FolioFact

REMOTE · FOLIOFACT.COM · SCANNED AUG 5

Read-only value-investing fund, holdings, financial, options, and insider research.

Available components

71 71 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security80

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail

Transport & Reachability100

Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass

Schema Quality & AI Usability70

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 1055 tokens (~81/item across 13 items; 13 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management3

Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities100

Implements a current MCP spec version (2026-07-28).Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · foliofact.com

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http com-foliofact-foliofact https://foliofact.com/mcp

# ~/.codex/config.toml

[mcp_servers.com-foliofact-foliofact]
url = "https://foliofact.com/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-foliofact-foliofact": {
      "type": "remote",
      "url": "https://foliofact.com/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add com-foliofact-foliofact --url https://foliofact.com/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  com-foliofact-foliofact:
    url: "https://foliofact.com/mcp"

// mcp.json

{
  "mcpServers": {
    "com-foliofact-foliofact": {
      "type": "http",
      "url": "https://foliofact.com/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

5 Aug 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: 610 → 1055 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- New tool “compare_stocks” functional
- New tool “stock_earnings” functional
- New tool “stock_financials” functional
- New tool “stock_insiders” functional
- New tool “stock_options” functional
4 Aug 26 71

First indexed and scored.

Show 1 earlier entry Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Aug 2026 · Probed https://foliofact.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=foliofact.com	CN=YE1,O=Let's Encrypt,C=US	28 Jun 2026	26 Sept 2026	ECDSA 256	ECDSA-SHA384	5f1372ae2ff26b9d8add8a12001930331d7
SANs: foliofact.com
CN=YE1,O=Let's Encrypt,C=US (CA)	CN=Root YE,O=ISRG,C=US	3 Sept 2025	2 Sept 2028	ECDSA 384	ECDSA-SHA384	5ddd70dd31f801c85c186a7a04b80afe
CN=Root YE,O=ISRG,C=US (CA)	CN=ISRG Root X2,O=Internet Security Research Group,C=US	13 May 2026	2 Sept 2032	ECDSA 384	ECDSA-SHA384	872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA)	CN=ISRG Root X1,O=Internet Security Research Group,C=US	13 May 2026	2 Sept 2032	ECDSA 384	SHA256-RSA	6c8f1dc727c7117f7baf853ac980f9cd

DNSSEC insecure

Validation of foliofact.com. — Not signed

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
com.	present	19718	13	Verified
foliofact.com.	absent			Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation

Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result	No authorisation required
HTTP status	200

Header	Value
strict-transport-security	max-age=63072000; includeSubDomains
content-security-policy	default-src 'self'; font-src 'self' https: data: https://fonts.gstatic.com https://cdn.fontshare.com; img-src 'self' https: data:; object-src 'none'; script-src 'self' https://www.clarity.ms https://.clarity.ms 'nonce-q19gYevVSqAKai1ZLdsT3A=='; style-src 'self' https: 'unsafe-inline' https://fonts.googleapis.com https://api.fontshare.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://accounts.google.com https://checkout.stripe.com https://billing.stripe.com https://claude.ai https://claude.com https://chatgpt.com https://www.cursor.com cursor: https://vscode.dev https://insiders.vscode.dev http://127.0.0.1: http://localhost:* http://[::1]:; connect-src 'self' https: wss://foliofact.com wss://www.foliofact.com https://.clarity.ms
x-content-type-options	nosniff
x-frame-options	SAMEORIGIN
referrer-policy	strict-origin-when-cross-origin

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://foliofact.com/mcp	Verified	200
http (plaintext)	http://foliofact.com/mcp	HTTPS enforced	301	https://foliofact.com/mcp

MCP tools — 13 exposed · ~744 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

compare_stocks Compare stocks side by side ~65

Aligned multi-stock comparison: valuation, latest financial point, fund conviction, and insider activity. Requires FolioFact Pro.

Input Output Examples

Name	Type	Req	Description
insider_window	string	—	Insider activity window.
tickers	string	yes	Comma-separated tickers (2–6, dots allowed).

Name	Type	Req	Description
columns	array	yes	—
insider_window	string	yes	—
insider_window_label	string	yes	—
provenance	object	yes	—
submitted_tickers	string	yes	—
tickers	array	yes	—
unknown_tickers	array	yes	—

No examples provided.

fetch_page Fetch a public page ~90

Fetches an allowlisted public page as markdown/text: published blog posts (/blog/:slug), static pages (e.g. /agents, /api-docs, /about), and the agent discovery doc (/llms.txt).

Input Output Examples

Name	Type	Req	Description
path	string	yes	Public path, e.g. /blog/how-to-read-a-13f-without-overreading-it, /agents, or /llms.txt.

Name	Type	Req	Description
path	string	yes	—
provenance	object	yes	—
text	string	yes	—
title	string	—	—

No examples provided.

fund_history Fund filing history ~36

Quarter-by-quarter filing history and a summary (turnover, concentration, favorites).

Input Output Examples

Name	Type	Req	Description
slug	string	yes	Fund slug (URL identifier).

Name	Type	Req	Description
fund	object	yes	—
provenance	object	yes	—
quarters	array	yes	—
summary	object	yes	—

No examples provided.

fund_holdings Fund portfolio holdings ~33

A fund's current portfolio positions with quarter-over-quarter change.

Input Output Examples

Name	Type	Req	Description
slug	string	yes	Fund slug (URL identifier).

Name	Type	Req	Description
fund	object	yes	—
holdings	array	yes	—
provenance	object	yes	—
quarter	string\|null	yes	—
total_value	integer	yes	—

No examples provided.

get_fund Get a tracked fund ~30

One fund's latest filing and its investors.

Input Output Examples

Name	Type	Req	Description
slug	string	yes	Fund slug (URL identifier).

Name	Type	Req	Description
filing	—	yes	—
fund	object	yes	—
investors	array	yes	—
portfolio	object	yes	—
provenance	object	yes	—

No examples provided.

get_investor Get an investor ~39

One investor's portfolio links (funds they run or back) and featured fund.

Input Output Examples

Name	Type	Req	Description
slug	string	yes	Investor slug (URL identifier).

Name	Type	Req	Description
featured_fund	—	yes	—
investor	object	yes	—
portfolios	array	yes	—
provenance	object	yes	—

No examples provided.

get_stock Get a held stock ~44

One company as held by tracked funds: holders, values, and last-quarter moves.

Input Output Examples

Name	Type	Req	Description
ticker	string	yes	Stock ticker (dots allowed, e.g. BRK.A).

Name	Type	Req	Description
latest_earnings	—	yes	—
name	string\|null	yes	—
positions	array	yes	—
provenance	object	yes	—
single_class	boolean	yes	—
ticker	string	yes	—
total_value	integer	yes	—

No examples provided.

insider_feed Insider transaction feed ~105

Recent Form 4/5 insider transactions across all held stocks, newest first. Filterable by transaction type and owner. Page 2+ requires FolioFact Pro.

Input Output Examples

Name	Type	Req	Description
dir	string	—	Sort direction.
filter	string	—	Transaction type filter.
page	integer	—	Page number (deep pages require Pro).
per_page	integer	—	Rows per page.
q	string	—	Owner name query.
sort	string	—	Sort column.

Name	Type	Req	Description
coverage_on	string\|null	yes	—
dir	string	yes	—
filter	string	yes	—
pagination	object	yes	—
provenance	object	yes	—
query	string	yes	—
sort	string	yes	—
transactions	array	yes	—

No examples provided.

search Search funds, stocks, and insiders ~72

Bounded cross-domain search: funds by name, stocks by ticker/name, and insider transactions by owner. The same scopes the web search uses. A blank or missing query returns empty buckets, mirroring GET /api/v1/search.

Input Output Examples

Name	Type	Req	Description
query	string	—	Search query (fund names, tickers, insider names).

Name	Type	Req	Description
provenance	object	yes	—
query	string	yes	—
results	object	yes	—

No examples provided.

stock_earnings Stock earnings analysis ~99

The latest cited earnings report for one stock. Teasers are public. Set include_full=true for the complete evidence-linked report; that content requires FolioFact Pro.

Input Output Examples

Name	Type	Req	Description
include_full	boolean	—	Request full Pro analysis. Defaults to true for Pro callers and false otherwise.
period	string	—	Optional stable report slug, for example 2026-03-31-quarter.
ticker	string	yes	Stock ticker (dots allowed).

Name	Type	Req	Description
access	string	yes	—
name	string\|null	yes	—
provenance	object	yes	—
report	—	yes	—
ticker	string	yes	—

No examples provided.

stock_financials Stock financial statements and valuation ~55

Financial statements (yearly and quarterly) and the valuation summary (enterprise value, FCF/EV and OCF/EV yields). Requires FolioFact Pro.

Input Output Examples

Name	Type	Req	Description
ticker	string	yes	Stock ticker (dots allowed).

Name	Type	Req	Description
name	string\|null	yes	—
provenance	object	yes	—
series	object	yes	—
summary	object	yes	—
ticker	string	yes	—

No examples provided.

stock_insiders Stock insider transactions ~39

Recent Form 4/5 insider transactions for one company. Requires FolioFact Pro.

Input Output Examples

Name	Type	Req	Description
ticker	string	yes	Stock ticker (dots allowed).

Name	Type	Req	Description
coverage_on	string\|null	yes	—
name	string\|null	yes	—
provenance	object	yes	—
ticker	string	yes	—
transactions	array	yes	—

No examples provided.

stock_options Stock options-market snapshot ~37

Daily 30-day implied volatility history for one company. Requires FolioFact Pro.

Input Output Examples

Name	Type	Req	Description
ticker	string	yes	Stock ticker (dots allowed).

Name	Type	Req	Description
expected_reading_date	string	yes	—
history	array	yes	—
latest	—	yes	—
name	string\|null	yes	—
provenance	object	yes	—
stale	boolean	yes	—
ticker	string	yes	—

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

4 Aug 5 Aug