Stock Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Stock Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Standalone FastMCP server that exposes Massive (Polygon) market data to Claude and other MCP clients. Chart tools return chart-ready CSV; lookup tools return compact JSON.
| Tool | Description |
|---|---|
get_stock_bars_csv | OHLCV bars for a stock via REST API |
get_options_bars_csv | OHLCV bars for an options contract via REST API |
get_flat_file_bars_csv | OHLCV bars from Massive Flat Files (S3 bulk data) |
CSV columns: datetime,open,high,low,close,volume,transactions
| Tool | Description |
|---|---|
search_tickers | Find symbols by name or ticker |
get_ticker_details | Company / instrument metadata |
get_stock_snapshot | Latest price snapshot (paid plan) |
list_options_contracts | Options chain contract lookup |
get_options_chain_snapshot | Full chain snapshot (paid plan) |
list_flat_file_datasets | Flat file catalog and S3 listing |
get_market_movers | Top gainers or losers (paid plan) |
cd Stock-MCP
python3.11 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .envEdit .env:
MASSIVE_API_KEY=your_rest_api_key
MASSIVE_S3_ACCESS_KEY=your_flat_files_access_key # optional, for flat files
MASSIVE_S3_SECRET_KEY=your_flat_files_secret_keyRun locally:
fastmcp run app/mcp_server.py --transport http --host 127.0.0.1 --port 8082MCP endpoint:
http://127.0.0.1:8082/mcpcp .env.example .env
# edit .env
docker compose -f deploy/docker-compose.yml up -d --buildThe service binds to localhost:
http://127.0.0.1:8082/mcpExpose the MCP server to Claude Projects without opening a public port on the VPS.
CLOUDFLARE_TUNNEL_TOKEN in .env.mcp-stocks.yourdomain.com → http://stock-mcp:8080docker compose -f deploy/docker-compose.yml --profile tunnel up -d --buildClaude remote MCP URL:
https://mcp-stocks.yourdomain.com/mcp/mcp URL.For charts, callget_stock_bars_csvorget_flat_file_bars_csvand parse thecsvfield. Always mentiontruncatedand the date range in your analysis.
| Variable | Required | Description |
|---|---|---|
MASSIVE_API_KEY | Yes | REST API key |
MASSIVE_S3_ACCESS_KEY | Flat files only | S3 access key from Massive dashboard |
MASSIVE_S3_SECRET_KEY | Flat files only | S3 secret key |
MAX_CSV_ROWS | No | Row cap per CSV tool call (default 5000) |
MCP_PORT | No | Host port for Docker (default 8082) |
pytest tests/ -vOptional integration tests (requires real API keys in .env):
RUN_INTEGRATION=1 pytest tests/test_integration.py -v.env off Git; use chmod 600 .env on the VPS.127.0.0.1 unless behind Cloudflare Tunnel or nginx.Rest_API_docs.md — Massive REST APIflat_files_docs.md — Massive Flat Files (S3)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.