Chainflip Broker MCP

https://chainflip-broker.io/mcp

github.com/chainflip-io/chainflip-mcp

Score

A96

Findings

Tools

Last scan

2026-06-05

Severity breakdown

Critical0

High1

Medium0

Low0

Info0

Worst finding

Tool `get_quotes` accepts an unbounded monetary / quota value

· get_quotes

The numeric parameter(s) `amount` have a money/quota-shaped name but no `maximum` constraint. An LLM tricked by indirect-injection can call the tool with arbitrarily large values.

fix: Add a `maximum` (and ideally `minimum`) to each money/quota numeric, OR enforce the cap via a capframe-bind `--limit` caveat at the agent boundary.

All 1 finding

high
Tool `get_quotes` accepts an unbounded monetary / quota value· get_quotesexcessive agency
The numeric parameter(s) `amount` have a money/quota-shaped name but no `maximum` constraint. An LLM tricked by indirect-injection can call the tool with arbitrarily large values.
fix: Add a `maximum` (and ideally `minimum`) to each money/quota numeric, OR enforce the cap via a capframe-bind `--limit` caveat at the agent boundary.

How this was scored

Source http — live HTTP MCP endpoint, classified against every rule. Findings are emitted by the public capframe.findings.v1 schema. Score = 100 − (10·Critical + 4·High + 2·Medium + 1·Low), clamped to [0, 100].

Disagree with a finding? Open an issue.