io.github.cyanheads/fdic-banks-mcp-server

Est-ce que io.github.cyanheads/fdic-banks-mcp-server est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.cyanheads/fdic-banks-mcp-server » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 9 outils

• fdic_compare_peers≈ 3158 tokens

  Compare one institution with a peer group for one quarter: for each metric, the institution's value next to the peer median, quartiles, minimum and maximum, and its percentile and rank. The default peer group is every institution in the same asset-size band that reported that quarter; narrow it to one state, widen it to all sizes, or name the peers by CERT. Dollar amounts are in thousands; ratios are percentages.

  Paramètres, retour & exemple (6)

  Paramètres

  • cert · integer · requis
    FDIC certificate number of the institution to compare, from fdic_search_institutions.
  • metrics · array · optionnel
    At most 1000 raw metric names. Deduplicated before querying the first 20; deferred_metrics holds the rest. Omit or pass [] for the default health set.
  • peer_certs · array · optionnel
    Nonempty peer selection, at most 1000 raw CERTs, replacing band/state filters. Deduplicated before querying the first 200; deferred_certs holds the rest and marks the cohort incomplete. Fewer than five peers still computes, with a notice.
  • peer_state · string · optionnel
    Limit peers to one headquarters state: a two-letter code, a full state name, or same for the institution's own state. Omit for nationwide. Not combinable with peer_certs.
  • report_date · string · optionnel
    Quarter to compare: a quarter-end date (2026-06-30), the same without dashes (20260630), or a quarter label (2026Q2). Omit for the latest quarter FDIC has published.
  • peer_asset_band · string · optionnel · same | any | under_100m | 100m_1b | 1b_10b | 10b_250b | over_250b
    Peer size band by total assets: same (the band holding the institution's own assets, default), any (all sizes), under_100m, 100m_1b, 1b_10b, 10b_250b, or over_250b; fdic_list_reference topic peer_asset_bands gives each band's bounds. Not combinable with peer_certs.

  Exemple d'appel

  {"name": "fdic_compare_peers", "arguments": {"cert": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "notice": "texte", "data_as_of": "texte", "peer_group": {}, "comparisons": [], "institution": {}, "report_date": "texte", "deferred_certs": [], "processed_certs": [], "deferred_metrics": [], "selection_notice": "texte", "processed_metrics": []}}

• fdic_dataframe_describe≈ 1575 tokens

  Describe the df_<id> dataframes that fdic_query_financials and fdic_get_deposits staged when a result exceeded its inline preview, plus any that fdic_dataframe_query saved with register_as. Pass name (from a dataset field) for one dataframe in full: source tool, the parameters it was called with, row count, creation and expiry time, column schema, and the unit and basis of each amount, ratio, or count column (thousands of dollars, percent, or count). Read a table's columns this way before writing SQL for fdic_dataframe_query. Omit name to list the live dataframes, newest first, 50 per page, as name, source tool, row count, and expiry only. A deployment that serves HTTP without authentication, where every caller shares one canvas, does not list; there, pass the name a dataset field returned.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · optionnel
    A dataframe name (df_XXXXX_XXXXX, from a dataset field) for its provenance, columns, and units; omit to list the live dataframes where this deployment allows it.
  • offset · integer · optionnel
    Listed dataframes to skip; pass next_offset from the previous page. Ignored when name is set.

  Exemple d'appel

  {"name": "fdic_dataframe_describe", "arguments": {"name": "texte", "offset": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cap": 1, "error": {}, "shown": 1, "total": 1, "notice": "texte", "truncated": true, "dataframes": [], "next_offset": 1}}

• fdic_dataframe_query≈ 1762 tokens

  Run one read-only SELECT (DuckDB SQL) across the df_<id> dataframes that fdic_query_financials and fdic_get_deposits staged or an earlier register_as saved; joins, aggregates, window functions, and CTEs work. Before writing SQL, pass each table name to fdic_dataframe_describe to read its columns. DOUBLE columns come back as JSON numbers and dollar columns are thousands of US dollars; BIGINT results such as COUNT(*) come back as strings, so CAST them to INTEGER or DOUBLE for arithmetic. Writes, DDL, file-reading functions, and system catalogs are rejected. register_as materializes the result as a new dataframe with a fresh TTL.

  Paramètres, retour & exemple (4)

  Paramètres

  • sql · string · requis
    One SELECT against df_<id> tables named in a dataset field or by fdic_dataframe_describe, up to 20,000 characters.
  • preview · integer · optionnel
    Rows to return inline; defaults to the effective row_limit and is clamped to it. Set it low when register_as keeps the full result.
  • row_limit · integer · optionnel
    Requested materialization cap (default 1,000; hard input ceiling 1,000,000), clamped to the execution cap of 10,000. Without register_as, row_count_capped reports more matches; continue with ordered LIMIT/OFFSET pages. register_as keeps the whole result within the staging budget.
  • register_as · string · optionnel
    Materialize the full result as a new dataframe under this unused name (df_XXXXX_XXXXX: uppercase letters and digits). A name already staged fails as register_as_clash — including on a repeat of a call that already saved it. The live dataframes share a 1,000,000-row budget: the oldest are dropped to make room, and a result over the budget on its own fails as register_as_too_large. Omit to return rows only.

  Exemple d'appel

  {"name": "fdic_dataframe_query", "arguments": {"sql": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cap": 1, "rows": [], "error": {}, "shown": 1, "notice": "texte", "columns": [], "row_count": 1, "truncated": true, "expires_at": "texte", "registered_as": "texte", "row_count_capped": true, "effective_preview": 1}}

• fdic_get_deposits≈ 3220 tokens

  Get Summary of Deposits data (branch-level domestic deposits, annual as of June 30, 1994 onward). With cert only: the institution's branches and its deposit market share in each state where it has offices. With a geography (state, county, city, ZIP, or MSA code): every institution in that market ranked by deposits, with market share and the Herfindahl-Hirschman index. With both: the institution's branches in that market and its rank and share there. Defaults to the latest survey year. Dollar amounts are in thousands.

  Paramètres, retour & exemple (8)

  Paramètres

  • zip · string · optionnel
    Five-digit branch ZIP code; leading zeros kept (02110).
  • cert · integer · optionnel
    FDIC certificate number, from fdic_search_institutions. Alone: its branches and per-state share. With a geography: its position in that market.
  • city · string · optionnel
    Branch city as FDIC spells it (Seattle, St. Louis), up to 50 characters; matched exactly as given or in title case, with a hyphen, apostrophe, or space between words also tried the other ways FDIC records it (Winston-Salem finds Winston Salem); requires state.
  • year · integer · optionnel
    Survey year (deposits as of June 30), 1994 on. Omit for the latest survey.
  • limit · integer · optionnel
    Positive inline preview count, bounded by the already-fetched branches or ranking. A larger set is staged whole as a dataframe when this deployment stages dataframes.
  • state · string · optionnel
    Branch state: two-letter code in any case or full name.
  • county · string · optionnel
    County as FDIC spells it (King, not King County — a trailing " County" is stripped), up to 50 characters; matched exactly as given or in title case, with a hyphen, apostrophe, or space between words also tried the other ways FDIC records it; requires state.
  • msa_code · string · optionnel
    Five-digit CBSA (metropolitan area) code, 10180–49740; branch rows from a state-level call carry msa_code values to reuse. Non-metropolitan branches have no code.

  Exemple d'appel

  {"name": "fdic_get_deposits", "arguments": {"zip": "texte", "cert": 1, "city": "texte", "year": 1, "limit": 1, "state": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cap": 1, "mode": "institution", "year": 1, "error": {}, "shown": 1, "market": {}, "notice": "texte", "dataset": {}, "branches": [], "position": {}, "footprint": [], "geography": {}}}

• fdic_get_institution_financials≈ 2344 tokens

  Get one institution's quarterly Call Report financials by CERT — balance sheet, income, returns, credit quality, and capital ratios — most recent quarter first, with its name, status, and holding company. Unsuffixed income and return metrics are single-quarter figures; _ytd metrics accumulate from January 1. Dollar amounts are in thousands. Quarterly data lands about seven weeks after quarter end; history reaches back to 1984.

  Paramètres, retour & exemple (5)

  Paramètres

  • cert · integer · requis
    FDIC certificate number, from fdic_search_institutions.
  • metrics · array · optionnel
    At most 1000 raw metric names (fdic_list_reference topic metrics). Deduplicated before querying the first 25; deferred_metrics holds the rest. Omit or pass [] for the default health set.
  • to_date · string · optionnel
    Latest quarter to include, in the same forms as from_date. Omit for the latest published quarter.
  • quarters · integer · optionnel
    Most recent quarters to return; accepts 1–10000, executes at most 200 within from_date/to_date. effective_quarters reports the applied count. Continue with to_date before the oldest returned quarter.
  • from_date · string · optionnel
    Earliest quarter to include: a quarter-end date (2025-03-31), the same without dashes (20250331), or a quarter label (2025Q1).

  Exemple d'appel

  {"name": "fdic_get_institution_financials", "arguments": {"cert": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cap": 1, "rows": [], "error": {}, "shown": 1, "notice": "texte", "truncated": true, "data_as_of": "texte", "institution": {}, "deferred_metrics": [], "selection_notice": "texte", "processed_metrics": [], "effective_quarters": 1}}

• fdic_list_reference≈ 1106 tokens

  List the vocabulary the other fdic_ tools accept and return: every financial metric name with its FDIC field, unit, and basis (single quarter, year-to-date, or point in time), bank charter classes, failure resolution methods, insurance funds, the asset bands fdic_compare_peers uses, and the years each dataset covers. Served from built-in tables; no request to FDIC.

  Paramètres, retour & exemple (1)

  Paramètres

  • topic · string · requis · metrics | bank_classes | failure_methods | insurance_funds | peer_asset_bands | coverage
    Which table to list: metrics (names, FDIC fields, units, basis, default set), bank_classes, failure_methods, insurance_funds, peer_asset_bands, or coverage (years and cadence of each dataset).

  Exemple d'appel

  {"name": "fdic_list_reference", "arguments": {"topic": "metrics"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"error": {}, "topic": "metrics", "entries": []}}

• fdic_query_financials≈ 3622 tokens

  Pull a multi-institution, multi-quarter Call Report panel — one row per institution per quarter — filtered by CERTs, headquarters state, asset range, and thresholds on any catalog metric. Use it to screen (every bank in a state with a noncurrent-loan rate above 3%) or to build a trend panel for SQL. Returns an inline preview sorted as requested; when the panel exceeds the preview it is staged as a dataframe for fdic_dataframe_query. With no dates it covers the latest published quarter only.

  Paramètres, retour & exemple (11)

  Paramètres

  • certs · array · optionnel
    Nonempty selection, at most 1000 raw CERTs. Deduplicated before querying the first 100; deferred_certs holds the rest for another call. Omit to screen every filer.
  • limit · integer · optionnel
    Positive inline preview count, bounded by the already-fetched panel. A larger panel is staged whole as a dataframe when this deployment stages dataframes.
  • state · string · optionnel
    Headquarters state: two-letter code in any case or full name. Branch locations are in fdic_get_deposits.
  • metrics · array · optionnel
    At most 1000 raw metric names. Deduplicated before querying the first 30; deferred_metrics holds the rest. Sort/filter metrics are always added. Omit or pass [] for the default health set.
  • sort_by · string · optionnel · total_assets | total_liabilities | total_deposits | domestic_deposits | insured_deposits | uninsured_deposits | insured_deposit_share | brokered_deposits
    Metric to order the preview (and the staged table) by; added to metrics when absent. Omit to order by newest quarter, then CERT.
  • to_date · string · optionnel
    Latest quarter, in the same forms as from_date. Omit for the latest published quarter; beside from_date, a later quarter is cut back to it.
  • from_date · string · optionnel
    Earliest quarter: a quarter-end date (2024-03-31), the same without dashes, or a quarter label (2024Q1). Omit for to_date alone.
  • max_assets · number · optionnel
    Maximum total assets in that quarter, thousands of US dollars; applied to each quarter's report.
  • min_assets · number · optionnel
    Minimum total assets in that quarter, thousands of US dollars (1000000 = $1 billion); applied to each quarter's report.
  • sort_order · string · optionnel · asc | desc
    desc (default, largest first) or asc; applies to sort_by. Rows without a value sort last.
  • metric_filters · array · optionnel
    Up to 5 metric thresholds, all of which a row must meet. A threshold on a capital ratio or insured_deposit_share skips filers that did not report it. Each filtered metric is added to metrics.

  Exemple d'appel

  {"name": "fdic_query_financials", "arguments": {"certs": [], "limit": 1, "state": "texte", "metrics": [], "sort_by": "total_assets", "to_date": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cap": 1, "rows": [], "error": {}, "shown": 1, "notice": "texte", "dataset": {}, "truncated": true, "data_as_of": "texte", "report_dates": {}, "rows_fetched": 1, "panel_row_cap": 1, "deferred_certs": []}}

• fdic_search_failures≈ 3721 tokens

  Search FDIC-insured bank failures and assistance transactions since 1934 by name, CERT, headquarters state, failure date range, resolution method, or size. Returns each event with failure date, acquirer, total assets and deposits, and the FDIC's estimated loss to the insurance fund, plus totals over every matching event; group_by adds counts and losses per year, state, method, or fund. Searches failures only unless resolution is set to assistance or all. Dollar amounts are in thousands.

  Paramètres, retour & exemple (12)

  Paramètres

  • name · string · optionnel
    Failed institution name, up to 100 characters; every word of two or more letters or digits must appear in the name FDIC recorded (e.g. "silicon valley"). Case-insensitive. A standalone NA is ignored beside other words, so it also finds names recorded with N.A.
  • sort · string · optionnel · date_desc | date_asc | loss_desc | assets_desc
    date_desc (newest first, default), date_asc, loss_desc (largest estimated loss first), or assets_desc.
  • certs · array · optionnel
    Nonempty selection of at most 1000 raw CERTs; deduplicated before querying the first 50. deferred_certs holds the rest for another call. Events before 1977 carry no CERT.
  • limit · integer · optionnel
    Events per page; accepts 1–10000, executes at most 200. effective_limit reports the applied count; use next_offset to continue.
  • state · string · optionnel
    Failed institution's headquarters state: two-letter code in any case or full name.
  • offset · integer · optionnel
    Events to skip (0–100,000); pass next_offset from the previous page.
  • methods · array · optionnel
    How each event was resolved: PA purchase and assumption of all deposits, PI P&A of insured deposits only, P&A P&A with deposit scope undetermined, IDT insured deposit transfer, ABT asset-backed transfer, PO payout, DINB payout through a Deposit Insurance National Bank, A/A assistance transaction, REP reprivatization, MGR FSLIC management takeover, OBAM undocumented assistance code.
  • to_date · string · optionnel
    Latest failure date to include (YYYY-MM-DD).
  • group_by · string · optionnel · year | state | method | insurance_fund
    Add counts, assets, deposits, and estimated losses per year, state, method, or insurance_fund over every matching event.
  • from_date · string · optionnel
    Earliest failure date to include (YYYY-MM-DD, e.g. 2023-03-10).
  • min_assets · number · optionnel
    Minimum total assets at the last report before failure, in thousands of US dollars.
  • resolution · string · optionnel · failure | assistance | all
    failure (default), assistance (open-bank assistance and similar transactions), or all. Echoed as resolution_filter.

  Exemple d'appel

  {"name": "fdic_search_failures", "arguments": {"name": "texte", "sort": "date_desc", "certs": [], "limit": 1, "state": "texte", "offset": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cap": 1, "error": {}, "shown": 1, "total": 1, "groups": [], "notice": "texte", "summary": {}, "failures": [], "truncated": true, "data_as_of": "texte", "next_offset": 1, "deferred_certs": []}}

• fdic_search_institutions≈ 2861 tokens

  Find FDIC-insured banks and savings institutions by name, CERT, location, size, charter class, or holding company — including closed, merged, and failed institutions. Name matching is fuzzy, case-insensitive, and also matches former and trade names (a result says which it matched); every word must match. Returns institution records keyed by CERT, the FDIC certificate number every other fdic_ tool takes, with active status, successor CERT for merged or failed institutions, holding company, and latest reported assets and deposits. Credit unions are insured by the NCUA and are not in this data.

  Paramètres, retour & exemple (12)

  Paramètres

  • city · string · optionnel
    Headquarters city as FDIC spells it (e.g. Seattle, St. Louis), up to 50 characters; matched exactly, as given or in title case, with a hyphen, apostrophe, or space between words also tried the other ways FDIC records it (Winston-Salem finds Winston Salem, Coeur d'Alene finds Coeur D Alene).
  • name · string · optionnel
    Institution name to match, up to 100 characters — current, former, or trade name, case-insensitive, every word required (e.g. "silicon valley"). Punctuation other than & ' . , - is ignored, and so is a standalone N.A. or NA, which then also matches "National Association".
  • sort · string · optionnel · relevance | assets_desc | name
    relevance (active institutions whose current name holds every word of name first, then every other match, each by match score; default when name is given — without name it falls back to assets_desc), assets_desc (largest first; the default otherwise), or name (A–Z).
  • certs · array · optionnel
    Nonempty CERT selection, at most 1000 raw items. Deduplicated first; the first 50 are queried and the rest returned as deferred_certs. missing_certs covers only processed_certs.
  • limit · integer · optionnel
    Institutions per page; accepts 1–10000, executes at most 100. effective_limit reports the applied count; use next_offset to continue.
  • state · string · optionnel
    Headquarters state: two-letter code in any case (wa) or full name (Washington); DC and territories accepted.
  • offset · integer · optionnel
    Matches to skip (0–100,000); pass next_offset from the previous page.
  • status · string · optionnel · active | inactive | any
    active, inactive (merged, failed, or closed), or any. Default: any when name or certs is given, otherwise active. The applied value is echoed as status_filter.
  • max_assets · number · optionnel
    Maximum latest reported total assets, in thousands of US dollars.
  • min_assets · number · optionnel
    Minimum latest reported total assets, in thousands of US dollars (1000000 = $1 billion).
  • bank_classes · array · optionnel
    Charter classes to include: N national bank, NM state nonmember bank, SM state member bank, SB federal savings bank, SI state savings bank, SL state savings and loan, OI insured branch of a foreign bank, NC noninsured non-deposit trust company.
  • holding_company_rssd · integer · optionnel
    Holding company RSSD ID from any result's holding_company.rssd; lists the institutions under that top holder. With status any, former subsidiaries are included under the holder they had at closing.

  Exemple d'appel

  {"name": "fdic_search_institutions", "arguments": {"city": "texte", "name": "texte", "sort": "relevance", "certs": [], "limit": 1, "state": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cap": 1, "error": {}, "shown": 1, "total": 1, "notice": "texte", "truncated": true, "data_as_of": "texte", "next_offset": 1, "institutions": [], "missing_certs": [], "status_filter": "active", "deferred_certs": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://fdic-banks.caseyjhand.com/mcp