Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

Muhabbit

Exchange hack alerts, a hash-chained public event record and crypto/finance/tech news for agentsThe vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 187 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 18 tools say they only read.
Endpointhttps://api-production-ba80.up.railway.app/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 0.1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 18 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (18)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • muhabbit_newsLatest approved news across crypto, finance and tech, from outlets in seven languages, translated to English. Agent-shaped items: signal (the English headline), tokens[], narrative_id, short/long con…Read-only
  • muhabbit_searchFull-text search over the article corpus with relevance ranking. (Needs an API key or wallet token: X-API-Key or Authorization: Bearer.)Read-only
  • muhabbit_recapScheduled 1h / 24h / 7d recap for a vertical or all verticals (English). Returns freshness; never generated on demand. (Paid route: API key, wallet token, or x402 payment.)Read-only
  • muhabbit_ticker_summary24h AI summary of news about one asset symbol (exists for the most-mentioned assets). (Paid route: API key, wallet token, or x402 payment.)Read-only
  • muhabbit_sentiment_index0-100 Fear & Greed index overall and per vertical, computed from the last 24h of scored articles. (Needs an API key or wallet token: X-API-Key or Authorization: Bearer.)Read-only
  • muhabbit_sentiment_signalsMomentum, volume-weighted, regime and vertical-shift sentiment signals, across all verticals. (Needs an API key or wallet token: X-API-Key or Authorization: Bearer.)Read-only
  • muhabbit_asset_sentimentSentiment and impact for one asset (a stock, a coin, gold, silver, crude oil or a currency pair) over 24h, 7d and 30d: story count, high-impact count, impact-weighted and plain mean sentiment (-1..1,…Read-only
  • muhabbit_narrativesRanked live narrative clusters by phase, velocity and distinct-source count. Use for themes, rotations, or 'what's the story in crypto right now?' — returns decision-ready rows, not a raw feed. (Need…Read-only
  • muhabbit_narrative_historyTime series for ONE narrative (15-min captures of phase, velocity, article and source counts). Use after muhabbit_narratives to see how a story's lifecycle evolved — is it accelerating or rolling ove…Read-only
  • muhabbit_confidenceUse BEFORE treating a headline as tradeable or citing it as fact: 5-factor confidence for one article (source tier, cross-reference, freshness, AI confidence, entity density). (Needs an API key or wa…Read-only
  • muhabbit_cross_referenceUse when asked 'is this confirmed?' or 'who else is reporting this?' — multi-source validation of an article's claims with entity correlation. (Needs an API key or wallet token: X-API-Key or Authoriz…Read-only
  • muhabbit_categoriesVerticals and currently active topic slugs. The anonymous token from GET /auth/public-token is enough. (Needs an API key or wallet token: X-API-Key or Authorization: Bearer.)Read-only
  • muhabbit_alertsExchange hack and drain alerts from Muhabbit's incident engine (large outflows to unlabelled wallets, withdrawal halts, security-researcher posts, exchange statements). One item per incident: tier (s…Read-only
  • muhabbit_alertOne exchange security alert with its evidence signals, sources and timeline. Takes the id from muhabbit_alerts, or the article_id of an alert headline seen in muhabbit_events. A confirmed alert is fr…Read-only
  • muhabbit_eventsThe public record: every headline Muhabbit published, newest first. Each item is an entry of the hash-chained public record with three timestamps in UTC ms (source_at = publisher, detected_at = our i…Read-only
  • muhabbit_record_headLatest entry id and hash of Muhabbit's public record: an append-only sha256 hash chain (hash_v1) over every published event. Pin the head now; muhabbit_record_verify later proves nothing up to it was…Read-only
  • muhabbit_record_entriesRaw public record entries in chain order from an id: each entry's frozen fields, prev_hash and hash, for offline verification. hash = sha256 over the canonical JSON bytes followed by prev_hash; the e…Read-only
  • muhabbit_record_verifyRecompute the public record's hash chain server-side over [from, to], at most 1000 entries (no bounds: the latest 1000). Returns ok, checked and head_hash, or the first broken id and the reason (prev…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200187 ms
initializedHTTP 202152 ms
tools/listHTTP 200114 ms
resources/listHTTP 20083 ms
unknown-methodHTTP 200100 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.