io.github.adididitagain/finance-mcp
NPM · FINANCE-DATA-MCP · SCANNED AUG 7
Live stock, crypto, SEC filings, insider trades, FX and macro data for LLM agents.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security78
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known medium-severity CVE affects fast-xml-parser 4.5.7, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- Dependency health was assessed across the 96 of 100 dependencies we could resolve, so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 0 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability67
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2430 tokens (~220/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · finance-data-mcp
claude mcp add adididitagain-finance-mcp -- npx -y finance-data-mcp
codex mcp add adididitagain-finance-mcp -- npx -y finance-data-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"adididitagain-finance-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"finance-data-mcp"
],
"enabled": true
}
}
} openclaw mcp add adididitagain-finance-mcp --command npx --arg -y --arg finance-data-mcp
mcp_servers:
adididitagain-finance-mcp:
command: "npx"
args: ["-y", "finance-data-mcp"] {
"mcpServers": {
"adididitagain-finance-mcp": {
"command": "npx",
"args": [
"-y",
"finance-data-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 7 Aug 26 +29
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- First check of Schema quality: fail functional
- First check of Schema quality: excellent functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 100 functional
- 6 Aug 26 32
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 7 Aug 2026 · Analysed npm/[email protected]
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-gh4j-gqv2-49f6 | CVE-2026-41650 | medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | yes |
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Deprecated | 94 |
| Stale | 29 |
| Tree resolution | Partial |
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
get_crypto_market Get top crypto by market cap ~190
Ranked table of the largest cryptocurrencies by market cap, with 24h and 7d performance, from CoinGecko. Use this to survey or discover the market — 'what are the biggest coins', 'what moved this week'. When you already know which coins you care about, use get_crypto_price instead: it takes explicit names and avoids pulling a whole ranking. Always returns the top N by market cap starting at rank 1; there is no paging or filtering, so a coin outside the top `limit` will not appear no matter how it performed.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many coins to return, ranked from #1 by market cap. Max 100. |
| vs_currency | string | – | Currency that prices, market caps and volumes are denominated in: usd, eur, inr, jpy, or a crypto like btc. Does not filter which coins are returned. |
No output schema declared.
No examples provided.
get_crypto_price Get crypto price ~177
Spot price, 24h change, market cap, and 24h volume for specific cryptocurrencies you name, from CoinGecko. Use this when you know which coins you want; use get_crypto_market instead to rank the market or discover the largest coins. Accepts common tickers ("btc", "eth", "sol") or CoinGecko ids ("bitcoin", "matic-network"); unknown names are reported back rather than failing the whole call, so a typo returns the other coins. Prices are near-real-time but not exchange-official. Stocks and FX are not available here — use get_stock_quote and get_fx_rate.
| Name | Type | Req | Description |
|---|---|---|---|
| coins | array | yes | e.g. ["btc", "eth", "solana"] |
| vs_currency | string | – | Quote currency: usd, eur, inr, jpy, btc, … |
No output schema declared.
No examples provided.
get_economic_indicator Get economic indicator ~246
Macroeconomic time series by country from the World Bank — GDP, GDP growth, inflation, unemployment, population, government debt, trade balance and more — returned newest year first with year-over-year change. Use this for country-level economics; it says nothing about any individual company or security, which is what the market-data and SEC tools cover. Data is **annual only**, so it cannot answer questions about this month or this quarter, and reporting lags: the last one or two years are frequently unreported and are omitted rather than returned as zero. Coverage varies by country and indicator, so a valid pairing can still be empty.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | ISO code: US, IN, CN, GB, JP, DE — or "WLD" (world), "EUU" (EU) |
| indicator | string | – | One of: gdp, gdp_growth, gdp_per_capita, inflation, unemployment, population, interest_rate, government_debt, exports, imports, current_account, fdi, life_expectancy, co2 — or a World Bank indicator… |
| limit | integer | – | Number of years, most recent first |
No output schema declared.
No examples provided.
get_fx_rate Get FX rate ~167
Convert between two currencies at the latest published reference rate, with the change since the prior session. Returns both the rate and, when `amount` is given, the converted total. Major currencies come from the European Central Bank (published once per business day, so the rate is a daily fix rather than a live tick); pairs outside the ECB's ~30 currencies fall back to Yahoo. Use get_crypto_price for crypto — BTC and ETH are not currencies here. These are indicative mid-market rates, not dealable quotes, so they will not match what a bank charges.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | – | Amount of the base currency to convert |
| from | string | yes | Base currency code, e.g. USD |
| to | string | yes | Quote currency code, e.g. INR |
No output schema declared.
No examples provided.
get_insider_activity Get insider trading activity ~261
What a company's own officers, directors and 10% owners have been buying and selling in its stock, from their SEC Form 4 filings. Insiders must report within two business days, so this is the freshest disclosed signal about a company available anywhere. Crucially, it separates **open-market trades** — where someone actively chose to buy or sell — from **mechanical** activity like options vesting and shares withheld to pay the tax on that vesting. Most reported 'insider selling' is mechanical and means nothing; headlines routinely conflate the two. Read the open-market numbers, and treat the mechanical count as noise. US SEC registrants only. This reports what was disclosed and does not interpret it — insider buying and selling both have innocent explanations, and neither predicts the share price.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | Ticker ("AAPL"), CIK, or company name |
| limit | integer | – | How many Form 4 filings to read, newest first. Each is a separate SEC request, so keep this modest — 15 typically covers a few months at a large company. |
| since | string | – | Only include filings on or after this date, YYYY-MM-DD (e.g. "2026-01-01") |
No output schema declared.
No examples provided.
get_price_history Get price history ~216
Historical OHLCV candles for a stock, ETF, index, or FX pair from Yahoo Finance, plus the period return and a high/low/average summary. Use this for 'how has NVDA done this year?' or any question about change over time; use get_stock_quote when you only need the current price. Does not cover cryptocurrencies. Intraday intervals (1m–1h) are only retained by Yahoo for short ranges — pair them with 1d/5d/1mo, and use 1d or coarser for 1y and beyond, or the response comes back empty. Candles with no trade are omitted, so gaps in the series are expected.
| Name | Type | Req | Description |
|---|---|---|---|
| interval | string | – | Candle size. Intraday intervals only work for short ranges. |
| max_rows | integer | – | Cap on candles returned; the series is downsampled evenly if longer. |
| range | string | – | Lookback window |
| symbol | string | yes | Ticker symbol, e.g. AAPL |
No output schema declared.
No examples provided.
get_sec_filings Get SEC filings ~224
Recent SEC EDGAR filings for one US-listed company, newest first, with direct document URLs you can cite or fetch. Filter by form type (10-K annual report, 10-Q quarterly, 8-K material event, 4 insider trade, S-1 IPO, 13F fund holdings, DEF 14A proxy); an amended form such as 10-K/A is returned when you ask for its base form. Use this to find documents for a company you can already name. Use search_sec_filings instead to search filing text across all companies, and get_sec_financials to read reported numbers rather than locate documents. US SEC registrants only — non-US listings do not file with EDGAR.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | Ticker ("AAPL"), CIK ("320193"), or company name |
| forms | array | – | Form types to keep, e.g. ["10-K", "8-K"]. Omit for all forms. |
| limit | integer | – | Maximum filings to return, newest first. Applied after the form filter. |
No output schema declared.
No examples provided.
get_sec_financials Get SEC XBRL financials ~317
Reported financial line items straight from a US company's XBRL filings — revenue, net income, EPS, assets, cash, operating cash flow and more — as an annual or quarterly time series. These are as-filed audited figures, not analyst estimates or forecasts, so prefer this over any market-data tool for fundamentals. Use get_sec_filings instead when you want the documents rather than the numbers. Each row is labelled by the period it covers; where a later filing restated a period, the most recently filed value is returned. Filers tag the same concept differently, so a concept alias is tried against several us-gaap tags and the response names the tag actually used — expect the tag to differ between companies. US SEC registrants only.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | Ticker ("AAPL"), CIK, or company name |
| concept | string | – | One of: revenue, net_income, gross_profit, operating_income, eps, assets, liabilities, equity, cash, operating_cash_flow, capex, rd_expense, long_term_debt, shares_outstanding — or an exact us-gaap t… |
| limit | integer | – | Maximum periods to return, most recent first. 8 annual periods ≈ 8 fiscal years. |
| period | string | – | "annual" returns full-year figures from 10-Ks, "quarterly" returns 10-Q periods, "all" returns both interleaved. Annual is the right default for trend questions. |
No output schema declared.
No examples provided.
get_stock_quote Get stock quote ~186
Latest price and daily change for one or more stocks, ETFs, or indices, from Yahoo Finance. Use Yahoo-style symbols: AAPL, MSFT, VOO, ^GSPC (S&P 500), ^IXIC (Nasdaq), RELIANCE.NS (India), 7203.T (Japan). Call search_symbols first if you only have a company name. Returns a single point in time — use get_price_history for a series or a period return, and get_crypto_price for cryptocurrencies, which are not on Yahoo symbols. Prices may be delayed up to ~15 minutes and are not exchange-official, so do not treat them as execution prices. Symbols are looked up independently: one bad symbol does not fail the rest.
| Name | Type | Req | Description |
|---|---|---|---|
| symbols | array | yes | Ticker symbols, e.g. ["AAPL", "NVDA", "^GSPC"] |
No output schema declared.
No examples provided.
search_sec_filings Full-text search SEC filings ~237
Search the full text of every SEC filing since 2001 to find which companies discuss a topic — e.g. "AI data center capex" in 10-Ks. Wrap a phrase in double quotes for exact matching; unquoted terms match loosely and return far more noise. Use this for discovery across companies. When you already know the company, get_sec_filings is more direct. Results are ranked by EDGAR's own relevance, which favours companies with your query in their *name* — a search for a common term may surface a company called after it ahead of substantive discussion. Totals above 10,000 are reported as approximate. Filings before 2001 are not indexed.
| Name | Type | Req | Description |
|---|---|---|---|
| date_from | string | – | Earliest filing date, YYYY-MM-DD |
| date_to | string | – | Latest filing date, YYYY-MM-DD |
| forms | array | – | Restrict to form types, e.g. ["10-K"] |
| limit | integer | – | Maximum matching documents to return, by EDGAR relevance rank. |
| query | string | yes | Search text; wrap in quotes for an exact phrase |
No output schema declared.
No examples provided.
search_symbols Search ticker symbols ~155
Resolve a company or fund name to a ticker symbol using Yahoo Finance search. Call this first whenever you have a name rather than a symbol — "Apple" → AAPL — then pass the symbol to get_stock_quote or get_price_history. Covers equities, ETFs, and indices across global exchanges, so the same company may return several listings; prefer the one whose exchange matches the market you want. For US-listed companies you need SEC data on, get_sec_filings accepts a company name directly and needs no symbol lookup.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum matches to return, best match first. Raise it for ambiguous names. |
| query | string | yes | Company or fund name, e.g. "Vanguard S&P 500" |
No output schema declared.
No examples provided.