Stack Facts MCP Server

by srv-g5joilnmeep4ntz3nwezxt5dmu Your server? Claim it

answering

Stack Facts is answering right now. Last checked 1 min ago. It exposes 41 tools.

Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap.

Uptime history 4 days of history · worst day 96%

4 days agonow

96.7%

Uptime 24h

89 of 92 checks

Tools

read from the server

1064 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 34

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 13 October 2026. No other catalogue keeps this.

15 Oct 2 tools appeared stackfacts_bcp47_lookup, stackfacts_tz_lookup

14 Oct 7 tools changed the parameters they ask for13 times that day stackfacts_cve_lookup, stackfacts_lockfile_diff, stackfacts_models_changes and 4 more

14 Oct 9 tool descriptions were rewritten11 times that day stackfacts_cve_lookup, stackfacts_cve_prioritize, stackfacts_cve_search and 6 more

14 Oct 6 tools appeared stackfacts_capec_lookup, stackfacts_control_lookup, stackfacts_cwe_lookup and 3 more

13 Oct 2 tools appeared stackfacts_lockfile_diff, stackfacts_upgrade_delta

and 8 more, back to 13 October 2026

Stack Facts does not always answer

Over the last week it answered 97.4% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 1 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add stackfacts --transport http https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "stackfacts": {
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.stackfacts]
url = "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "stackfacts": {
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "stackfacts": {
      "url": "https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp"
    }
  }
}

Available tools 41

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

stackfacts

stackfacts_bcp47_lookup

Get an IANA language tag (en-AU, zh-Hant) part by part: type, description, scope, deprecation and preferred value from the Language Subtag Registry.

stackfacts_capec_lookup

Get one MITRE CAPEC attack pattern by id: severity, likelihood, prerequisites, mitigations, related CWE and ATT&CK ids and MITRE link.

stackfacts_control_lookup

Get one NIST SP 800-53 Rev 5 security control or enhancement by id (AC-2, AC-2(1)): title, statement, guidance, related controls and status.

stackfacts_cve_lookup

Get any CVE: CISA KEV entry, CVSS score and patch priority, plus every OSV advisory aliased to it, with affected packages and fixed versions.

stackfacts_cve_prioritize

Call before patching: rank up to 100 CVEs by CISA KEV status, then CVSS base score.

stackfacts_cve_search

Find CVEs by keyword or package name in CISA KEV and OSV (not all of NVD), with KEV status and CVSS v3 where an OSV advisory has one.

stackfacts_cwe_lookup

Get one MITRE CWE weakness by id (79 or CWE-79): name, status, description and MITRE link. From the CWE catalogue (v4.20); MITRE notice on every answer.

stackfacts_domain_lookup

Get the public suffix, registrable domain and subdomain of a host name from the Mozilla Public Suffix List, with the matching rule and section.

stackfacts_eol_check

Check runtimes and OS versions for EOL: is each still supported? Up to 50 product@version pairs, end-of-life date, support status; unknowns get suggestions.

stackfacts_eol_cycle

Check if a version is still supported (is python 3.12 still supported?): one release cycle, its EOL (end-of-life) date, support status, LTS, latest patch.

stackfacts_eol_image

Check a container image for EOL: is node:18-alpine still supported? Maps its runtime, Java and base OS to end-of-life date and support status.

stackfacts_eol_product

List every release cycle of a product (Node.js, Python, Ubuntu…) and if it is still supported: EOL (end-of-life) date, support status, LTS, latest version.

stackfacts_eol_snapshot

Download the signed EOL (end-of-life) snapshot (endoflife.date, MIT): support status of every product and cycle, still supported or not, plus its manifest.

stackfacts_index

List the valid ids for free: end-of-life product names and aliases, or LLM provider/model ids, so a paid call never misses.

stackfacts_kev_changes

List CVEs added to, removed from or changed in CISA KEV since a snapshot_id, so an agent can poll for newly exploited vulnerabilities.

stackfacts_kev_check

Check up to 100 CVEs at once against CISA KEV (known exploited vulnerabilities); returns in_kev and the KEV details for each one.

stackfacts_kev_lookup

Check if a CVE is actively exploited (CISA KEV): in_kev, date added, remediation due date, required action and known ransomware use.

stackfacts_kev_snapshot

Download the full signed CISA KEV snapshot: every known exploited vulnerability, with a manifest to verify the sha256 and signature.

stackfacts_keys

Get the Ed25519 public keys (JWK) that verify the signature on every answer and snapshot manifest.

stackfacts_license_check

Call before adding a dependency: check SPDX licences or packages against your project licence and use, with a compatibility verdict per item.

stackfacts_lockfile_diff

Check npm or PyPI purl lists or raw lockfiles: upgrades judged on advisories, KEV, licence; same version, other hash = hash_mismatch. Returns go, review, no_go.

stackfacts_manifest

Get the signed manifest of a dataset's latest snapshot for free: snapshot_id, sha256, record count, source, licence and signature.

stackfacts_models_changes

List LLM models added, removed or changed (price per million tokens, context window, model deprecation date) since a snapshot_id.

stackfacts_models_cheapest

Find the cheapest model with tools and 128k context, or any limits you set: ranks the 10 cheapest LLMs by blended price per million tokens.

stackfacts_models_estimate

Estimate the USD cost of an LLM call from input, output and cached token counts, exact to the micro-dollar, with the price lines used.

stackfacts_models_lookup

Get an LLM model's price per million tokens (input, output, cached), context window, max output, capabilities and model deprecation date.

stackfacts_models_snapshot

Download the full signed LLM model catalogue (LiteLLM + models.dev, MIT): prices, limits and capabilities, with a verifiable manifest.

stackfacts_models_watch

Check LLMs for what changed since your last call: changed records (with today's price and limits), removals, deprecated or soon deprecated, with snapshot dates.

stackfacts_osv_check

Check dependencies or a lockfile for vulnerable and malicious packages: up to 50 purls, or a package-lock, yarn.lock, requirements.txt or poetry.lock, on OSV.

stackfacts_package_card

Get an npm or PyPI package's latest version, publish dates, deprecation or yank, SPDX licence, repository and runtime range.

stackfacts_package_preflight

Call before installing an npm or PyPI package: latest or given version, licence, OSV vulns, CISA KEV CVEs, deprecation or yank. Returns ok, caution or block.

stackfacts_port_lookup

Get the IANA service name, transport, description and reference for a port number from the IANA Service Name and Transport Protocol Port Number Registry.

stackfacts_preflight

Call before installing a package an LLM suggested: one npm, PyPI or purl version against OSV, CISA KEV and EOL data. Returns ok, warn or block with reasons.

stackfacts_preview

Preview a dataset for free: sample end-of-life products, newest CISA KEV entries, LLM prices, a package card or a licence verdict.

stackfacts_stack_check

Check dependencies, runtimes and OS versions in one call: OSV for up to 50 purls, EOL for 50 product@version pairs, CISA KEV hits, suggestions for unknowns.

stackfacts_stack_watch

Check dependencies, runtimes and OS versions for what changed since your last call: EOL passed or near, new OSV advisories, new CISA KEV hits. Returns a token.

stackfacts_technique_lookup

Get one technique by id (T1055.011): name, tactics, platforms, description, mitigations, detection, data sources and link. MITRE ATT&CK v20.0; credited.

stackfacts_try

Try a paid answer for free on a fixed example: nodejs end-of-life cycles, CVE-2021-44228 in CISA KEV, or openai/gpt-4o prices.

stackfacts_tz_lookup

Get an IANA time zone (Europe/Berlin) or alias: current UTC offset, abbreviation, DST summary and backward-compatible names from tzdata.

stackfacts_upgrade_delta

Check moving an npm or PyPI package from one version to another: advisories fixed or introduced, KEV, licence, runtime. Returns go, review or no_go.

stackfacts_validate

Validate an id for free. Privacy: only an unknown EOL id is logged (access log, miss field); a 400 logs the input name, never its value. No other id is stored.

Endpoints

URL	Transport	State	Latency	Checked
https://g5joilnmeep4ntz3nwezxt5dmu.srv.us/mcp	streamable-http	answering	937 ms	1 min ago

Alternatives to Stack Facts

same job, measured the same way

WebLens

by weblens

Scrape, crawl, map and extract the web. Pay per call in USDC, no account or API key.

27 tools answering

Transcribe MCP

by soboljem

Transcribe audio/video and find dead air. Pay-per-call in USDC over x402 — no account, no key.

33 installs/wk local only

Getdigitalcraft MCP Render

by gene12williams-design

Deterministic image rendering with exact typography. Pay per call in USDC, no account.

40 installs/wk local only

Stride20k x402 Data Gateway

by marysbrain

x402 analytics feed + 20+ pay-per-call agent tools over x402 (data, LLM, risk), no accounts.

57 installs/wk local only

Scrape402

by scrape402

Pay-per-call agent tools via x402 (USDC on Base): chat, prices, funding, RNG. No account or keys.

5 tools answering

Nigerian Reference Data

by postandshare

Nigerian phone, bank-account and identity-number validation for AI agents. Pay-per-call in USDC.

answering

Base Token Facts

by yankiifr

Base token checks for agents: simulated buy and sell, taxes, honeypots. Pay per call in USDC (x402).

478 installs/wk local only

Stackapps Suite MCP

by explorer-64

StackApps suite gateway: Imagcon, StackBill, Dicta-Notes. Pay per call in USDC via x402.

local only

Stack Facts — questions

Answers built from our own checks of this server.

What can Stack Facts do?

It exposes 41 tools, read directly from the server on our last check. Among them: stackfacts_bcp47_lookup, stackfacts_capec_lookup, stackfacts_control_lookup, stackfacts_cve_lookup, stackfacts_cve_prioritize, stackfacts_cve_search and 35 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Stack Facts working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 89 of 92 checks got a reply (96.7%), average response time 1064 ms. The bar chart above shows every period we have measured.

How do I connect Stack Facts?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Stack Facts need an API key?

No. Stack Facts completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 41 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Stack Facts?

It answers our handshake in 1064 ms on average, which is faster than 7% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.