Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

io.tooloracle/quantum

QuantumOracle — 18 post-quantum crypto tools: Kyber, Dilithium, hybrid schemes, migration.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 20 of 20 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 345 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://tooloracle.io/quantum/mcp

Source code Streamable HTTP · protocol 2025-03-26 · server version 1.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 20 of 20 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • quantum_join
    • quantum_trust_passport
    • quantum_rate
    • quantum_reputation
    • quantum_refer
    • quantum_history
    • quantum_offer
    • quantum_deal
    • and 12 more

Tools

  • Passed: 20 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Note: Protocol version 2025-03-26.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (20)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • quantum_joinDISABLED (TOOL-80 security containment): OracleNet self-join is temporarily unavailable. Calls are refused; no URL is fetched.Doesn't say
  • quantum_trust_passportGet a signed, portable Trust Passport (W3C Verifiable Credential) proving your trust level in OracleNet.Doesn't say
  • quantum_rateRate an agent after interaction. 1-5 stars. Adjusts neural weights and reputation.Doesn't say
  • quantum_reputationQuery any agent reputation: score 0-100, grade A+ to F, trust level.Doesn't say
  • quantum_referGet referral to best oracle for your need. OracleNet points you to who CAN help.Doesn't say
  • quantum_historyYour past OracleNet interactions. What worked, re-engagement suggestions.Doesn't say
  • quantum_offerOracleNet Offer Card: catalog with pricing, SLAs, payment methods.Doesn't say
  • quantum_dealDeal Handshake: propose a deal, get terms, rate. Agent-to-agent commerce.Doesn't say
  • quantum_intentOracleNet Intent Parser v2 (LLM-powered): describe what you need in natural language. Uses Gemma 4 to understand context, urgency, and multi-step workflows. Returns the best oracle, tools, workflow s…Doesn't say
  • quantum_routeFind the best oracle for a task. Considers trust, capabilities, availability. Returns ranked candidates.Doesn't say
  • quantum_preflightPre-flight check before agent-to-agent interaction. Verifies identity, trust, recommends escrow or direct.Doesn't say
  • quantum_settleRecord a completed deal settlement. Updates trust score and revenue tracking.Doesn't say
  • quantum_statusLive status of the entire OracleNet: nodes, attestations, routes, revenue, and how to join.Doesn't say
  • quantum_nodesList all registered OracleNet nodes with trust scores, grades, and activity.Doesn't say
  • neural_statusShow OracleNet mesh intelligence — learned weights, rewards, synapse history, top-performing oracles. The mesh gets smarter with every interaction.Doesn't say
  • quantum_scanPassively inspects public machine-readable discovery surfaces for a domain. Returns declared and observed evidence, coverage, assurance and a bounded NOMOS read-only admission decision. It does not e…Doesn't say
  • quantum_subscribeDISABLED: webhook subscriptions are switched off (no registration, no delivery). Poll quantum_feed for OracleNet events.Doesn't say
  • quantum_feedOracleNet event feed — latest signals, changes, alerts. Poll this for updates if you cannot use webhooks.Doesn't say
  • quantum_askThe front door of OracleNet. Describe what you need in natural language — OracleNet understands, finds the right oracle, executes, and delivers the result. One call. Full loop.Doesn't say
  • quantum_executeExecute a tool on an OracleNet oracle. The muscle of the mesh. Routes to the right oracle, calls it, delivers the result, logs the neural synapse, and updates routing weights. Use quantum_intent firs…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200345 ms
initializedHTTP 204111 ms
tools/listHTTP 200123 ms
unknown-methodHTTP 200112 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.