Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

RAVN

Cross-chain swap API for native Bitcoin, Solana and EVM chains. No API key, no custody.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 226 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://app.ravn.exchange/api/mcp

Source code Streamable HTTP · protocol 2025-11-25 · server version 1.0.3

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 2 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • ravn_execute
    • ravn_submit_signature
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 10 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (10)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • ravn_quoteGet a swap quote from RAVN — same-chain or cross-chain, across 19 chains including native (non-wrapped) Bitcoin and Solana as source or destination. Free, no API key or payment required. Returns a qu…Read-only
  • ravn_executeTurn a quoteToken from ravn_quote into an execution payload. Returns one of three shapes (executionType): TRANSACTION (sign and broadcast yourself), SIGNATURE (sign, RAVN submits), or DEPOSIT (send t…Can change things
  • ravn_submit_signatureFor a SIGNATURE-type ravn_execute result only: submit the signature(s) you collected (over typedData, and approvalData if present) to actually place the order. RAVN decodes the venue from quoteToken…Can change things
  • ravn_statusPoll the status of a swap by its quoteToken and ref from ravn_execute (statusRef, deposit address, or origin tx hash). Use the quoteToken execute returned — compose rebinds hop 1 onto hop 2's deposit…Read-only
  • ravn_healthLiveness check across every venue RAVN routes through — call before a swap if you want to know whether a route is degraded ahead of time.Read-only
  • ravn_tokensRAVN's own listed token registry for one chain — populate a token picker without hardcoding one. This is "what RAVN knows about and might route", not a per-pair routability guarantee for any specific…Read-only
  • ravn_tokens_resolveResolve an arbitrary token address to its metadata (symbol, name, decimals) via an on-chain read — for a paste-any-address flow, when the token isn't necessarily on ravn_tokens's list.Read-only
  • ravn_btc_coverageFor a swap where native BTC is the source: how many BTC venues list each of ravn_tokens's tokens on `chainId`. A ranking hint (a token more venues list is more likely to keep routing through one venu…Read-only
  • ravn_chainsEvery chain RAVN lists a token registry for (see ravn_tokens). Static, doesn't change per request, safe to cache instead of hardcoding a chain table.Read-only
  • ravn_btc_prepare_sendTurns a DEPOSIT-type ravn_execute result (deposit.address + deposit.amount) into a ready-to-sign PSBT, so you don't have to write your own UTXO selection and fee-estimation code. If that result also…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200226 ms
initializedHTTP 202127 ms
tools/listHTTP 20066 ms
unknown-methodHTTP 20078 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.