MCP.Market

Firma MCP server

by evan-moon·io.github.evan-moon/firma·v0.4.2

Local-first portfolio tracker for overseas investors. Claude reads and writes your finances via MCP.

C55/100grade C
What users say
No reviews yet
Be the first
Safety scan
C55/100

full report

Adoption
New

42 downloads/wk

Reviews

Write one

Nobody has reviewed Firma yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Firma tools (18, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • add_balance

    Upsert a balance sheet entry for a period \u2014 also used to edit an existing entry (same composite key overwrites). sub_type: cash|investment|other (assets) or short_term|long_term (liabilities)

  • add_flow

    Upsert a cash flow entry for a period \u2014 also used to edit an existing entry (same composite key overwrites). sub_type for income: salary|business|dividends|interest|income_other. For expense: personal|insurance|phone|utilities|rent|maintenance|loan_repayment|expense_other

  • add_txn

    Record a stock transaction (buy, sell, deposit, dividend, tax)

  • delete_balancewrite action

    Delete balance entries for a period. If category is provided, only that single entry is removed; otherwise all entries for the period are deleted.

  • delete_flowwrite action

    Delete flow entries for a period. If category is provided, only that single entry is removed; otherwise all entries for the period are deleted.

  • delete_txnwrite action

    Delete a transaction by id

  • edit_txnwrite action

    Update fields of an existing transaction by id. Only provided fields are changed.

  • report_settle

    Read-only summary for a period: balance sheet + cash flow entries with computed totals (net_worth, net_flow). Use this to review month-end settlement results after entries are recorded via add_balance / add_flow. Defaults to the current month.

  • show_balance

    Get balance sheet entries (assets and liabilities). Optionally filter by period (YYYY-MM)

  • show_earnings

    Fetch earnings calendar. Without a ticker, returns upcoming earnings for all held tickers. With a ticker, returns history + upcoming.

  • show_financials

    Fetch SEC-reported financials for a ticker. Returns key income statement, cash flow, and balance sheet metrics extracted from XBRL filings.

  • show_flow

    Get cash flow entries (income and expenses). Optionally filter by period (YYYY-MM)

  • show_insider

    Fetch recent insider buy/sell transactions for a ticker from Finnhub. transactionCode: P=buy, S=sell, A=award, G=gift, M=exercise

  • show_news

    Fetch recent company news for a ticker from Finnhub

  • show_portfolio

    Get current stock holdings with average cost and cached prices

  • show_prices

    Get cached stock prices for all synced tickers

  • show_txns

    List transactions, optionally filtered by ticker symbol

  • sync_prices

    Fetch latest stock prices from Finnhub and update local cache. Requires finnhub_api_key in ~/.firma/config.json

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Firma compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
55/100
higher than 10% of 48,255 servers
Tools
18
the typical server has 7
Tools that change things
22%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
42
more than 34% of 12,191 servers with a package

What its tools let an agent do: 10 read · 3 create · 2 change · 3 delete

Install Firma in Claude Code, Cursor or VS Code

Runs npx -y firma-app on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add firma -- npx -y firma-app
Add to Cursor

Firma: common questions

Is Firma MCP server safe?
With care: it is graded C, so read the findings first (55/100). Read the Firma safety report
How do I install Firma?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Firma need an API key?
Yes. The registry entry asks for FINNHUB_API_KEY.
Is Firma maintained?
The latest release is v0.4.2.
How does Firma compare with other MCP servers?
safety score 55/100 (higher than 10% of 48,255 servers); tools 18 (the typical server has 7); tools that change things 22% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from evan-moon →