QAmcp

Copied. Paste it into Claude Code, Cursor or Codex:Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.

Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions

NewYour score can change any day. QAmcp Monitor keeps testing your server and emails you when it breaks. Free for 1 server.See what Monitor does →

Directory / Folionomiq

Folionomiq

Q: Is Folionomiq MCP server safe?

QAmcp's test on 10 Nov 2026: None of the hidden-instruction wordings we know were found in its 22 tool descriptions. Its error messages showed no secrets or internal details. All 22 of its tools are labeled read-only. Overall it scored 95/100 on 10 Nov 2026. A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

by folionomiq.com · https://folionomiq.com/mcp

Measures a portfolio from price history: independent bets, what funds own, past crises. No advice.

22 tools✓ all read-only✓ no account neededPricing: not listed

Visit website

95 /100

PASS · WITH NOTES

12 of 12 checks · 10 Nov 2026

Test it now for current results

At a glance

Runs where: On their server. What you send to it goes to them.
What you need: Nothing: it answered without a login
Tools: 22 tools
Its own safety labels: 22 read-only
Memory it takes: About 10,000 tokens of your AI's memory, just for its tool descriptions
Largest answer: About 2 KB in our test
Speed: Average answer in our test: 185 ms

Tokens are an estimate: the characters in its tool names, descriptions and inputs, divided by 4. The exact number depends on your AI model. Safety labels are what the server says about itself. From our latest test, 10 Nov 2026.

Is Folionomiq MCP server safe?

None of the hidden-instruction wordings we know were found in its 22 tool descriptions.
Its error messages showed no secrets or internal details.
All 22 of its tools are labeled read-only.
Overall it scored 95/100 on 10 Nov 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What this test does not check

Its source code and packages.
What a tool quietly does behind the scenes, such as writing a file or calling another service.
Instructions hidden inside live tool answers. We only look for those in tool descriptions.
Hidden instructions worded in a way our list doesn't know yet.
Tools that could change something. Those are read, never run.

What QAmcp can and can't see · How to tell if an MCP server is safe · Hidden instructions · Prompt injection

Known security advisories

It lists no public code, so there is nothing to look up in GitHub Security Advisories or OSV.dev. QAmcp tests how a server behaves. It does not scan source code.

What it can do

22 tools, in the server's own words.

measure_portfolioread-only

The full measurement of one portfolio in one call.

compare_portfoliosread-only

Two to eight separate portfolios on one shared window of prices.

test_a_changeread-only

Any change to one portfolio, measured before it is made: current and proposed holdings side by side on the same prices.

search_symbolsread-only

Finds tickers from a name, part of a ticker or an ISIN, with the exchange of each listing.

validate_symbolsread-only

Checks tickers before a measurement.

portfolio_structureread-only

How many independent bets a portfolio's holdings make, from how their prices moved together rather than how many tickers there are, and each holding's share of…

look_throughread-only

The companies a portfolio owns through its funds, added up across funds.

past_crisesread-only

What past crises did to one portfolio held as it is today: 2008, 2020, 2022 and the others inside its price history.

portfolio_reportread-only

The written report on one portfolio, every figure numbered F1, F2… beside its method and window.

factor_exposureread-only

How a portfolio's daily moves line up with four common patterns: the market, small versus large, value versus growth, momentum.

currency_effectread-only

For a portfolio held in one currency but priced partly in others: how much is outside the base currency, and what exchange rates added to growth, volatility an…

health_axesread-only

One portfolio read along three separate questions: what its risk is built from, how it behaved when markets broke, and what it returned for the risk taken, eac…

sweep_holdingread-only

One holding already in the portfolio, measured at every weight from none to all, the rest of the money shared out in proportion: volatility, its share of the r…

reverse_stressread-only

Starts from a loss the reader names and finds the least extreme combination of market moves that would cause it on this portfolio, beside the worst each move a…

return_historyread-only

What one portfolio returned over its record: growth per year before and after inflation, best and worst months and years, every 12-month stretch, returns by mo…

plain_findingsread-only

Three or four plain sentences about one portfolio, how its risk is built and its worst historical fall, each with its window.

last_priceread-only

The latest daily close for each ticker, in its own currency and in the base currency, with the date.

asset_inforead-only

One fund or share on its own: name, type, exchange, yearly cost when published, measured return, volatility and worst fall, and for a fund its largest holdings…

monthly_planread-only

The same amount bought on the first trading day of each month, replayed on a portfolio's own history with dividends reinvested: what it became against what was…

walk_forwardread-only

Whether re-optimising an allocation would have helped: fit on the years before each date, hold on prices not yet seen, repeat, and compare with the portfolio h…

check_before_you_buyread-only

Before adding one new holding to a portfolio: how much of it is already owned through the current funds, whether it adds an independent bet, what past crises w…

living_off_itread-only

A yearly withdrawal, raised with real inflation, replayed from every start month the history allows: how many starts lasted the full span, how many ran out and…

Test results

Safe mode: only tools labeled read-only were run. How the test works

!
Follows MCP best practices (not scored yet)
1 tip (not scored)
- !The tool list is about 77 KB (roughly 19k tokens). AI apps send it with every message, so it takes that much of the AI's memory before any work starts.
note
!
Resources and prompts work
2 warnings (2 resources, 3 prompts)
- !2 of 2 resources have no description, so people can't tell what they contain.
- !explain_my_portfolio: Ignores its input (level): what you type never appears in the result. Check the input is actually used.
- and 3 more
note
✓
ConnectsConnected in 294 ms
pass
✓
Ready for the newest MCP versionUses the latest MCP version (2026-07-28)
pass
✓
Lists its toolsFound 22 tools
pass
✓
Every tool is describedAll 22 tools and their inputs are described
pass
✓
Tools are labeled safe or dangerousEvery tool has a safety label
pass
✓
No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.
pass
✓
Tools work with good inputs
All good
- ✓measure_portfolio: Answered with an error, probably because of our sample input: Error executing tool measure_portfolio: The input could not be used. weights: add at least one holding; there is no portfolio to measure.
- ✓compare_portfolios: Answered with an error, probably because of our sample input: Error executing tool compare_portfolios: price load failed: no tickers could be loaded from Yahoo:
- ✓test_a_change: Answered with an error, probably because of our sample input: Error executing tool test_a_change: The input could not be used. current: add at least one holding; there is no portfolio to measure; propo…
- ✓search_symbols: Worked (162 ms)
- ✓validate_symbols: Worked (70 ms)
- ✓portfolio_structure: Answered with an error, probably because of our sample input: Error executing tool portfolio_structure: The input could not be used. weights: add at least one holding; there is no portfolio to measure.
- ✓look_through: Answered with an error, probably because of our sample input: Error executing tool look_through: The input could not be used. weights: add at least one holding; there is no portfolio to measure.
- ✓past_crises: Answered with an error, probably because of our sample input: Error executing tool past_crises: The input could not be used. weights: add at least one holding; there is no portfolio to measure.
- and 14 more
pass
✓
Bad inputs give a clean error
All good
- ✓measure_portfolio: Refused missing required input "holdings" with a clear error
- ✓measure_portfolio: Refused wrong type for "holdings" with a clear error
- ✓compare_portfolios: Refused missing required input "portfolios" with a clear error
- ✓compare_portfolios: Refused wrong type for "portfolios" with a clear error
- ✓test_a_change: Refused missing required input "current" with a clear error
- ✓test_a_change: Refused wrong type for "current" with a clear error
- ✓search_symbols: Refused missing required input "query" with a clear error
- ✓search_symbols: Refused wrong type for "query" with a clear error
- and 32 more
pass
✓
Fast enough
All good
- ✓Connecting took 294 ms
- ✓Listing tools took 113 ms
- ✓Average tool answer: 185 ms
- ✓asset_info: Slowest tool: asset_info (2.0 s)
pass
✓
No secrets leakedChecked 56 error messages: no secrets or internal details
pass
–
Tools work togetherNo tool's answer could be fed into another tool, so there were no chains to test (not counted either way)
not tested

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://folionomiq.com/mcp

Show this score on GitHub

Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.

[![QAmcp score](https://qamcp.dev/s/com-folionomiq-folionomiq.svg)](https://qamcp.dev/s/com-folionomiq-folionomiq.html)

Score over time

10 Nov 202695

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use Folionomiq, signed in with GitHub, one per person. Reviews never change the score.

Is this your server? Get an alert the moment it breaks.

QAmcp Monitor tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. Free for 1 server, no card.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works