QuantOracle

63 deterministic quantitative finance calculations via MCP. Options pricing, Greeks, implied volatility, exotic derivatives, risk metrics, portfolio optimiza...

This package appears to implement what it claims (an MCP server that maps an OpenAPI spec to 63 deterministic finance tools). Before installing or running: 1) Note the BACKEND_URL/port configuration — if you do not set BACKEND_URL, the code defaults to http://localhost:8001 (but SKILL.md/config mention api.quantoracle.dev / mcp.quantoracle.dev). That means the server you contact for tool definitions can change behavior based on your environment; review and set BACKEND_URL explicitly. 2) The code fetches openapi.json from BACKEND_URL at runtime; that remote API defines the tool schemas and endpoints — you should inspect that backend (or self-host it) if you need to ensure the tool definitions are safe and do not exfiltrate data. 3) A default WALLET_ADDRESS is baked into the code (likely for payments); it's not a secret but check it if you expect different billing behavior. 4) Run in an isolated/test environment first or override BACKEND_URL to a self-hosted backend if you need full network control. If you want, provide the fetched openapi.json or the truncated remainder of src/dist files and I can review the request/response handling and any forwarding/proxying logic in more detail.

Type: OpenClaw Skill Name: quantoracle Version: 2.1.0 The quantoracle skill bundle is a Model Context Protocol (MCP) server that provides 63 quantitative finance tools by acting as a proxy to a remote backend (api.quantoracle.dev). The implementation in src/index.ts and dist/index.js dynamically generates tool definitions from an OpenAPI spec and includes a transparent IP-based rate-limiting system with a documented monetization model for high-volume users. No indicators of data exfiltration, unauthorized execution, or malicious prompt injection were found.