Search / io.github.jahanv01/sec-intelligence-mcp
SEC Intelligence
L0· runs locallySEC 10-K/10-Q/8-K search, RAG Q&A, comparison, and anomaly detection with citations.
v0.1.1 · active · repository · descriptor JSON · versions
Search / io.github.jahanv01/sec-intelligence-mcp
L0· runs locallySEC 10-K/10-Q/8-K search, RAG Q&A, comparison, and anomaly detection with citations.
v0.1.1 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"sec-intelligence-mcp": {
"command": "uvx",
"args": [
"sec-intelligence-mcp==0.1.1"
],
"env": {
"GEMINI_API_KEY": "${GEMINI_API_KEY}",
"QDRANT_URL": "${QDRANT_URL}",
"QDRANT_API_KEY": "${QDRANT_API_KEY}",
"LANGFUSE_SECRET_KEY": "${LANGFUSE_SECRET_KEY}",
"LANGFUSE_PUBLIC_KEY": "${LANGFUSE_PUBLIC_KEY}",
"SEC_EDGAR_USER_AGENT": "sec-intelligence-mcp [email protected]",
"EMBEDDING_MODEL": "intfloat/e5-base-v2",
"GEMINI_MODEL": "gemini-flash-lite-latest"
}
}
}
}claude mcp add sec-intelligence-mcp -e "GEMINI_API_KEY=${GEMINI_API_KEY}" -e "QDRANT_URL=${QDRANT_URL}" -e "QDRANT_API_KEY=${QDRANT_API_KEY}" -e "LANGFUSE_SECRET_KEY=${LANGFUSE_SECRET_KEY}" -e "LANGFUSE_PUBLIC_KEY=${LANGFUSE_PUBLIC_KEY}" -e "SEC_EDGAR_USER_AGENT=sec-intelligence-mcp [email protected]" -e "EMBEDDING_MODEL=intfloat/e5-base-v2" -e "GEMINI_MODEL=gemini-flash-lite-latest" -- uvx sec-intelligence-mcp==0.1.1[mcp_servers.sec-intelligence-mcp]
command = "uvx"
args = ["sec-intelligence-mcp==0.1.1"]
env = { "GEMINI_API_KEY" = "${GEMINI_API_KEY}", "QDRANT_URL" = "${QDRANT_URL}", "QDRANT_API_KEY" = "${QDRANT_API_KEY}", "LANGFUSE_SECRET_KEY" = "${LANGFUSE_SECRET_KEY}", "LANGFUSE_PUBLIC_KEY" = "${LANGFUSE_PUBLIC_KEY}", "SEC_EDGAR_USER_AGENT" = "sec-intelligence-mcp [email protected]", "EMBEDDING_MODEL" = "intfloat/e5-base-v2", "GEMINI_MODEL" = "gemini-flash-lite-latest" }
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"sec-intelligence-mcp": {
"type": "local",
"command": [
"uvx",
"sec-intelligence-mcp==0.1.1"
],
"enabled": true,
"environment": {
"GEMINI_API_KEY": "{env:GEMINI_API_KEY}",
"QDRANT_URL": "{env:QDRANT_URL}",
"QDRANT_API_KEY": "{env:QDRANT_API_KEY}",
"LANGFUSE_SECRET_KEY": "{env:LANGFUSE_SECRET_KEY}",
"LANGFUSE_PUBLIC_KEY": "{env:LANGFUSE_PUBLIC_KEY}",
"SEC_EDGAR_USER_AGENT": "sec-intelligence-mcp [email protected]",
"EMBEDDING_MODEL": "intfloat/e5-base-v2",
"GEMINI_MODEL": "gemini-flash-lite-latest"
}
}
}
}{
"mcpServers": {
"sec-intelligence-mcp": {
"command": "uvx",
"args": [
"sec-intelligence-mcp==0.1.1"
],
"env": {
"GEMINI_API_KEY": "${GEMINI_API_KEY}",
"QDRANT_URL": "${QDRANT_URL}",
"QDRANT_API_KEY": "${QDRANT_API_KEY}",
"LANGFUSE_SECRET_KEY": "${LANGFUSE_SECRET_KEY}",
"LANGFUSE_PUBLIC_KEY": "${LANGFUSE_PUBLIC_KEY}",
"SEC_EDGAR_USER_AGENT": "sec-intelligence-mcp [email protected]",
"EMBEDDING_MODEL": "intfloat/e5-base-v2",
"GEMINI_MODEL": "gemini-flash-lite-latest"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=sec-intelligence-mcp&config=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"
}{
"servers": {
"sec-intelligence-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"sec-intelligence-mcp==0.1.1"
],
"env": {
"GEMINI_API_KEY": "${GEMINI_API_KEY}",
"QDRANT_URL": "${QDRANT_URL}",
"QDRANT_API_KEY": "${QDRANT_API_KEY}",
"LANGFUSE_SECRET_KEY": "${LANGFUSE_SECRET_KEY}",
"LANGFUSE_PUBLIC_KEY": "${LANGFUSE_PUBLIC_KEY}",
"SEC_EDGAR_USER_AGENT": "sec-intelligence-mcp [email protected]",
"EMBEDDING_MODEL": "intfloat/e5-base-v2",
"GEMINI_MODEL": "gemini-flash-lite-latest"
}
}
}
}{
"mcpServers": {
"sec-intelligence-mcp": {
"command": "uvx",
"args": [
"sec-intelligence-mcp==0.1.1"
],
"env": {
"GEMINI_API_KEY": "${GEMINI_API_KEY}",
"QDRANT_URL": "${QDRANT_URL}",
"QDRANT_API_KEY": "${QDRANT_API_KEY}",
"LANGFUSE_SECRET_KEY": "${LANGFUSE_SECRET_KEY}",
"LANGFUSE_PUBLIC_KEY": "${LANGFUSE_PUBLIC_KEY}",
"SEC_EDGAR_USER_AGENT": "sec-intelligence-mcp [email protected]",
"EMBEDDING_MODEL": "intfloat/e5-base-v2",
"GEMINI_MODEL": "gemini-flash-lite-latest"
}
}
}
}extensions:
"sec-intelligence-mcp":
enabled: true
name: "sec-intelligence-mcp"
type: stdio
cmd: "uvx"
args:
- "sec-intelligence-mcp==0.1.1"
envs:
"GEMINI_API_KEY": "${GEMINI_API_KEY}"
"QDRANT_URL": "${QDRANT_URL}"
"QDRANT_API_KEY": "${QDRANT_API_KEY}"
"LANGFUSE_SECRET_KEY": "${LANGFUSE_SECRET_KEY}"
"LANGFUSE_PUBLIC_KEY": "${LANGFUSE_PUBLIC_KEY}"
"SEC_EDGAR_USER_AGENT": "sec-intelligence-mcp [email protected]"
"EMBEDDING_MODEL": "intfloat/e5-base-v2"
"GEMINI_MODEL": "gemini-flash-lite-latest"
timeout: 300
Placeholders to fill from your own secret store: ${GEMINI_API_KEY}, ${QDRANT_API_KEY}, ${LANGFUSE_SECRET_KEY}. The registry never accepts secret values.
This is a local package: the command runs on your machine.
Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptions, tools.description_length, tools.schemas, tools.annotations, tools.directory_hints, tools.token_cost, tools.api_dumptool list unknown (behind auth, not probed, or empty)stability.changes, stability.rug_pulltool list unknowndeps.known_vulns4 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-2g87-pp6c-29x5 in [email protected] (indirect, fixed in 3.14.4), GHSA-5wr8-gcqf-gqf3 in [email protected] (indirect, fixed in 3.14.4), GHSA-qh6h-p6c9-ff54 in [email protected] (indirect, fixed in 1.2.22), ...; 7 more of lower severity or without a fixdeps.mcp_sdk_versionmcp 1.30.0, no known advisorydeps.resolvable[email protected] resolved: 165 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo ~liveness-unmeasured ~updated-38d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] PyPI164 dependencies, resolved · MCP SDK mcp 1.30.0 · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-2g87-pp6c-29x5aiohttp: Multiple instances of excessive or unbounded memory/CPU use | high | [email protected]indirect | fixed in 3.14.4 |
| GHSA-5wr8-gcqf-gqf3aiohttp server lacks an initial request/header timeout | high | [email protected]indirect | fixed in 3.14.4 |
| GHSA-qh6h-p6c9-ff54LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions | high | [email protected]indirect | fixed in 1.2.22 |
| GHSA-v2xr-wvrv-p969RAGAS has an Arbitrary File Read vulnerability | high | [email protected]direct | fixed in 0.3.0-rc1 |
| GHSA-gr75-jv2w-4656LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders | moderate | [email protected]indirect | fixed in 1.3.9 |
| GHSA-fv5p-p927-qmxrLangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass | moderate | [email protected]indirect | fixed in 1.1.2 |
| GHSA-w8v5-vhqr-4h9vDiskCache has unsafe pickle deserialization | moderate | [email protected]indirect | no fix yet |
| GHSA-494j-54xm-rwp3AIOHTTP: Secure attribute not enforced for shared cookie | low | [email protected]indirect | fixed in 3.14.4 |
| GHSA-2g6r-c272-w58rLangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages | low | [email protected]indirect | fixed in 1.2.11 |
| GHSA-r7w7-9xr2-qq2rlangchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding | low | [email protected]indirect | fixed in 1.1.14 |
1 more advisories in the dependencies endpoint.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
sec-intelligence-mcp | pypi | 0.1.1 | uvx | GEMINI_API_KEY, QDRANT_API_KEY, LANGFUSE_SECRET_KEY |
No tools observed. Local packages are never executed by the registry.
Schemas: list_tools.
{
"name": "io.github.jahanv01/sec-intelligence-mcp",
"title": "SEC Intelligence",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.1.1",
"packages": [
{
"version": "0.1.1",
"transport": {
"type": "stdio"
},
"identifier": "sec-intelligence-mcp",
"runtimeHint": "uvx",
"registryType": "pypi",
"registryBaseUrl": "https://pypi.org",
"environmentVariables": [
{
"name": "GEMINI_API_KEY",
"isSecret": true,
"isRequired": true,
"description": "Google Gemini API key (free tier). Get one at https://aistudio.google.com/apikey"
},
{
"name": "QDRANT_URL",
"isRequired": true,
"description": "Qdrant vector database URL, e.g. http://localhost:6333 for local Docker, or a Qdrant Cloud cluster URL"
},
{
"name": "QDRANT_API_KEY",
"isSecret": true,
"description": "Only needed for a hosted Qdrant Cloud instance; leave unset for local Qdrant"
},
{
"name": "LANGFUSE_SECRET_KEY",
"isSecret": true,
"isRequired": true,
"description": "LangFuse secret key for observability (free tier). Get one at https://cloud.langfuse.com"
},
{
"name": "LANGFUSE_PUBLIC_KEY",
"isRequired": true,
"description": "LangFuse public key, paired with LANGFUSE_SECRET_KEY"
},
{
"name": "SEC_EDGAR_USER_AGENT",
"default": "sec-intelligence-mcp [email protected]",
"description": "Identifying User-Agent for SEC EDGAR requests, e.g. \"YourApp [email protected]\""
},
{
"name": "EMBEDDING_MODEL",
"default": "intfloat/e5-base-v2",
"description": "sentence-transformers model for embeddings"
},
{
"name": "GEMINI_MODEL",
"default": "gemini-flash-lite-latest",
"description": "Gemini model for answer generation"
}
]
}
],
"repository": {
"url": "https://github.com/jahanv01/sec-intelligence-mcp",
"source": "github"
},
"description": "SEC 10-K/10-Q/8-K search, RAG Q&A, comparison, and anomaly detection with citations."
}