io.github.FinzData/finzdata-mcp
REMOTE · API.FINZDATA.COM · 2 COMPONENTS
US market data, PIT fundamentals, macro vintages, COT, 13F and backtester exports for AI agents.
Available components
Last scanned (17 hours ago)
Scores higher than 45% of remote servers
Reachable. Last reached 18 Oct 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 6 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http. See how to fix → View diagnostics → Unverified
Schema Quality & AI Usability64
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 2801 tokens (~100/item across 28 items; 28 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
- Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage79
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 36% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "publish_strategy" implies "publish" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 29 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we couldn't verify past authentication. We only credit what we can confirm, so an authenticated endpoint we can't read counts against the score. Claim this server and supply a read-only token to verify it and lift the score.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 18 Oct 26 −19
- Authorization: pass → unverified ▼ security
- Transport: pass → unverified ▼ security
- HTTPS: unverified → pass ▲ security
- Schema quality: 2264 → 2801 ▼ functional
- New tool “backtest_export” functional
- New tool “claim_mcp_server” functional
- New tool “get_gex” functional
- New tool “get_mcp_server” functional
- New tool “search_mcp_servers” functional
- 17 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Oct 26 +1
- Tool “retire_strategy” rewrote its description, which is the text the model reads security
- 14 Oct 26 −2
- Tool “run_backtest” rewrote its description, which is the text the model reads security
- Tool “get_universe” rewrote its description, which is the text the model reads security
- Schema quality: 1065 → 2240 ▼ functional
- Tool coverage: 52% → 40% ▼ functional
- Stability: unverified → 0.03 ▲ functional
- Destructive annotations: pass → 0 functional
- New tool “get_verified_record” functional
- New tool “get_strategy” functional
- New tool “fork_strategy” functional
- New tool “comment_strategy” functional
- New tool “publish_strategy” functional
- New tool “list_strategies” functional
- New tool “verify_chain” functional
- New tool “verified_board” functional
- New tool “survivorship_audit” functional
- New tool “star_strategy” functional
- New tool “retire_strategy” functional
- New tool “register_strategy” functional
- “get_universe” added an optional parameter “prefix” cosmetic
- “get_universe” added an optional parameter “offset” cosmetic
- “get_universe” reworded the description of “index” cosmetic
- 13 Oct 26 71
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Probed https://api.finzdata.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=finzdata.com | CN=YE1,O=Let's Encrypt,C=US | 10 Oct 2026 | 8 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 6a1a7d2e2d9adaee20501862ef05af917e4 |
| SANs: *.finzdata.com, finzdata.com | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.finzdata.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| finzdata.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.finzdata.com/mcp | Auth required | 401 | |
| http (plaintext) | http://api.finzdata.com/mcp | HTTPS enforced |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
backtest_export Export bars for a backtester ~175
Daily OHLCV bars for one symbol packaged as ready-to-load files for an open-source backtester or trading framework: backtrader, backtesting_py, vectorbt, zipline (csvdir bundle), lean (QuantConnect LEAN, base64 zip), nautilus, freqtrade or qlib. Returns files (path, encoding, content) and load_code. Write each file at its path, then run load_code. Clipped to as_of; start defaults to 365 days before end.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| end | string | – | – |
| framework | string | – | – |
| start | string | – | – |
| symbol | string | yes | – |
No output schema declared.
No examples provided.
claim_mcp_server Claim MCP Server ~49
claims a listing for the calling API key so its owner can enable price-accuracy checks; first claimant wins; contact info@finzdata.com to dispute.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
No output schema declared.
No examples provided.
comment_strategy Comment on a hub strategy ~61
Posts a public comment (1-2000 characters) on a Hub strategy, e.g. a question, a result from a fork or a suggested change. Comments are shown under your handle.
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | yes | – |
| slug | string | yes | – |
No output schema declared.
No examples provided.
compare_runs Compare runs ~55
Returns a table (run_id, cagr, sharpe, max_drawdown, turnover, final_equity) for previously run backtests in this session. Unknown run_id -> not_found.
| Name | Type | Req | Description |
|---|---|---|---|
| run_ids | array | yes | – |
No output schema declared.
No examples provided.
describe_dataset Describe dataset ~38
Returns the schema, coverage and field definitions of one dataset. Raises not_found for an unknown dataset id.
| Name | Type | Req | Description |
|---|---|---|---|
| dataset | string | yes | Dataset id. |
No output schema declared.
No examples provided.
fork_strategy Fork strategy ~114
Copies a published Hub strategy, applies `changes` (nested fields merged, e.g. {"signal": {"lookback": 126}}), re-runs it on the server and publishes the fork linked to its parent. Costs one backtest.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| changes | object | yes | – |
| slug | string | yes | – |
| title | string | – | – |
No output schema declared.
No examples provided.
get_13f Get 13F filings ~76
Returns 13F holdings matching a query as known on as_of (default today); filings after as_of are hidden.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| query | string | yes | – |
No output schema declared.
No examples provided.
get_bars Get OHLCV bars ~120
Returns daily OHLCV bars for symbols between start and end, clipped to as_of (default today) so no future data leaks. Max 5000 rows per page; use next_cursor for more.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| bar | string | – | Bar size, default '1d'. |
| end | string | – | – |
| start | string | yes | – |
| symbols | array | yes | – |
No output schema declared.
No examples provided.
get_cot Get COT ~94
Returns CFTC Commitments of Traders rows for a market between start and end, clipped to as_of. Max 5000 rows per page.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| end | string | – | – |
| market | string | yes | – |
| start | string | yes | – |
No output schema declared.
No examples provided.
get_events Get events ~90
Returns corporate/market events of a kind between start and end, clipped to as_of. Max 5000 rows per page.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| end | string | – | – |
| kind | string | yes | – |
| start | string | yes | – |
No output schema declared.
No examples provided.
get_fundamentals_pit Get fundamentals (point-in-time) ~80
Returns fundamentals for one symbol as known on as_of (no restatements from the future). as_of defaults to today.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| symbol | string | yes | – |
No output schema declared.
No examples provided.
get_gex Get point-in-time GEX (dealer gamma) ~212
Point-in-time dealer gamma exposure for US stocks and ETFs, one row per ticker per session, each stamped with knowledge_time (17:00 New York on the session date). Columns: spot, net_gex_bn (dealer net gamma, $bn per 1% move; >0 dealers long gamma, <0 short), call_gex_bn, put_gex_bn, flip (gamma-flip level), call_wall, put_wall, pcr_oi, atm_iv_pct. Give ticker (+ start/end) for a time series, or date alone for every name that session ranked by |net_gex_bn|. Rows after as_of are hidden.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| date | string | – | YYYY-MM-DD, cross-section mode |
| end | string | – | – |
| start | string | – | – |
| ticker | string | – | – |
No output schema declared.
No examples provided.
get_macro_vintage Get macro vintage ~88
Returns a macro series as it was actually published by as_of (vintage data, no revisions from the future). Optional start.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| series | string | yes | – |
| start | string | – | Optional start date. |
No output schema declared.
No examples provided.
get_mcp_server Get MCP Server ~35
retrieves a financial MCP server listing with tools, probe history, issues and verified-data status.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
No output schema declared.
No examples provided.
get_strategy Get hub strategy ~38
Returns one public Hub strategy: spec, server-computed backtest result, forward-tracking record and fork lineage.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
No output schema declared.
No examples provided.
get_universe Get universe ~171
Returns every US symbol that was trading on as_of, including companies that later delisted (survivorship-free). index='top500'|'top1000'|'top3000' instead returns the most-traded names priced at least $5 that day, ranked by 63-day dollar volume (a point-in-time large-cap proxy, not official S&P or Russell membership). Pages of 500; pass offset. as_of defaults to today.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| index | string | – | Optional liquidity-ranked subset. |
| offset | integer | – | Paging offset (default 0). |
| prefix | string | – | Only symbols starting with this. |
No output schema declared.
No examples provided.
get_verified_record Get Verified Record ~26
Retrieve a verified strategy record by its ID.
| Name | Type | Req | Description |
|---|---|---|---|
| record_id | string | yes | – |
No output schema declared.
No examples provided.
list_strategies List hub strategies ~82
Lists public FinzData Hub strategies. sort: robust (deflated Sharpe), forward (forward Sharpe, 63+ days of out-of-sample record), new, forks. Optional family (momentum, expr, ma_cross, factor).
| Name | Type | Req | Description |
|---|---|---|---|
| family | string | – | – |
| limit | integer | – | – |
| sort | string | – | – |
No output schema declared.
No examples provided.
publish_strategy Publish strategy ~178
Runs a backtest spec (same format as run_backtest) on the server and publishes it to the FinzData Hub as a public, reproducible strategy page at data.finzdata.com/s/<slug>, forward-tracked daily from today. Only server-computed results are stored. Costs one backtest; free accounts may publish 3 a day. visibility='private' keeps it unlisted.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| description | string | – | Hypothesis: why it should work and what would falsify it. |
| spec | object | yes | Backtest spec (see run_backtest). |
| title | string | yes | 1-120 characters. |
| visibility | string | – | – |
No output schema declared.
No examples provided.
register_strategy Register Strategy ~96
Register a new strategy signal. The strategy is scored ONLY on data after registration, the record can never be edited or deleted, ranking starts at 63 trading sessions, and FinzData never trades on submitted signals.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_name | string | yes | – |
| rebalance | string | yes | – |
| side | string | yes | – |
| signal | string | yes | – |
| top_frac | number | yes | – |
| universe | string | yes | – |
No output schema declared.
No examples provided.
retire_strategy Retire Strategy ~47
Retire one of your verified strategy records: it stops accruing new forward results, keeps its full history and stays public on the Verified board marked retired.
| Name | Type | Req | Description |
|---|---|---|---|
| record_id | string | yes | – |
No output schema declared.
No examples provided.
run_backtest Run backtest ~482
Runs a deterministic backtest from a JSON spec (universe, start, end, signal, rebalance, top_n, costs_bps, side='long'|'long_short', blind=true to hide tickers). universe: a list of symbols, or 'top500'|'top1000'|'top3000'|'all' for the liquid US market (each month the N most-traded names priced >= min_price, default $5, by 63-day dollar volume; 'all' = liquid_top names, default 1000, max 3000; delisted names included while they traded; membership is set on each month's last trading day and used from the next). rebalance: D|W|M|Q (or daily/weekly/monthly/quarterly). signal.type: momentum (lookback, skip days), ma_cross, factor, or expr with signal.expr a formula over close prices, e.g. 'rank(ret(252)) - rank(vol(60))' (functions: ret, logret, sma, ema, vol, rsi, high, low, dist_high, lag, rank, zscore, demean, abs, log, sign, clip, min, max, where). Point-in-time fundamentals for US stocks (from 2011) work as expr variables and as signal.type factor fields (set ascending false to buy the highest): earnings_yield, book_to_market, sales_yield, ebitda_ev, dividend_yield, roe, leverage, log_mcap, e.g. 'rank(book_to_market) + rank(ret(252) - ret(21))'; such results carry a 'fundamentals' coverage and survivorship report. Every result includes 'overfitting': trials counted per API key and the deflated Sharpe ratio. Prices are fetched point-in-time with a 400-trading-day lookback buffer and clipped to as_of, so results have no look-ahead. Identical specs on the same snapshot are cached and free. Returns stats, benchmark stats, equity curve, warnings, snapshot id and a disclaimer.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| spec | object | yes | Backtest spec. |
No output schema declared.
No examples provided.
search_datasets Search datasets ~45
Full-text search over the dataset catalog. Returns matching dataset ids and descriptions. Free of look-ahead concerns; no as_of needed.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search text. |
No output schema declared.
No examples provided.
search_mcp_servers Search MCP Servers ~66
finds financial MCP servers graded nightly by FinzData for health, protocol conformance and prompt-injection risk; results include install URLs.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | – |
| limit | integer | – | – |
| min_grade | string | – | – |
| q | string | – | – |
No output schema declared.
No examples provided.
star_strategy Star a hub strategy ~57
Stars (or with unstar=true removes your star from) a public Hub strategy. Stars feed the Trending list; rankings stay on deflated Sharpe and forward record.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | – |
| unstar | boolean | – | – |
No output schema declared.
No examples provided.
survivorship_audit Survivorship-bias audit ~152
Runs your backtest spec twice: once on the point-in-time universe (delisted companies included while they traded, the honest result) and once on only the names still trading today (what a backtest on a current ticker list does). Returns both stats and the inflation in CAGR and Sharpe that survivorship bias adds. Use universe 'top500'|'top1000'|'top3000' or a symbol list. Costs one backtest.
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Point-in-time cutoff (YYYY-MM-DD). Nothing dated after this is returned, preventing look-ahead bias. Defaults to today (UTC). |
| spec | object | yes | Backtest spec, same as run_backtest. |
No output schema declared.
No examples provided.
verified_board Verified Board ~22
Get the leaderboard of verified strategies.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
No output schema declared.
No examples provided.
verify_chain Verify Chain ~20
Anyone can check no record was edited or back-dated.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
How do I install the io.github.FinzData/finzdata-mcp server?
io.github.FinzData/finzdata-mcp is a hosted endpoint at https://api.finzdata.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.finzdata.com
claude mcp add --transport http finzdata-finzdata-mcp 'https://api.finzdata.com/mcp'
What is the io.github.FinzData/finzdata-mcp server?
io.github.FinzData/finzdata-mcp is listed in the public MCP registry as io.github.FinzData/finzdata-mcp. US market data, PIT fundamentals, macro vintages, COT, 13F and backtester exports for AI agents. This page covers its hosted endpoint (https://api.finzdata.com/mcp).
Is the io.github.FinzData/finzdata-mcp server safe to use?
io.github.FinzData/finzdata-mcp scores 52 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.FinzData/finzdata-mcp server expose?
io.github.FinzData/finzdata-mcp exposes 28 tools: search_datasets, describe_dataset, get_universe, get_bars, backtest_export, and 23 more. Their descriptions and schemas cost roughly 2,769 tokens of context every time the server is loaded.
Does the io.github.FinzData/finzdata-mcp server require authentication?
No. We connected to io.github.FinzData/finzdata-mcp without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.FinzData/finzdata-mcp server still maintained?
io.github.FinzData/finzdata-mcp is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.