Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

Brighter

Browse, backtest and write rule-based portfolios of tokenized US stocks.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 11 of 11 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 485 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://mcp.brighter.fi/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 0.1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 11 of 11 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • list_strategies
    • get_strategy
    • backtest_strategy
    • get_allocation
    • find_assets
    • asset_history
    • dsl_reference
    • strategy_schema
    • and 3 more

Tools

  • Passed: 11 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (11)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • list_strategiesList the strategies published on brighter.fi, newest or best-performing first. Each carries its rebalance cadence, the assets it can hold, and its return over the chosen period against its benchmark.…Doesn't say
  • get_strategyOne strategy in full: what its rule does, the parameters you can tune with their ranges and defaults, every asset it can hold, and its benchmark. Use the parameter keys with backtest_strategy.Doesn't say
  • backtest_strategyRun a published strategy over real market history with parameters of your choosing. Returns its figures against its benchmark. Values outside a parameter's range are snapped into it. This is a real b…Doesn't say
  • get_allocationWhat a published strategy's rule holds right now, in basis points of the portfolio. This is the live target, computed from the latest close.Doesn't say
  • find_assetsSearch the assets a Brighter strategy can hold — tokenized US stocks, ETFs and T-bills. A rule may only name a ticker that appears here.Doesn't say
  • asset_historyDaily closing prices for one asset over a calendar year, for checking a rule's premise against what actually happened.Doesn't say
  • dsl_referenceHow to write a Brighter strategy: the language's blocks, indentation rules, indicators and limits. Read this before writing any rule — the language is small and specific, and guessing its syntax wast…Doesn't say
  • strategy_schemaThe JSON schema for a strategy as an object, for when you would rather build the rule tree than write the text. check_strategy and backtest_code both accept text, which is usually easier.Doesn't say
  • check_strategyCheck a strategy written in Brighter's language: syntax, semantics, and whether every ticker it names is one Brighter can actually trade. Returns the faults with their line and column. Costs nothing…Doesn't say
  • format_strategyRewrite a strategy in the language's canonical form — the spelling Studio's editor shows. Useful for checking that what you wrote means what you think it means.Doesn't say
  • backtest_codeRun a strategy you have written against real market history and return its figures. This is a real backtest against real prices — not a simulation and not cached per call — so run it deliberately, af…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200485 ms
initializedHTTP 202135 ms
tools/listHTTP 200407 ms
resources/listHTTP 200141 ms
unknown-methodHTTP 200146 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.