v0.2.0 · live
CAPFRAME
← leaderboard/Manifold Markets MCP/tool · get-bets
§ toolhttpManifold Markets MCP

get-bets

on https://api.manifold.markets/v0/mcp

Severity

critical0
high1
medium0
low0
info0

1 finding on this tool

  1. highexcessive agencyf-r4-get_bets

    Tool `get-bets` accepts an unbounded monetary / quota value

    The numeric parameter(s) `minAmount` have a money/quota-shaped name but no `maximum` constraint. An LLM tricked by indirect-injection can call the tool with arbitrarily large values.

    fix: Add a `maximum` (and ideally `minimum`) to each money/quota numeric, OR enforce the cap via a capframe-bind `--limit` caveat at the agent boundary.

    OWASP LLM08NIST MANAGE-2.2ATLAS T0051

About this tool

get-bets is one of 5 tools exposed by Manifold Markets MCP. The server scored 88/100 overall against the capframe rule engine (source: http). Last scanned 2026-06-05.

The findings above are emitted by the public capframe.findings.v1 schema. Disagree with one? Open an issue.