Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

xportalx

AI agent gateway with web fetching, data extraction, crypto pricing, and x402 paymentsThe vendor's description, from its MCP Registry listing.

Passed, with 2 warningsAudited Nov 13, 2026
  • Warning: The server only speaks the first MCP version (2024-11-05).
  • Warning: 29 of 29 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 665 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://fflpdljiuruqdnewvwkk.supabase.co/functions/v1/mcp

Streamable HTTP · protocol 2024-11-05 · server version 4.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 29 of 29 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • fetch_api
    • fetch_page
    • fetch_pdf
    • extract
    • crawl
    • markdown_convert
    • dexscreener_token
    • coinbase_price
    • and 21 more

Tools

  • Passed: 29 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Warning: The server only speaks the first MCP version (2024-11-05).

    Newer versions (latest 2025-11-25) add tool safety labels, structured output and a safer authorization model.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (29)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • fetch_apiFetch structured JSON/XML data from any API endpoint. Best for REST APIs and data feeds. Cost: 0.01 USDCDoesn't say
  • fetch_pageFetch raw HTML content from any web page. Best for static HTML scraping. Cost: 0.01 USDCDoesn't say
  • fetch_pdfFetch and extract text content from PDF documents. Returns structured text with page numbers. Cost: 0.01 USDCDoesn't say
  • extractExtract structured data from a web page using a JSON schema. AI-powered extraction. Cost: 0.01 USDCDoesn't say
  • crawlCrawl a website starting from a URL, following links up to specified depth. Cost: 0.01 USDCDoesn't say
  • markdown_convertConvert a web page to clean Markdown format. Great for LLM consumption. Cost: 0.01 USDCDoesn't say
  • dexscreener_tokenGet real-time token price and market data from DexScreener. FREE - no payment required.Doesn't say
  • coinbase_priceGet cryptocurrency prices and exchange rates from Coinbase. FREE - no payment required.Doesn't say
  • verify_agentVerify a wallet signature (EIP-191) to authenticate an agent. FREE - no payment required.Doesn't say
  • coinbase_facilitatorx402 payment facilitation - get payment info, verify transactions, check rates. FREEDoesn't say
  • x402_proxyAccess x402-protected APIs with automatic payment. Dynamic pricing: 0.01 USDC fee + target cost. Supports USDC on Base.Doesn't say
  • x402_proxy_priceGet dynamic pricing for x402 proxy requests. FREE - returns total cost (proxy fee + target cost).Doesn't say
  • erc8004_registerRegister your AI agent on-chain with ERC-8004 Trustless Agent Identity. Cost: 0.01 USDC. You receive an NFT representing your agent identity.Doesn't say
  • failure_reasonUnderstand why a job failed. FREE - lookup job failures or get failure code reference.Doesn't say
  • mcp_pricingGet pricing information for all MCP tools. FREE - returns cost breakdown for each tool.Doesn't say
  • solve_captchaSolve captchas on protected pages and extract content. Uses 2Captcha to bypass reCAPTCHA/hCaptcha, then Claude AI selects the best tool to retrieve content. Cost: 0.01 USDCDoesn't say
  • zora_walletGet comprehensive Zora NFT wallet data: NFTs minted, NFTs owned, creator profile, total mints/collections, and estimated earnings. FREE - no payment required.Doesn't say
  • swapExecute a token swap on Base via 0x DEX Aggregator. AI-ENHANCED: Accepts natural language like 'swap 10 USDC for VIRTUAL'. THREE MODES: (1) PRIVY MODE (RECOMMENDED): Provide owner_wallet - uses your…Doesn't say
  • create_walletCreate a custodial wallet for an AI agent using Privy. Cost: 0.01 USDC. The owner wallet is automatically detected from your x402 payment - no need to provide it explicitly. The wallet can be used fo…Doesn't say
  • fund_walletFund your custodial wallet with USDC. DYNAMIC PRICING: You pay (amount + 0.01 USDC fee). The owner wallet is auto-detected from your x402 payment. Example: To deposit 5 USDC, you pay 5.01 USDC and 5…Doesn't say
  • fund_wallet_ethFund your custodial wallet with ETH for gas. DYNAMIC PRICING: You pay the USDC equivalent of (ETH amount + 0.01 USDC fee). The owner wallet is auto-detected from your x402 payment. Example: To deposi…Doesn't say
  • withdraw_walletWithdraw USDC from your custodial wallet to your owner wallet. Cost: 0.01 USDC. The owner wallet is auto-detected from your x402 payment.Doesn't say
  • send_tokensSend USDC from your custodial wallet to ANY wallet address. Cost: 0.01 USDC. The sender (your custodial wallet) is auto-detected from your x402 payment. Use this to pay other agents, transfer to exch…Doesn't say
  • get_wallet_balanceCheck the balance of your custodial wallet. FREE - no payment required. Returns ETH and USDC balances on Base network.Doesn't say
  • x402_sendSend USDC directly to ANY wallet address via x402 payment. Just provide to_address and amount - the flow auto-completes: 1) Pay 0.01 USDC platform fee 2) Pay the amount directly to destination. Token…Doesn't say
  • nansen_smart_money_holdingsScreen tokens with Smart Money activity using Nansen Token Screener. Supports natural language like 'what are whales buying on base?' or 'trending tokens on solana'. Cost: 0.01 USDCDoesn't say
  • nansen_smart_money_netflowsTrack net capital flows from Smart Money wallets. Supports natural language like 'are whales accumulating ETH?' or 'smart money flows for PEPE last 7 days'. Cost: 0.01 USDCDoesn't say
  • nansen_token_god_modeFull token analytics with Nansen TGM. Supports natural language like 'analyze VIRTUAL token' or 'who holds the most PEPE?'. Auto-resolves token symbols to addresses. Cost: 0.01 USDCDoesn't say
  • nansen_wallet_profilerComprehensive wallet analysis. Supports natural language like 'profile vitalik.eth' or 'what labels does 0x... have?'. Returns balances, Nansen labels, and transactions. Cost: 0.01 USDCDoesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200665 ms
initializedHTTP 204301 ms
tools/listHTTP 200213 ms
unknown-methodHTTP 20064 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.