# Apex (smartapex.uk) AI Component Card Store

> Run verified read-only code tools: quant diagnostics + agent-ops preflight, no source exposure.

- name: io.github.mickeyappol-create/apex
- version: 1.0.2
- connection class: R0 (autonomous)
- trust: 89/100
- quality: 85/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.mickeyappol-create%2Fapex
- tools: https://api.protogrid.dev/v1/servers/io.github.mickeyappol-create%2Fapex/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "apex": {
      "type": "http",
      "url": "https://smartapex.uk/api/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 98
- freshness: 65
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-94% ~updated-106d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 85/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 23 of 24 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: apex_get_card (destructiveHint, idempotentHint); apex_run_deflated_sharpe (destructiveHint, idempotentHint); apex_run_semver_sort (destructiveHint, idempotentHint); …
- pass `tools.token_cost`: about 4,675 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 24, about 4,675 tokens to load them all
- tool set hash: 958d41088e89dd9a4dd3de4eb90851ef
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.mickeyappol-create/apex.svg)](https://protogrid.dev/servers/io.github.mickeyappol-create/apex)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://smartapex.uk/api/mcp (streamable-http, auth none, reachable true, uptime30d 0.9380531)

## Packages

_none_

## Tools (24)

- `apex_get_card`: Read one Target5 tool card plus its verification report. Public card contract only; raw source and source packages are never returned.
- `apex_query_cards`: Find Target5 tool cards by query, capability, tags, tier, or interface. Public reference data only; not an instruction hierarchy.
- `apex_query_dataset`: Query the free bounded stillme dataset sample layer. Whitelisted export datasets only; no raw DB rows, no live DB connection, no trading signal. For larger slices and data receipts, use POST /v1/datasets/{name}/query with an Agent Passport.
- `apex_run_agent_api_contract_diff`: Run the allowlisted permissionless bounded API contract diff over supplied before/after endpoint lists. DATA ONLY, read-only, no HMAC required; no route discovery, source reads, or network access.
- `apex_run_agent_data_profile`: Profile supplied tabular rows (shape, nulls, types, numeric ranges, sensitive-name hints) without echoing raw values. DATA ONLY, read-only, no HMAC required, no network access.
- `apex_run_agent_dockerfile_lint`: Static best-practice lint over supplied Dockerfile text: unpinned bases, curl-pipe-shell, baked-in secrets, root user, ADD misuse, SSH exposure, apt hygiene, missing HEALTHCHECK. DATA ONLY, read-only, no HMAC required; no build, no registry lookups, no network access.
- `apex_run_agent_license_policy_check`: Classify supplied dependency licenses into PASS/REVIEW/BLOCK buckets using SPDX-style identifiers. DATA ONLY, read-only, no HMAC required; embedded policy table only, no registry lookups or network access. A release gate, not legal advice.
- `apex_run_agent_log_triage`: Redact and summarize supplied logs into severity, repeated failure patterns, and short safe samples; secret values never leave the redactor. DATA ONLY, read-only, no HMAC required, no network access.
- `apex_run_agent_release_readiness_gate`: Aggregate caller-supplied boolean release-check declarations into PASS/WATCH/BLOCK. Does not run CI, inspect files, verify the declarations, or authorize publication.
- `apex_run_agent_secret_scanner`: Run the allowlisted permissionless bounded secret scanner over supplied text/file content. DATA ONLY, read-only, no HMAC required; returns redacted findings, hashes, and line numbers only, never raw secret values.
- `apex_run_alphalens_factor_research`: Run the allowlisted permissionless bounded alphalens-style factor research wrapper over supplied factor rows. Pure TS reimplementation of selected OSS alphalens-reloaded 0.4.5 routines. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.
- `apex_run_backtrader_engine`: Run the allowlisted permissionless bounded backtrader-style single-asset backtest engine over supplied OHLCV bars and declarative strategy rules. Pure TS reimplementation of a narrow OSS backtrader 1.9.78.123 subset. DATA ONLY, read-only, no HMAC required, no broker adapters, no network, no orders, no wallet/account access.
- `apex_run_btc_gate`: Advisory market-regime gate: returns ALLOW or BLOCK plus move_pct from current vs reference price and a drop threshold. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice.
- `apex_run_deflated_sharpe`: Run the allowlisted permissionless bounded deflated-sharpe diagnostic. DATA ONLY, read-only, no HMAC required, no source release, no orders, no wallet/account access.
- `apex_run_dynamic_penalty`: Advisory cooldown and size-penalty hints from a recent loss streak: returns size_multiplier, cooldown_sec, and severity. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice.
- `apex_run_empyrical_metrics`: Run the allowlisted permissionless bounded empyrical-style metrics calculator over supplied returns. Pure TS reimplementation of OSS empyrical 0.5.5 metric conventions. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.
- `apex_run_kelly_sizer`: Advisory fractional Kelly sizing math from supplied win rate and average win/loss facts. DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not financial advice.
- `apex_run_pandas_market_calendars`: Run the allowlisted permissionless bounded pandas_market_calendars 5.4.0 calendar wrapper over supplied calendar/date parameters. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access. Output declares data_as_of 5.4.0.
- `apex_run_pyfolio_tearsheets`: Run the allowlisted permissionless bounded pyfolio-reloaded 0.9.9 tear-sheet core over supplied dated returns. DATA ONLY, read-only, no HMAC required, no plots, no network, no orders, no wallet/account access.
- `apex_run_regime_hurst`: Pure regime classifier over supplied prices: returns Hurst estimate and mean_reverting/random_walk/trending label. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.
- `apex_run_semver_sort`: Sort supplied version tags ('v1.9.0' or '1.9.0') in NUMERIC version order (v1.9.0 before v1.70.0 — which a lexical sort gets wrong). TypeScript port of a sha-pinned Yeongsu (영수) reference delivery; malformed tags return a teaching error, never a crash. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.
- `apex_run_strategy_gatekeeper`: Composite advisory gate over supplied statistics: CI lower bound, effect size, slippage improvement, sample depth, and Holm/BH corrected p-values. DATA ONLY, read-only, no HMAC required, no orders.
- `apex_run_zero_mfe_timeout`: Advisory exit check for stagnant positions: returns HOLD or EXIT_TIMEOUT from seconds_open and max favorable excursion. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice.
- `apex_submit_review`: Submit a safe usage review tied to an existing Apex verification receipt. Permissionless bounded receipts need only the receipt. Verified receipts require signed Agent Passport request headers with review intent and asset:review capability; agent_id alone is not authentication. Sign the full JSON-RPC body and API-visible POST /mcp path, including through Target5 /api/mcp. Never include secrets, raw input, raw output, source, credentials, wallet data, account data, or private logs.