com.insidergraph/insidergraph
REMOTE · API.INSIDERGRAPH.COM · SCANNED SEP 24
SEC insider intelligence: trades, 8-K events, planned sales, activist stakes - one entity graph.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 11 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2485 tokens (~225/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 11 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 12 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the com.insidergraph/insidergraph MCP server?
com.insidergraph/insidergraph is a hosted endpoint at https://api.insidergraph.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.insidergraph.com
claude mcp add --transport http com-insidergraph-insidergraph 'https://api.insidergraph.com/mcp'
{
"mcpServers": {
"com-insidergraph-insidergraph": {
"url": "https://api.insidergraph.com/mcp"
}
}
} {
"servers": {
"com-insidergraph-insidergraph": {
"type": "http",
"url": "https://api.insidergraph.com/mcp"
}
}
} [mcp_servers.com-insidergraph-insidergraph] url = "https://api.insidergraph.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-insidergraph-insidergraph": {
"type": "remote",
"url": "https://api.insidergraph.com/mcp",
"enabled": true
}
}
} openclaw mcp add com-insidergraph-insidergraph --url 'https://api.insidergraph.com/mcp' --transport streamable-http
mcp_servers:
com-insidergraph-insidergraph:
url: "https://api.insidergraph.com/mcp" {
"McpServers": {
"com-insidergraph-insidergraph": {
"Transport": "http",
"Url": "https://api.insidergraph.com/mcp"
}
}
} assistant mcp add com-insidergraph-insidergraph -t streamable-http -u 'https://api.insidergraph.com/mcp'
{
"mcpServers": {
"com-insidergraph-insidergraph": {
"type": "http",
"url": "https://api.insidergraph.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Sept 26 0
- Server version: 0.73.37 → 0.73.38 functional
- 22 Sept 26 0
- Server version: 0.73.36 → 0.73.37 functional
- 21 Sept 26 0
- Server version: 0.73.34 → 0.73.36 functional
- 14 Sept 26 0
- Server version: 0.73.32 → 0.73.34 functional
- 13 Sept 26 0
- Server version: 0.73.30 → 0.73.32 functional
- 11 Sept 26 0
- Server version: 0.73.11 → 0.73.30 functional
- 10 Sept 26 0
- Server version: 0.73.6 → 0.73.11 functional
- 9 Sept 26 0
- Server version: 0.73.2 → 0.73.6 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Sept 2026 · Probed https://api.insidergraph.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.insidergraph.com | CN=YE1,O=Let's Encrypt,C=US | 2 Sept 2026 | 1 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 6430c8e075bdae791af75eac964a05b1faa |
| SANs: api.insidergraph.com | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.insidergraph.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| insidergraph.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.insidergraph.com/mcp | Verified | 200 | |
| http (plaintext) | http://api.insidergraph.com/mcp | HTTPS enforced | 308 | https://api.insidergraph.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
cluster_buys Cluster buys ~99
Find issuers where multiple distinct insiders independently bought with their own money (code P) inside a window - a signal raw EDGAR cannot answer. Sorted by total value.
| Name | Type | Req | Description |
|---|---|---|---|
| min_distinct_insiders | integer | – | Minimum distinct buyers per issuer, default 2. |
| min_value_usd | number | – | Minimum combined buy value per issuer in USD. |
| window_days | integer | – | Lookback window in days, default 30. |
No output schema declared.
No examples provided.
company_profile Company insider profile ~157
START HERE for any company question: one call returns the full insider picture for a ticker or company name - current 5%+ stakeholders (13D/13G), insider buy/sell activity (Form 4), announced sales (Form 144), and recent material events (8-K). Every row links its SEC filing; next_tools names the tool for each deeper question.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Any identifier: ticker in any format (NVDA, NASDAQ:AAPL, $NVDA, BRK.B), company name, CIK number, US ISIN, or CUSIP. |
| window_days | integer | – | Lookback for insider activity, planned sales, and events; default 90, cap 730. |
No output schema declared.
No examples provided.
describe_coverage Coverage and access tier ~61
Orientation: what this server covers RIGHT NOW - per-feed live date ranges (coverage deepens daily toward the backfill horizon), your access tier, and an example question per tool. Call this first when unsure what to ask or whether a date range is covered.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
find_company Resolve a company identifier ~116
Resolve any company identifier to its EDGAR identity: ticker in any format (AAPL, NASDAQ:AAPL, $NVDA, BRK.B), company name, CIK number, US ISIN, or CUSIP. Returns ranked candidates with name, ticker, and CIK. Use it when unsure of the exact ticker before calling the search tools.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | The identifier to resolve, e.g. "nvidia", "NASDAQ:AAPL", "1045810", "US0378331005". |
No output schema declared.
No examples provided.
get_insider_trades Search insider trades ~287
Search normalized insider transactions from SEC Forms 3/4/5 (US public companies). Returns rows with pre-computed value_usd and a quote-ready summary string with the SEC filing link.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination token from the previous response's page.next_cursor; pass it back verbatim to fetch the next page. |
| exclude_10b5_1 | boolean | – | Drop pre-scheduled 10b5-1 plan transactions; true (default) for signal-seeking, false for full audit. |
| insider | string | – | Substring match on the insider's name, e.g. "MUSK". |
| limit | integer | – | Max rows per page, default 50, cap 500. |
| min_value_usd | number | – | Minimum transaction value in USD (shares x price). |
| relationship | string | – | Filter by insider role. |
| since | string | – | Earliest transaction date, YYYY-MM-DD. |
| tickers | array | – | Ticker symbols to include, e.g. ["NVDA","AAPL"]. Empty = all issuers. |
| txn_type | string | – | buy (open-market/private purchase P), sell (S), grant (A), exercise (M/X), or gift (G). Omit for all. |
| until | string | – | Latest transaction date, YYYY-MM-DD. |
No output schema declared.
No examples provided.
get_material_events Search material corporate events ~279
Search SEC 8-K material corporate events (bankruptcies, restatements, officer departures, delistings, cyber incidents, earnings, M&A...) normalized to item codes, with SEC filing links.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination token from the previous response's page.next_cursor; pass it back verbatim to fetch the next page. |
| high_signal | boolean | – | Only distress-grade items (1.03, 1.05, 2.04, 2.06, 3.01, 4.02, 5.02). Overrides item_codes. |
| item_codes | array | – | 8-K item numbers, e.g. ["1.03","5.02"]. 1.03=bankruptcy, 4.02=restatement, 5.02=officer departure, 1.05=cyber incident, 2.02=earnings, 8.01=other. |
| limit | integer | – | Max rows per page, default 50, cap 500. |
| since | string | – | Earliest event date, YYYY-MM-DD. |
| tickers | array | – | Ticker symbols to include, e.g. ["NVDA"]. Empty = all issuers. |
| until | string | – | Latest event date, YYYY-MM-DD. |
No output schema declared.
No examples provided.
get_planned_sales Search announced insider sales ~198
Search SEC Form 144 notices - insiders' PROPOSED sales of restricted/control stock, filed BEFORE the sale executes (the Form 4 reports execution after). A leading indicator: announced-but-not-yet-executed insider selling, with broker and approximate sale date.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination token from the previous response's page.next_cursor; pass it back verbatim to fetch the next page. |
| limit | integer | – | Max rows per page, default 50, cap 500. |
| min_value_usd | number | – | Minimum aggregate market value of the proposed sale in USD. |
| seller | string | – | Substring match on the seller's name. |
| since | string | – | Earliest approximate sale date, YYYY-MM-DD. |
| tickers | array | – | Ticker symbols to include. Empty = all issuers. |
| until | string | – | Latest approximate sale date, YYYY-MM-DD. |
No output schema declared.
No examples provided.
get_stakes Search 5%+ ownership stakes ~236
Search 5%+ beneficial-ownership stakes from Schedules 13D/13G. 13D = ACTIVE intent (activists, acquirers - market-moving); 13G = passive. Latest filing per (issuer, holder) wins, so results are current stakes; superseded history stays in the archive.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination token from the previous response's page.next_cursor; pass it back verbatim to fetch the next page. |
| holder | string | – | Substring match on the reporting person, e.g. "Icahn". |
| limit | integer | – | Max rows per page, default 50, cap 500. |
| min_percent | number | – | Minimum percent of class held, e.g. 10. |
| schedule_type | string | – | activist (13D family), passive (13G family), or all (default). |
| since | string | – | Earliest event date, YYYY-MM-DD. |
| tickers | array | – | Ticker symbols to include. Empty = all issuers. |
| until | string | – | Latest event date, YYYY-MM-DD. |
No output schema declared.
No examples provided.
list_recent_filings Recent filings firehose ~148
The firehose: recently ingested filings across ALL feeds (Forms 3/4/5, 8-K, 144, Schedules 13D/13G) with acceptance timestamps and SEC filing links, newest first. Use to see what just came in.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination token from the previous response's page.next_cursor; pass it back verbatim to fetch the next page. |
| feeds | array | – | Feeds to include. Empty = all. |
| limit | integer | – | Max rows per page, default 50, cap 200. |
| since | string | – | Earliest acceptance time, RFC3339 or YYYY-MM-DD. |
No output schema declared.
No examples provided.
planned_vs_executed Announced vs executed sales ~299
Cross-feed signal: pair each Form 144 notice (an insider's ANNOUNCED sale) with the seller's actual Form 4 sale executions - same person, exact CIK identity, matched inside the notice's factual Rule 144 validity window (90 days from filing). Surfaces execution ratios and, most notably, announced-but-never-executed sales: insiders whose notice expired with no sale. Raw EDGAR cannot answer this in one query.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | Opaque pagination token from the previous response's page.next_cursor; pass it back verbatim to fetch the next page. |
| limit | integer | – | Max rows per page, default 50, cap 500. |
| min_planned_usd | number | – | Minimum planned sale value in USD. |
| seller | string | – | Substring match on the seller's name. |
| since | string | – | Earliest approximate sale date, YYYY-MM-DD. Default: 90 days back. |
| status | string | – | Filter: executed, pending (window still open), not_executed (window elapsed, no matching sale - the leading-indicator residue), unverifiable (the seller entity never files Form 4 - trusts and foundat… |
| tickers | array | – | Ticker symbols to include. Empty = all issuers. |
| until | string | – | Latest approximate sale date, YYYY-MM-DD. |
No output schema declared.
No examples provided.
trades_before_events Insider trades before bad news ~223
Cross-feed signal: for issuers that filed a material 8-K event, show SEC Form 4 insider transactions in the N days BEFORE the event - e.g. insider selling before a bankruptcy, restatement, or delisting. Joins two feeds through the shared entity graph; raw EDGAR cannot answer this in one query.
| Name | Type | Req | Description |
|---|---|---|---|
| days_before | integer | – | Lookback window before the event date, default 60. |
| item_codes | array | – | 8-K items to anchor on, e.g. ["1.03","4.02","3.01"]. Default: distress items 1.03, 2.06, 3.01, 4.02. |
| limit | integer | – | Max rows, default 50, cap 500. |
| min_value_usd | number | – | Minimum insider transaction value in USD. |
| since | string | – | Earliest event date, YYYY-MM-DD. |
| txn_type | string | – | Insider transaction filter: sell (default - selling before bad news), buy, or all. |
No output schema declared.
No examples provided.
What is the com.insidergraph/insidergraph MCP server?
com.insidergraph/insidergraph is an MCP server listed in the public MCP registry as com.insidergraph/insidergraph. SEC insider intelligence: trades, 8-K events, planned sales, activist stakes - one entity graph. This page covers its hosted endpoint (https://api.insidergraph.com/mcp).
Is the com.insidergraph/insidergraph MCP server safe to use?
com.insidergraph/insidergraph scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.insidergraph/insidergraph MCP server expose?
com.insidergraph/insidergraph exposes 11 tools: cluster_buys, company_profile, describe_coverage, find_company, get_insider_trades, and 6 more. Their descriptions and schemas cost roughly 2,103 tokens of context every time the server is loaded.
Does the com.insidergraph/insidergraph MCP server require authentication?
No. We connected to com.insidergraph/insidergraph without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the com.insidergraph/insidergraph MCP server still maintained?
com.insidergraph/insidergraph is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.