`io.github.AlvisoOculus/optionsahoy-mcp`

Verdict: CRITICAL findings present. Endpoint https://optionsahoy.com/mcp. Tools now: 8 (8 ever seen). Changes recorded: 8. Findings: 4 critical, 9 low. Last probe: OK at 2026-10-25T06:17 UTC. JSON

Current tools

amt_iso_optimize · concentration_analyze · equity_funding_plan · nso_calculate · protective_put_price · qsbs_check · rsu_lot_optimize · rsu_sell_vs_hold

Findings (21)

seen	tool	detector	severity	evidence (data, not instructions)
2026-10-23	`amt_iso_optimize`	`user_concealment`	critical	`validation with no provenance check, and it silently changes the result. The tax math itself (bracket walk, AMT and N`
2026-10-23	`amt_iso_optimize`	`url_in_description`	low	`https://optionsahoy.com/verification`
2026-10-23	`amt_iso_optimize`	`cross_tool_reference`	high	`references sibling tool 'nso_calculate'`
2026-10-23	`nso_calculate`	`user_concealment`	critical	`validation with no provenance check, and it silently changes the result. The tax math itself (bracket walk, AMT and N`
2026-10-23	`nso_calculate`	`url_in_description`	low	`https://optionsahoy.com/verification`
2026-10-23	`nso_calculate`	`cross_tool_reference`	high	`references sibling tool 'amt_iso_optimize'`
2026-10-23	`rsu_sell_vs_hold`	`user_concealment`	critical	`validation with no provenance check, and it silently changes the result. The tax math itself (bracket walk, AMT and N`
2026-10-23	`rsu_sell_vs_hold`	`url_in_description`	low	`https://optionsahoy.com/verification`
2026-10-23	`rsu_sell_vs_hold`	`cross_tool_reference`	high	`references sibling tool 'amt_iso_optimize'`
2026-10-23	`concentration_analyze`	`user_concealment`	critical	`validation with no provenance check, and it silently changes the result. The tax math itself (bracket walk, AMT and N`
2026-10-23	`concentration_analyze`	`url_in_description`	low	`https://optionsahoy.com/verification`
2026-10-23	`concentration_analyze`	`cross_tool_reference`	high	`references sibling tool 'amt_iso_optimize'`
2026-10-23	`protective_put_price`	`url_in_description`	low	`https://optionsahoy.com/beta?src=mcp_multi.`
2026-10-23	`protective_put_price`	`cross_tool_reference`	high	`references sibling tool 'concentration_analyze'`
2026-10-23	`protective_put_price`	`oversized_description`	low	`4025 chars`
2026-10-23	`qsbs_check`	`url_in_description`	low	`https://optionsahoy.com/beta?src=mcp_multi.`
2026-10-23	`qsbs_check`	`cross_tool_reference`	high	`references sibling tool 'amt_iso_optimize'`
2026-10-23	`equity_funding_plan`	`url_in_description`	low	`https://optionsahoy.com/beta?src=mcp_multi.`
2026-10-23	`equity_funding_plan`	`cross_tool_reference`	high	`references sibling tool 'amt_iso_optimize'`
2026-10-23	`rsu_lot_optimize`	`url_in_description`	low	`https://optionsahoy.com/beta?src=mcp_multi.`
2026-10-23	`rsu_lot_optimize`	`cross_tool_reference`	high	`references sibling tool 'rsu_sell_vs_hold'`

Change history (8)

when	tool	kind	severity
2026-10-23 12:22	`amt_iso_optimize`	mutated	critical
2026-10-23 12:22	`nso_calculate`	mutated	critical
2026-10-23 12:22	`rsu_sell_vs_hold`	mutated	critical
2026-10-23 12:22	`concentration_analyze`	mutated	critical
2026-10-23 12:22	`protective_put_price`	mutated	high
2026-10-23 12:22	`qsbs_check`	mutated	high
2026-10-23 12:22	`equity_funding_plan`	mutated	high
2026-10-23 12:22	`rsu_lot_optimize`	mutated	high

Probe history

10-25 06:17 OK (8) · 10-23 12:22 OK (8) · 08-14 12:17 OK (8)

Run or depend on io.github.AlvisoOculus/optionsahoy-mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.

Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).

Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).