Firma MCP server
Local-first portfolio tracker for overseas investors. Claude reads and writes your finances via MCP.
42 downloads/wk
Reviews
Write oneNobody has reviewed Firma yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Firma tools (18, 4 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
add_balanceUpsert a balance sheet entry for a period \u2014 also used to edit an existing entry (same composite key overwrites). sub_type: cash|investment|other (assets) or short_term|long_term (liabilities)
add_flowUpsert a cash flow entry for a period \u2014 also used to edit an existing entry (same composite key overwrites). sub_type for income: salary|business|dividends|interest|income_other. For expense: personal|insurance|phone|utilities|rent|maintenance|loan_repayment|expense_other
add_txnRecord a stock transaction (buy, sell, deposit, dividend, tax)
delete_balancewrite actionDelete balance entries for a period. If category is provided, only that single entry is removed; otherwise all entries for the period are deleted.
delete_flowwrite actionDelete flow entries for a period. If category is provided, only that single entry is removed; otherwise all entries for the period are deleted.
delete_txnwrite actionDelete a transaction by id
edit_txnwrite actionUpdate fields of an existing transaction by id. Only provided fields are changed.
report_settleRead-only summary for a period: balance sheet + cash flow entries with computed totals (net_worth, net_flow). Use this to review month-end settlement results after entries are recorded via add_balance / add_flow. Defaults to the current month.
show_balanceGet balance sheet entries (assets and liabilities). Optionally filter by period (YYYY-MM)
show_earningsFetch earnings calendar. Without a ticker, returns upcoming earnings for all held tickers. With a ticker, returns history + upcoming.
show_financialsFetch SEC-reported financials for a ticker. Returns key income statement, cash flow, and balance sheet metrics extracted from XBRL filings.
show_flowGet cash flow entries (income and expenses). Optionally filter by period (YYYY-MM)
show_insiderFetch recent insider buy/sell transactions for a ticker from Finnhub. transactionCode: P=buy, S=sell, A=award, G=gift, M=exercise
show_newsFetch recent company news for a ticker from Finnhub
show_portfolioGet current stock holdings with average cost and cached prices
show_pricesGet cached stock prices for all synced tickers
show_txnsList transactions, optionally filtered by ticker symbol
sync_pricesFetch latest stock prices from Finnhub and update local cache. Requires finnhub_api_key in ~/.firma/config.json
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan3 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
How Firma compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 55/100
- higher than 10% of 48,255 servers
- Tools
- 18
- the typical server has 7
- Tools that change things
- 22%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 42
- more than 34% of 12,191 servers with a package
What its tools let an agent do: 10 read · 3 create · 2 change · 3 delete
Install Firma in Claude Code, Cursor or VS Code
Runs npx -y firma-app on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add firma -- npx -y firma-app
Firma: common questions
- Is Firma MCP server safe?
- With care: it is graded C, so read the findings first (55/100). Read the Firma safety report
- How do I install Firma?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Firma need an API key?
- Yes. The registry entry asks for
FINNHUB_API_KEY. - Is Firma maintained?
- The latest release is v0.4.2.
- How does Firma compare with other MCP servers?
- safety score 55/100 (higher than 10% of 48,255 servers); tools 18 (the typical server has 7); tools that change things 22% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.