CurrensorSAFE
Live currency converter — a one-file web app, plus a free plugin for Claude and ChatGPT with an in-chat card. 166 currencies, no sign-in.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A sleek currency converter you can self-host in seconds. Compare up to 5 currencies at once with live exchange rates, swap them around, search through 50 options. One HTML file, zero setup.
[→ Try it live](https://kay0sstheory.github.io/Currensor/) · → Use it inside Claude or ChatGPT
Use it inside Claude or ChatGPT
Currensor also runs as a plugin (an MCP server) for Claude and ChatGPT. Ask for a conversion in plain words and a live Currensor card appears right in the chat. Change the amount on the card and every currency updates instantly.
Plugin address:
https://currensor-mcp.currensor-mcp.workers.dev/mcp
Then ask: "Use Currensor to convert 250 CAD to INR, EUR and JPY."
- Live mid-market rates for 166 currencies, refreshed daily, with a backup rate feed
- No sign-in, no API key, nothing about you stored. The server keeps only anonymous daily counts (which app, which currency pair) to see if people find it useful
- Free and open source: the server is in
mcp/and runs on Cloudflare Workers
Features
- Live exchange rates — Updated hourly; the page checks again just after each update, and falls back to two daily public feeds if the hourly service is down
- 50 currencies — Gr
4fb7040f82a5OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add currensor-mcp -- npx -y [email protected]
{
"mcpServers": {
"currensor-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
convert_currency | read | Convert an amount from one currency into one or more others at live market rates, shown as an interactive card. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
streamable-http
wrangler
Gates applied: no_behavioural_pass.
4fb7040f82a5full audit observations/trust-audit/mcp-server/kay0sstheory__currensor.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 4fb7040f82a5 | SAFE | B | 89 | first audit |
Questions
What is the Currensor MCP server?
Live currency converter — a one-file web app, plus a free plugin for Claude and ChatGPT with an in-chat card. 166 currencies, no sign-in.
What tools does Currensor expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Currensor safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Currensor need?
No credential environment variables were found in its source, so it appears to need none.
How does Currensor run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as currensor-mcp at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (4fb7040f82a5), read on 2026-10-11. The repository is watched and re-audited when it changes.