Vibe Astock MCP Server
by simonlin1212Vibe AStock：A 股短线复盘与跟踪工作台 · 盯盘异动、情绪复盘（连板天梯、题材轮动、明日验证）、AI 复盘与周报、交易日志、盘前提醒，182 个数据端点。支持 Claude Code、Codex、WorkBuddy 订阅或任意模型 API。 | A short-term trading review and tracking workbench for China A-shares.
Vibe Astock is an open-source mcp server by simonlin1212, written mainly in TypeScript, with 935 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 29, 2026.
Scan summary: scanned Nov 5, 2026 at commit e0d08d1. Seen able to read environment and secrets, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
e0d08d1 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit38 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (34)
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Turns off TLS certificate checking, allowing traffic interception.
.agents/skills/data-access/scripts/sources/sw.py:56 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.7.0: 3 known vulnerabilitiesPYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
.agents/skills/data-access/scripts/requirements.lock.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@6.4.3: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
orchestrator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 1 known vulnerabilityGHSA-27r3-jxmh-p828
orchestrator/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.4.3: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
orchestrator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
.agents/skills/data-access/scripts/tests/test_redaction.py:24 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key8 matches in this file
desktop/test/fixtures/journal-view.json:257 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
orchestrator/test/direct_transport.test.ts:23 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key5 matches in this file
orchestrator/test/ingest.test.ts:62 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
orchestrator/test/number_gate.test.ts:192 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key3 matches in this file
orchestrator/test/provider_matrix.test.ts:69 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
orchestrator/test/init_doctor.test.ts:278 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
orchestrator/test/net_guard.test.ts:52 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
orchestrator/test/progress.test.ts:124 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
orchestrator/test/orchestrate.test.ts:835 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key5 matches in this file
orchestrator/test/chat.test.ts:30 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key6 matches in this file
orchestrator/test/notify.test.ts:15 - lowLow. Minor, or common in normal tools. Shown for information.idna@3.9.0: 1 known vulnerabilityPYSEC-2026-215
.agents/skills/data-access/scripts/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.0.10: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.4: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@2.1.1: 1 known vulnerabilityGHSA-rmxm-3fg6-px4f
orchestrator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.7: 5 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-hrr3-gc8f-f4qj, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
orchestrator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.5: 2 known vulnerabilitiesGHSA-5r4p-p66f-jhc7, GHSA-hxh3-vqpv-xpqv
orchestrator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ip-address@10.5.0: 5 known vulnerabilitiesGHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5
orchestrator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 1 known vulnerabilityGHSA-6pq8-jhm2-2vcw
orchestrator/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Vibe Astock alternatives
View more →Similar mcp servers in Finance & Trading, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Vibe Astock (this page) simonlin1212 | 935 | Apache-2.0 | Oct 29, 2026 | Scanned, no flagged issues |
| QuantDinger OpenByteInc | 13k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| FinanceToolkit JerBouma | 5.5k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Tradingview MCP atilaahmettaner | 5.2k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Aktools akfamily | 1.5k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Tradememory Protocol mnemox-ai | 1.4k | MIT | Oct 23, 2026 | Scanned, no flagged issues |