Model Context Protocol (MCP) server for freee API integration
Nothing to run from here
Tollbridge is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
93/100
tool-list score
34
tools declared
remote
at its publisher
—
calls last 7d
What it does
Free market data with provenance and paid decision intelligence for AI agents.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http tollbridge-mcp https://api.tollbridge.app/mcp
# 2 — ask your agent for something these tools do
# tollbridge_market_state, tollbridge_liquidation_risk, tollbridge_funding_opportunities and 31 more
Tollbridge costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
CLAll 1 server
clawpipe1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http tollbridge-mcp https://api.tollbridge.app/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
34 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
FREE market snapshot for BTC/ETH/SOL on hyperliquid: fresh quote plus derived mid and spread (bps) with full provenance and freshness. Free per the Tollbridge open-data carve-out — no payment required, no probability claim is made.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Any symbol the venue universe lists (see tollbridge_universe) — not only BTC/ETH/SOL |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. NOT AVAILABLE YET (the market-wide liquidation tape is not on record): the venue publishes no market-wide liquidation feed on info REST — liquidations appear only as a marker on per-wallet fills or on node trade files, and a single wallet is not the book. To light this question the operator mounts a Hyperliquid node t
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Any symbol the venue universe lists (see tollbridge_universe) — not only BTC/ETH/SOL |
| payer | string | no | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. Funding-anomaly scan across BTC/ETH/SOL: per-asset funding (bps), basis (bps) and the S06 engine decision with explicit assumptions (economics_modeled: none — a policy verdict, not a trade; S06 is LIVE — emit and the resolver read the same venue settlement tape). S07 persistence is LIVE — the persistence instrument: e
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | no | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. Wallet intel on a Base address: the profile read. Account DECISION questions — S09 Wallet accumulation and S10 Wallet distribution — are LIVE (resolvers registered; emit and resolve both read the venue ACCOUNT tape, Hyperliquid clearinghouseState). Ask them through tollbridge_decision with a wallet subject; the profil
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | yes | — |
| address | string | yes | — |
| payer | string | no | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. LIVE: the Hyperliquid ACCOUNT’s liquidation proximity, over {allow, review, block} — block when the nearest position sits within 5% of its liquidation price, review within 15% or at ≥5× account leverage, allow otherwise (a flat account is allow). Reads the venue’s own clearinghouseState; emit and resolver share that t
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Any symbol the venue universe lists (see tollbridge_universe) — not only BTC/ETH/SOL |
| address | string | yes | — |
| candidate | object | yes | — |
| payer | string | no | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. LIVE: the same account liquidation-proximity distribution as account risk, labelled with the token subject kind. PAID — x402 exact USDC on Base (eip155:8453) or Scout credits via the credit rail: pass payer (a Base address 0x…) as a tool argument, or send x-tollbridge-payer: <address> on the MCP HTTP request, or s
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Any symbol the venue universe lists (see tollbridge_universe) — not only BTC/ETH/SOL |
| address | string | yes | — |
| token | object | no | — |
| candidate | object | yes | — |
| payer | string | no | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. Deep decision: ask a catalog signal through the decision engine for an asset on base — probability, confidence, policy verdict, horizons and ledger-grade provenance. asset may be ANY symbol tollbridge_universe lists (not only BTC/ETH/SOL); an unknown or delisted symbol is a typed 404. LIVE set (the only askable instru
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Any symbol the venue universe lists (see tollbridge_universe) — not only BTC/ETH/SOL |
| chain | string | yes | — |
| question_id | string | yes | — |
| question_version | string | no | — |
| payer | string | no | — |
FREE price list for every Tollbridge surface: per-endpoint USDC prices (atomic amounts), subscription plans with effective per-credit rates, booster credit packs and the credit anchor. Free per the Tollbridge open-data carve-out — the exact numbers an agent needs before calling any paid tool. No payment required.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | no | — |
FREE first-run: grant the free taste (3 questions at the entry tier, 1000 credits each) to a Base address (payer, 0x + 40 hex) so it can pay for decision.deep calls over the credit rail — no x402 facilitator needed. Idempotent: an address that already holds its taste is a successful no-op (granted: false) that still returns the readable balance, never a double grant. The agent first-run recipe is:
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
FREE read of a past decision from the append-only ledger by decision_id (UUID): probability, confidence, policy verdict, hashes and payment linkage — the record exactly as the engine wrote it, never a recomputation. Unknown ids are a typed DECISION_NOT_FOUND refusal. No payment required.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| decision_id | string | yes | — |
FREE resolution outcome of a settled decision by decision_id (UUID): the product grammar realized | obtains | not | unresolvable (CHOICE claims resolve realized with the predicted_label/realized_label/match sentence; the statistic is the parsed OBJECT — the identical data object GET /v1/resolutions/:decision_id serves), or a dated {status: pending, horizon_end} while the horizon is still open — no
| Parameter | Type | Required | Notes |
|---|---|---|---|
| decision_id | string | yes | — |
FREE — THE EVIDENTIARY BUNDLE. For one decision (full UUID or 8+ char id prefix), everything a hostile auditor needs to reconstruct the forecast, the payment and the grade: the full decision record verbatim, its resolution (the terminal outcome OR an honest {status: pending, horizon_end} — never a fabricated match), the payment leg (rail x402/credits/none with the on-chain tx or the credit draws),
| Parameter | Type | Required | Notes |
|---|---|---|---|
| decision_id | string | yes | A full decision UUID, or an 8+ character prefix that resolves to the unique match. |
FREE reliability calibration per question: decile buckets with the predicted-band midpoint and the realized empirical frequency, publication-gated — below the per-question floor a bucket shows its counts and published: false ("n too small" is data, not an error). No payment required.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| question_id | string | no | — |
| subject | string | no | — |
FREE — THE ONE OBJECT. For one asset, all eleven questions in fixed catalog order (S01…S11), each with its DERIVED state: "live" (askable, a terminal result is on record or none exists yet), "pending" (a clock is open — carries decision_id and horizon_end), "empty" (no decision on record — data, not an error) or "dark" (blocked — ask.allowed false with the exact blocker, e.g. "0 of 24 hourly obser
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Any symbol the venue universe lists (see tollbridge_universe) — not only BTC/ETH/SOL |
| wallet | string | no | — |
FREE — MANY ASSETS, ONE OBJECT. The cross-asset cut of the question sheet: for the assets you name, pending is every open clock (soonest horizon_end first, each row carrying its asset and decision_id), latest_terminal is the last dead chip per question on each asset, and dark names each blocked question ONCE with its exact blocker. Every row is a sheet row — this tool re-derives nothing, so
| Parameter | Type | Required | Notes |
|---|---|---|---|
| assets | string | no | Comma-separated venue symbols (e.g. "BTC,ETH,SOL,HYPE"); omitted → BTC,ETH,SOL. Unknown symbols are skipped with a warning. |
FREE — THE TAPE. The newest TERMINAL chips, newest-first: each row is {decision_id, question_id, asset, output, predicted, realized, match, observed, status, resolved_at, horizon_end}. CHOICE rows carry predicted/realized/match (which label obtained); PROBABILITY rows carry the FROZEN predicted p (the number you bought at emit) plus observed (true/false) — predicted is null exactly when the emit r
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | — |
FREE open clocks: the pending decisions across the AVAILABLE questions (S01 · S05 · S06 · S07 · S08 · S09 · S10 · S11 · S12 · S13 · S14 · S15 · S16 · S17 · S18 · S19 · S20 · S21 · S22 · S23 · S24 · S25 · S26 · X05 · X05 · X05 · X05 · X05 · X06 · X06 · X06 · X06 · X06 · X07 · X07 · X07 · X07 · X07 · X08 · X08 · X08 · X08 · X08 · X08 · X09 · X09 · X09 · X09 · X09 · X09) and canonical assets (BTC · E
No parameter schema on file.
FREE venue universe: the live perps ranked by 24h notional volume (top 50 by default), each with mid/mark price, 24h change, 24h volume, open interest in USD, funding and max leverage. THIS IS THE AUTHORITY on which symbols exist — an asset is legal exactly when it appears here and delisted is false. Computed from the venue tape and cached for at most 15 seconds (never a curated list); delisted na
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | — |
FREE market-cap list: the largest coins by market capitalization (top 50 by default), rank-ordered with each coin's market cap, price and 24h change. This is the DISCOVERY list a user picks a subject from — it is NOT the ask authority. Each row carries askable: true when the venue universe also trades it, false when it does not, and null when the venue could not be read (never a lie in either dire
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. DEFERRED (v1): the wallet indexer is unwired (public-RPC 503) — calls refuse typed (PROVIDER_DOWN, nothing charged); the state-machine projection returns when the indexer lands. Wallet state machine on base (WATCHING → ACCUMULATING → HIGH_CONVICTION → DISTRIBUTING → EXITING): current state, since, sample adequacy, 30d
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | yes | — |
| address | string | yes | — |
| payer | string | no | — |
FREE — BEAT THE HOUSE. Lock your OWN call on an OPEN clock before its horizon: {decision_id, call} where call is "obtains" or "not" on a probability question, or the question's own label (e.g. trending_up) on a choice question. The call is FREE — credits are spent only on the ask that opened the clock — and it NEVER moves the house number (the house probability is frozen into the row, so you saw i
| Parameter | Type | Required | Notes |
|---|---|---|---|
| decision_id | string | yes | — |
| call | string | yes | — |
| call_probability | number | no | — |
FREE — YOUR SCOREBOARD AGAINST THE HOUSE on identical events: n, graded, open, player/house accuracy, both Brier scores (lower is better; a bare call is a certainty claim and grades 0 or 1), per question. Every number is a count of real graded calls — n=0 reports nulls, never fabricated zeros. Strictly personal: name your payer address and this reads only your own calls; no public leaderboard exis
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
FREE REGISTRATION of a scheduled run: a question (+ optional asset or wallet subject) is asked automatically every horizon window until the cap or a delete stops it. Registration itself costs nothing — EACH RUN bills its question's price at settle time through the same paid path as any ask, from the named payer's credit balance. The cap is real and acknowledged IN THE CALL: spend_cap_credits must
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
| question_id | string | yes | — |
| asset | string | no | Any symbol the venue universe lists (see tollbridge_universe) — not only BTC/ETH/SOL |
| wallet | string | no | — |
| spend_cap_credits | integer | yes | — |
| acknowledge_spend_cap | boolean | yes | — |
FREE — YOUR SCHEDULED RUNS, newest first: every appointment registered for the payer you name, with its question, subject, spend cap, credits already spent, status (active | paused | spend_cap_reached), next run time and the last decision each run produced. Strictly personal: this reads only the named payer's own runs — no cross-payer listing exists. An empty list is data (nothing registered), not
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. PAID ADD-ON — register an outcome hook endpoint: a public http(s) URL that Tollbridge POSTs to when one of the payer's decisions settles (realized or unresolvable). One registration debits the billing.addon.hook add-on and buys a 30-day window; re-registering the same URL inside its window replays honestly (no second
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
| url | string | yes | — |
x402 exact USDC Base · after paying, poll /v1/resolutions/:id until horizon_end. PAID ADD-ON — export the DECISION HISTORY for one subject (an asset symbol, or a question id) over one UTC calendar month: the append-only public record — claim, distribution or probability, confidence, hashes, decided_at, horizon, and the outcome once it settles — as CSV or JSONL. One export debits the billing.export
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
| scope | string | yes | — |
| subject | string | yes | — |
| from | string | no | — |
| to | string | no | — |
| format | string | no | — |
FREE — THE MEASURED RECORD: the Decision-Intelligence Index exactly as published at GET /v1/intelligence — the composite (or its verbatim "insufficient sample — no index claim" suppression below the index floor; a null composite is NOT a zero), the full Brier decomposition (reliability, resolution, uncertainty, skill vs the base-rate reference), the evidence counts behind every number (decided, re
No parameter schema on file.
FREE — THE RELEASE FEED: every intelligence release with its measured deltas AND its rejections, exactly as published at GET /v1/intelligence/releases — version, parent, status (candidate | active | superseded | rejected), the dataset window and hash the proof was measured on, the walk-forward evaluation (delta Brier and delta log loss with their 95% confidence intervals, per-family deltas) and th
| Parameter | Type | Required | Notes |
|---|---|---|---|
| status | string | no | — |
FREE — YOUR ARENA STANDING, keyed by your wallet address: rank (Initiate → Strategist → Analyst → Forecaster → Oracle, EARNED from XP and never bought), total XP with progress to the next rank, the automatic credit-cost discount your rank grants, accuracy over your graded calls, current and longest streak, markets covered, and the badges you have earned. Every number is derived from measured calls
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
FREE — THE QUEST BOARD: the daily and weekly quests with your live progress, counted from the append-only XP journal (no separate counter). Each quest names its target, its XP reward, how far you are, and the completion window key. Complete one to bank its XP toward your next rank. No payment required; name your payer address.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
FREE — YOUR SEASON STANDING: a season is ONE week (Monday 00:00 UTC to the next Monday, when the board freezes and the top players earn a permanent season badge). This names the live season key, when it started and when it ends (seconds_remaining), and YOUR season facts measured INSIDE the window from the append-only XP journal and the graded calls: season XP, calls locked, correct resolutions, ac
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
FREE — WHAT EARNS THE MOST XP NEXT: the OPEN quests for your wallet ranked deterministically by their XP reward and how little remains, each with the glossary verb that completes it (ask a question, lock a call, cover a market). Also reports your agent-track declaration (POST /v1/arena/agent) and the total XP still available this window. The recommendation is arithmetic over the quest board — neve
| Parameter | Type | Required | Notes |
|---|---|---|---|
| payer | string | yes | — |
FREE — THE PUBLIC ARENA BOARD over opted-in players, ranked by XP (default), accuracy, or current streak, with human and agent tracks. The entire public shape is a handle, rank tier, XP and call record: NO payment field ever joins the ranking (paying more cannot move you up). A payer must opt in (POST /v1/arena/opt-in) to appear; a wallet with a record but no opt-in is absent, never shown. No paym
| Parameter | Type | Required | Notes |
|---|---|---|---|
| sort | string | no | — |
| track | string | no | — |
| limit | integer | no | — |
FREE — THE LEVEL CATALOG: the Intelligence Level bands (IL1..IL5+ with their credit cost ranges and the XP granted per ask and per correct call) and the earned rank ladder (Initiate → Oracle) with each rank's XP threshold and automatic credit-cost discount. Read this before you ask: it is exactly how the price of a question and the XP it earns are derived. No payment required; static.
No parameter schema on file.
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Tollbridge or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 93 / 100
Release 1.0.0 · scanned 20 Oct 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score93
Findings0 threat · 2 capability
Capabilitymoderate
Coveragemanifest
Verificationnot in this report
Surface digestfab9ed8a75f85b528e932d021a608cd87b93a18411aa2aa37e59913c877af604
Score vectorthreat 100 → client 93
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| tollbridge_market_state | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_liquidation_risk | external-sinkuntrusted-input | external-sink: keyword "http_request"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_funding_opportunities | external-sinkuntrusted-input | external-sink: keyword "http_request"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_wallet_intelligence | external-sinkuntrusted-input | external-sink: keyword "http_request"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_transaction_risk | external-sinkuntrusted-input | external-sink: keyword "http_request"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_token_risk | external-sinkuntrusted-input | external-sink: keyword "http_request"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_decision | external-sinkuntrusted-input | external-sink: keyword "http_request"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_pricing | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_scout | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tollbridge_get_decision | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_get_resolution | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_lineage | untrusted-input | untrusted-input: keyword "fetch", declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_calibration | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_sheet | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_blotter | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_feed | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_open_clocks | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_universe | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_marketcap | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_wallet_state | external-sinkuntrusted-input | external-sink: keyword "http_request"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_call | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tollbridge_calls | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_stand | external-sink | external-sink: declares readOnlyHint: false, openWorldHint: true |
| tollbridge_stands | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_hook | external-sink | external-sink: keyword "http_request", declares readOnlyHint: false, openWorldHint: true |
| tollbridge_export | external-sink | external-sink: keyword "http_request", declares readOnlyHint: false, openWorldHint: true |
| tollbridge_get_intelligence | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_list_releases | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_arena_profile | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_arena_quests | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_arena_season | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_arena_next_action | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_arena_leaderboard | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| tollbridge_arena_levels | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
flow-1
Untrusted input can drive an external action even though no sensitive source is exposed.
Supply chain and provenance
Integrityfirst-seen
Surface digestfab9ed8a75f85b52
Scanned2026-10-20
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.0.
1.0.0
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish Tollbridge can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.