
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
tapefund-mcp
Advanced tools
MCP server for Tapefund — public Robinhood Agentic swing-trading book, journal, and holdings for Cursor and Claude
MCP server for Tapefund — the public Robinhood Agentic swing-trading book, trading journal, holdings, and all-in rules. For Cursor, Claude Desktop, and other MCP clients.
Install from npm: npx -y tapefund-mcp (current 0.1.0).
MCP Registry name: io.github.Jcjimenezglez/tapefund-mcp.
This is not a brokerage. Tools are read-only. They do not place orders and they do not expose Robinhood credentials.
Add to .cursor/mcp.json (Cursor) or Claude Desktop config:
{
"mcpServers": {
"tapefund": {
"command": "npx",
"args": ["-y", "tapefund-mcp"],
"env": {
"TAPEFUND_API_URL": "https://tapefund.com"
}
}
}
}
No API key is required for the public ledger. Optional TAPEFUND_API_KEY is
accepted (X-API-Key / Authorization: Bearer) for when billing ships.
| Variable | Required | Default | Description |
|---|---|---|---|
TAPEFUND_API_URL | No | https://tapefund.com | Tapefund origin (REST JSON under /api/v1/) |
TAPEFUND_API_KEY | No | — | Optional prepaid key (not enforced on public JSON yet) |
| Tool | REST | Description |
|---|---|---|
get_book_snapshot | GET /api/v1/snapshot.json | NAV, return vs $100, cash/open |
get_closed_trades | GET /api/v1/closed-trades.json | Closed ledger rows |
get_holdings | GET /api/v1/holdings.json | Open names |
get_latest_thinking | GET /api/v1/thinking.json | Latest CIO markdown |
get_all_in_rules | GET /api/v1/rules.json | All-in hard rules |
get_journal_day | GET /api/v1/journal/{date}.json | Sessions for a date |
get_credit_usage | GET /api/v1/credit-usage.json | Access / credit status |
Same pattern as rosetta-mcp: stdio
MCP client over HTTPS REST. Tapefund’s site is a static export, so REST is
public JSON (no /api/mcp Streamable HTTP on tapefund.com yet).
tapefund-mcp is meant to ship from GitHub Actions
(.github/workflows/publish-tapefund-mcp.yml).
version in package.json, server.json, and VERSION in src/index.ts.main.NPM_TOKEN, or a trusted
publisher: user Jcjimenezglez, repo investingRobinhood, workflow
publish-tapefund-mcp.yml.Or from this directory after npm login:
npm publish
MIT
FAQs
MCP server for Tapefund — public Robinhood Agentic swing-trading book, journal, and holdings for Cursor and Claude
We found that tapefund-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.