Server data from the Official MCP Registry
Investment runtime for AI agents — LLM investment committee, portfolio ledger, decision accounting
Investment runtime for AI agents — LLM investment committee, portfolio ledger, decision accounting
OpenInvest is a sophisticated investment decision engine with generally sound architecture and proper multi-agent isolation. However, several security and code quality concerns warrant attention: environment variable handling lacks explicit protection mechanisms, broad network access for financial data is appropriately scoped but not explicitly validated, and the codebase lacks comprehensive input validation on financial data sources. The well-structured test suite demonstrates good security-aware design patterns, but runtime production safeguards could be stronger. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.
3 files analyzed · 12 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: INVEST_HOME
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-longsizhuo-openinvest": {
"env": {
"INVEST_HOME": "your-invest-home-here"
},
"args": [
"openinvest"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.