← Back to search

fdic-mcp-server

GitHub Actions Scanned 13d ago

MCP server for the FDIC BankFind Suite API

B
78.4 / 100

Versions

1.30.2latest
Jun 21, 2026
1.30.1
Jun 21, 2026
1.30.0
Apr 29, 2026
1.29.0
Apr 29, 2026
1.28.0
Apr 29, 2026
+ show 75 moreshow less
1.27.0
Apr 29, 2026
1.26.0
Apr 29, 2026
1.25.2
Apr 27, 2026
1.25.1
Apr 26, 2026
1.25.0
Apr 26, 2026
1.24.0
Apr 26, 2026
1.23.2
Mar 31, 2026
1.23.1
Mar 31, 2026
1.23.0
Mar 30, 2026
1.22.0
Mar 30, 2026
1.21.0
Mar 29, 2026
1.20.1
Mar 29, 2026
1.20.0
Mar 29, 2026
1.19.0
Mar 29, 2026
1.18.0
Mar 29, 2026
1.17.1
Mar 29, 2026
1.17.0
Mar 29, 2026
1.16.1
Mar 29, 2026
1.16.0
Mar 28, 2026
1.15.0
Mar 28, 2026
1.14.0
Mar 28, 2026
1.13.0
Mar 27, 2026
1.12.0
Mar 27, 2026
1.11.0
Mar 21, 2026
1.10.2
Mar 19, 2026
1.10.1
Mar 19, 2026
1.10.0
Mar 19, 2026
1.9.0
Mar 19, 2026
1.8.2
Mar 19, 2026
1.8.1
Mar 18, 2026
1.8.0
Mar 18, 2026
1.7.6
Mar 18, 2026
1.7.5
Mar 18, 2026
1.7.4
Mar 18, 2026
1.7.3
Mar 18, 2026
1.7.2
Mar 18, 2026
1.7.1
Mar 18, 2026
1.7.0
Mar 18, 2026
1.6.0
Mar 18, 2026
1.5.1
Mar 18, 2026
1.5.0
Mar 18, 2026
1.4.8
Mar 18, 2026
1.4.7
Mar 18, 2026
1.4.6
Mar 17, 2026
1.4.5
Mar 17, 2026
1.4.4
Mar 17, 2026
1.4.3
Mar 17, 2026
1.4.2
Mar 17, 2026
1.4.1
Mar 17, 2026
1.4.0
Mar 17, 2026
1.3.0
Mar 17, 2026
1.2.12
Mar 16, 2026
1.2.11
Mar 16, 2026
1.2.10
Mar 16, 2026
1.2.9
Mar 16, 2026
1.2.8
Mar 16, 2026
1.2.7
Mar 16, 2026
1.2.6
Mar 16, 2026
1.2.5
Mar 16, 2026
1.2.4
Mar 16, 2026
1.2.3
Mar 16, 2026
1.2.2
Mar 16, 2026
1.2.1
Mar 16, 2026
1.2.0
Mar 16, 2026
1.1.3
Mar 16, 2026
1.1.2
Mar 16, 2026
1.1.1
Mar 16, 2026
1.1.0
Mar 15, 2026
1.0.8
Mar 15, 2026
1.0.7
Mar 15, 2026
1.0.6
Mar 15, 2026
1.0.5
Mar 15, 2026
1.0.4
Mar 15, 2026
1.0.3
Mar 15, 2026
1.0.0
Mar 15, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 25

fdic_regional_context
annotations: verified low

Overlay macro/regional economic data on a bank's geographic context. Uses FRED (Federal Reserve Economic Data) for state unemployment, national unemployment, and federal funds rate. Provides trend analysis and narrative context for bank performance assessment. Gracefully degrades if FRED API is unavailable. Output includes: - State and national unemployment rates with trend analysis - Federal funds rate and rate environment classification - Narrative assessment of macro conditions for bank performance - Structured JSON for programmatic consumption NOTE: Requires FRED_API_KEY environment variable for reliable data access. Degrades gracefully without it.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_show_bank_deep_dive
annotations: verified low

Use this when the user wants a scannable single-institution dashboard with identity, public financial metrics, risk signals, and source links. ChatGPT renders an interactive widget; Claude and other MCP clients render the same data as a Markdown table.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_detect_risk_signals
annotations: verified low

Scan FDIC-insured institutions for early warning risk signals using the public_camels_proxy_v1 analytical engine. Standardized signal codes with severity levels: - Critical: capital_undercapitalized (PCA breach), earnings_loss (ROA < 0), reserve_coverage_low (< 50%) - Warning: capital_buffer_erosion, credit_deterioration, credit_deterioration_trending, earnings_pressure, margin_compression, funding_stress, funding_ltd_stretched, rate_risk_proxy_elevated, wholesale_funding_elevated - Info: merger_distorted_trend, stale_reporting_period Three scan modes: - State-wide: provide state to scan all active institutions - Explicit list: provide certs (up to 50) - Asset-based: provide asset_min/asset_max Output: Per-institution risk signals ranked by severity count. The proxy engine drives signal generation internally; the output is signal-shaped, not assessment-shaped. NOTE: Public off-site analytical proxy — not official supervisory ratings.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_search_failures
annotations: verified low

Use this when the user wants details on failed FDIC-insured institutions filtered by name, state, date range, resolution type, or cost. Returns failure records with pagination; see fdic://schemas/failures for the full field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_get_institution_failure
annotations: verified low

Use this when the user knows the CERT of a failed institution and needs its specific failure record. Returns failure details (date, resolution type, cost, acquirer); responds with `found: false` if the institution did not fail.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
fdic_search_history
annotations: verified low

Use this when the user wants structural-change events (mergers, acquisitions, name changes, charter conversions, failures) for FDIC-insured institutions, filtered by CERT, type, change code, date range, or state. See fdic://schemas/history for the full field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_franchise_footprint
annotations: verified low

Analyze the geographic franchise footprint of an FDIC-insured institution using Summary of Deposits (SOD) data. Shows how an institution's branches and deposits are distributed across metropolitan statistical areas (MSAs), providing a market-by-market breakdown of branch count, deposit totals, and percentage of the institution's total deposits. Output includes: - Total branch count, deposits, and market count - Market-by-market breakdown sorted by deposits - Structured JSON for programmatic consumption Branches outside MSAs are grouped under "Non-MSA / Rural".

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_search_institutions
annotations: verified low

Use this when the user needs FDIC-insured institution search results by name, state, CERT, asset size, charter class, or regulatory status. Returns institution profile rows with pagination; use fdic://schemas/institutions for the full field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_get_institution
annotations: verified low

Use this when the user knows an exact FDIC Certificate Number and needs one institution profile. To discover a CERT first, call fdic_search_institutions or fdic_search.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
fdic_market_share_analysis
annotations: verified low

Analyze deposit market share and concentration for an MSA or city market using FDIC Summary of Deposits (SOD) data. Computes market share for all institutions in a geographic market, ranks them by deposits, and calculates the Herfindahl-Hirschman Index (HHI) for market concentration analysis per DOJ/FTC merger guidelines. Two entry modes: - MSA market: provide msa as the numeric MSABR code (e.g., msa: 19100 for Dallas-Fort Worth-Arlington, msa: 42660 for Seattle-Tacoma-Bellevue). Use fdic_search_sod to look up MSABR codes. - City market: provide city (branch city name, e.g., "Austin") and state (two-letter code, e.g., "TX"). Output includes: - Market overview with total deposits, institution count, and HHI classification - Optional highlighted institution showing rank and share (provide cert) - Top institutions ranked by deposit market share - Structured JSON for programmatic consumption Requires at least one of: msa (numeric MSABR code), or city + state.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_qbp_lite_data
annotations: verified low

Build chart-ready data for a concise QBP Lite report from reproducible public BankFind quarterly financials. Includes executive snapshot metrics, trend series, community-bank comparison data, source notes, and explicit exclusions for non-public or non-BankFind QBP items.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_analyze_securities_portfolio
annotations: verified low

Analyze securities portfolio size, composition, and concentration risk for an FDIC-insured institution. Output includes: - Securities relative to total assets and capital - MBS concentration within the securities portfolio - AFS/HTM breakdown (when available) - Risk signals for portfolio concentration and interest rate exposure - Structured JSON for programmatic consumption NOTE: This is an analytical tool based on public financial data. AFS/HTM breakdown is not currently available from the FDIC API.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_ubpr_analysis
annotations: verified low

Compute UBPR-equivalent ratio analysis for an FDIC-insured institution. Includes summary ratios (ROA, ROE, NIM, efficiency), loan mix, capital adequacy, liquidity metrics, and year-over-year growth rates. Ratios are computed from Call Report data and are UBPR-equivalent, not official FFIEC UBPR output. Output includes: - Summary ratios: ROA, ROE, NIM, efficiency ratio, pretax ROA - Loan mix: real estate, commercial, consumer, agricultural shares - Capital adequacy: Tier 1 leverage, Tier 1 risk-based, equity ratio - Liquidity: loan-to-deposit, core deposit ratio, brokered deposits, cash ratio - Year-over-year growth: assets, loans, deposits - Structured JSON for programmatic consumption NOTE: This is an analytical tool based on public financial data.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_analyze_credit_concentration
annotations: verified low

Analyze loan portfolio composition and credit concentration risk for an FDIC-insured institution. Computes CRE concentration relative to capital (per 2006 interagency guidance), loan-type breakdown, and flags concentration risks. Output includes: - Loan portfolio composition (CRE, C&I, consumer, residential, agricultural shares) - CRE and construction concentration relative to total capital - Loan-to-asset ratio - Concentration risk signals based on interagency guidance thresholds - Structured JSON for programmatic consumption NOTE: This is an analytical tool based on public financial data.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_holding_company_profile
annotations: verified low

Profile a bank holding company by grouping its FDIC-insured subsidiaries and aggregating financial metrics. Look up by holding company name or by any subsidiary's CERT number. Output includes: - Consolidated summary with total assets, deposits, and asset-weighted ROA/equity ratio - List of all FDIC-insured subsidiaries with individual metrics - Structured JSON for programmatic consumption NOTE: This is an analytical tool based on public financial data.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_search_sod
annotations: verified low

Use this when the user wants annual branch-level deposit data (SOD, as of June 30 each year) — branch deposits, MSAs, geographic distribution. Filter by CERT and/or year. See fdic://schemas/sod for the full field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_peer_group_analysis
annotations: verified low

Build a peer group for an FDIC-insured institution and rank it against peers on financial and efficiency metrics at a single report date. Three usage modes: - Subject-driven: provide cert and repdte — auto-derives peer criteria from the subject's asset size and charter class - Explicit criteria: provide repdte plus asset_min/asset_max, charter_classes, state, or raw_filter - Subject with overrides: provide cert plus explicit criteria to override auto-derived defaults Metrics ranked (fixed order): - Total Assets, Total Deposits, ROA, ROE, Net Interest Margin - Equity Capital Ratio, Efficiency Ratio, Loan-to-Deposit Ratio - Deposits-to-Assets Ratio, Non-Interest Income Share Rankings use competition rank (1, 2, 2, 4). Rank, denominator, and percentile all use the same comparison set: matched peers plus the subject institution. Output includes: - Subject rankings and percentiles (when cert provided) - Peer group medians - Peer list with CERTs (pass to fdic_compare_bank_snapshots for trend analysis) - Metric definitions with directionality metadata Override precedence: cert derives defaults, then explicit params override them.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_search_locations
annotations: verified low

Use this when the user wants branch/office locations for FDIC-insured institutions, filtered by CERT, state, city, county, metro area, or branch type. Returns address, coordinates, branch number, and service-type rows; see fdic://schemas/locations for the full field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_compare_bank_snapshots
annotations: verified low

Compare FDIC reporting snapshots across a set of institutions and rank the results by growth, profitability, or efficiency changes. This tool is designed for heavier analytical prompts that would otherwise require many separate MCP calls. It batches institution roster lookup, financial snapshots, optional office-count snapshots, and can also fetch a quarterly time series inside the server. Good uses: - Identify North Carolina banks with the strongest asset growth from 2021 to 2025 - Compare whether deposit growth came with branch expansion or profitability improvement - Rank a specific cert list by ROA, ROE, asset-per-office, or deposit-to-asset changes - Pull a quarterly trend series and highlight inflection points, streaks, and structural shifts Inputs: - state or certs: choose a geographic roster or provide a direct comparison set - start_repdte, end_repdte: Report Dates (REPDTE) in YYYYMMDD format — must be quarter-end dates (0331, 0630, 0930, 1231) - analysis_mode: snapshot or timeseries - institution_filters: optional extra institution filter when building the roster - active_only: default true - include_demographics: default true, adds office-count comparisons when available - sort_by: ranking field (default: asset_growth). All options: asset_growth, asset_growth_pct, dep_growth, dep_growth_pct, netinc_change, netinc_change_pct, roa_change, roe_change, offices_change, assets_per_office_change, deposits_per_office_change, deposits_to_assets_change - sort_order: ASC or DESC - limit: maximum ranked results to return Returns concise comparison text plus structured deltas, derived metrics, and insight tags for each institution.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_search_demographics
annotations: verified low

Use this when the user wants quarterly demographic and market-structure attributes (office counts, metro classification, county/territory codes, geographic reference data) for FDIC-insured institutions. Filter by CERT and/or REPDTE. See fdic://schemas/demographics for the full field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_analyze_bank_health
annotations: verified low

Produce a CAMELS-style analytical assessment for a single FDIC-insured institution using the public off-site proxy model. Scores five components — Capital (C), Asset Quality (A), Earnings (E), Liquidity (L), Sensitivity (S) — using published FDIC financial data and derives a weighted composite rating (1=Strong to 5=Unsatisfactory), plus a proxy model overall band (1.0–4.0 scale). Output includes: - Composite and component ratings with individual metric scores - Proxy model overall assessment band with capital classification - Management overlay assessment (inferred from public data patterns) - Trend analysis across prior quarters for key metrics - Risk signals flagging critical and warning-level concerns - Structured JSON for programmatic consumption (legacy + proxy fields) NOTE: Management (M) is omitted from component scoring — cannot be assessed from public data. Sensitivity (S) uses proxy metrics (NIM trend, securities concentration). This is a public off-site analytical proxy, not an official CAMELS rating.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_search_financials
annotations: verified low

Use this when the user wants quarterly Call Report data (balance sheet, income, capital, performance ratios) for FDIC-insured institutions. Filter by CERT and/or REPDTE plus optional ElasticSearch filters. See fdic://schemas/financials for the full 1,100+ field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_search_summary
annotations: verified low

Use this when the user wants annual financial-summary snapshots (assets, deposits, ROA, ROE, offices) for FDIC-insured institutions, filtered by CERT and/or year. See fdic://schemas/summary for the full field catalog.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_compare_peer_health
annotations: verified low

Compare CAMELS-style health scores across a group of FDIC-insured institutions. Three usage modes: - Explicit list: provide certs (up to 50) for a specific comparison set - State-wide scan: provide state to compare all active institutions in that state - Asset-based: provide asset_min/asset_max to compare institutions by size Optionally provide cert to highlight a subject institution's position in the ranking. Output: structuredContent includes {model, official_status, report_date, institutions, metrics, peer_context, proxy_summary, proxy, deprecations}. Institutions include proxy scores and name_source. When a subject cert is provided, metrics[] is the preferred subject-vs-peer array for new UI bindings and proxy_summary is a flattened subject proxy. peer_context.subject_percentiles is deprecated, remains for backward compatibility, and is targeted for removal only in a future coordinated major release. Auto-peer selection derives asset bands from report-date financials and broadens the cohort if fewer than 10 peers match. NOTE: Public off-site analytical proxy — not official supervisory ratings.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
fdic_analyze_funding_profile
annotations: verified low

Analyze deposit composition, wholesale funding reliance, and funding risk for an FDIC-insured institution. Output includes: - Deposit composition (core, brokered, foreign deposit shares) - Wholesale funding reliance and FHLB advances relative to assets - Cash ratio for near-term liquidity - Funding risk signals based on supervisory thresholds - Structured JSON for programmatic consumption NOTE: This is an analytical tool based on public financial data.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 102

info
Tool 'fdic_peer_group_analysis' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_locations' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_holding_company_profile' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_regional_context' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_show_bank_deep_dive' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_detect_risk_signals' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_failures' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_get_institution_failure' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_history' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_franchise_footprint' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_institutions' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_get_institution' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_market_share_analysis' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_qbp_lite_data' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_analyze_securities_portfolio' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_ubpr_analysis' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_analyze_credit_concentration' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_sod' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_compare_bank_snapshots' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_demographics' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_analyze_bank_health' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_financials' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_search_summary' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_compare_peer_health' annotations are consistent annotation_checker · 80%
info
Tool 'fdic_analyze_funding_profile' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-43fc-jf86-j433) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-4hjh-wcwx-xvwj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-777c-7fjr-54vf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-8hc4-vh64-cxmj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-jr5f-v2jv-69x6) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.0 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.27.4 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.8.1 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
high
Long unicode escape chain in jflamb-fdic-mcp-server-ad92f10/src/tools/regionalContext.ts:85 entropy_analyzer · 80%
high
Long unicode escape chain in jflamb-fdic-mcp-server-ad92f10/src/tools/regionalContext.ts:91 entropy_analyzer · 80%
high
Long unicode escape chain in jflamb-fdic-mcp-server-ad92f10/src/tools/regionalContext.ts:94 entropy_analyzer · 80%
high
Long unicode escape chain in jflamb-fdic-mcp-server-ad92f10/src/tools/regionalContext.ts:100 entropy_analyzer · 80%
info
package.json metadata manifest_parser · 100%
info
Tool: fdic_regional_context manifest_parser · 85%
info
Tool: fdic_show_bank_deep_dive manifest_parser · 85%
info
Tool: fdic_detect_risk_signals manifest_parser · 85%
info
Tool: fdic_search_failures manifest_parser · 85%
high
Permission: shell access detected permission_analyzer · 95%
info
Tool: fdic_get_institution_failure manifest_parser · 85%
info
Tool: fdic_search_history manifest_parser · 85%
info
Tool: fdic_franchise_footprint manifest_parser · 85%
info
Tool: fdic_search_institutions manifest_parser · 85%
info
Tool: fdic_get_institution manifest_parser · 85%
info
Tool: fdic_market_share_analysis manifest_parser · 85%
info
Tool: fdic_qbp_lite_data manifest_parser · 85%
info
Tool: fdic_analyze_securities_portfolio manifest_parser · 85%
info
Tool: fdic_search_demographics manifest_parser · 85%
info
Tool: fdic_ubpr_analysis manifest_parser · 85%
info
Tool: fdic_analyze_credit_concentration manifest_parser · 85%
info
Tool: fdic_holding_company_profile manifest_parser · 85%
info
Tool: fdic_search_sod manifest_parser · 85%
info
Tool: fdic_peer_group_analysis manifest_parser · 85%
info
Tool: fdic_search_locations manifest_parser · 85%
info
Tool: fdic_compare_bank_snapshots manifest_parser · 85%
info
Tool: fdic_analyze_bank_health manifest_parser · 85%
info
Tool: fdic_search_financials manifest_parser · 85%
info
Tool: fdic_search_summary manifest_parser · 85%
info
Tool: fdic_compare_peer_health manifest_parser · 85%
info
Tool: fdic_analyze_funding_profile manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (22) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 739 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%