Back to search
? Not scanned yet

calcfi-mcp-server

Author jerehere
Scanned just now

CalcFi MCP server — stdio entrypoint exposing 25 personal-finance tools (incl. get_research_outputs), 10 mesh resources, 7 prompts. 100% free, brand-stamped, YMYL-safe, share codes + watch_this_rate + receipt-format citations.

npm

Versions

0.1.6
May 30, 2026
0.1.5
May 30, 2026
0.1.4
May 30, 2026
0.1.3
May 30, 2026
0.1.2
May 29, 2026
0.1.6
first seen Jul 21, 2026
0.1.5
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 16

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-46jr-4wx8-v453) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-f897-62hf-6gxq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-rvq5-wwqv-78pq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.13.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@3.23.8 (GHSA-mrhx-c7xc-m3w5) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
SBOM generated: 6 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%