Back to Browse

Troystack Api MCP Server

Developer ToolsUse Caution1.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Precious metals AI analyst with 12 tools — prices, portfolio, chat, receipts, and more.

About

Precious metals AI analyst with 12 tools — prices, portfolio, chat, receipts, and more.

Remote endpoints: streamable-http: https://api.troystack.ai/mcp

Security Report

1.2
Use Caution1.2Critical Risk

This MCP server exposes significant security vulnerabilities including unauthenticated public API endpoints, missing input validation on user-facing chat functions, hardcoded API keys in environment variables without rotation policies, and excessive permissions that far exceed typical developer tool requirements. The conversation management system lacks proper authorization checks and the server handles sensitive financial/portfolio data without adequate access controls. Supply chain analysis found 11 known vulnerabilities in dependencies (0 critical, 4 high severity).

3 files analyzed · 26 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

external_api_gemini

Check that this permission is expected for this type of plugin.

external_api_stripe

Check that this permission is expected for this type of plugin.

external_api_twitter

Check that this permission is expected for this type of plugin.

external_api_supabase

Check that this permission is expected for this type of plugin.

external_api_expo_push

Check that this permission is expected for this type of plugin.

external_web_scraping

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

TroyStack API

REST API + MCP Server for TroyStack. Provides live precious metals data, portfolio management, and AI/LLM integration.

Quick Start

npm install
cp .env.example .env  # fill in Supabase credentials
npm run dev

Deploy to Railway

  1. Push to GitHub repo
  2. Connect repo in Railway dashboard
  3. Set environment variables:
    • SUPABASE_URL
    • SUPABASE_SERVICE_ROLE_KEY
    • PORT (Railway sets automatically)
  4. Deploy

Custom domain: api.troystack.ai

Database Setup

Run migrations/001_api_keys.sql in Supabase SQL editor.

Endpoints

Public (no auth)

MethodPathDescription
GET/v1/pricesLive spot prices (Au, Ag, Pt, Pd)
GET/v1/prices/historyHistorical prices
GET/v1/market-intelNews headlines
GET/v1/vault-watchCOMEX inventory
GET/v1/speculationWhat-if projections

Authenticated (Bearer token)

MethodPathDescription
GET/v1/portfolioPortfolio summary
GET/v1/analyticsCost basis analysis
GET/v1/holdingsList holdings
POST/v1/holdingsAdd purchase

LLM / AI

PathDescription
/llms.txtLLM-readable description
/openapi.jsonOpenAPI 3.0 spec
/.well-known/ai-plugin.jsonAI plugin manifest
/.well-known/mcp.jsonMCP server manifest

Architecture

User's iPhone → TroyStack app (local SQLite)
                          ↕ sync
                    Supabase (server-side storage)
                          ↕
                    TroyStack API (Railway)
                      ↕         ↕
                  AI Agents    X/Twitter Bot
                (Claude, GPT)  (auto-tweets)

Reviews

No reviews yet

Be the first to review this server!

Troystack Api MCP Server - Precious metals AI analyst with 12 tools — prices, | MCP Marketplace