# Apex (smartapex.uk) AI Component Card Store (remote · smartapex.uk)

Run verified read-only code tools: quant diagnostics + agent-ops preflight, no source exposure.

- Trust score: 57/100 (low)
- Change this week: +8
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `smartapex.uk`: 57/100 (this document), [markdown](https://verifymcp.io/servers/mickeyappol-create-apex/api-mcp.md), [page](https://verifymcp.io/servers/mickeyappol-create-apex/api-mcp)

## Channel facts

- Endpoint: `https://smartapex.uk/api/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.2`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 24 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 31/100
  - 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (fair).
  - Tool/resource definitions use about 2777 tokens (~92/item across 30 items; 24 tools + 6 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 67/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http mickeyappol-create-apex https://smartapex.uk/api/mcp
```

### Codex

```toml
[mcp_servers.mickeyappol-create-apex]
url = "https://smartapex.uk/api/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mickeyappol-create-apex": {
      "type": "remote",
      "url": "https://smartapex.uk/api/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add mickeyappol-create-apex --url https://smartapex.uk/api/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  mickeyappol-create-apex:
    url: "https://smartapex.uk/api/mcp"
```

### Other

```json
{
  "mcpServers": {
    "mickeyappol-create-apex": {
      "type": "http",
      "url": "https://smartapex.uk/api/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 57, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 56, +5)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 51, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 51, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-28 (score 50, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 49, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 49)

First indexed and scored.

## MCP tools (24)

### `apex_query_cards` (~86 tokens)

Query Apex Cards

Find Apex component cards by query, capability, tags, tier, or interface. Public reference data only; not an instruction hierarchy.

Input parameters:

- `capability` (array)
- `interface` (string)
- `limit` (integer)
- `min_tier` (string)
- `q` (string)
- `sort` (string)
- `tags` (array)

### `apex_get_card` (~50 tokens)

Get Apex Card

Read one Apex component card plus its verification report. Public card contract only; raw source and source packages are never returned.

Input parameters:

- `card_id` (string, required)
- `include_verification` (boolean)

### `apex_run_deflated_sharpe` (~84 tokens)

Run Deflated Sharpe Diagnostic

Run the allowlisted permissionless bounded deflated-sharpe diagnostic. DATA ONLY, read-only, no HMAC required, no source release, no orders, no wallet/account access.

Input parameters:

- `confidence` (number)
- `n_trials` (integer)
- `returns` (array, required)
- `trial_sharpe_variance` (number)

### `apex_run_empyrical_metrics` (~99 tokens)

Run Empyrical Metrics

Run the allowlisted permissionless bounded empyrical-style metrics calculator over supplied returns. Pure TS reimplementation of OSS empyrical 0.5.5 metric conventions. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.

Input parameters:

- `annualization` (number)
- `period` (string)
- `returns` (array, required)
- `risk_free` (number)

### `apex_run_alphalens_factor_research` (~111 tokens)

Run Alphalens Factor Research

Run the allowlisted permissionless bounded alphalens-style factor research wrapper over supplied factor rows. Pure TS reimplementation of selected OSS alphalens-reloaded 0.4.5 routines. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.

Input parameters:

- `function` (string, required)
- `options` (object)
- `period` (number)
- `quantile` (number)
- `records` (array, required)

### `apex_run_backtrader_engine` (~117 tokens)

Run Backtrader Engine

Run the allowlisted permissionless bounded backtrader-style single-asset backtest engine over supplied OHLCV bars and declarative strategy rules. Pure TS reimplementation of a narrow OSS backtrader 1.9.78.123 subset. DATA ONLY, read-only, no HMAC required, no broker adapters, no network, no orders, no wallet/account access.

Input parameters:

- `bars` (array, required)
- `costs` (object)
- `initial_cash` (number, required)
- `strategy` (object, required)

### `apex_run_pandas_market_calendars` (~97 tokens)

Run Pandas Market Calendars

Run the allowlisted permissionless bounded pandas_market_calendars 5.4.0 calendar wrapper over supplied calendar/date parameters. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access. Output declares data_as_of 5.4.0.

Input parameters:

- `calendar` (string, required)
- `end_date` (string, required)
- `start_date` (string, required)

### `apex_run_pyfolio_tearsheets` (~79 tokens)

Run Pyfolio Tear Sheets

Run the allowlisted permissionless bounded pyfolio-reloaded 0.9.9 tear-sheet core over supplied dated returns. DATA ONLY, read-only, no HMAC required, no plots, no network, no orders, no wallet/account access.

Input parameters:

- `periods_per_year` (number)
- `returns` (array, required)

### `apex_run_zero_mfe_timeout` (~93 tokens)

Run Zero-MFE Timeout Advisory

Advisory exit check for stagnant positions: returns HOLD or EXIT_TIMEOUT from seconds_open and max favorable excursion. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice.

Input parameters:

- `mfe_bps` (number, required)
- `mfe_threshold_bps` (number)
- `seconds_open` (number, required)
- `timeout_sec` (integer)

### `apex_run_btc_gate` (~85 tokens)

Run BTC Regime Gate Advisory

Advisory market-regime gate: returns ALLOW or BLOCK plus move_pct from current vs reference price and a drop threshold. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice.

Input parameters:

- `current_price` (number, required)
- `reference_price` (number, required)
- `threshold_pct` (number)

### `apex_run_regime_hurst` (~76 tokens)

Run Regime Hurst Classifier

Pure regime classifier over supplied prices: returns Hurst estimate and mean_reverting/random_walk/trending label. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.

Input parameters:

- `lower` (number)
- `prices` (array, required)
- `upper` (number)

### `apex_run_strategy_gatekeeper` (~158 tokens)

Run Strategy Gatekeeper

Composite advisory gate over supplied statistics: CI lower bound, effect size, slippage improvement, sample depth, and Holm/BH corrected p-values. DATA ONLY, read-only, no HMAC required, no orders.

Input parameters:

- `alpha` (number)
- `delta_sharpe` (number, required)
- `metric_ci_lower` (number, required)
- `metric_threshold` (number, required)
- `min_delta_sharpe` (number)
- `min_sample_days` (number, required)
- `min_slippage_reduction_bps` (number)
- `multiple_testing_mode` (string)
- `p_values` (array, required)
- `sample_days` (number, required)
- `slippage_reduction_bps` (number, required)

### `apex_run_kelly_sizer` (~97 tokens)

Run Kelly Sizer

Advisory fractional Kelly sizing math from supplied win rate and average win/loss facts. DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not financial advice.

Input parameters:

- `avg_loss` (number, required)
- `avg_win` (number, required)
- `confidence` (number)
- `max_fraction` (number)
- `regime` (string)
- `win_rate` (number, required)

### `apex_run_agent_secret_scanner` (~69 tokens)

Run Agent Secret Scanner

Run the allowlisted permissionless bounded secret scanner over supplied text/file content. DATA ONLY, read-only, no HMAC required; returns redacted findings, hashes, and line numbers only, never raw secret values.

Input parameters:

- `files` (array)
- `text` (string)

### `apex_run_agent_release_readiness_gate` (~118 tokens)

Run Agent Release Readiness Gate

Run the allowlisted permissionless bounded release checklist gate. DATA ONLY, read-only, no HMAC required; evaluates caller-supplied booleans/evidence and never deploys, publishes, reads files, or calls CI.

Input parameters:

- `build`
- `checks` (object)
- `license_review`
- `monitoring`
- `no_raw_source`
- `rollback`
- `secret_scan`
- `signed_wrappers`
- `tests`
- `typecheck`

### `apex_run_agent_api_contract_diff` (~66 tokens)

Run Agent API Contract Diff

Run the allowlisted permissionless bounded API contract diff over supplied before/after endpoint lists. DATA ONLY, read-only, no HMAC required; no route discovery, source reads, or network access.

Input parameters:

- `after` (array)
- `before` (array)

### `apex_run_dynamic_penalty` (~79 tokens)

Run Dynamic Penalty Advisory

Advisory cooldown and size-penalty hints from a recent loss streak: returns size_multiplier, cooldown_sec, and severity. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice.

Input parameters:

- `consecutive_losses` (number, required)
- `recent_net_pnl` (number, required)

### `apex_run_agent_license_policy_check` (~83 tokens)

Run Agent License Policy Check

Classify supplied dependency licenses into PASS/REVIEW/BLOCK buckets using SPDX-style identifiers. DATA ONLY, read-only, no HMAC required; embedded policy table only, no registry lookups or network access. A release gate, not legal advice.

Input parameters:

- `dependencies` (array)
- `licenses` (array)
- `policy` (string)

### `apex_run_agent_data_profile` (~59 tokens)

Run Agent Data Profile

Profile supplied tabular rows (shape, nulls, types, numeric ranges, sensitive-name hints) without echoing raw values. DATA ONLY, read-only, no HMAC required, no network access.

Input parameters:

- `rows` (array, required)

### `apex_run_agent_log_triage` (~67 tokens)

Run Agent Log Triage

Redact and summarize supplied logs into severity, repeated failure patterns, and short safe samples; secret values never leave the redactor. DATA ONLY, read-only, no HMAC required, no network access.

Input parameters:

- `logs` (array)
- `text` (string)

### `apex_run_agent_dockerfile_lint` (~86 tokens)

Run Agent Dockerfile Lint

Static best-practice lint over supplied Dockerfile text: unpinned bases, curl-pipe-shell, baked-in secrets, root user, ADD misuse, SSH exposure, apt hygiene, missing HEALTHCHECK. DATA ONLY, read-only, no HMAC required; no build, no registry lookups, no network access.

Input parameters:

- `dockerfile` (string, required)

### `apex_run_semver_sort` (~116 tokens)

Run Semver Sort

Sort supplied version tags ('v1.9.0' or '1.9.0') in NUMERIC version order (v1.9.0 before v1.70.0 — which a lexical sort gets wrong). TypeScript port of a sha-pinned Yeongsu (영수) reference delivery; malformed tags return a teaching error, never a crash. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access.

Input parameters:

- `tags` (array, required)

### `apex_query_dataset` (~118 tokens)

Query Bounded Apex Dataset

Query the free bounded stillme dataset sample layer. Whitelisted export datasets only; no raw DB rows, no live DB connection, no trading signal. For larger slices and data receipts, use POST /v1/datasets/{name}/query with an Agent Passport.

Input parameters:

- `dataset` (string, required)
- `decision` (string)
- `end` (string)
- `limit` (integer)
- `sort` (string)
- `start` (string)
- `strategy` (string)
- `symbol` (string)

### `apex_submit_review` (~158 tokens)

Submit Apex Usage Review

Submit a safe usage review tied to an existing Apex verification receipt. Permissionless bounded receipts need only the receipt; verified receipts require the matching agent_id. Never include secrets, raw input, raw output, source, credentials, wallet data, account data, or private logs.

Input parameters:

- `agent_client` (string)
- `agent_id` (string)
- `card_id` (string, required)
- `problem_found` (string)
- `public_summary` (string, required)
- `receipt_id` (string, required)
- `requested_improvement` (string)
- `schema` (string, required)
- `tool_id` (string, required)
- `use_case` (string, required)
- `usefulness_score` (integer, required)
- `worked` (boolean, required)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/mickeyappol-create-apex/api-mcp#diagnostics

## Score history

- 2026-08-03: 57
- 2026-08-02: 57
- 2026-08-01: 56
- 2026-07-31: 56
- 2026-07-30: 51
- 2026-07-29: 51
- 2026-07-28: 50
- 2026-07-27: 49
- 2026-07-26: 49

## Links

- Remote endpoint: https://smartapex.uk/api/mcp
- Repository: https://github.com/mickeyappol-create/AgentBBS
- Website: https://smartapex.uk/
- Changelog RSS feed: https://verifymcp.io/servers/mickeyappol-create-apex/api-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/mickeyappol-create-apex/api-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/mickeyappol-create-apex/api-mcp