Justetf Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Justetf Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A local Model Context Protocol (MCP) server for read-only justETF data.
This server wraps the third-party druzsan/justetf-scraping Python scraper and exposes a compact MCP tool surface for ETF search, profiles, charts, comparisons, and live quotes.
Caveat: justETF does not publish a stable public API for these endpoints. The upstream scraper relies on justETF web-app endpoints/page structure, so tools can break if justETF changes its site. Use conservative request volumes and review justETF terms for your use case. This is not investment advice.
search_etfs — query the justETF screener with filters and pagination.get_etf_profile — profile/details for one ISIN, including holdings and country/sector allocations.get_chart — historical chart/performance series for one ISIN.compare_charts — compare performance series for multiple ISINs.get_live_quote — latest gettex/EUR quote via justETF's WebSocket feed.There is also a justetf://help resource with brief usage notes.
uv syncOr install as a Python package:
pip install .uv run justetf-mcpThe server communicates over stdio, which is the usual transport for local MCP clients.
Example configuration for a stdio MCP client:
{
"mcpServers": {
"justetf": {
"command": "uv",
"args": ["--directory", "/absolute/path/to/justetf-mcp", "run", "justetf-mcp"]
}
}
}If you install the package globally/in a dedicated venv, use the justetf-mcp executable directly.
uv sync --dev # install runtime + dev dependencies
uv run pytest -q # run the test suite
uv run ruff check . # lintThe upstream justetf-scraping package currently uses:
https://www.justetf.com/en/search.html with Wicket AJAX POST requests.https://www.justetf.com/api/etfs/{isin}/performance-chart.wss://api.mobile.stock-data-subscriptions.justetf.com/?subscription=trend¶meters=isins:{isin}/currency:EUR/language:en.https://www.justetf.com/en/etf-profile.html?isin={isin} plus AJAX expansion for allocations.Data access is provided by the third-party druzsan/justetf-scraping package, which is MIT licensed. This project is not affiliated with or endorsed by justETF.
MIT © Paolo Gentili. The bundled dependency justetf-scraping is also MIT licensed, so the two are license-compatible.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.