Server data from the Official MCP Registry
Official public-data caches sold per pull via x402/USDC on Base.
About
Official public-data caches sold per pull via x402/USDC on Base.
Remote endpoints: streamable-http: https://ticks.bnm.farm/mcp
Security Report
This MCP server contains multiple critical security vulnerabilities including hardcoded API credentials, unsafe file operations with world-readable permissions, unvalidated environment variable exfiltration, and deceptive design. The server auto-provisions API keys to `~/.apollo-mcp/key.json` with world-readable permissions (644), stores credentials in plaintext, and implements a payment system that appears designed to exfiltrate user funds via x402 protocol to an external wallet address. The codebase is incomplete (truncated) and contains multiple red flags suggesting malicious intent. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity).
3 files analyzed · 20 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Documentation
View on GitHubFrom the project's GitHub README.
BNM Data Shop — 36 official public-data x402 GETs at ticks.bnm.farm
Official public data as JSON at https://ticks.bnm.farm. Thirty-six paid GETs. USDC on Base (eip155:8453) to 0xf59621FC406D266e18f314Ae18eF0a33b8401004.
Shop: https://bnm.farm/ · Agent brief: https://ticks.bnm.farm/llms.txt · Door list: SHOP-INDEX.md
Bags and prices
- Tables (
GET /ticks,GET /import-alerts) — $0.05 = the entire current table. - Body doors (the other 34 paid GETs) — free search
GET https://ticks.bnm.farm/{door}/manifest.json?q=(HTTP 200) returnsidand the?id=URL. Then payGET ?id=($0.02, one official text) or the page ($0.05, newest 10 official texts; older page?before=, another $0.05).
Unpaid GET on a paid path returns HTTP 402 with PAYMENT-REQUIRED. No request body.
Free (not SKUs)
GET /sample— canned paid-JSON keys. HTTP 200.GET /firm-check?q=— firm-name search across Form 483, warning letters, and the import-alert table. HTTP 200. Names the door and the?id=or page to buy.GET /{door}/manifest.json?q=— free index/search on every extracted-body door.GET /.well-known/x402— the 36 paid URLs.GET /openapi.json— OpenAPI 3.1.GET /llms.txt— short agent guidance.GET /— shop JSON (payTo + the 36 products).
MCP
GET/POST https://ticks.bnm.farm/mcp — Streamable HTTP. One tool per live paid GET, plus free search, free firm-check, paid get-one ($0.02), paid get-page ($0.05).
npx -y mcp-remote https://ticks.bnm.farm/mcp
Paid doors
| Path | Bag | Price |
|---|---|---|
/ticks | US hay, cattle, and grain ticks (USDA AMS nationwide). Entire current table | $0.05 |
/import-alerts | FDA Import Alerts / DWPE firm-product snapshot. Entire current table | $0.05 |
/mariners | USCG D13 / Northwest this week's Local Notice to Mariners | $0.05 |
/mariners-d11 | USCG D11 / Southwest this week's LNM | $0.05 |
/mariners-d7 | USCG D7 / Southeast this week's LNM | $0.05 |
/mariners-d8 | USCG D8 / Gulf this week's LNM | $0.05 |
/warning-letters | FDA warning-letter bodies. Newest 10 official texts | $0.02 / $0.05 |
/untitled-letters | FDA Untitled Letter text (CDER OPDP + CBER promo PDFs). Newest 10 official texts | $0.02 / $0.05 |
/awa | USDA APHIS AWA inspection-report observation text. Newest 10 official texts | $0.02 / $0.05 |
/swisspar | Swissmedic first-authorisation SwissPAR evaluation text. Newest 10 official texts | $0.02 / $0.05 |
/pcac | FDA PCAC 503A briefing-memo evaluation text. Newest 10 official texts | $0.02 / $0.05 |
/ftc-wl | FTC BCP warning-letter text. Newest 10 official texts | $0.02 / $0.05 |
/cfpb-orders | CFPB consent-order / administrative-order text. Newest 10 official texts | $0.02 / $0.05 |
/occ-cd | OCC institution C&D / consent-order text. Newest 10 official texts | $0.02 / $0.05 |
/fdic-orders | FDIC institution consent-order / C&D text. Newest 10 official texts | $0.02 / $0.05 |
/frb-orders | FRB institution C&D / written-agreement / PCA text. Newest 10 official texts | $0.02 / $0.05 |
/ncua-orders | NCUA institution consent C&D text. Newest 10 official texts | $0.02 / $0.05 |
/fincen-orders | FinCEN institution consent-order text. Newest 10 official texts | $0.02 / $0.05 |
/ferc-orders | FERC institution stipulation-and-consent text. Newest 10 official texts | $0.02 / $0.05 |
/ofac-orders | OFAC institution enforcement-release text. Newest 10 official texts | $0.02 / $0.05 |
/bis-orders | BIS institution charging-letter / order text. Newest 10 official texts | $0.02 / $0.05 |
/cftc-orders | CFTC institution enforcement-order / settlement text. Newest 10 official texts | $0.02 / $0.05 |
/fifra-orders | EPA FIFRA institution order / consent text. Newest 10 official texts | $0.02 / $0.05 |
/denovo-orders | FDA De Novo classification-order text. Newest 10 official texts | $0.02 / $0.05 |
/ttb-oic | TTB Offer in Compromise text. Newest 10 official texts | $0.02 / $0.05 |
/air-letters | USDA APHIS AIR confirmation-letter text. Newest 10 official texts | $0.02 / $0.05 |
/superfund-rods | EPA Superfund Record of Decision text. Newest 10 official texts | $0.02 / $0.05 |
/ico-mpn | ICO Monetary Penalty Notice text. Newest 10 official texts | $0.02 / $0.05 |
/cma-ca98 | UK CMA CA98 infringement-decision text. Newest 10 official texts | $0.02 / $0.05 |
/ema-referrals | EMA human-medicine referral procedure text. Newest 10 official texts | $0.02 / $0.05 |
/cder-reviews | FDA CDER Integrated Review text. Newest 10 official texts | $0.02 / $0.05 |
/npdes-permits | EPA-issued individual NPDES permit text. Newest 10 official texts | $0.02 / $0.05 |
/ofsted-inspections | Ofsted school / provider inspection-report text. Newest 10 official texts | $0.02 / $0.05 |
/form-483 | FDA Form 483 inspectional observation bodies. Newest 10 official texts | $0.02 / $0.05 |
/gmp | Health Canada Drug GMP report-card observation text + C.02 cites. Newest 10 official texts | $0.02 / $0.05 |
/gmp-md | Health Canada medical-device report-card observation text + MDR cites. Newest 10 official texts | $0.02 / $0.05 |
Search URL for each body door: https://ticks.bnm.farm/{path}/manifest.json?q=. Full list with search links: SHOP-INDEX.md. Live source of truth: https://ticks.bnm.farm/.well-known/x402.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption