Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

stat-api — Sports Data

NFL/NBA/MLB/NHL/PGA + DFS and prediction-market data. Browse free; query with a free API key.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 192 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 9 tools say they only read.
Endpointhttps://api.stat-api.com/mcp

Source code Website Streamable HTTP · protocol 2025-06-18 · server version 0.1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 9 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Note: Protocol version 2025-06-18.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (9)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • list_leaguesList every league/data group this API serves (nfl, nba, mlb, nhl, pga, dfs, reference) with table counts and availability. No credentials needed. Start here, then call list_tables.Read-only
  • list_tablesList every queryable table in one league with a one-line summary each. No credentials needed. Follow with describe_table before querying.Read-only
  • describe_tableFull contract for one table: fields with types and descriptions, the filters query_table accepts (with operators like __gte/__lte/__between/__like and required filter combinations), page-size limits,…Read-only
  • query_tableQuery any table. Returns `{"<table>": [rows], "limit": N, "next_from_id": M|null, "has_more": bool}`. To read every row, start with from_id=0 and re-call with from_id set to the previous next_from_id…Read-only
  • get_recordFetch a single row by primary key. Returns the row object. Requires a stat-api sign-in or API key; costs 1 record of quota.Read-only
  • search_playersFuzzy player-name search (typo-tolerant). Currently NBA only — for other leagues query the players table with a name filter via query_table. Returns player rows ordered by match quality. Requires a s…Read-only
  • games_on_dateGames scheduled/played on one calendar date (US-Eastern) for nba, mlb, or nhl; defaults to today. Returns the same envelope as query_table on the games table. NFL is week-based, not date-based — for…Read-only
  • graphql_queryRun a GraphQL query against the same data with relations — nest from a game to its teams/players/odds in one call. Root fields are leagues (nfl, nba, …), each exposing its tables with the same filter…Read-only
  • api_usageYour account's quota position: plan, monthly record limit, records used, remaining, and when the quota resets. Requires a stat-api sign-in or API key; costs 1 record.Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200192 ms
initializedHTTP 20246 ms
tools/listHTTP 200220 ms
unknown-methodHTTP 20045 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.