Sec 13f MCP server

@pipeworx/sec-13f

Institutional ownership from SEC Form 13F, asked security-first. Hosted, keyless to the caller. Deltas are a first-class citizen here, not an afterthought: managerchanges and securityflows answer "what changed" directly, because a static holdings snapshot isn't a newsletter — a change is.

Part of Pipeworx — an MCP gateway connecting AI agents to 1576+ live data sources.

Tools

company name, a ticker (resolved live through OpenFIGI — see "Ticker resolution" below) or a 9-character CUSIP.

• who_owns(security, limit?) — which managers hold a security, ranked by position size. Accepts a

quarter only — see manager_changes for what changed).

• manager_portfolio(manager, limit?) — every position one manager reported, largest first (current

INCREASED or DECREASED between two loaded quarters. Defaults to the manager's two most recent loaded quarters.

• managerchanges(manager, quarter?, compareto?, limit?) — what one manager NEW-ed, EXITED,

one security, plus which managers bought/sold/added/trimmed between the two most recent quarters.

• security_flows(security, limit?) — total position value and holder count per loaded quarter for

most recent loaded quarters, and top positions. Does not include sector exposure — 13F carries no industry/sector field, and this pack does not fabricate one.

• manager_profile(manager) — concentration (top-5/top-10 % of portfolio), turnover between the two

per quarter, and whether there's enough loaded to diff (candiffquarters).

• holdings_coverage() — which SEC release windows and quarters are loaded, filings/holdings counts

Ticker resolution — deliberately NOT a CUSIP↔ticker table

13F reports positions by CUSIP; there is no ticker column anywhere in the dataset. CUSIP identifiers are proprietary to CUSIP Global Services, so this pack does not build, cache, or redistribute a bulk CUSIP↔ticker crosswalk (same discipline as the paywalled-standards rule). Instead, a ticker-shaped input (e.g. "NVDA") is resolved live, per call, through OpenFIGI's public mapping API — openly licensed Bloomberg FIGI — to get the security's canonical name, which is then matched against issuername in our own already-ingested holdings, preferring the candidate with the largest aggregate value (a real operating company's smallest institutional line still dwarfs a themed/ leveraged ETF's largest one). Every response that used this path reports matchedon: "tickerviaopenfigi" and what it resolved to (resolvedvia.cusip, .figi, .issuername) — never silently. Before this, whoowns("NVDA") matched issuername ILIKE '%NVDA%' and returned "Direxion Daily NVDA Bull 2X ETF" ranked alongside the real NVIDIA CORPORATION position — a silent wrong answer, not a missing feature.

Why this is hosted rather than proxied

The ingest program only accepts a local build when it makes a question possible that the upstream cannot answer. This is the clean case: the SEC publishes 13F manager-first, and so does every API over it. Our own edgarinstitutionalholdings says so in its description — answering "which funds hold $TICKER" means running it once per manager, a loop over ~8,000 filers. That is a shape problem, not a rate-limit problem, and no upstream fixes it. One indexed query over the flat table inverts it.

What 13F does not tell you

Stated here and in every response, because 13F is routinely over-read:

Shortened. The full README is on GitHub.