# MCP verification sweep — 2026-07-30

This summary separates source availability, endpoint reachability, and successful runtime use. A repository being active does not mean its MCP runtime passed. Reproducible commands, timestamps, revisions, and response excerpts are retained in [`curation/evidence/2026-07-30-mcp-runtime-audit.md`](evidence/2026-07-30-mcp-runtime-audit.md).

| Capability | Result | Evidence | Production caveat |
| --- | --- | --- | --- |
| Financial Datasets MCP | Source verified | Repository and setup inspected; last source update 2025-06-05 | API key required; runtime not tested; re-review due to age |
| SEC EDGAR MCP | Runtime failed | Current repository inspected; clean PyPI startup failed because `mcp.server.fastmcp` was unavailable | Retest the recommended Docker image or a fixed dependency set |
| Alpha Vantage MCP | Endpoint verified | Official remote endpoint returned the expected OAuth challenge | API key/OAuth required; no market-data call run |
| FMP MCP Server | Source verified | Repository, tests, and transport documentation inspected; last source update 2025-06-23 | API key required; runtime not tested; re-review due to age |
| OpenBB MCP Server | Source verified | Official docs and active repository document stdio, SSE, and streamable HTTP | Provider credentials vary; package startup not tested |
| Massive MCP | Source verified | Official repository and stdio setup inspected | API key required; free data may be delayed |
| Octagon MCP | Source verified | Maintained wrapper and npx stdio setup inspected | Hosted API key required; verify generated claims against citations |
| CoinGecko MCP Server | Runtime verified | Initialize, `tools/list`, documentation search, and a live Bitcoin price call succeeded | Keyless endpoint has shared limits |
| DefiLlama MCP | Endpoint verified | Official endpoint returned the expected authentication challenge; official page describes 23 tools | Paid plan and OAuth required; no data call run |

## Interpretation

- **Runtime verified**: a real MCP handshake and tool call succeeded.
- **Endpoint verified**: the official endpoint responded as designed, but authentication prevented a data call.
- **Source verified**: source and setup documentation were checked; no runtime claim is made.
- **Runtime failed**: an attempted clean startup failed and should not be presented as production-ready.

No paid plan or third-party credential was used during this sweep.