MCP server for retrieving Japanese stock market data via J-Quants API v2
MCP server for retrieving Japanese stock market data via J-Quants API v2
jquants-mcp is a well-structured MCP server for Japanese stock market data with thoughtful security architecture including OAuth 2.1, AES-256-GCM encryption, and plan-aware rate limiting. However, several code quality issues and potential security gaps warrant attention: incomplete input validation on some parameters, overly broad exception handling in critical paths, sensitive data logged in error messages, and lack of CSRF protection in OAuth flows. The multi-user mode's encryption is sound but relies on secure key management outside the application. Permissions are appropriate for the stated purpose (market data APIs and file I/O). Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
3 files analyzed · 16 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-shigechika-jquants-mcp": {
"args": [
"jquants-mcp"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.