io.stocksonchain/stocks-on-chain

Est-ce que io.stocksonchain/stocks-on-chain est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.stocksonchain/stocks-on-chain » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• get_contract≈ 317 tokens

  What this site holds about one address, in two independent halves. `listings` says what the token IS - the stock, its company, the issuer and the chain - and is present whenever the address is a listing we track. `matches` says what the CODE at the address is: its runtime bytecode hash, the implementation behind it if it is a proxy, and how many other addresses we track run byte-identical code; it is present only where we have read the code. The code half is reproducible: fetch eth_getCode and take its keccak256 and you get the same hash. Either half can be empty and both can be present; an address we hold nothing about returns found: false, which is an answer rather than an error. This never says an address is safe, genuine or correct, and there is no field that could: check it against the issuer before you act on it.

  Paramètres, retour & exemple (2)

  Paramètres

  • chain · string · optionnel
    Chain slug, for example ethereum or robinhood-chain. Optional. Omit it to find the address on every chain we hold it.
  • address · string · requis
    The contract address, in any case.

  Exemple d'appel

  {"name": "get_contract", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_manifest≈ 92 tokens

  What this service offers a machine reader: the free keyless endpoints, the bulk dataset and its price if the paid tier is live, and the licence. No human reader is ever charged or asked to connect a wallet.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_manifest", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_stock≈ 160 tokens

  Everything known about one stock: every instrument (one per issuer, with the mechanics union describing how it handles corporate actions), every listing under it (chain, contract address, supply, price), and the events recorded against it. Report instruments as the options; listings are addresses. Read mechanics.kind before reaching for any field inside mechanics.

  Paramètres, retour & exemple (1)

  Paramètres

  • ticker · string · requis
    Ticker or slug, for example NVDA or nvda.

  Exemple d'appel

  {"name": "get_stock", "arguments": {"ticker": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_chains≈ 75 tokens

  Every chain carrying tokenized stocks, with its explorer, and the matrix of which issuer has listed what where. Registry order, which is not a ranking.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_chains", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_events≈ 154 tokens

  The corporate-action tape: splits, distributions and multiplier changes read from chain state, each with a transaction hash. Newest first by the time the event took effect, which is chronology and not a ranking.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    How many events to return. Default 50, maximum 500.
  • since · string · optionnel
    ISO 8601 date. Only return events effective on or after this date.

  Exemple d'appel

  {"name": "list_events", "arguments": {"limit": 1, "since": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_issuers≈ 134 tokens

  Every issuer whose tokens are tracked, in registry order, with the legal wrapper it uses, the chains it issues on, and a link to where that issuer publishes its own rule on who may buy. The rule itself is deliberately not included: it can change without this site noticing, so answer eligibility questions by sending the caller to eligibility.sourceUrl rather than by stating a rule.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_issuers", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• report_gap≈ 478 tokens

  Tell us you wanted something and did not get it: a stock we do not track, a chain a stock is not on, a field no endpoint carries, a tool that does not exist, a figure you believe is wrong, or a path that failed. Call this when another tool has just answered with a miss - the answer names the kind to send. THERE IS NO FREE-TEXT FIELD AND THERE WILL NOT BE ONE: a report is an enumerated kind plus a short subject, because the counts are what is useful and prose from an anonymous caller is a prompt-injection surface pointed at the people who read it. Nothing about you is recorded - no address, no header, no identifier - so a report cannot be joined to a caller and there is no reply. The report is counted in aggregate and returned to you with a prefilled link a human can open to track it. Reporting costs nothing and is never required.

  Paramètres, retour & exemple (2)

  Paramètres

  • kind · string · requis · missing_stock | missing_listing | missing_field | missing_tool | wrong_figure | broken_endpoint
    What was missing. One of: missing_stock (A stock this site does not track at all.) missing_listing (A stock we track, but not on the chain the caller wanted.) missing_field (A field no endpoint carries.) missing_tool (An MCP tool that does not exist.) wrong_figure (A published figure the caller believes is wrong.) broken_endpoint (A path that failed or answered in an unusable shape.)
  • subject · string · requis
    What it was about - a ticker, a field name, a tool name or a path. Letters, digits, dot, slash, hyphen and underscore, up to 64 characters. Not a sentence: there is no free-text field. A wallet or contract address is refused - send the ticker or the path instead.

  Exemple d'appel

  {"name": "report_gap", "arguments": {"kind": "missing_stock", "subject": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_stocks≈ 139 tokens

  Find tokenized stocks by ticker or company name. Returns every match with its issuers and chains, alphabetical by ticker. If a ticker is a real stock but has not been tokenized, this reports that too, which is a correct answer rather than an empty result.

  Paramètres, retour & exemple (1)

  Paramètres

  • query · string · requis
    A ticker (NVDA) or part of a company name (Nvidia). Case insensitive.

  Exemple d'appel

  {"name": "search_stocks", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://stocksonchain.io/mcp