Back to Home
openSVM icon

dflow-mcp

Verified Safe

by openSVM

Overview

Provides a Model Context Protocol (MCP) interface to access real-time and historical prediction market data from Kalshi/DFlow.

Installation

Run Command
bun run src/index.ts

Security Notes

The server acts as a proxy for an external API. It utilizes robust JSON schema validation for all tool inputs, preventing common injection vulnerabilities. URL construction in the API client is safe, concatenating a fixed base URL with validated paths, mitigating SSRF risks. There are no direct usages of dangerous functions like `eval` or `child_process.exec` with user-controlled input in the main server logic. CORS headers are configured for public access in the Netlify deployment. The `generateCandlestickChart` function (present in the Netlify function but not `src/index.ts`) is safe, transforming numeric data into ASCII art within bounded dimensions. Overall, the implementation is solid for its purpose as a data proxy.

Similar Servers

Stats

Interest Score55
Security Score9
Cost ClassMedium
Avg Tokens3000
Stars1
Forks1
Last Update2025-12-02

Tags

prediction-marketsfinancial-datatradinganalyticsmcp-server