Next free-source huntWe check for new free data every weekday.
FinancialWeatherNews & RSSMCP serverFirst audited Nov 13, 2026

Money Reactor

Crypto/stock prices, QR, DNS, RSS, URL reader, AI chat, weather, ENS, hashes. USDC Base $0.001+The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 35 of 35 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 143 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://money-reactor.makar52nn2016.workers.dev/mcp2

Website Streamable HTTP · protocol 2025-11-25 · server version 1.2.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 35 of 35 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • reactor_status
    • get_bounty_demo
    • get_day_pass
    • get_bounty_feed
    • score_repo_trust
    • repo_verdict
    • get_crypto_price
    • read_url_text
    • and 27 more

Tools

  • Passed: 35 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (35)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • reactor_statusFree: Money Reactor live base URL, health, prices, receiver wallet. Call this first.Doesn't say
  • get_bounty_demoFree: top-3 funded bounties + honeypot sample + ROI pitch — rich preview of the paid feed.Doesn't say
  • get_day_passDay Pass: one $0.25 payment (x402, USDC Base) unlocks 24h of unlimited calls on every micro route. Buy once via tools/call settle, then send the returned dp_ token as X-DAY-PASS header. For agents ma…Doesn't say
  • get_bounty_feedPaid $0.10 (x402, USDC Base): multi-source bounty feed, hourly-refreshed — live Superteam Earn listings (USDC/USDG, $500-$10k), LIVE GitHub bounty radar (top open issues by reactions with trust score…Doesn't say
  • score_repo_trustPaid $0.10 (x402, USDC Base): trust score 0-100 + GO/CAUTION/HONEYPOT_RISK verdict + reasons for a GitHub repo. Screen bounties before working them — one avoided rug pays for 1000 calls.Doesn't say
  • repo_verdictPaid $0.02 (x402, USDC Base): one-line GO / CAUTION / HONEYPOT_RISK verdict for a repo. Impulse-priced pre-flight check.Doesn't say
  • get_crypto_pricePaid $0.01 (x402, USDC Base): live crypto spot price in USD for a pair like BTC-USD / ETH-USD / SOL-USD. Sourced from Coinbase public price APIs, edge-cached up to 30s.Doesn't say
  • read_url_textPaid $0.02 (x402, USDC Base): fetch any http(s) web page and return clean plain text (title + visible body, scripts/styles stripped, up to 8000 chars). Gives text-only agents web reading. Private/int…Doesn't say
  • get_crypto_newsPaid $0.02 (x402, USDC Base): top crypto headlines aggregated from Cointelegraph/Decrypt/NewsBTC RSS with per-article source links and publish times. Daily brief for trading and research agents.Doesn't say
  • get_usd_pricePaid $0.02 (x402, USDC Base): multi-asset USD price snapshot in ONE call — up to 25 pairs (default 10 majors: BTC/ETH/SOL/DOGE/XRP/ADA/AVAX/LINK/LTC/USDC). Batch beats per-pair calls for portfolio an…Doesn't say
  • get_fear_greedPaid $0.01 (x402, USDC Base): crypto Fear & Greed index — today + yesterday + week ago + 10-day history (0=extreme fear, 100=extreme greed). Market sentiment signal for trading agents.Doesn't say
  • get_market_pulsePaid $0.02 (x402, USDC Base): full market snapshot in ONE call — batch USD prices (default BTC/ETH/SOL/XRP/DOGE, optional symbols arg) + Fear & Greed sentiment + latest Base block. One poll replaces…Doesn't say
  • get_weatherPaid $0.01 (x402, USDC Base): current weather for any city worldwide (temperature, feels-like, humidity, wind, conditions) via Open-Meteo with city geocoding.Doesn't say
  • get_erc20_balancePaid $0.02 (x402, USDC Base): on-chain ERC20 token balance for any Base address via eth_call balanceOf on public Base RPC. Returns raw + human balance, decimals, symbol.Doesn't say
  • get_token_verdictPaid $0.10 (x402, USDC Base): onchain safety verdict for a Base token — grade GREEN/MID/YELLOW/RED from liquidity, pair age, turnover, buy/sell flow and volatility (DexScreener data) with reasons. Sc…Doesn't say
  • get_latest_blockPaid $0.01 (x402, USDC Base): latest Base mainnet block height (eth_blockNumber via public RPC). Cheapest chain-tip probe for agents.Doesn't say
  • get_hashPaid $0.02 (x402, USDC Base): cryptographic hash of any text via WebCrypto. Args: text (string), algo (sha256 default | sha1 | sha384 | sha512).Doesn't say
  • encode_base64Paid $0.02 (x402, USDC Base): Base64 encode/decode. Args: text (string), op ('enc' default | 'dec').Doesn't say
  • gen_passwordPaid $0.02 (x402, USDC Base): CSPRNG password/API-secret generator, 8-128 chars, classes upper/lower/digits/symbols, entropy estimate. Args: length (int, default 20).Doesn't say
  • gen_randomPaid $0.02 (x402, USDC Base): CSPRNG random integers [min,max] or fair pick from list. Args: min, max, n, from (comma list).Doesn't say
  • slugify_textPaid $0.02 (x402, USDC Base): Unicode-safe URL slug generator. Args: text (string), sep (default '-'), max (default 80).Doesn't say
  • convert_epochPaid $0.02 (x402, USDC Base): Epoch <-> ISO-8601 time converter with UTC parts and relative age. Args: ts (unix) or iso (string).Doesn't say
  • text_statsPaid $0.02 (x402, USDC Base): text analytics - chars, words, sentences, paragraphs, reading time, top keywords. Args: text (string).Doesn't say
  • decode_jwtPaid $0.02 (x402, USDC Base): JWT decoder - header + payload + expiry status, NO signature verification (inspection only). Args: token (string).Doesn't say
  • cron_nextPaid $0.02 (x402, USDC Base): cron solver - next N execution times (UTC) for a standard 5-field cron expression. Args: expr (string), n (int, default 5).Doesn't say
  • convert_colorPaid $0.02 (x402, USDC Base): color converter - HEX/RGB/HSL, WCAG luminance, contrast ratios, readable text suggestion. Args: color (string).Doesn't say
  • gen_loremPaid $0.02 (x402, USDC Base): lorem ipsum generator, 1-20 randomized paragraphs. Args: p (int, default 3).Doesn't say
  • gen_uuidPaid $0.01 (x402, USDC Base): random UUID v4 — idempotency keys and x402 requestKeys on demand; also a canonical low-cost target for testing x402 payment stacks.Doesn't say
  • get_timePaid $0.01 (x402, USDC Base): current server time in UTC ISO-8601 with unix seconds. Cheapest liveness/time probe.Doesn't say
  • get_base_gasPaid $0.02 (x402, USDC Base): live Base gas — gas price, EIP-1559 base fee and suggested priority fee in Gwei. Tx cost planning for agents.Doesn't say
  • get_wallet_profilePaid $0.10 (x402, USDC Base): on-chain wallet profile on Base — ETH balance, tx count (nonce), USDC balance, activity tier (fresh/new/active/veteran). Pre-flight counterparty check.Doesn't say
  • get_coin_convertPaid $0.02 (x402, USDC Base): convert an amount between assets at live USD spot (Coinbase) — e.g. 1 BTC = ? ETH. Rate + result in one call.Doesn't say
  • get_btc_halvingPaid $0.02 (x402, USDC Base): next Bitcoin halving — current height, blocks left, ETA, post-halving reward. Evergreen countdown.Doesn't say
  • ai_chatPaid $0.10 (x402, USDC Base): LLM chat completion (Llama 3.1 8B, Cloudflare Workers AI). Args: prompt (string) OR messages (array of {role, content}), optional system, max_tokens. One-shot AI inferen…Doesn't say
  • research_reportPaid $0.50 full / $0.10 preview (x402, USDC Base): LLM 70B writes a structured 7-section research report on your question — executive summary, market context, key data grounded in LIVE prices + Fear…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200143 ms
initializedHTTP 20228 ms
tools/listHTTP 20085 ms
unknown-methodHTTP 20080 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.