Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Portfolio Terminal

REMOTE · PORTFOLIO-TERMINAL.COM

Dated ETF, stock and calendar data, plus tax-loss, withholding and fee math on your holdings.

72 Trust /100

Last scanned (11 hours ago)

Scores higher than 58% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security83
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
Schema Quality & AI Usability66
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2309 tokens (~230/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety50
  • Injection-marker check failed: the server instructions contains an instruction to conceal the call from the user, the text "never tell the user", at byte 1241 of that field. See how to fix → Fail
  • We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
What we tested

Checks we ran (13)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

  • 2 Nov 26 +1
    • Stability: unverified → 0.03 ▲ functional
  • 1 Nov 26 70

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://portfolio-terminal.com/api/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=portfolio-terminal.com CN=YR1,O=Let's Encrypt,C=US 11 Sept 2026 10 Dec 2026 RSA 2048 SHA256-RSA 6a0de3d4853e2dd37897057921d716bb981
SANs: portfolio-terminal.com
CN=YR1,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA a20253f15f2691c05dc1ce13b9bcca4e
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of portfolio-terminal.com. — Secure

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
com. DS published 19718 13 Verified
portfolio-terminal.com. DS published 43174 8 Verified
portfolio-terminal.com. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=63072000
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), browsing-topics=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://portfolio-terminal.com/api/mcp Verified 200
http (plaintext) http://portfolio-terminal.com/api/mcp HTTPS enforced 308 https://portfolio-terminal.com/api/mcp
MCP tools · 10 exposed · ~2,000 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
analyze_ticker ~194

Dated key facts and a plain-English chart read for one ticker Portfolio Terminal covers (390 US stocks, 30 ETFs, 17 cryptocurrencies and 4 commodity futures): price and one-year change, 52-week range, distance from the 200-day average, 30-day volatility with a risk rating, P/E and dividend yield, all-time high and "lowest since", ten years against the S&P 500 (SPY), support and resistance levels, which tracked ETFs and famous investors (13F) hold it, and related research. Use it for "how is NVDA doing", "is TSLA near its high", "what does the AAPL chart say".

NameTypeReqDescription
tickerstringyesThe ticker as listed in the US ("NVDA", "VOO", "BRK.B"), a coin ("BTC" or "BTC-USD") or a future ("GC=F" for gold).
NameTypeReqDescription
asOfstringyes–
chartobject|null––
comparisonsarray––
etfHoldersarray––
investorsarray––
keyFactsarrayyes–
kindstringyes–
namestringyes–
researcharray––
sectorstring––
symbolstringyes–
urlstringyes–

No examples provided.

compare ~125

Five-year head-to-head of two covered stocks or ETFs from weekly closes adjusted for dividends and splits: total and annualized return, 1-, 3- and 5-year returns, volatility, worst drawdown and worst week, correlation, what $10,000 became, plus each one's dividend yield, beta and (for funds) fee. Use it for "SCHD vs VIG", "NVDA vs AMD".

NameTypeReqDescription
astringyesFirst ticker, e.g. "SCHD".
bstringyesSecond ticker, e.g. "VIG".
NameTypeReqDescription
aobjectyes–
bobjectyes–
correlationnumber|nullyes–
headlinestringyes–
takeawaysarrayyes–
urlstringyes–
windowobjectyes–

No examples provided.

dividend_calendar ~224

US stocks and ETFs (of the 420 Portfolio Terminal covers) going ex-dividend in a month or a date range: ex-dividend date, pay date, dividend per share, yield, frequency, and whether the date is confirmed by the company or estimated from its payment rhythm. Buy before the ex-date to receive the dividend. Filter by one ticker with `symbol`.

NameTypeReqDescription
daysinteger–Length of the range that starts at `from`, in calendar days (1–31, default 10).
fromstring–First day of a date range, YYYY-MM-DD (instead of `month`). Use it for "this week" or "the next 10 days".
limitinteger–How many entries, earliest first to return (1–200, default 50).
monthstring–A calendar month as YYYY-MM, from three months back to three months ahead. Defaults to the current month. Ignored when `from` is given.
symbolstring–Only this ticker, e.g. "KO".
NameTypeReqDescription
countintegeryes–
endstringyes–
entriesarrayyes–
returnedintegeryes–
startstringyes–
urlstringyes–

No examples provided.

earnings_calendar ~228

US companies (of the 390 Portfolio Terminal covers) reporting earnings in a month or a date range: the day, before the open or after the close, EPS and revenue estimates, whether the date is confirmed or estimated, and once out, the result against the consensus and how many recent quarters beat it. Filter by one ticker with `symbol`.

NameTypeReqDescription
daysinteger–Length of the range that starts at `from`, in calendar days (1–31, default 10).
fromstring–First day of a date range, YYYY-MM-DD (instead of `month`). Use it for "this week" or "the next 10 days".
limitinteger–How many reports, earliest first, larger companies first on the same day to return (1–200, default 50).
monthstring–A calendar month as YYYY-MM, from three months back to three months ahead. Defaults to the current month. Ignored when `from` is given.
symbolstring–Only this ticker, e.g. "NVDA".
NameTypeReqDescription
countintegeryes–
endstringyes–
entriesarrayyes–
returnedintegeryes–
startstringyes–
urlstringyes–

No examples provided.

etf_holdings ~147

An ETF's or index fund's holdings from the issuer's full file (or its latest SEC N-PORT report for funds outside the catalog): the largest lines with their weights, the sector mix, and how concentrated it is (weight of the top 10, how many names make up half the fund, effective number of holdings). Share classes of one fund (VFIAX → VOO) resolve to its file.

NameTypeReqDescription
limitinteger–How many holdings, largest first to return (1–100, default 25).
tickerstringyesThe fund ticker, e.g. "VOO", "QQQ", "SCHD", "AVUV".
NameTypeReqDescription
asOfstringyes–
concentrationobjectyes–
countintegeryes–
holdingsarrayyes–
issuerstringyes–
namestring|nullyes–
sectorsarrayyes–
sourcestringyes–
sourceUrlstringyes–
symbolstringyes–
urlstringyes–
viastring|nullyes–

No examples provided.

etf_overlap ~151

How much of two ETFs is the same money: overlap by weight (the sum, over companies both hold, of the smaller of the two weights), how many companies they share, what share of each fund sits in names the other also holds, and the largest shared holdings. Full issuer files, matched on ISIN. Use it for "VOO vs QQQ overlap", "is IVV the same as VOO".

NameTypeReqDescription
fund_astringyesFirst fund ticker, e.g. "VOO".
fund_bstringyesSecond fund ticker, e.g. "QQQ".
limitinteger–How many shared holdings to return (1–50, default 10).
NameTypeReqDescription
astringyes–
aInBnumberyes–
asOfobjectyes–
bstringyes–
bInAnumberyes–
onlyAintegeryes–
onlyBintegeryes–
overlapnumberyes–
sharedarrayyes–
sharedCountintegeryes–
urlstringyes–
verdictstringyes–

No examples provided.

fund_fees ~154

Computes, on the funds and amounts the user gives, what each fund's expense ratio takes a year (amount × expense ratio), the total and the weighted ratio, with the expense ratios of Portfolio Terminal's fees view (the fund's latest annual report as Yahoo Finance lists it). A fact, not a verdict: no other fund is suggested. A line that is not a fund, or whose ratio is not published, is named. Nothing is stored. Use it for "how much do my ETFs cost me a year".

NameTypeReqDescription
currencystring–Currency of every amount (default USD).
fundsarrayyesOne line per fund: its ticker and what is invested in it now. At most 50.
NameTypeReqDescription
annualCostnumberyes–
asOfstringyes–
currencystringyes–
fundsarrayyes–
notFundsarrayyes–
partialbooleanyes–
rulestringyes–
urlstringyes–
weightedRationumber|nullyes–

No examples provided.

tax_loss_harvest ~413

Computes, on the lots the user gives (ticker, shares, price, date, account and its type), the losses a sale before December 31 would realize and what they offset, with the engine of Portfolio Terminal's "Before December 31" panel. US resident: FIFO lots per account, short vs long term, this year's realized gains, the year netted as Schedule D nets it (the $3,000 off ordinary income, the carryforward), and the wash-sale rule across every account, IRA and 401(k) included: losses it took this year, windows still open, and the first day the same security can be bought back without one (IRS Publication 550). French resident: weighted average cost across accounts at ECB rates, PEA and crypto left out, and the flat tax those losses erase against this year's net gains (CGI art. 150-0 D, 200 A). Funds on the same index are flagged, never judged "substantially identical". Current prices are fetched unless given in `prices`. Nothing is stored. Use it for "how much tax can my losses save before December 31", "would this be a wash sale".

NameTypeReqDescription
carryoverobject–US only: capital losses carried into this year from last year's return, in dollars, by term.
filing_statusstring–US only: Form 1040 filing status (default single). Married filing separately caps the deduction at $1,500.
lotsarrayyesEvery purchase of the shares held, one per lot; add this year's sales (side "sell") with the purchases they came from, so realized gains and wash sales count. At most 300.
pricesarray–Current price per share by ticker, in the lots' currency, when the user gave it. Tickers left out are priced from Yahoo Finance. At most 150.
residencestringyesWhere the user pays tax: US or FR (France).
NameTypeReqDescription
approximatearray––
asOfstringyes–
currencystringyes–
daysLeftintegeryes–
flatTaxRatenumber|null––
leftOutobjectyes–
lossTotalnumberyes–
notAdvicestring––
realizedNetnumberyes–
residencestringyes–
rowsarrayyes–
rulestringyes–
substantiallyIdenticalarray––
taxErasablenumber|null––
urlstringyes–
usobject|null––
yearintegeryes–

No examples provided.

who_holds ~113

Which of the 54 tracked US ETFs hold a US-listed stock (weight and rank, from each issuer's full holdings file, matched on ISIN), and which famous investors hold it in their latest SEC Form 13F (share of their reported portfolio, rank, quarter). Offline data: fast, no market call. Use it for "which ETFs hold PLTR", "does Buffett own Apple".

NameTypeReqDescription
tickerstringyesA US stock ticker, e.g. "NVDA", "BRK.B".
NameTypeReqDescription
etfsarrayyes–
etfsTrackedintegeryes–
investorsarrayyes–
investorsTrackedintegeryes–
symbolstringyes–
urlstringyes–

No examples provided.

withholding_check ~251

Computes, on the dividends the user gives (a year of dividends, gross, by payer: a ticker such as "NESN.SW" or a country code), the tax each payer's country keeps at source, the treaty rate, and what was withheld above it over 12 months, which only that country refunds on a claim; for a French resident, also the treaty part France credits on form 2047. Same engine as Portfolio Terminal's Income and Pro tabs: statutory rates as of 2026, a US dividend at 15% (W-8BEN on file), European-listed funds paying no withholding. Countries outside its table are named, never guessed. Nothing is stored. Use it for "how much Swiss tax do I lose on Nestlé dividends", "which of my dividends are over-withheld".

NameTypeReqDescription
currencystring–Currency of every amount (default EUR for FR, USD otherwise).
dividendsarrayyesOne line per payer: a year of dividends, gross (before any tax). At most 100.
residencestringyesWhere the user pays tax: FR (France), US, or other (the usual 15% treaty rate is used).
NameTypeReqDescription
asOfstringyes–
creditnumberyes–
currencystringyes–
excessnumberyes–
grossnumberyes–
notAdvicestringyes–
notTaxedAbroadarrayyes–
residencestringyes–
rowsarrayyes–
rulestringyes–
uncoveredarrayyes–
urlstringyes–
withheldnumberyes–

No examples provided.

Install

How do I install the Portfolio Terminal MCP server?

Portfolio Terminal is a hosted endpoint at https://portfolio-terminal.com/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · portfolio-terminal.com

# add to Claude Code
claude mcp add --transport http com-portfolio-terminal-portfolio-terminal 'https://portfolio-terminal.com/api/mcp'
Common questions

What is the Portfolio Terminal MCP server?

Portfolio Terminal is an MCP server listed in the public MCP registry as com.portfolio-terminal/portfolio-terminal. Dated ETF, stock and calendar data, plus tax-loss, withholding and fee math on your holdings. This page covers its hosted endpoint (https://portfolio-terminal.com/api/mcp).

Is the Portfolio Terminal MCP server safe to use?

Portfolio Terminal scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Portfolio Terminal MCP server expose?

Portfolio Terminal exposes 10 tools: analyze_ticker, who_holds, etf_holdings, etf_overlap, compare, and 5 more. Their descriptions and schemas cost roughly 2,000 tokens of context every time the server is loaded.

Does the Portfolio Terminal MCP server require authentication?

No. We connected to Portfolio Terminal without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Portfolio Terminal MCP server still maintained?

Portfolio Terminal is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the Portfolio Terminal MCP server?

VerifyMCP ran 13 checks on Portfolio Terminal, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.