# SecFeed: SEC EDGAR filings (remote · secfeedapi.com)

SEC EDGAR data as tools: filing search, full text, XBRL financials, insider trades, 13F, 8-K events.

- Trust score: 72/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `secfeedapi.com`: 72/100 (this document), [markdown](https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi.md), [page](https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi)

## Channel facts

- Endpoint: `https://secfeedapi.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 40 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 68/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 2844 tokens (~71/item across 40 items; 40 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 58/100
  - Stability check failed: schema churn in the 18 days we've observed: 0 tool removals, 0 breaking changes, 1 auth/transport breaks, 12 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "pay_vs_performance" implies "pay" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 40 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the SecFeed: SEC EDGAR filings MCP server?

SecFeed: SEC EDGAR filings is a hosted endpoint at https://secfeedapi.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-secfeedapi-secfeed 'https://secfeedapi.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "com-secfeedapi-secfeed": {
      "url": "https://secfeedapi.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-secfeedapi-secfeed": {
      "type": "http",
      "url": "https://secfeedapi.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-secfeedapi-secfeed]
url = "https://secfeedapi.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-secfeedapi-secfeed": {
      "type": "remote",
      "url": "https://secfeedapi.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-secfeedapi-secfeed --url 'https://secfeedapi.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-secfeedapi-secfeed:
    url: "https://secfeedapi.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "com-secfeedapi-secfeed": {
      "Transport": "http",
      "Url": "https://secfeedapi.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-secfeedapi-secfeed -t streamable-http -u 'https://secfeedapi.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "com-secfeedapi-secfeed": {
      "type": "http",
      "url": "https://secfeedapi.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 51 to 54.

### 2026-11-02 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 44 to 48.

### 2026-11-01 (score 70, 0)

- [security] Tool “investment_adviser” rewrote its description, which is the text the model reads

### 2026-10-31 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 38 to 41.

### 2026-10-30 (score 69, 0)

- [functional regression] Schema quality: 2526 → 2822
- [functional] New tool “sam_recompete”
- [functional] New tool “sam_recompetes”

### 2026-10-29 (score 69, +1)

- [functional regression] Schema quality: 55 → 66
- [functional] New tool “company_federal_awards”
- [functional] New tool “federal_award”
- [functional] New tool “federal_awards”
- [functional] New tool “federal_recipient”
- [functional] New tool “federal_recipients”
- [functional] New tool “federal_spending”
- [functional] New tool “sam_entities”
- [functional] New tool “sam_entity”
- [functional] New tool “sam_opportunities”
- [functional] New tool “sam_opportunity”

### 2026-10-27 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 24 to 28.

### 2026-10-26 (score 67, −10)

- [security regression] Authorization: fail → unverified
- [security regression] Stability: 0.23 → fail

## MCP tools (40)

### `search_filings` (~85 tokens)

Search every EDGAR filing with a Lucene-style query, e.g. ticker:AAPL AND formType:"10-K" AND filedAt:[2026-01-01 TO 2026-12-31].

Input parameters:

- `from` (integer): offset
- `query` (string): Lucene-style query
- `size` (integer): max results, default 20

### `full_text_search` (~83 tokens)

Search the full text of every filing and exhibit since 2001. Use quotes for exact phrases.

Input parameters:

- `endDate` (string): YYYY-MM-DD
- `formTypes` (string): comma separated, e.g. 10-K,8-K
- `query` (string): words or "exact phrase"
- `startDate` (string): YYYY-MM-DD

### `extract_section` (~85 tokens)

Return one item of a 10-K (1, 1A, 7, 7A...), 10-Q (part1item2, part2item1a...) or 8-K (2-2, 5-2...) as clean text.

Input parameters:

- `item` (string): item id
- `url` (string): filing index or primary document URL

### `xbrl_to_json` (~65 tokens)

All financial statements and cover page of one filing as JSON, from its XBRL.

Input parameters:

- `accessionNo` (string): accession number
- `cik` (string): CIK (optional)
- `htmUrl` (string): or any URL inside the filing

### `financial_statements` (~53 tokens)

Latest income statement, balance sheet and cash flow (totals only) for a company.

Input parameters:

- `formType` (string): 10-K or 10-Q
- `ticker` (string): ticker or CIK

### `company_facts` (~33 tokens)

Every XBRL fact a company has ever reported (large).

Input parameters:

- `ticker` (string): ticker or CIK

### `insider_trades` (~92 tokens)

Form 3/4/5 insider transactions and holdings with owners, prices, footnotes.

Input parameters:

- `code` (string): transaction codes, e.g. P,S
- `minValue` (number): minimum $ value
- `owner` (string): insider name contains
- `size` (integer): max rows
- `startDate` (string): filed from
- `ticker` (string): issuer ticker

### `form_13f_holdings` (~60 tokens)

13F holdings rows by CUSIP or filer CIK.

Input parameters:

- `cik` (string): filer CIK
- `cusip` (string): CUSIP
- `period` (string): MM-DD-YYYY quarter end

### `events_8k` (~102 tokens)

8-K filings by item (1.01, 1.05, 2.02, 4.01, 4.02, 5.02, 5.07...). text=true adds the item text.

Input parameters:

- `cik` (string): CIK
- `item` (string): item number like 5.02
- `startDate` (string): YYYY-MM-DD
- `text` (string): true/false

### `structured_form` (~94 tokens)

Parsed XML forms with every data point. family: form-144, form-13f, form-13d-13g, form-d, form-c, reg-a, n-port, n-cen, n-px.

Input parameters:

- `cik` (string): filer CIK
- `family` (string): form family
- `size` (integer): max filings
- `startDate` (string): YYYY-MM-DD

### `company_profile` (~37 tokens)

EDGAR entity profile: name, SIC, addresses, fiscal year end, former names.

Input parameters:

- `cik` (string): ticker or CIK

### `map_ticker` (~27 tokens)

Ticker to CIK, name and exchange.

Input parameters:

- `ticker` (string): ticker

### `map_cusip` (~30 tokens)

CUSIP to issuer name and ticker.

Input parameters:

- `cusip` (string): CUSIP

### `shares_outstanding` (~27 tokens)

Shares outstanding and public float history.

Input parameters:

- `ticker` (string): ticker or CIK

### `auditor` (~32 tokens)

Auditor name, location and PCAOB ID from the latest annual report.

Input parameters:

- `ticker` (string): ticker or CIK

### `enforcement` (~62 tokens)

SEC enforcement releases. kind: litigation-releases, administrative-proceedings, aaer, press-releases.

Input parameters:

- `details` (string): true to include text
- `kind` (string): release list
- `page` (integer): page, 0 = newest

### `sro_filings` (~45 tokens)

SRO rule filings (FINRA, MSRB, DTC, exchanges). Omit org to list organizations.

Input parameters:

- `org` (string): e.g. finra

### `pay_vs_performance` (~35 tokens)

Pay versus performance table by year from the proxy's XBRL.

Input parameters:

- `ticker` (string): ticker or CIK

### `equity_dilution` (~34 tokens)

Share counts, dilution, stock comp and buybacks over time.

Input parameters:

- `ticker` (string): ticker or CIK

### `executive_compensation` (~28 tokens)

Summary Compensation Table by executive and year.

Input parameters:

- `ticker` (string): ticker or CIK

### `directors` (~27 tokens)

Board members with compensation, age, tenure.

Input parameters:

- `ticker` (string): ticker or CIK

### `subsidiaries` (~26 tokens)

Subsidiaries from Exhibit 21.

Input parameters:

- `ticker` (string): ticker or CIK

### `ipo_filings` (~50 tokens)

Registrations and 424B4 offering terms.

Input parameters:

- `formType` (string): S-1, F-1, 424B4
- `startDate` (string): YYYY-MM-DD

### `mergers_acquisitions` (~49 tokens)

M&A filings: merger proxies, tender offers, 425, S-4.

Input parameters:

- `startDate` (string): YYYY-MM-DD
- `ticker` (string): ticker or CIK

### `investment_adviser` (~66 tokens)

Investment adviser firms from the SEC's Form ADV data file: search by name, CRD or SEC number, or get one by CRD with AUM, private funds and disclosures.

Input parameters:

- `crd` (string): CRD number
- `query` (string): firm name

### `list_filing_files` (~43 tokens)

Every file in a filing (documents, exhibits, XBRL).

Input parameters:

- `accessionNo` (string): accession number
- `cik` (string): CIK

### `governance_dataset` (~180 tokens)

Structured data extracted from proxy statements, auditor's reports and SEC enforcement releases. dataset: director-compensation, executive-compensation-governance, severance-change-in-control, board-oversight, shareholder-rights, esg-oversight, compliance-signals, vote-standards, shareholder-proposals-proxy-contests, insider-5pct-holder-ownership, fund-reorganizations, audit-reports/financial-statements, audit-reports/icfr, sec-enforcement-actions. Newest filings first.

Input parameters:

- `dataset` (string): dataset path, e.g. board-oversight
- `endDate` (string): filed to, YYYY-MM-DD
- `size` (integer): max records, up to 50
- `startDate` (string): filed from, YYYY-MM-DD
- `ticker` (string): ticker or CIK

### `audit_report_text` (~37 tokens)

Full text of one auditor's report, by the id from the audit-reports datasets.

Input parameters:

- `id` (string): audit report id

### `sam_opportunities` (~201 tokens)

Open federal contract opportunities from SAM.gov (refreshed daily): search by keyword, NAICS, set-aside, state, agency and deadline.

Input parameters:

- `deadlineFrom` (string): YYYY-MM-DD
- `department` (string): agency name contains
- `naics` (string): 6-digit NAICS or a prefix such as 5415
- `postedFrom` (string): YYYY-MM-DD
- `q` (string): keywords in title or description, word* for a prefix
- `setAside` (string): set-aside codes, e.g. SBA,SDVOSBC,8A,WOSB,HZC
- `size` (integer): max 100
- `sort` (string): deadline for soonest first
- `state` (string): place of performance state codes, e.g. VA,MD
- `type` (string): notice types, e.g. Solicitation,Sources Sought

### `sam_opportunity` (~41 tokens)

One SAM.gov notice in full: description, contacts, place of performance, award details.

Input parameters:

- `noticeId` (string): noticeId from sam_opportunities

### `sam_entity` (~62 tokens)

One SAM.gov entity registration by UEI or CAGE code: status, expiration, address, NAICS, business types, SBA certifications.

Input parameters:

- `cage` (string): 5 character CAGE code
- `uei` (string): 12 character UEI

### `sam_entities` (~118 tokens)

Search SAM.gov registered entities by name, state, NAICS, SBA certification (A6 8(a), XX HUBZone) or registration expiration window.

Input parameters:

- `expiresFrom` (string): YYYY-MM-DD
- `expiresTo` (string): YYYY-MM-DD
- `naics` (string): 6 digit NAICS
- `q` (string): company name
- `sba` (string): A6, JT or XX
- `size` (integer): max 100
- `state` (string): 2 letter state

### `sam_recompetes` (~238 tokens)

Recompete radar (paid plans): federal contracts ending soon with the incumbent, value, agency, NAICS, set-aside, offers received and linked SAM.gov notices.

Input parameters:

- `agency` (string): awarding agency name contains
- `endFrom` (string): YYYY-MM-DD, default 6 months out
- `endTo` (string): YYYY-MM-DD, default 18 months out
- `hasNotice` (string): true = only contracts a SAM.gov notice names (follow-on, sources sought, justification)
- `incumbent` (string): incumbent name contains
- `maxOffers` (integer): 1 = sole source or one bid last time
- `minValue` (number): minimum potential value in USD
- `naics` (string): 6-digit NAICS or a prefix such as 5415
- `setAside` (string): set-aside codes, e.g. SBA,8A,SDVOSBC
- `size` (integer): max 100
- `sort` (string): endDate, value or firstSeen
- `state` (string): place of performance state codes

### `sam_recompete` (~58 tokens)

One contract on the recompete radar by awardKey or PIID, with the incumbent's SAM.gov registration and linked notices (paid plans).

Input parameters:

- `awardKey` (string): awardKey from sam_recompetes, or a PIID

### `federal_awards` (~177 tokens)

Federal awards from USAspending.gov since FY2008 (contracts, IDVs, grants, loans). Rows carry secCompany when the recipient is a listed company.

Input parameters:

- `agency` (string): awarding agency, e.g. Department of Defense
- `endDate` (string): YYYY-MM-DD
- `naics` (string): NAICS codes, comma separated
- `q` (string): keywords
- `recipient` (string): recipient name
- `size` (integer): max 100
- `sort` (string): amount, startDate or endDate
- `startDate` (string): YYYY-MM-DD
- `state` (string): place of performance state codes
- `type` (string): contracts, idvs, grants, loans, direct or other
- `uei` (string): recipient UEI

### `federal_award` (~54 tokens)

One federal award: amounts, period, agencies, recipient and parent, competition, set-aside, subawards.

Input parameters:

- `id` (string): the id field of an award, e.g. CONT_AWD_...

### `federal_recipients` (~57 tokens)

Find federal award recipients by name, with ids, UEIs and parent (P) or child (C) level.

Input parameters:

- `q` (string): name, 3+ characters
- `size` (integer): max 50

### `federal_recipient` (~48 tokens)

A recipient profile: parent, business types, location, last 12 months of awards, and its listed company if any.

Input parameters:

- `id` (string): recipient id from federal_recipients

### `federal_spending` (~100 tokens)

Federal spending totals grouped by awarding_agency, awarding_subagency, recipient, naics, psc, cfda, state_territory or country.

Input parameters:

- `agency` (string): awarding agency
- `by` (string): grouping
- `endDate` (string): YYYY-MM-DD
- `naics` (string): NAICS filter
- `size` (integer): max 100
- `startDate` (string): YYYY-MM-DD

### `company_federal_awards` (~103 tokens)

Federal awards of a listed company by ticker, including subsidiaries and joint ventures, with how the company was matched.

Input parameters:

- `agency` (string): awarding agency
- `size` (integer): max 100
- `sort` (string): amount, startDate or endDate
- `startDate` (string): YYYY-MM-DD
- `ticker` (string): ticker or CIK
- `type` (string): contracts, idvs, grants, loans

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi#diagnostics

## Score history

- 2026-11-05: 72
- 2026-11-04: 72
- 2026-11-03: 71
- 2026-11-02: 71
- 2026-11-01: 70
- 2026-10-31: 70
- 2026-10-30: 69
- 2026-10-29: 69
- 2026-10-28: 68
- 2026-10-27: 68
- 2026-10-26: 67
- 2026-10-25: 77
- 2026-10-24: 77
- 2026-10-23: 77
- 2026-10-22: 76
- 2026-10-21: 73
- 2026-10-20: 73
- 2026-10-19: 72
- 2026-10-18: 72
- 2026-10-17: 33

## Common questions

### What is the SecFeed: SEC EDGAR filings MCP server?

SecFeed: SEC EDGAR filings is an MCP server listed in the public MCP registry as com.secfeedapi/secfeed. SEC EDGAR data as tools: filing search, full text, XBRL financials, insider trades, 13F, 8-K events. This page covers its hosted endpoint (https://secfeedapi.com/mcp).

### Is the SecFeed: SEC EDGAR filings MCP server safe to use?

SecFeed: SEC EDGAR filings scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the SecFeed: SEC EDGAR filings MCP server expose?

SecFeed: SEC EDGAR filings exposes 40 tools: search_filings, full_text_search, extract_section, xbrl_to_json, financial_statements, and 35 more. Their descriptions and schemas cost roughly 2,844 tokens of context every time the server is loaded.

### Does the SecFeed: SEC EDGAR filings MCP server require authentication?

No. We connected to SecFeed: SEC EDGAR filings without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the SecFeed: SEC EDGAR filings MCP server still maintained?

SecFeed: SEC EDGAR filings is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://secfeedapi.com/mcp
- Authorisation metadata: https://secfeedapi.com/.well-known/oauth-protected-resource/mcp
- Website: https://secfeedapi.com/mcp/
- Changelog RSS feed: https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi.json
- HTML version of this page: https://verifymcp.io/servers/com-secfeedapi-secfeed/secfeedapi