Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "stackfacts": {
      "type": "http",
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    }
  }
}

claude mcp add --transport http stackfacts https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp

[mcp_servers.stackfacts]
url = "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "stackfacts": {
      "type": "remote",
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "stackfacts": {
      "type": "http",
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=stackfacts&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vZzVqb2lsbm1lZXA0bnR6M253ZXp4dDVkbXUuc3J2LnVzL21jcCJ9"
}

{
  "servers": {
    "stackfacts": {
      "type": "http",
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    }
  }
}

{
  "mcpServers": {
    "stackfacts": {
      "httpUrl": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    }
  }
}

extensions:
  "stackfacts":
    enabled: true
    name: "stackfacts"
    type: streamable_http
    uri: "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    timeout: 300

Quality 72 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene93 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations41 of 41 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
warn
tools.token_costabout 8,074 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes33 tool changes in 30 days
fail
stability.rug_pull3 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

41 tools, about 8,074 tokens to load them all · tool set f843811287e5 · tools last changed 2026-10-15 · checked 2026-10-21 01:38 UTC

Tool changes

2026-10-15stackfacts_tz_lookupadded
Get an IANA time zone (Europe/Berlin) or alias: current UTC offset, abbreviation, DST summary and backward-compatible names from tzdata.
2026-10-15stackfacts_bcp47_lookupadded
Get an IANA language tag (en-AU, zh-Hant) part by part: type, description, scope, deprecation and preferred value from the Language Subtag Registry.
2026-10-14stackfacts_validatechangedinput schema
2026-10-14stackfacts_lockfile_diffchangeddescription, input schema
before
Check npm or PyPI purl lists: version changes judged on advisories, KEV, licence; same version, other hash = hash_mismatch. Returns go, review or no_go.
after · 83% of words in common
Check npm or PyPI purl lists or raw lockfiles: upgrades judged on advisories, KEV, licence; same version, other hash = hash_mismatch. Returns go, review, no_go.
2026-10-14stackfacts_cve_searchchangeddescription
before
Find CVEs by keyword or package name in CISA KEV and OSV (not all of NVD), with KEV status, EPSS score, and CVSS v3 where an OSV advisory has one.
after · 93% of words in common
Find CVEs by keyword or package name in CISA KEV and OSV (not all of NVD), with KEV status and CVSS v3 where an OSV advisory has one.
2026-10-14stackfacts_cve_prioritizechangeddescription
before
Call before patching: rank up to 100 CVEs by CISA KEV status, then FIRST EPSS exploit probability score and percentile.
after · 64% of words in common
Call before patching: rank up to 100 CVEs by CISA KEV status, then CVSS base score.
2026-10-14stackfacts_control_lookupadded
Get one NIST SP 800-53 Rev 5 security control or enhancement by id (AC-2, AC-2(1)): title, statement, guidance, related controls and status.
2026-10-14stackfacts_port_lookupadded
Get the IANA service name, transport, description and reference for a port number from the IANA Service Name and Transport Protocol Port Number Registry.
2026-10-14stackfacts_domain_lookupadded
Get the public suffix, registrable domain and subdomain of a host name from the Mozilla Public Suffix List, with the matching rule and section.
2026-10-14stackfacts_capec_lookupadded
Get one MITRE CAPEC attack pattern by id: severity, likelihood, prerequisites, mitigations, related CWE and ATT&CK ids and MITRE link.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository

provenance55

liveness100

freshness100

hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-9d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp` streamable-http	none	yes	100%	711 ms	2025-11-25	2026-10-20

Tools (41)

`stackfacts_bcp47_lookup`read-only	Get an IANA language tag (en-AU, zh-Hant) part by part: type, description, scope, deprecation and preferred value from the Language Subtag Registry.
`stackfacts_capec_lookup`read-only	Get one MITRE CAPEC attack pattern by id: severity, likelihood, prerequisites, mitigations, related CWE and ATT&CK ids and MITRE link.
`stackfacts_control_lookup`read-only	Get one NIST SP 800-53 Rev 5 security control or enhancement by id (AC-2, AC-2(1)): title, statement, guidance, related controls and status.
`stackfacts_cve_lookup`read-only	Get any CVE: CISA KEV entry, CVSS score and patch priority, plus every OSV advisory aliased to it, with affected packages and fixed versions.
`stackfacts_cve_prioritize`read-only	Call before patching: rank up to 100 CVEs by CISA KEV status, then CVSS base score.
`stackfacts_cve_search`read-only	Find CVEs by keyword or package name in CISA KEV and OSV (not all of NVD), with KEV status and CVSS v3 where an OSV advisory has one.
`stackfacts_cwe_lookup`read-only	Get one MITRE CWE weakness by id (79 or CWE-79): name, status, description and MITRE link. From the CWE catalogue (v4.20); MITRE notice on every answer.
`stackfacts_domain_lookup`read-only	Get the public suffix, registrable domain and subdomain of a host name from the Mozilla Public Suffix List, with the matching rule and section.
`stackfacts_eol_check`read-only	Check runtimes and OS versions for EOL: is each still supported? Up to 50 product@version pairs, end-of-life date, support status; unknowns get suggestions.
`stackfacts_eol_cycle`read-only	Check if a version is still supported (is python 3.12 still supported?): one release cycle, its EOL (end-of-life) date, support status, LTS, latest patch.
`stackfacts_eol_image`read-only	Check a container image for EOL: is node:18-alpine still supported? Maps its runtime, Java and base OS to end-of-life date and support status.
`stackfacts_eol_product`read-only	List every release cycle of a product (Node.js, Python, Ubuntu…) and if it is still supported: EOL (end-of-life) date, support status, LTS, latest version.
`stackfacts_eol_snapshot`read-only	Download the signed EOL (end-of-life) snapshot (endoflife.date, MIT): support status of every product and cycle, still supported or not, plus its manifest.
`stackfacts_index`read-only	List the valid ids for free: end-of-life product names and aliases, or LLM provider/model ids, so a paid call never misses.
`stackfacts_kev_changes`read-only	List CVEs added to, removed from or changed in CISA KEV since a snapshot_id, so an agent can poll for newly exploited vulnerabilities.
`stackfacts_kev_check`read-only	Check up to 100 CVEs at once against CISA KEV (known exploited vulnerabilities); returns in_kev and the KEV details for each one.
`stackfacts_kev_lookup`read-only	Check if a CVE is actively exploited (CISA KEV): in_kev, date added, remediation due date, required action and known ransomware use.
`stackfacts_kev_snapshot`read-only	Download the full signed CISA KEV snapshot: every known exploited vulnerability, with a manifest to verify the sha256 and signature.
`stackfacts_keys`read-only	Get the Ed25519 public keys (JWK) that verify the signature on every answer and snapshot manifest.
`stackfacts_license_check`read-only	Call before adding a dependency: check SPDX licences or packages against your project licence and use, with a compatibility verdict per item.
`stackfacts_lockfile_diff`read-only	Check npm or PyPI purl lists or raw lockfiles: upgrades judged on advisories, KEV, licence; same version, other hash = hash_mismatch. Returns go, review, no_go.
`stackfacts_manifest`read-only	Get the signed manifest of a dataset's latest snapshot for free: snapshot_id, sha256, record count, source, licence and signature.
`stackfacts_models_changes`read-only	List LLM models added, removed or changed (price per million tokens, context window, model deprecation date) since a snapshot_id.
`stackfacts_models_cheapest`read-only	Find the cheapest model with tools and 128k context, or any limits you set: ranks the 10 cheapest LLMs by blended price per million tokens.
`stackfacts_models_estimate`read-only	Estimate the USD cost of an LLM call from input, output and cached token counts, exact to the micro-dollar, with the price lines used.
`stackfacts_models_lookup`read-only	Get an LLM model's price per million tokens (input, output, cached), context window, max output, capabilities and model deprecation date.
`stackfacts_models_snapshot`read-only	Download the full signed LLM model catalogue (LiteLLM + models.dev, MIT): prices, limits and capabilities, with a verifiable manifest.
`stackfacts_models_watch`read-only	Check LLMs for what changed since your last call: changed records (with today's price and limits), removals, deprecated or soon deprecated, with snapshot dates.
`stackfacts_osv_check`read-only	Check dependencies or a lockfile for vulnerable and malicious packages: up to 50 purls, or a package-lock, yarn.lock, requirements.txt or poetry.lock, on OSV.
`stackfacts_package_card`read-only	Get an npm or PyPI package's latest version, publish dates, deprecation or yank, SPDX licence, repository and runtime range.
`stackfacts_package_preflight`read-only	Call before installing an npm or PyPI package: latest or given version, licence, OSV vulns, CISA KEV CVEs, deprecation or yank. Returns ok, caution or block.
`stackfacts_port_lookup`read-only	Get the IANA service name, transport, description and reference for a port number from the IANA Service Name and Transport Protocol Port Number Registry.
`stackfacts_preflight`read-only	Call before installing a package an LLM suggested: one npm, PyPI or purl version against OSV, CISA KEV and EOL data. Returns ok, warn or block with reasons.
`stackfacts_preview`read-only	Preview a dataset for free: sample end-of-life products, newest CISA KEV entries, LLM prices, a package card or a licence verdict.
`stackfacts_stack_check`read-only	Check dependencies, runtimes and OS versions in one call: OSV for up to 50 purls, EOL for 50 product@version pairs, CISA KEV hits, suggestions for unknowns.
`stackfacts_stack_watch`read-only	Check dependencies, runtimes and OS versions for what changed since your last call: EOL passed or near, new OSV advisories, new CISA KEV hits. Returns a token.
`stackfacts_technique_lookup`read-only	Get one technique by id (T1055.011): name, tactics, platforms, description, mitigations, detection, data sources and link. MITRE ATT&CK v20.0; credited.
`stackfacts_try`read-only	Try a paid answer for free on a fixed example: nodejs end-of-life cycles, CVE-2021-44228 in CISA KEV, or openai/gpt-4o prices.
`stackfacts_tz_lookup`read-only	Get an IANA time zone (Europe/Berlin) or alias: current UTC offset, abbreviation, DST summary and backward-compatible names from tzdata.
`stackfacts_upgrade_delta`read-only	Check moving an npm or PyPI package from one version to another: advisories fixed or introduced, KEV, licence, runtime. Returns go, review or no_go.
`stackfacts_validate`read-only	Validate an id for free. Privacy: only an unknown EOL id is logged (access log, miss field); a 400 logs the input name, never its value. No other id is stored.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "us.srv.g5joilnmeep4ntz3nwezxt5dmu/stackfacts",
  "title": "Stack Facts",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.5.0",
  "websiteUrl": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/docs/mcp",
  "description": "Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap."
}