io.github.theluckystrike/exchange-fx
MCPB · CURRENCY.MCPB · SCANNED SEP 20
FX and exchange rate lookups plus currency conversion, from the European Central Bank. No API key.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security23
- Malware scan not yet available for this package.Unverified
- Known CVEs were checked across the 96 of 96 dependencies we could resolve, so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 13 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability87
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1210 tokens (~110/item across 11 items; 10 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management43
- Stability observed for 13 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 90% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
mcpb · currency.mcpb
Download bundleEvery change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +4
- Stability: unverified → 0.23 ▲ functional
- 7 Sept 26 49
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed mcpb/https://github.com/theluckystrike/mcp-servers/releases/download/v0.21.0/currency.mcpb@0.21.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | mcpb |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
cache_status Rate cache status ~42
What is cached on this machine, how old it is, and when it will next be refreshed. Answer this before trusting a rate on a machine that has been offline.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
convert Convert an amount ~244
Call this tool to convert an amount between any two ECB-quoted currencies, today or on a past date. Returns the converted amount, the cross rate to 6 decimals, the rounding applied and the rate date used.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount in major units of the from currency, e.g. 100 or 12.34 |
| date | string | – | ISO date YYYY-MM-DD. Omit for the latest published rate. A weekend or TARGET holiday falls back to the last rate published on or before it, and the answer says so. A date older than the free 90-day w… |
| from | string | yes | Currency the amount is in. Cross rates go through the euro, the only pair the ECB publishes |
| to | string | – | Currency to convert into; defaults to the shared business profile's default_currency, so you are never asked what currency you invoice in. The result is rounded once, at the end, to this currency's o… |
No output schema declared.
No examples provided.
convert_many Convert one amount into several currencies ~61
One amount, one source currency, many targets, all off the same ECB rate date. Each result is rounded to that target's own minor units.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | – |
| from | string | yes | – |
| to | array | yes | Target currencies |
No output schema declared.
No examples provided.
currencies_list Currencies the ECB quotes ~44
Every currency in the ECB daily reference set, with its rate against the euro and the number of decimal places it is rounded to. Anything not on this list cannot be converted here.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
fx_rates_for FX rates in the shape expense-tracker wants ~160
Call this tool when a rebill or an invoice spans more than one currency, instead of asking the user for rates. Returns the fx_rates object expense_to_invoice takes, plus the rate date to write on the invoice.
| Name | Type | Req | Description |
|---|---|---|---|
| currencies | array | yes | The other currencies present, e.g. ["EUR", "GBP"]. Direction: each returned rate means 1 unit of that key = X units of the target, so {"EUR": 1.08} is 1 EUR = 1.08 of the target. The target needs no… |
| target | string | – | The currency the invoice will be issued in; defaults to the shared business profile's default_currency. Pass it on as target_currency alongside the fx_rates object |
No output schema declared.
No examples provided.
license_activate Activate license ~42
Activate a Pro license key (format MCPL1.xxx.yyy). Verified offline and saved locally.
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | License key from the checkout confirmation page |
No output schema declared.
No examples provided.
license_status License status ~23
Show whether this server runs in free or Pro mode and where to upgrade.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
rate_history Rate history for a pair ~213
Call this tool for the ECB rate of one currency pair across a window. Returns one row per published day plus the min, max, average and the change. A window wider than the free 90 days is shortened, not refused.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Trailing window in calendar days, default 30. Only TARGET business days carry a rate, so 30 days holds about 21 rows. Free reads up to 90 days back; Pro reads the whole series back to 1999-01-04 |
| from | string | yes | Base currency of the pair |
| from_date | string | – | ISO date, inclusive. Overrides days. Free is limited to the last 90 days |
| max_rows | integer | – | Cap the table, default 200. min/max/avg still cover the whole window |
| to | string | yes | Quote currency of the pair. Each row is 1 from = X to |
| to_date | string | – | ISO date, inclusive, default today |
No output schema declared.
No examples provided.
rate_on Rate on a given date ~231
Call this tool for the ECB rate of one pair on one date. Returns both directions and the rate date, so a reciprocal is never reported as the published figure. A date beyond the free window is shortened, never refused.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | yes | ISO date YYYY-MM-DD. If the ECB published nothing that day - every weekend, 1 January, Good Friday, Easter Monday, 1 May, 25 and 26 December - the last rate published on or before it is returned and… |
| from | string | yes | Base currency. The ECB quotes every currency per 1 euro, so "the ECB rate for USD" is from EUR to USD, not the other way round; invert only if the user asked for the inverse |
| to | string | yes | Quote currency. The rate returned is 1 from = X to |
No output schema declared.
No examples provided.
rates_latest Latest ECB reference rates ~129
Call this tool for the most recent European Central Bank daily reference rates, re-expressed against any base. Returns the rates, the ECB rate date they belong to, and how old the local cache is.
| Name | Type | Req | Description |
|---|---|---|---|
| base | string | – | Base currency; defaults to the shared business profile's default_currency, else EUR. A rate of 1.0812 for USD means 1 base = 1.0812 USD. Cross rates go through the euro, the only pair the ECB publish… |
| quotes | array | – | Only these currencies, at most 200. Omit for all of them |
No output schema declared.
No examples provided.
What is the io.github.theluckystrike/exchange-fx MCP server?
io.github.theluckystrike/exchange-fx is an MCP server listed in the public MCP registry as io.github.theluckystrike/exchange-fx. FX and exchange rate lookups plus currency conversion, from the European Central Bank. No API key. This page covers its MCPB bundle (https://github.com/theluckystrike/mcp-servers/releases/download/v0.21.0/currency.mcpb).
Is the io.github.theluckystrike/exchange-fx MCP server safe to use?
io.github.theluckystrike/exchange-fx scores 55 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.theluckystrike/exchange-fx MCP server expose?
io.github.theluckystrike/exchange-fx exposes 10 tools: rates_latest, convert, convert_many, fx_rates_for, rate_history, and 5 more. Their descriptions and schemas cost roughly 1,189 tokens of context every time the server is loaded.
What licence is the io.github.theluckystrike/exchange-fx MCP server under?
io.github.theluckystrike/exchange-fx declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.