Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

Indexfy

Buy and sell fully backed crypto index tokens and trade prediction markets on Base, in USDC.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 425 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://api.indexfy.xyz/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 0.1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 2 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • register_index
    • register_prediction_market
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 15 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (15)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • list_indexesIndexfy index funds on Base with price, TVL and 24h / 7d performance. Each index is an ERC-20 fully backed by its basket of tokens.Read-only
  • get_indexOne index's stats, mandate and current holdings (each basket token's amount, USD value and weight).Read-only
  • get_wallet_portfolioA wallet's Indexfy index holdings with value and profit/loss, plus its Indexfy points.Read-only
  • build_create_indexLaunch a new index fund: the wallet seeds it with the exact amount of each basket token (it must hold them) and receives `initialShares` shares. The seed amounts set the weights. Returns the approval…Read-only
  • register_indexLists a newly created index on indexfy.xyz right away. Call with the deployFolio transaction hash once it's mined.Can change things
  • build_buy_indexBuy an index with USDC alone: one transaction buys every basket token on KyberSwap and mints the shares, reverting below the quoted minimum. Unspent USDC is refunded.Read-only
  • build_sell_indexSell index shares for USDC: one transaction redeems the shares for the basket and sells each token on KyberSwap, reverting below the quoted minimum.Read-only
  • list_prediction_marketsPrediction markets on Indexfy with live YES/NO prices (= implied probability), money in the market, phase and deadlines.Read-only
  • get_prediction_marketOne market's live state: prices, phase and what can be done next, deadlines, proposal/dispute. With `wallet`, also its shares, redeemable USDC and solver stake.Read-only
  • quote_prediction_tradeExact quote from the market maker: shares for a USDC buy, or USDC for a share sell, fees included.Read-only
  • build_prediction_tradeBuy YES/NO shares with USDC, or sell shares back for USDC before the market closes. Includes the USDC approval when needed and a minimum-output guard.Read-only
  • build_create_prediction_marketOpen a YES/NO market. The wallet seeds it with USDC liquidity (minimum 100) and names a solver — a different address that alone resolves it and stakes 1% as a bond. Trading runs until closeTime; the…Read-only
  • register_prediction_marketLists a newly created market on indexfy.xyz under its sector. Call with the createMarket transaction hash once mined, within 1 hour.Can change things
  • build_prediction_resolutionAfter trading: propose (the solver; deposits any missing stake first), dispute (anyone but the solver, posting the same bond, during the 24h window), finalize (anyone, once the window passes), redeem…Read-only
  • build_prediction_accountDeposit or withdraw solver stake (backs the 1% bonds of your proposals), or withdraw your balance (dispute winnings and returned bonds).Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200425 ms
initializedHTTP 202334 ms
tools/listHTTP 200216 ms
unknown-methodHTTP 200117 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.