokens, reading time, and a SHA-256 content hash.Read-only
  • hash_generateGenerate a SHA-256 or SHA-512 digest in hexadecimal or Base64 form.Read-only
  • base64_convertEncode UTF-8 text to Base64 or decode Base64 safely, with standard and URL-safe alphabets.Read-only
  • timestamp_convertConvert Unix seconds, Unix milliseconds, RFC3339, or ISO dates into normalized UTC timestamp forms.Read-only
  • uuid_generateGenerate one to one hundred cryptographically random RFC 4122 UUID version 4 identifiers.Read-only
  • url_parseParse an HTTP or HTTPS URL into normalized scheme, host, port, path, query, and fragment fields without fetching it.Read-only
  • jwt_decodeDecode JWT header and payload claims locally without verifying the signature. The response always marks verification as false.Read-only
  • business_ratiosCompute cash runway in months, cash buffer days, current ratio, quick ratio, debt to equity, DSO, DIO, DPO and cash conversion cycle from any subset of a business's own cash, monthly flow and balance…Read-only

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200562 ms
initializedHTTP 202135 ms
tools/listHTTP 20099 ms
unknown-methodHTTP 20093 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.