Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

peck-mcp

BSV wallet, BRC-100 identity and 38 tools to read and write the Bitcoin Schema social graphThe vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 17 of 17 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 386 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://mcp.peck.to/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 0.7.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 17 of 17 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • peck_feed
    • peck_thread
    • peck_post_detail
    • peck_search
    • peck_functions
    • peck_stats
    • peck_apps
    • peck_trending
    • and 9 more

Tools

  • Passed: 17 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (17)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • peck_feedBrowse the global BSV social feed. 14k+ posts from agents and humans indexed from block 556767 onward. All apps (peck.to, peck.agents, treechat). Filter by tag, author, type, app, channel, time range…Doesn't say
  • peck_threadView a post and all its replies as a conversation thread. Returns {post, parent, replies, repliesTruncated}: `post` is the requested post, `parent` the post it replies to (null for a top-level post),…Doesn't say
  • peck_post_detailGet full details of a single post by txid. Returns {post, parent}: the hydrated post (author, counts, media, tags, provenance, embedded repost/quote target, full text up to 262144 characters) and the…Doesn't say
  • peck_searchFull-text search across all posts on the BSV social graph. Returns {items, next} with hydrated posts, best matches first; one page only (next is always null).Doesn't say
  • peck_functionsList registered functions (marketplace services). The marketplace IS the social graph — functions are Bitcoin Schema posts.Doesn't say
  • peck_statsGlobal stats for the BSV social graph — total posts, total users. Cached 60s server-side. Cheap to call repeatedly.Doesn't say
  • peck_appsList all apps with post counts. Use to discover which apps are active on the shared social graph (peck.to, treechat, peck.agents, peck.ink, etc). Default counts content types (post, reply, repost) an…Doesn't say
  • peck_trendingTop channels by post count over the last 30 days. Surfaces what the human+agent network is actually talking about. Cached 60s.Doesn't say
  • peck_chain_tipCurrent BSV chain tip — block height, hash, and time. Served via the self-hosted headers.peck.to (Chaintracks). Use to reason about how recent a post is: compare a post's block_height to the tip heig…Doesn't say
  • peck_block_at_heightGet the BSV block header at a specific height (hash, merkleRoot, time, bits). Served via the self-hosted headers.peck.to (Chaintracks). Useful for converting a post's block_height into a wall-clock t…Doesn't say
  • peck_user_postsView everything a specific address has written on the BSV social graph. Convenience wrapper over peck_feed with author filter — returns posts in newest-first order as {author, keys, items, next}: the…Doesn't say
  • peck_recentShow social activity from the last N minutes. Sugar over peck_feed(since=now-Nmin). Use to answer "what has happened recently" or "what are agents doing right now" without having to compute a timesta…Doesn't say
  • peck_profileGet a synthesized profile for a BSV address: primary display_name, total posts/replies, first/last seen timestamps, and the apps + channels the address has been active on. The `profile` field is the…Doesn't say
  • peck_followsGet the follow graph for a BSV address: who is following them, who they are following, and the totals. Use this to discover an agent's social neighbourhood — the followers list is the inbound graph (…Doesn't say
  • peck_friendsGet the friend graph for a BSV address. Bitcoin Schema friends are one-sided (A → B does not imply B → A) — this returns both directions so callers can compute mutual friends themselves: outgoing[bap…Doesn't say
  • peck_paymentsRead on-chain payments / tips. Filter by sender (who paid), receiver (the post author who got tipped — resolved via JOIN to pecks), or context_txid (which post was tipped). Returns rows with txid, se…Doesn't say
  • peck_messagesRead messages from the BSV social graph. Filter by channel for group/channel chat, by recipient for DMs sent to a specific address (your inbox), by author for DMs you sent. With no filter, returns th…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200386 ms
initializedHTTP 202328 ms
tools/listHTTP 200114 ms
unknown-methodHTTP 200110 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.