Mmcp.market

Stockportfolio MCP server

by avisre·io.github.avisre/stockportfolio-mcp·v0.3.1
No reviews yet

Filing-grounded US financial data — every value returns with its SEC filing source. No estimates.

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

0 stars343 downloads/wk

Reviews

Write one

Nobody has reviewed Stockportfolio yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Stockportfolio tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 medium
  • Code scan2 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/server.js: …&&(u=this.opts.code.process(u,t));let m=new Function(`${jt.default.self}`,`${jt.default.scope…
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Stockportfolio repository's README, as published. We do not edit it. Read it on GitHub

stockportfolio-mcp

Filing-grounded US stock data for your agent — financials, SEC filing timelines, company comparisons and fund profiles, where every returned value carries the URL of the filing it came from. Missing data comes back missing; nothing is estimated.

# Get a key (Dev plan: $19.99/month, 200 credits) → https://stockportfolio.pro/api

Install

Add this to your MCP client's config and restart it:

Claude Desktop — ~/Library/Application Support/Claude/claudedesktopconfig.json (macOS) or %APPDATA%\Claude\claudedesktopconfig.json (Windows):

{
  "mcpServers": {
    "stockportfolio": {
      "command": "npx",
      "args": ["-y", "stockportfolio-mcp"],
      "env": { "STOCKPORTFOLIO_API_KEY": "your-key-here" }
    }
  }
}

Cursor — ~/.cursor/mcp.json, same block.

Then ask your agent something like "Use spfinancials for NVDA and show the period and the filing source for each figure."*

Requires Node 18 or newer; npx fetches the package on first run. Nothing else to install — this package bundles everything it needs.

Tools

Credits are the monthly allowance on your key (200/month on the Dev plan) and reset on the 1st. sp_health answers even when the key is wrong or the allowance is spent, so a probe can tell an exhausted key from a dead service.

What a response looks like

Real response, trimmed — this is sp_filing("NVDA"):

{
  "tool": "filing-timeline",
  "symbol": "NVDA",
  "generatedAt": "2026-09-11T18:39:50.366Z",
  "data": {
    "tool": "filing-timeline",
    "symbol": "NVDA",
    "source": "SEC EDGAR",
    "filings": [
      {
        "form": "4",
        "label": "Form 4 (insider ownership)",
        "date": "2026-09-08",
        "url": "https://www.sec.gov/Archives/edgar/data/1045810/000119903926000014/xslF345X06/wk-form4_1788901755.xml"
      }
    ]
  },
  "source": {
    "type": "filed",
    "url": "https://www.sec.gov/Archives/edgar/data/1045810/000119903926000014/xslF345X06/wk-form4_1788901755.xml",
    "period": null,
    "note": "Informational research only — verify in the linked SEC filing. Not investment advice."
  },
  "warnings": [],
  "citation": {
    "filingSource": "https://www.sec.gov/Archives/edgar/data/1045810/000119903926000014/xslF345X06/wk-form4_1788901755.xml",
    "verifyAt": "https://www.stockportfolio.pro/stocks/NVDA?utm_source=mcp&utm_medium=integration&utm_campaign=stockportfolio-mcp",
    "poweredBy": "StockPortfolio.pro — filing-grounded US company data"
  }
}

source.url is the point of the whole thing: an agent can cite the filing instead of asserting a number. When a field has no filing URL the response says so rather than quietly omitting it, and warnings flags a filing that was incomplete.

What's in this package

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y stockportfolio-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add stockportfolio-mcp -- npx -y stockportfolio-mcp
Add to Cursor

Stockportfolio: common questions

Is Stockportfolio MCP server safe?
Mostly: it is graded B (75/100). Read the Stockportfolio safety report
How do I install Stockportfolio?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Stockportfolio need an API key?
Yes. The registry entry asks for MCP_API_KEY.
Is Stockportfolio maintained?
The last commit was 7 days ago (2026-09-14). The latest release is v0.3.1.

More from avisre →