Back to Browse

Ashareport MCP Server

Developer ToolsModerate5.1MCP RegistryLocal
Free

Server data from the Official MCP Registry

A-share stock data: history, realtime, news, statements and metrics.

About

A-share stock data: history, realtime, news, statements and metrics.

Security Report

5.1
Moderate5.1Moderate Risk

ashareport is a thin TypeScript client that forwards stock-data queries to a user-configured ASHAREPORT_API_URL endpoint, with no hardcoded secrets, shell execution, or filesystem access found. The main concerns are that the upstream endpoint is trusted without authentication or TLS enforcement, and that its responses are returned unvalidated to the AI assistant, which is a prompt-injection surface. Permissions (outbound HTTP and one env var) match the stated purpose. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

ASHAREPORT_API_URLRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-ashareport": {
      "env": {
        "ASHAREPORT_API_URL": "your-ashareport-api-url-here"
      },
      "args": [
        "-y",
        "@reneturcios/ashareport"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

ashareport

ashareport exposes nine A-share (China mainland) stock-data tools — history, realtime quotes, news, balance sheet, income statement, cash flow, inner trades, and financial metrics, plus a local time tool — as a command line program and as a stdio MCP server.

How the data tools work (read this first)

The original design runs a Python market-data library in-process. This TypeScript rebuild uses an endpoint executor instead: set

export ASHAREPORT_API_URL="https://your-data-endpoint.example"

and each data tool POSTs JSON {tool, source, params} to {ASHAREPORT_API_URL}/<tool> and returns the endpoint's JSON answer. With the variable unset, data tools return an error: upstream data endpoint not configured: set ASHAREPORT_API_URL .... get_time_info is fully local and needs no endpoint.

Source fallback is implemented locally, in the documented order:

DomainSource order
historicaleastmoney → eastmoney_direct → sina → ths
realtimeeastmoney_direct → eastmoney → xueqiu → ths (xueqiu/ths skipped when no symbol is given)
newseastmoney → ths
statements / metricssina → eastmoney_direct

The requested source is tried first, then the domain order when fallback is not false, stopping at the first non-empty result. If every source fails, the error lists each source and its error. Defaults: interval day, adjust none, recent_n 100 for historical data and 10 for the other recent-N tools.

indicators_list is passed through to the endpoint, not computed locally. get_time_info walks back from today skipping Saturday and Sunday to find the last trading day; exchange holidays are not modelled.

Install

npx @reneturcios/ashareport get_time_info
docker run -i ghcr.io/cloudcorprecords/ashareport   # MCP server

CLI

ashareport get_hist_data --symbol 600519 --interval day --recent-n 20
ashareport get_realtime_data --symbol 600519
ashareport get_realtime_data            # market-wide, symbol optional
ashareport get_news_data --symbol 600519
ashareport get_balance_sheet --symbol 600519
ashareport get_income_statement --symbol 600519
ashareport get_cash_flow --symbol 600519
ashareport get_inner_trade_data --symbol 600519
ashareport get_financial_metrics --symbol 600519
ashareport get_time_info
ashareport --version

Exit codes: 0 success, 1 tool error, 2 usage error.

MCP server

npx -y @reneturcios/ashareport mcp
{
  "mcpServers": {
    "ashareport": {
      "command": "npx",
      "args": ["-y", "@reneturcios/ashareport", "mcp"],
      "env": { "ASHAREPORT_API_URL": "https://your-data-endpoint.example" }
    }
  }
}

Tools

ToolRequiredOther parameters
get_hist_datasymbolinterval, interval_multiplier, start_date, end_date, adjust, source, fallback, indicators_list, recent_n
get_realtime_data— (symbol optional)source, fallback
get_news_datasymbolsource, fallback, recent_n
get_balance_sheetsymbolsource, fallback, recent_n
get_income_statementsymbolsource, fallback, recent_n
get_cash_flowsymbolsource, fallback, recent_n
get_inner_trade_datasymbol—
get_financial_metricssymbolsource, fallback, recent_n
get_time_info—— (local: ISO time, Unix timestamp, last trading day)

Development

npm install
npm run build   # tsc -> dist/
npm test        # node test runner, fake-fetch only, no network
npm run dev     # run the CLI from source via tsx

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!