FinanceMCP
这是一个金融领域相关的mcp,本项目通过集成 Tushare API 和 Binance API 为语言模型（如Claude）提供全面的实时金融数据访问能力，支持股票、基金、债券、宏观经济指标、稳定币、虚拟货币等多维度金融数据分析。其中也包含了金融数据查询、财经新闻查询、国家统计局数据查询等
No outside reports on file
Use this tool only if you trust the financial data sources and have strong control over API keys; any compromise of credentials could lead to unauthorized trading or financial loss.
Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsRequires API key or tokenREVIEW
- Package sourceGitHub (guangxiangdebizi/FinanceMCP)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/guangxiangdebizi/FinanceMCP ↗
About FinanceMCP
FinanceMCP connects AI models like Claude to real-time financial data from stock markets, cryptocurrencies, bonds, and economic statistics. It pulls data from Tushare (Chinese financial data) and Binance (cryptocurrency) APIs, plus news and government statistics, so the AI can analyze and discuss financial information.
Who it’s for
Developers building AI chatbots or tools that need to give users current stock prices, crypto data, economic reports, or financial news. Anyone wanting to add live financial research to their Claude-powered applications.
Alternatives
- Bloomberg Terminal API (if you have a Bloomberg subscription; more enterprise-focused). - Alpha Vantage (free stock and forex data, simpler than Tushare). - CoinGecko API (free cryptocurrency data without needing a Binance account). - Yahoo Finance API (historical and real-time US market data, widely used).
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README at https://github.com/guangxiangdebizi/FinanceMCP (opens external site) for installation and configuration steps. You will likely need to obtain API keys from Tushare and Binance separately and add them to your environment.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 866
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Security reports
No reports found for this package in our research (last checked 2026-10-29).
Risks to watch for
- Financial API credentials exposed: The tool needs real API keys for Tushare and Binance—if leaked, attackers can access your accounts and potentially execute trades or drain funds. - Untrusted financial data in prompts: If an AI is tricked into reading malicious text pretending to be market data, it might give wrong financial advice to users. - No rate limiting visible: The tool may make many API calls at once, hitting rate limits or running up unexpected bills from paid API tiers. - Chinese-language documentation: Security issues or risky design patterns in the original code may not be obvious to non-Chinese speakers doing security review. - Active external dependencies: Relies on Tushare and Binance API stability and security; if either service is compromised, this tool inherits that risk.
How to lower the risk
Least-privilege permissions
- Use read-only API keys if the provider offers them; avoid full trading permissions. - Limit which markets or symbols the AI is allowed to query.
Network isolation
- Run this connector on a machine with no other sensitive services. - Use a firewall to block all outbound traffic except to Tushare and Binance APIs.
Monitoring
- Log all API calls and watch for unusual patterns (unexpected symbols, high frequency). - Set up alerts for API errors or rate-limit hits that might signal misuse.
Red flags to watch for
- The tool making trades or withdrawal requests (should be read-only). - Requests for credentials or API keys from the AI model itself.
Questions
How do I install FinanceMCP?
FinanceMCP does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/guangxiangdebizi/FinanceMCP.
Are there security reports about FinanceMCP?
No reports found for this package in our research (last checked 2026-10-29). FinanceMCP currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include financial api credentials exposed.
Is FinanceMCP actively maintained?
FinanceMCP has 866 GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/guangxiangdebizi/FinanceMCP before pinning it in production.
What are alternatives to FinanceMCP?
Notable alternatives to FinanceMCP include Bloomberg Terminal API. You can also compare FinanceMCP side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use FinanceMCP? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/guangxiangdebizi-financemcp)HTML embed:
<a href="https://agentarmorhq.com/skills/guangxiangdebizi-financemcp"><img src="https://agentarmorhq.com/api/badge/guangxiangdebizi-financemcp" alt="AgentArmorHQ Risk Grade for FinanceMCP" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "guangxiangdebizi-financemcp"Share with your security lead
Need sign-off to use FinanceMCP? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: FinanceMCP
- **Listing URL:** https://agentarmorhq.com/skills/guangxiangdebizi-financemcp
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 866 GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** GitHub (guangxiangdebizi/FinanceMCP)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/guangxiangdebizi/FinanceMCP
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- guangxiangdebizi
- Source code
- github.com/guangxiangdebizi/FinanceMCP
- Est. context load
- ~700 tokens / turn (~4 tool schemas, 0.35% of 200k context)
- Popularity
- 866 GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-24
Community
Discussions for FinanceMCP
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude