Sec Edgar MCP
by stefanoamorelliA SEC EDGAR MCP (Model Context Protocol) Server
Sec Edgar MCP is an open-source mcp server by stefanoamorelli, written mainly in Python, with 382 GitHub stars and the AGPL-3.0 license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit 86646eb. No capabilities flagged by our checks. Scan policy
86646eb · Nov 5, 2026Findings (60)
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@azure/msal-node@5.6.0: 2 known vulnerabilitiesGHSA-xcx6-jx8p-x3h5, GHSA-xcx6-jx8p-x3h5
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@azure/msal-node@6.0.0: 2 known vulnerabilitiesGHSA-xcx6-jx8p-x3h5, GHSA-xcx6-jx8p-x3h5
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.0: 12 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +7 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/server@2.0.0: 8 known vulnerabilitiesGHSA-46jr-4wx8-v453, GHSA-f897-62hf-6gxq, GHSA-jm63-cq47-j5jp, GHSA-rvq5-wwqv-78pq, GHSA-46jr-4wx8-v453 +3 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.adm-zip@0.5.17: 8 known vulnerabilitiesGHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.basic-ftp@5.3.0: 2 known vulnerabilitiesGHSA-c475-qrg2-pj4r, GHSA-rpmf-866q-6p89
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.18: 6 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +1 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.4: 6 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr +1 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.5: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.8.1: 1 known vulnerabilityGHSA-vc2v-76pw-4v95
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.engine.io@6.6.5: 3 known vulnerabilitiesGHSA-2gc4-cqfq-p2gv, GHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.extract-zip@2.0.1: 4 known vulnerabilitiesGHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv, GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.6: 14 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-58mr-gqgx-xq4g, GHSA-hrr3-gc8f-f4qj, GHSA-qw65-cvwx-89v3, GHSA-w74x-v6f9-j3xg +9 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-xml-builder@1.1.5: 2 known vulnerabilitiesGHSA-45c6-75p6-83cc, GHSA-5wm8-gmm8-39j9
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 6 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8, GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p +1 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.2.0: 8 known vulnerabilitiesGHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +3 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.4.0: 24 known vulnerabilitiesGHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +19 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobufjs@7.5.5: 11 known vulnerabilitiesGHSA-2pr8-phx7-x9h3, GHSA-66ff-xgx4-vchm, GHSA-685m-2w69-288q, GHSA-75px-5xx7-5xc7, GHSA-f38q-mgvj-vph7 +6 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.5: 6 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +1 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.35.4: 2 known vulnerabilitiesGHSA-wq5f-xc86-pv6w, GHSA-wq5f-xc86-pv6w
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@4.2.6: 1 known vulnerabilityGHSA-2m8v-j782-fhvr
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@6.28.1: 10 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c +5 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.29.1: 16 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +11 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@8.10.2: 16 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +11 more
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@13.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.3: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.6.2: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
evals/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.adm-zip@0.5.18: 8 known vulnerabilitiesGHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
evals/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.basic-ftp@5.3.1: 1 known vulnerabilityGHSA-c475-qrg2-pj4r
evals/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.9: 3 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
evals/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.6.5: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
evals/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@46.0.7: 4 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.26.0: 7 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.27: 4 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.52.1: 5 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 5 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@2.1.1: 2 known vulnerabilitiesGHSA-rmxm-3fg6-px4f, GHSA-rmxm-3fg6-px4f
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.6.1: 1 known vulnerabilityGHSA-8988-4f7v-96qf
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@protobufjs/utf8@1.1.0: 1 known vulnerabilityGHSA-q6x5-8v7m-xcrf
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 2 known vulnerabilitiesGHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@13.0.6: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.7: 2 known vulnerabilitiesGHSA-5r4p-p66f-jhc7, GHSA-5r4p-p66f-jhc7
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 1 known vulnerabilityGHSA-g3hv-75wg-m249
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 2 known vulnerabilitiesGHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.mongoose@9.4.1: 1 known vulnerabilityGHSA-664h-wqgq-64gw
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 2 known vulnerabilitiesGHSA-6pq8-jhm2-2vcw, GHSA-6pq8-jhm2-2vcw
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.smol-toml@1.7.1: 2 known vulnerabilitiesGHSA-r4xh-jqrq-34v2, GHSA-r4xh-jqrq-34v2
evals/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.7: 5 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-hrr3-gc8f-f4qj, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
evals/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ip-address@10.7.0: 3 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rxp7-6hxx-x8q5
evals/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.6: 1 known vulnerabilityGHSA-g3hv-75wg-m249
evals/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.idna@3.11: 1 known vulnerabilityPYSEC-2026-215
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pydantic-settings@2.12.0: 1 known vulnerabilityGHSA-4xgf-cpjx-pc3j
uv.lock
Network activity
Tools exposed (21)
get_cik_by_tickerConvert a stock ticker symbol to its SEC CIK (Central Index Key). Args: ticker: Stock ticker symbol (e.g., "AAPL", "NVDA", "MSFT") Returns: CIK number for use with other SEC EDGAR tools.
get_company_infoRetrieve company information from SEC records. Args: identifier: Company ticker symbol or CIK number Returns: Company details including name, CIK, SIC code, exchange, and fiscal year end.
search_companiesSearch for companies by name in SEC records. Args: query: Company name search query limit: Maximum results to return (default: 10) Returns: List of matching companies with CIK and ticker information.
get_company_factsget_recent_filingsGet recent SEC filings for a company or across all filers. Args: identifier: Company ticker/CIK (optional, omit for all recent filings) form_type: Filter by form type (e.g., "10-K", "10-Q", "8-K", "4") days: Number of days to look back (default: 30) limit: M
get_filing_contentGet the content of a specific SEC filing with paging support. Args: identifier: Company ticker symbol or CIK number accession_number: The accession number of the filing offset: Character offset into the filing content (default: 0) max_chars: Maximum number o
analyze_8kAnalyze an 8-K current report for material events. Args: identifier: Company ticker symbol or CIK number accession_number: The 8-K filing accession number Returns: Analysis of reported items: <items> <item code="1.01">Material agreements</item
get_filing_sectionsExtract specific sections from 10-K or 10-Q filings. Args: identifier: Company ticker symbol or CIK number accession_number: Filing accession number form_type: Form type ("10-K" or "10-Q") Returns: Extracted sections including business description, risk
get_financialsget_segment_dataget_key_metricscompare_periodsdiscover_company_metricsDiscover what financial metrics are available for a company. <tip>Use this tool to find available XBRL concepts before using get_key_metrics.</tip> Args: identifier: Company ticker symbol or CIK number search_term: Filter metrics by name (optional) Returns:
get_xbrl_conceptsdiscover_xbrl_conceptsDiscover all XBRL concepts available in a filing. <tip>Use this to explore available data before extracting specific concepts.</tip> Args: identifier: Company ticker symbol or CIK number accession_number: Specific filing accession number (optional) form_type: F
get_insider_transactionsget_insider_summaryGet a summary of insider trading activity. Args: identifier: Company ticker symbol or CIK number days: Number of days to analyze (default: 180) Returns: Summary with filing counts by form type, unique insiders, and recent activity.
get_form4_detailsanalyze_form4_transactionsanalyze_insider_sentimentAnalyze insider trading patterns and frequency. Args: identifier: Company ticker symbol or CIK number months: Number of months to analyze (default: 6) Returns: Filing frequency analysis (high/moderate/low) and recent activity summary. <note>This provides f
get_recommended_toolsGet recommended tools for analyzing a specific SEC form type. Args: form_type: SEC form type (e.g., "10-K", "8-K", "4", "DEF 14A") Returns: Recommended tools and usage tips for the form type.
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Sec Edgar MCP alternatives
View more →Similar mcp servers in Database Management, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Sec Edgar MCP (this page) stefanoamorelli | 382 | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Codebase Memory MCP DeusData | 48k | MIT | Nov 1, 2026 | Scanned, see report |
| Xerj xerj-org | 19k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MCP Toolbox googleapis | 17k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Nightingale ccfos | 13k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Dbhub bytebase | 3.8k | MIT | Oct 26, 2026 | Scanned, no flagged issues |