General Tools
g5joilnmeep4ntz3nwezxt5dmu.srv.us
Provides general-purpose tools through the Model Context Protocol.
ENDPOINT 1
https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp
MCP server metadata
- Name
- stackfacts
- Version
- 0.6.0
Stack Facts: signed, dated answers on software end-of-life dates (endoflife.date), actively exploited CVEs (CISA KEV) and LLM prices. Pay per call in USDC: no account or API key, no daily cap, up to 50 items per call. Free tools (preview, try, index, validate, manifest, keys) answer here. Paid tools answer isError with an x402 offer: pay over HTTP by sending the given request to the given url with a PAYMENT-SIGNATURE header (x402 v2) or an X-PAYMENT header (x402 v1; the HTTP 402 body is the v1 offer).
Known tools 33
stackfacts_eol_checkCheck dependencies, runtimes and OS versions for EOL: is each still supported?
Inferred read-onlystackfacts_eol_imageCheck a container image for EOL: is node:18-alpine still supported?
Inferred read-onlystackfacts_kev_lookupCheck if a CVE is actively exploited (CISA KEV): in_kev, date added, remediation due date, required action and known ransomware use.
Inferred read-onlystackfacts_kev_checkCheck up to 100 CVEs at once against CISA KEV (known exploited vulnerabilities); returns in_kev and the KEV details for each one.
Inferred read-onlystackfacts_kev_changesList CVEs added to, removed from or changed in CISA KEV since a snapshot_id, so an agent can poll for newly exploited vulnerabilities.
Inferred read-onlystackfacts_kev_snapshotDownload the full signed CISA KEV snapshot: every known exploited vulnerability, with a manifest to verify the sha256 and signature.
Inferred read-onlystackfacts_models_lookupGet an LLM model's price per million tokens (input, output, cached), context window, max output, capabilities and model deprecation date.
Inferred read-onlystackfacts_models_estimateEstimate the USD cost of an LLM call from input, output and cached token counts, exact to the micro-dollar, with the price lines used.
Inferred read-onlystackfacts_models_cheapestFind the cheapest model with tools and 128k context, or any limits you set: ranks the 10 cheapest LLMs by blended price per million tokens.
Inferred read-onlystackfacts_models_changesList LLM models added, removed or changed (price per million tokens, context window, model deprecation date) since a snapshot_id.
Inferred read-onlystackfacts_models_watchCheck LLMs for what changed since your last call: changed records (with today's price and limits), removals, deprecated or soon deprecated, with snapshot dates.
Inferred read-onlystackfacts_models_snapshotDownload the full signed LLM model catalogue (LiteLLM + models.
Inferred read-onlystackfacts_stack_checkCheck dependencies, runtimes and OS versions in one call: OSV advisories for up to 50 package purls, EOL status for 50 product@version pairs, CISA KEV hits.
Inferred read-onlystackfacts_osv_checkCheck dependencies or a lockfile for vulnerable and malicious packages: up to 50 purls, or a package-lock, yarn.
Inferred read-onlystackfacts_preflightCall before installing a package an LLM suggested: one npm, PyPI or purl version against OSV, CISA KEV and EOL data.
Inferred read-onlystackfacts_cve_lookupGet any CVE: CISA KEV entry, EPSS score, CVSS score and patch priority, plus every OSV advisory aliased to it, with affected packages and fixed versions.
Inferred read-onlystackfacts_package_cardGet an npm or PyPI package's latest version, publish dates, deprecation or yank, SPDX licence, repository and runtime range.
Potential side effectsstackfacts_license_checkCall before adding a dependency: check SPDX licences or packages against your project licence and use, with a compatibility verdict per item.
Inferred read-onlystackfacts_cve_prioritizeCall before patching: rank up to 100 CVEs by CISA KEV status, then FIRST EPSS exploit probability score and percentile.
Inferred read-onlystackfacts_cve_searchFind CVEs by keyword or package name in CISA KEV and OSV (not all of NVD), with KEV status, EPSS score, and CVSS v3 where an OSV advisory has one.
Inferred read-onlystackfacts_package_preflightCall before installing an npm or PyPI package: latest version, licence, OSV vulns, CISA KEV CVEs, deprecation or yank.
Inferred read-onlystackfacts_upgrade_deltaCheck moving an npm or PyPI package from one version to another: advisories fixed or introduced, KEV, licence, runtime.
Inferred read-onlystackfacts_lockfile_diffCheck two npm or PyPI package lists (purls): version changes with advisories fixed or introduced, KEV, licence, runtime.
Inferred read-onlystackfacts_stack_watchCheck dependencies, runtimes and OS versions for what changed since your last call: EOL passed or near, new OSV advisories, new CISA KEV hits.
Inferred read-onlystackfacts_previewPreview a dataset for free: sample end-of-life products, newest CISA KEV entries, LLM prices, a package card or a licence verdict.
Inferred read-onlystackfacts_tryTry a paid answer for free on a fixed example: nodejs end-of-life cycles, CVE-2021-44228 in CISA KEV, or openai/gpt-4o prices.
Inferred read-onlystackfacts_indexList the valid ids for free: end-of-life product names and aliases, or LLM provider/model ids, so a paid call never misses.
Inferred read-onlystackfacts_validateValidate an id for free before paying: whether a product, product/cycle or provider/model exists, or a CVE id is well formed.
Inferred read-onlystackfacts_manifestGet the signed manifest of a dataset's latest snapshot for free: snapshot_id, sha256, record count, source, licence and signature.
Inferred read-onlystackfacts_keysGet the Ed25519 public keys (JWK) that verify the signature on every answer and snapshot manifest.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.stackfacts]
url = "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"stackfacts": {
"type": "http",
"url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: stackfacts
Remote MCP URL: https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"stackfacts": {
"url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"stackfacts": {
"type": "http",
"url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "stackfacts",
"transport": "streamable-http",
"url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Loading Trust v2 evidence…
Checking the associated registrable domain. The BuiltWith key remains server-side.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.