
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
stocksense
Advanced tools
StockSense — MCP server providing AI agents with access to financial data: SEC filings, price history, financials, insider trades
mcp-name: io.github.mikejj-creation/stocksense
An MCP (Model Context Protocol) server that gives AI agents access to financial data — SEC EDGAR filings, market fundamentals, insider trades, and price history.
pip install -e .
For development:
pip install -e ".[dev]"
# Either:
stocksense
# Or:
python -m stocksense
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"stocksense": {
"command": "stocksense"
}
}
}
| Tool | Description |
|---|---|
price_history | Get historical OHLCV price data for any ticker |
quote | Get current price, market cap, P/E, 52-week range |
search_filings | Search SEC EDGAR filings (10-K, 10-Q, 8-K) |
get_filing | Get full text of a specific SEC filing |
insider_trades | Get recent insider buys/sells from Form 4 filings |
financials | Get income statement, balance sheet, cash flow, and key ratios |
analyze_company | Comprehensive research brief aggregating all data sources |
compare_companies | Compare key metrics across multiple companies side-by-side |
earnings | Quarterly earnings history with EPS estimates vs actuals |
company_profile | Company profile: sector, industry, and business description |
dividends | Dividend history and current yield |
key_events | Upcoming earnings dates, ex-dividend date, and estimates |
technicals | Technical indicators: SMA, EMA, RSI, MACD, and performance |
# Run tests
pytest
# Run linter
ruff check src/ tests/
MIT
FAQs
StockSense — MCP server providing AI agents with access to financial data: SEC filings, price history, financials, insider trades
We found that stocksense demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.