Directory
Finance MCP Directory + Security Grader
Security-graded catalog of finance MCP servers: Alpaca, Massive, Databento, IBKR, Tradier, Robinhood, Tiingo, official and community. Scope, auth, grade.
Runs in your browser. Nothing you enter is uploaded, and no account or API key is needed.
MCP servers tracked
11
2 graded A and 1 graded B on maintenance, schema, auth, idempotency and license. Catalog checked 2026-10-18; check each repo before use.
11servers
sorted by grade
Official Alpaca MCP server (V2, a complete rewrite on FastMCP and OpenAPI). Read + execute across the Alpaca brokerage API for stocks, options and crypto, on paper or live accounts.
Scope
full
Auth
api-key
Transport
stdio+http
Idempotent
yes
Schema qual
A
License
MIT
Last commit
2026-10-12
Capabilities: bars (daily / minute), quotes (live via SIP+IEX), options chains, crypto pairs, submit orders, portfolio positions, account state
Security notes
- API key has broad trading authority — store securely
- No scoping of key permissions in-server (rely on Alpaca dashboard key scopes)
- Idempotency key supported on order submission
Official Massive (formerly Polygon.io) MCP server, self-hosted from the mcp_massive repo with an API key. Read-only access to Massive's stocks, options, futures, indices, forex and crypto endpoints within your plan. Massive also runs a hosted OAuth version at mcp.massive.com (since 2026-09-15).
Scope
read-only
Auth
api-key
Transport
stdio+http
Idempotent
no
Schema qual
A
License
MIT
Last commit
2026-10-08
Capabilities: stocks aggregates (daily / minute / sec / tick), options chains, crypto trades + quotes, forex rates, news API, reference data
Security notes
- Read-only scope — no trade execution surface
- API key required; safe to scope tightly
- No idempotency concern (no writes)
tastytrade's official, self-hosted MCP server for its Open API: 84 tools (70 read-only, 2 write, 12 destructive) covering quotes, positions, balances and orders, with order submission gated behind a dry-run-first confirmation flow.
Scope
full
Auth
oauth-2.0
Transport
stdio
Idempotent
no
Schema qual
B
License
unclear (NOASSERTION)
Last commit
2026-10-17
Capabilities: quotes, option chains and greeks, positions and balances, place and edit orders (confirmation token required), multi-leg spreads, watchlists
Security notes
- Defaults to the production API: set TASTYTRADE_ENV=sandbox for a no-money environment
- TASTYTRADE_READ_ONLY=1 withholds every write and destructive tool
- Order submit and edit require a token from a matching dry run; idempotent submission is not documented
- Licence file not recognised by GitHub (NOASSERTION) — confirm terms before reuse
Community CLI and MCP server for Interactive Brokers over the local Client Portal Gateway. Installs the gateway as an always-on launchd agent and logs in from the macOS Keychain.
Scope
full
Auth
hybrid
Transport
stdio
Idempotent
no
Schema qual
B
License
MIT
Last commit
2026-10-13
Capabilities: live and historical orders, modify orders, cancel orders, account selection for order routing
Security notes
- Runs the Client Portal Gateway locally and auto-fills IBKR credentials from the macOS Keychain
- Modify and cancel-all commands require an explicit --confirm
- No documented idempotency key on order submission
- Single-maintainer community project — audit before production trading
Interactive Brokers' official AI Integration, a hosted remote MCP at api.ibkr.com/v1/api/mcp-public. Analyzes portfolios, researches investments and drafts trade instructions; you convert each instruction into an order on an IBKR platform.
Scope
read-only
Auth
oauth-2.0
Transport
http-stream
Idempotent
no
Schema qual
C
License
proprietary (hosted)
Last commit
2026-07-28
Capabilities: portfolio analysis, market data lookups (implied volatility, 52-week range), risk scenarios, draft trade instructions
Security notes
- Hosted by IBKR — no self-hosted code to audit
- Sign-in on IBKR's own screen; each connection authorizes a single account
- Drafts instructions only: the client submits every order on an IBKR platform
- Tool schemas not published — schema quality graded C until inspectable
Community-maintained Databento MCP server focused on ES/NQ futures: real-time quotes, historical bars and session detection. Not endorsed by Databento; verify schemas against docs.
Scope
read-only
Auth
api-key
Transport
stdio
Idempotent
no
Schema qual
B
License
none declared
Last commit
2025-11-25
Capabilities: ES/NQ futures quotes, historical bars, session detection
Security notes
- Unofficial — review schema fidelity before production use
- No licence declared in the repository — confirm terms before reuse
- Does not rate-limit; relies on Databento's server-side meter
- Billing tracked via Databento meter — test runs cost money
Community Tiingo MCP. Read-only access to EOD equities, news API, fundamentals, crypto.
Scope
read-only
Auth
api-key
Transport
stdio
Idempotent
no
Schema qual
B
License
unclear (NOASSERTION)
Last commit
2025-09-10
Capabilities: EOD equities, intraday (limited tiers), news, fundamentals, crypto
Security notes
- Read-only — no execution risk
- Does not expose API key in responses
- Licence file not recognised by GitHub (NOASSERTION) — confirm terms before reuse
TradeStation's official MCP connection, released January 2026. Connects Claude, ChatGPT and other MCP assistants to a TradeStation brokerage account to query positions, run portfolio analysis, review market data and build orders, with confirmation required before any order is sent.
Scope
full
Auth
oauth-2.0
Transport
remote (unpublished)
Idempotent
no
Schema qual
C
License
proprietary (hosted)
Last commit
2026-01-12
Capabilities: positions and balances, portfolio analysis, market data, build orders (sent only after confirmation)
Security notes
- OAuth 2.0 with PKCE: no brokerage credentials are shared with the assistant
- Every order needs confirmation before it is sent
- No documented idempotency key on order submission
- Hosted by TradeStation — no code to audit; tool schemas not published, so schema quality is graded C
Tradier's official hosted MCP server, launched December 2025. Streamable HTTP, authenticated with a personal API token: real-time market data, account details, documentation search and order placement.
Scope
full
Auth
bearer-token
Transport
http-stream
Idempotent
no
Schema qual
B
License
proprietary (hosted)
Last commit
2025-12-22
Capabilities: user profile, account balances and history, positions, real-time quotes, place orders, documentation search
Security notes
- Personal API token carries full account authority — store securely
- No documented idempotency key on order submission
- Hosted by Tradier — no self-hosted code to audit
Robinhood's official Trading MCP for Agentic Trading, hosted at agent.robinhood.com/mcp/trading. Reads all Robinhood accounts and places long equity, options and crypto orders in a dedicated Agentic account.
Scope
full
Auth
oauth-2.0
Transport
http-stream
Idempotent
no
Schema qual
C
License
proprietary (hosted)
Last commit
2026-07-20
Capabilities: portfolio, balances and order history, market, limit, stop limit and stop market orders, long equities, options (single-leg), crypto
Security notes
- Read access covers every Robinhood account, including account numbers
- Trades only in a separately funded Agentic account
- Trade approvals are off by default for external MCP agents
- Tool schemas not published — schema quality graded C until inspectable
Community Tradier brokerage MCP built for Claude.ai and deployed on Railway. Supports sandbox + live accounts, including options trading. Tradier now also runs an official hosted server (listed separately).
Scope
full
Auth
bearer-token
Transport
http-stream
Idempotent
no
Schema qual
C
License
none declared
Last commit
2026-04-27
Capabilities: stock + option quotes, option chains, submit orders, portfolio
Security notes
- No idempotency key — duplicate-submission risk on retry
- Sandbox + live on same server; verify account slug before every call
- Community maintained, audit activity gaps
About this directory
Grade = points for official status (+2), a commit within 30 days of the snapshot (+2, or +1 within 90), schema quality (A +3 to F −1), auth (OAuth +2, API key or bearer token +1), idempotent order submission on servers that can trade (+2, or −1 without it) and a permissive license (+1). 9+ points = A, 7–8 = B, 5–6 = C, 3–4 = D. It is a hygiene screen, not a security audit: transport security and audit logging are not graded. Catalog checked 2026-10-18.
How to use it
- Filter by scope: read-only servers only read data, while execution and full-scope servers can place orders and need much more scrutiny.
- Filter by grade (A only, B or better, C or better) or by source (official vs community), or search by vendor or capability. Results are sorted best grade first.
- Open a server's repository link and check that it is still maintained and that its auth method fits your deployment; the catalog was last checked on 2026-10-18.
- Read the facts and security notes: scope, auth, transport, idempotent order submission, schema quality, license and last commit.
- Test in paper mode first. Even an A-grade server can have edge-case bugs that surface only at integration time.
Questions people ask
How are MCP servers security-graded?
Each server gets points that add up to an A-F grade: official vendor server +2; last commit within 30 days of the snapshot +2 (within 90 days +1); tool-schema quality from +3 (A) to −1 (F); OAuth +2, API key or bearer token +1; for servers that can trade, idempotent order submission +2 or −1 without it; a permissive license (MIT, Apache-2.0, BSD-3-Clause) +1. 9 or more points is an A, 7-8 a B, 5-6 a C, 3-4 a D. Hosted servers with no public repository are measured from their latest dated vendor release, and score C on schema quality until their tool schemas are published. Transport security and audit logging are listed in the notes where known but are not scored.
Why isn't every broker MCP server listed?
The catalog is a curated snapshot (re-checked 2026-10-18) of publicly documented finance MCP servers covering Alpaca, Massive (formerly Polygon.io), Databento, Interactive Brokers, Tradier, Robinhood, tastytrade, TradeStation and Tiingo, including the official servers from IBKR, Tradier, Robinhood, tastytrade and TradeStation. Repository dates and licences come from the GitHub API. Closed-beta and corporate-only servers are excluded, and servers released after the snapshot are not yet listed.
Are these MCP servers safe to use with real funds?
The grade is a hygiene screen, not a security audit or a recommendation. Even an A-grade server should not be wired to a live trading account untested: run it against paper trading first, scope the API key as tightly as the broker allows, log every request, and use idempotency keys on order submission. Read each entry's security notes for the known caveats.
What's the difference between scope: read-only vs scope: read-write?
Read-only servers expose market data and reference data with no way to change anything. Read-write servers can write non-trading state. Execution servers can place and cancel orders, and full-scope servers do both reading and trading. The directory marks every server's scope because anything that can trade needs much stricter key scoping, logging and rate limits.
How often is the directory updated?
Irregularly: the current catalog was last checked on 2026-10-18, and each entry shows the last commit date seen at that time. Recency points in the grade are measured against the snapshot date, so check the linked repository for current activity before relying on a server.
Related pages
- Alternatives Alpaca API Alternatives (2026)
- Alternatives Interactive Brokers (IBKR) API Alternatives (2026)
Related tools
- Comparators Market Data API Cost Calculator
Compute annual cost of market data across Databento, Massive (formerly Polygon), Alpaca, Tiingo, FMP, and Alpha Vantage for your exact universe, bar resolution, and real-time needs.
- Generators Trading System Blueprinter
Pick your data source, LLM, broker, storage, risk engine, and logger. Get a Mermaid architecture diagram and a copyable starter file tree — the full stack before you write code.
- Playgrounds Prompt Injection Tester
Red-team a finance agent against 23 documented prompt-injection attacks — direct override, role confusion, indirect injection via retrieved content.
Articles
- 5 min read Massive for AI Agents 2026: MCP Server vs x402 Pay-Per-Request
Massive (formerly Polygon.io) for AI agents: the hosted MCP server, x402 pay-per-request at $0.01 a call in USDC, or an API key. Costs, limits and fit.
- 6 min read Twelve Data API Pricing 2026
Twelve Data API pricing 2026: free Basic is 8 credits/min and 800/day; Grow starts at $29/mo for 55 credits, with three credit levels on every paid plan.
- 9 min read Market Data API Pricing 2026: Polygon.io vs Databento vs Alpaca
Market data API pricing 2026: Polygon.io (now Massive) $199 real-time, Databento $199 flat or metered, Alpaca free IEX or $99, Tiingo $30, FMP from $29.
Use it from an agent or code
Any agent can run this calculator by URL: put the inputs in the query string and get JSON back, with the inputs that used defaults and a line to cite (add format=md for markdown). MCP clients reach it through https://aifinhub.io/mcp.
https://aifinhub.io/api/run/finance-mcp-directory?min_grade=C&grade=A
In code, import the same module; it runs where you import it, with no request or key.
import { compute } from "https://aifinhub.io/engines/finance-mcp-directory.js";