v0.2.0 · live
CAPFRAME
← leaderboard/Chainflip Broker MCP/tool · get_quotes
§ toolhttpChainflip Broker MCP

get_quotes

on https://chainflip-broker.io/mcp

Severity

critical0
high1
medium0
low0
info0

1 finding on this tool

  1. highexcessive agencyf-r4-get_quotes

    Tool `get_quotes` accepts an unbounded monetary / quota value

    The numeric parameter(s) `amount` have a money/quota-shaped name but no `maximum` constraint. An LLM tricked by indirect-injection can call the tool with arbitrarily large values.

    fix: Add a `maximum` (and ideally `minimum`) to each money/quota numeric, OR enforce the cap via a capframe-bind `--limit` caveat at the agent boundary.

    OWASP LLM08NIST MANAGE-2.2ATLAS T0051

About this tool

get_quotes is one of 6 tools exposed by Chainflip Broker MCP. The server scored 96/100 overall against the capframe rule engine (source: http). Last scanned 2026-06-05.

The findings above are emitted by the public capframe.findings.v1 schema. Disagree with one? Open an issue.