# com.ou-reports/just-signal

> Keyless MCP for Just Signal: live quotes, report publishing, scorecard, and Chophouse panel grades.

- name: com.ou-reports/just-signal
- version: 1.3.0
- connection class: R0 (autonomous)
- trust: 80/100 flags: no-repository
- quality: 77/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.ou-reports%2Fjust-signal
- tools: https://api.protogrid.dev/v1/servers/com.ou-reports%2Fjust-signal/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "just-signal": {
      "type": "http",
      "url": "https://www.ou-reports.com/api/mcp.php"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 85
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% ~updated-87d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 77/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-03-26; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_panel_grade (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_reports (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); publish_report (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 741 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: 67 (weight 15)

- pass `deps.known_vulns`: no known advisory in 98 resolved packages
- fail `deps.mcp_sdk_version`: @modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
- pass `deps.resolvable`: just-signal-mcp@1.3.0 resolved: 98 packages

- tools: 5, about 741 tokens to load them all
- tool set hash: 4a8fc77a7b4f22e834d52e5c16aa196d
- badge: [![protogrid quality](https://protogrid.dev/badge/com.ou-reports/just-signal.svg)](https://protogrid.dev/servers/com.ou-reports/just-signal)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- npm just-signal-mcp@1.3.0: resolved, 97 dependencies, MCP SDK @modelcontextprotocol/sdk 1.30.1
  - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.31.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://www.ou-reports.com/api/mcp.php (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

- npm just-signal-mcp@1.3.0

## Tools (5)

- `get_panel_grade`: The Investment Panel's read on one ticker: its Chophouse doneness grade (RAW..CHARRED, how much value is already cooked in) plus every seat's vote across 11 emulated investor lenses, with the registry verdict for context. The panel advises, the reader decides. Says so if the ticker is not plated yet.
- `get_scorecard`: Audit past signals: projected vs actual return for every grounded ticker, graded AHEAD / TRACKING / BEHIND, pro-rated by elapsed time.
- `get_stock_quote`: Live stock/ETF quote (price + % change) via Just Signal's market-data relay. Establishes a ticker's Day-0 baseline before projecting.
- `list_reports`: List recent Just Signal reports from the public library (newest first).
- `publish_report`: Ground, render, and PUBLISH a Just Signal briefing to the public library. Grounds each ticker's live Day-0 price and computes exact dollar targets from your % projections. Targets MUST be percentages ("+18%") or multiples ("2.5x"), never dollars. assetOrSector: "Name (TICKER)" or "(PRIVATE)" for relative basis. Open to community contributions: the server itself renders every report, and tokenless publishing is rate-limited per day.