
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
gold-mcp
Advanced tools
MCP server for public gold (XAUUSD) market data with Free / Pro / Premium / Ultra tiers. Free tier includes realtime PAXG tick stream (Binance public WS) and BYOK MT5 broker adapter. Ultra adds SMC suite (order blocks, FVG, CHOCH/BOS, liquidity sweeps), regime classifier (Hurst + variance ratio), MTF confluence engine, position sizing (Kelly + optimal-f + risk-of-ruin), Monte Carlo simulator, BYOK AI analyst (Claude API), HTML tearsheet generator. Ed25519 offline license verification.
An MCP server that brings public gold (XAUUSD) market data into Claude, ChatGPT, Cursor, Windsurf, Cline, Zed, and any other Model Context Protocol client.
Free tier (13 tools + optional 8-tool MT5 BYOK adapter) is fully functional and stays free forever. Pro, Premium, and Ultra tiers add advanced TA, backtest, SMC suite, risk management, and AI analyst via an offline Ed25519 license key — no SaaS, no phone-home.
Educational and research use only — not financial advice.
| Tier | Tools | License | Suggested price |
|---|---|---|---|
| Free | 13 (+8 optional MT5 BYOK) | None | $0 |
| Pro | +7 (20 total) | GOLD_MCP_LICENSE_KEY env | $9-19/mo |
| Premium | +4 (24 total) | GOLD_MCP_LICENSE_KEY env | $29-49/mo |
| Ultra | +18 (42 total, 50 with MT5 BYOK) | GOLD_MCP_LICENSE_KEY env | $99-149/mo |
Public gold data (Yahoo Finance):
get_gold_price — latest gold close + 24h changeget_gold_ohlcv — historical bars (1m → 1mo)get_macro_context — DXY, US10Y/02Y, SPX, VIX, BTC, silver, oilget_gold_correlations — gold-vs-macro correlation matrixget_gold_seasonality — day-of-week / monthly return statsget_vn_macro — USD/VND + implied world-parity gold price in VNDestimate_vn_gold_premium — compare local VN quote to world paritygold_market_snapshot — one-call aggregator + bulleted summarydiagnostic — show license tier + available toolscache_purge — sweep expired cache entriesRealtime PAXG via Binance public WebSocket (NEW v4.1, no API key):
paxg_worker_status — WS worker health + tick countget_paxg_tick — last PAXG tick (tracks XAU/USD within 0.1-0.3%)get_paxg_ohlcv_realtime — aggregated PAXG bars from local tick logMT5 BYOK adapter (NEW v4.1, optional via pip install 'gold-mcp[mt5]', Windows):
mt5_attach / mt5_detach / mt5_status — manage attached terminalmt5_find_symbol — broker-specific XAUUSD symbol resolutionmt5_get_tick / mt5_get_ohlcv / mt5_get_ticks — read from your terminalmt5_account_info — balance / equity / leverageanalyze_gold_advanced — Bollinger + Ichimoku + Fibonaccimulti_timeframe_snapshot — 5m / 1h / 4h / 1d in one callgold_correlation_regime — detects DXY decoupling, etc.get_gold_setups — multi-indicator confluence scannercreate_gold_alert / list_gold_alerts / delete_gold_alertbacktest_gold_strategy — 4 strategies, vectorizedgold_walk_forward — rolling out-of-sample validationoptimize_gold_strategy — grid search by Sharpe / PF / returngold_intraday_seasonality — hourly / session bucketingSmart Money Concepts (SMC)
smc_full_scan — composite SMC bias (structure + OB + FVG + sweeps)detect_order_blocks — bullish/bearish OB with impulse ATR filteringdetect_fair_value_gaps — 3-candle imbalances + fill trackingdetect_liquidity_sweeps — stop-hunt detection (breach + reverse)detect_market_structure — CHOCH/BOS labeling on swing fractalsRegime + Multi-Timeframe
classify_regime — composite Hurst exponent + Lo-MacKinlay variance ratiomtf_alignment — D1/H4/H1 confluence with alignment score 0-100Position sizing + risk
kelly_fraction — half-Kelly default for safetyfixed_fractional_size — classic R% sizingoptimal_f — Ralph Vince geometric-mean-maximizing frisk_of_ruin — Monte Carlo ruin probabilityMonte Carlo + VaR
monte_carlo_paths — bootstrap or parametric path simulationvalue_at_risk — historical VaR + Conditional VaRprob_hit_target_or_stop — MC trade probability with EV in R-multiplesAI Analyst (BYOK Anthropic)
ai_daily_briefing — structured JSON read from Claude Sonnet 4.6ai_setup_explanation — cheaper Haiku 4.5 plain-English readReport generation
generate_html_tearsheet — polished standalone HTML reportgenerate_markdown_briefing — portable Markdown daily summarygit clone https://github.com/ThaiTrevor/gold-mcp.git
cd gold-mcp
pip install -e .
Python 3.10+. No other setup, no env vars, no data files.
Edit %APPDATA%\Claude\claude_desktop_config.json (Windows) or
~/Library/Application Support/Claude/claude_desktop_config.json (macOS):
{
"mcpServers": {
"gold-mcp": {
"command": "python",
"args": ["-m", "gold_mcp.server"]
}
}
}
Restart Claude Desktop. The tools appear under the plug icon.
claude mcp add --scope user gold-mcp -- python -m gold_mcp.server
~/.cursor/mcp.json (or the equivalent file for your client):
{
"mcpServers": {
"gold-mcp": {
"command": "python",
"args": ["-m", "gold_mcp.server"]
}
}
}
Settings → Connectors → Add MCP server:
Command: python
Args: -m gold_mcp.server
Ask the model in plain English. Examples:
"What is gold doing right now and how does it compare to today's macro tape (DXY, yields, VIX)?"
"Show me the last 24 hourly bars of gold and the 60-day correlation with silver and DXY."
"Give me a market snapshot for gold — combine price, macro context, correlations, and the day-of-week seasonality."
"USD/VND right now and the implied world-parity gold price in VND per tael. If SJC is quoting 145 million, what's the premium?"
LLMs reason well about gold but they don't see live market data, the macro tape that moves gold, or a clean correlation matrix on demand. This server is a tiny, free bridge between an MCP client and the public Yahoo Finance data that any researcher already has access to — exposed as well-typed tools so the model picks the right one automatically.
It started as a study project to learn MCP architecture and turned into something useful enough to publish for the community.
Add GOLD_MCP_LICENSE_KEY to the env block of your MCP config:
"env": {
"GOLD_MCP_LICENSE_KEY": "eyJ0aWVy...Ijoi.MEUCI..."
}
Restart your MCP client. Call diagnostic — tier_active should
report pro or premium. New tools become available immediately.
See examples/claude_desktop_config_pro.json for the full template.
gold_mcp/
server.py FastMCP wiring with 3-tier gating (21 tools max)
gold_data.py yfinance price + OHLCV
macro_data.py DXY/yields/SPX/VIX/BTC + correlations
analytics.py seasonality
analyst.py one-call aggregator (gold_market_snapshot)
cache.py TTL filesystem cache (60s → 24h)
license.py Ed25519 offline license verification
issue_license.py CLI: init-keys, issue, verify
pro_tools.py Pro tier: advanced TA, alerts, multi-timeframe
premium_tools.py Premium tier: backtest, walk-forward, optimizer
adapters/
vn_macro.py USD/VND + world-parity gold
For vendors selling licenses, see the CLI:
python -m gold_mcp.issue_license init-keys
# Paste printed PUBLIC_KEY_B64 into gold_mcp/license.py
python -m gold_mcp.issue_license issue --tier pro --email u@x.com --days 30
Or run the Lemon Squeezy webhook handler (port from
mcp-byok-template —
swap the env-var name from MCP_BYOK_LICENSE_KEY to GOLD_MCP_LICENSE_KEY).
This project is small on purpose. We welcome contributions that fit the same pattern:
See CONTRIBUTING.md for details and SECURITY.md for how to report security issues.
pip install -e ".[dev]"
pytest
CI runs the suite on Linux, macOS, and Windows across Python 3.10/3.11/3.12 on every push and pull request.
gold-mcp is a data and analysis tool for educational and research
purposes only. Nothing returned by any tool constitutes investment
advice, a recommendation, or a solicitation. Markets carry risk; you
are responsible for your own decisions.
MIT — see LICENSE.
FAQs
MCP server for public gold (XAUUSD) market data with Free / Pro / Premium / Ultra tiers. Free tier includes realtime PAXG tick stream (Binance public WS) and BYOK MT5 broker adapter. Ultra adds SMC suite (order blocks, FVG, CHOCH/BOS, liquidity sweeps), regime classifier (Hurst + variance ratio), MTF confluence engine, position sizing (Kelly + optimal-f + risk-of-ruin), Monte Carlo simulator, BYOK AI analyst (Claude API), HTML tearsheet generator. Ed25519 offline license verification.
The pypi package gold-mcp receives a total of 36 weekly downloads. As such, gold-mcp popularity was classified as not popular.
We found that gold-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.