{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T17:19:30.146Z","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api","markdownUrl":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api.md","server":{"slug":"com-stockfloc-fire-and-ice","name":"StockFloc Fire & Ice","registryName":"com.stockfloc/fire-and-ice","description":"Today's fire and ice stock movers and the Floc Heat Index, from the most visual stock watchlist.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api","type":"remote","identifier":"https://api.stockfloc.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api","version":"1.0.5","transport":null,"scoredAt":"2026-11-06T03:24:34.888Z"},"score":{"total":72,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-06","total":72},{"date":"2026-11-05","total":71},{"date":"2026-11-04","total":71},{"date":"2026-11-03","total":70},{"date":"2026-11-02","total":70},{"date":"2026-11-01","total":70},{"date":"2026-10-31","total":69},{"date":"2026-10-30","total":69},{"date":"2026-10-29","total":68},{"date":"2026-10-28","total":68},{"date":"2026-10-27","total":67},{"date":"2026-10-26","total":67},{"date":"2026-10-25","total":66},{"date":"2026-10-24","total":66},{"date":"2026-10-23","total":65},{"date":"2026-10-22","total":65},{"date":"2026-10-21","total":64}]},"categories":[{"name":"Endpoint Security","score":63,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.inconclusive","args":{"reason":"plaintext_status","status":"405"}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":71,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 405 tokens (~202/item across 2 items; 2 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"202","items":"2","tools":"2","tokens":"405","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":53,"verdict":"partial","reasons":["Stability observed for 16 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"16"}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 2 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 3 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"2"}},{"code":"toolsafety.manipulation_clean","args":{"units":"3","judged":"3"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":["HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement."],"malware":[],"components":[{"slug":"api","type":"remote","identifier":"https://api.stockfloc.com/mcp","withdrawn":false,"score":72,"current":true,"url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api","markdownUrl":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api.md"}],"facts":[{"label":"Endpoint","value":"https://api.stockfloc.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.5"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"get_market_heat","title":"Get the StockFloc market heat","description":"Today's StockFloc Floc Heat Index, a 0 to 100 daily market-breadth gauge (50 is neutral; above 50 the market ran hot, below 50 it froze), plus how many of the most-traded US stocks are on fire (up 10% or more) versus frozen (down 10% or more). Use this when someone asks how hot or cold the stock market is today, or how many stocks made big moves. US stocks only, delayed about 15 minutes; returns the index and counts, not prices.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":122},{"name":"get_hot_stocks","title":"Get today's fire and ice stocks","description":"Today's biggest US stock movers in StockFloc terms: stocks on fire (the largest gainers) and frozen (the largest losers), each with its percent change for the day. Use this when someone asks which stocks are on fire, frozen, or moving the most today. Returns up to 10 ticker symbols per side with percent change only: no prices and no quote for a specific ticker. Delayed about 15 minutes.","inputs":[{"name":"limit","type":"integer","required":false,"description":"How many per side (1 to 10). Default 5."},{"name":"side","type":"string","required":false,"description":"fire = top gainers, ice = top losers, both = both lists. Default both."}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":141}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T03:24:34.000Z","track":"remote","endpoint":"https://api.stockfloc.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=stockfloc.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-09T00:03:10Z","notAfter":"2027-01-07T01:02:52Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"api.stockfloc.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"stockfloc.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"inconclusive","label":"Inconclusive","status":405},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-21","recent":[{"id":"chg_01a1aee3-00da-7900-a4d6-8c7b08f6df0d","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a1aee3-00da-7900-a4d6-8c7b08f6df0d"},{"id":"chg_01a1a497-90fb-73fe-8f9a-3d18edcff6ee","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a1a497-90fb-73fe-8f9a-3d18edcff6ee"},{"id":"chg_01a19522-a40e-73f0-958f-7f23c8304949","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a19522-a40e-73f0-958f-7f23c8304949"},{"id":"chg_01a18ad3-411c-7e43-9f14-f95e50d8c5dd","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a18ad3-411c-7e43-9f14-f95e50d8c5dd"},{"id":"chg_01a18078-d4a3-7aef-b861-8032c9c73b64","kind":"score.total_changed","summary":"Trust score (67 → 68)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a18078-d4a3-7aef-b861-8032c9c73b64"},{"id":"chg_01a1762c-9408-798b-b04b-bf8a16eaabc5","kind":"score.total_changed","summary":"Trust score (66 → 67)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a1762c-9408-798b-b04b-bf8a16eaabc5"},{"id":"chg_01a16bdf-3918-7f0e-8a02-30b962ec7dd7","kind":"score.total_changed","summary":"Trust score (65 → 66)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a16bdf-3918-7f0e-8a02-30b962ec7dd7"},{"id":"chg_01a16191-d1ef-7941-8b93-53f8c0100fa3","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a16191-d1ef-7941-8b93-53f8c0100fa3"},{"id":"chg_01a16191-d1f0-726a-b012-3987f8e8c61e","kind":"score.total_changed","summary":"Trust score (64 → 65)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-22","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a16191-d1f0-726a-b012-3987f8e8c61e"},{"id":"chg_01a15ca1-7e1e-7dda-b5e6-95a6466cb0df","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api#chg-chg_01a15ca1-7e1e-7dda-b5e6-95a6466cb0df"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api","markdown":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api.md","changelogJson":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api/changelog.json","changelogRss":"https://verifymcp.io/servers/com-stockfloc-fire-and-ice/api.xml","external":[{"label":"Remote endpoint","href":"https://api.stockfloc.com/mcp"},{"label":"Website","href":"https://stockfloc.com/mcp/"}]}}