
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@fundlens/mcp
Advanced tools
MCP server for the FundLens API — SEC-derived fund holdings, ownership, and flows for AI agents.
MCP server for the FundLens API — SEC-derived fund holdings, ownership, and flows for AI agents.
Requires a FundLens API key. Most tools need a paid plan; requests are metered exactly like any other API client.
{
"mcpServers": {
"fundlens": {
"command": "npx",
"args": ["-y", "@fundlens/mcp"],
"env": { "FUNDLENS_API_KEY": "fl_your_key" }
}
}
}
| Tool | What it answers |
|---|---|
list_funds / get_fund | Discover funds; identity, AUM, share classes, service providers |
get_holdings / get_holdings_history | Portfolio at a point in time; available snapshot dates |
get_exposures | Sector / industry / country breakdown |
who_holds | Which funds and 13F managers hold a security |
diff_holdings | What a fund bought, sold, added to, trimmed |
fund_overlap | How much two funds overlap |
get_returns / get_flows | Monthly returns and flows (N-PORT Part B) |
list_managers / get_manager_holdings | Institutional 13F filers and their positions |
Most tools accept as_of (the snapshot on or before a date) and
available_as_of (only filings actually published by that date). Use both
for backtests — without available_as_of a query can see filings that
weren't public at the time being modelled.
FUNDLENS_API_KEY (required)FUNDLENS_API_URL (optional, defaults to https://api.fundlens.io/v1)FAQs
MCP server for the FundLens API — SEC-derived fund holdings, ownership, and flows for AI agents.
The npm package @fundlens/mcp receives a total of 25 weekly downloads. As such, @fundlens/mcp popularity was classified as not popular.
We found that @fundlens/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.