Atlas / MCP servers / atilaahmettaner / tradingview-mcp

tradingview-mcpCAUTION

Name: tradingview-mcp
Author: atilaahmettaner

mcp/atilaahmettaner/tradingview-mcp

MCP server by atilaahmettaner · claude desktop · cryptocurrency · futures · Audited 2026-10-06

TradingView MCP server — real-time market data, technical analysis, screeners & backtesting for Claude, ChatGPT, Cursor & any MCP client. Stocks, crypto, forex & futures across global exchanges. Hosted or self-host.

Verdict

CAUTION

Grade

Trust score

89 /100

Exposed tools

—

Transport

streamable-http

License

MIT

Stars

4,933

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

TradingView MCP server — real-time market data, technical indicators, screeners, and backtesting for Claude, ChatGPT, Cursor, Copilot, and any MCP client. Stocks, crypto, forex & futures across global exchanges. Backtesting + live sentiment + Yahoo Finance + 37 technical-analysis tools — the most complete TradingView MCP toolkit, all in one server.

Don't want to install anything? The hosted server gives you all 37 tools as one connector URL for Claude, ChatGPT, Cursor and Copilot. From $9/mo with a 3-day free trial; self-hosting stays free.

🆕 The [hosted server](https://pro.cryptosieve.com/?utm_source=github&utm_medium=readme&utm_content=charts) now draws. Ask for a chart and an interactive candlestick view (1d / 1h / 15m, optional Bollinger overlay) renders live inside the conversation via MCP Apps — and the AI reads the band values back to you:

[Paste one URL](https://pro.cryptosieve.com/?utm_source=github&utm_medium=readme&utm_content=paste_url) (or `pip install`), then just ask. Real output, straight from the live server:

Read from source at commit 3dadb7310389OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add tradingview-mcp-server --env MARKETAUX_API_TOKEN=${MARKETAUX_API_TOKEN} --env PROXY_PASSWORD=${PROXY_PASSWORD} -- uvx tradingview-mcp-server

claude-desktop

{
  "mcpServers": {
    "tradingview-mcp-server": {
      "command": "uvx",
      "args": [
        "tradingview-mcp-server"
      ],
      "env": {
        "MARKETAUX_API_TOKEN": "${MARKETAUX_API_TOKEN}",
        "PROXY_PASSWORD": "${PROXY_PASSWORD}"
      }
    }
  }
}

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: declared (8 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (12)

HIGHNetwork egress · net.env_exfil · CWE-200, CWE-319

src/tradingview_mcp/core/services/proxy_manager.py:32

/.env" ... urllib.request

Why it matters. reads secrets in the same file that sends data out

LOWInventory / provenance · inv.hidden_file · CWE-1104

.codex-mcp.json

.codex-mcp.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/tradingview_mcp/core/services/proxy_manager.py:32

_env_path = os.path.join(os.path.dirname(__file__), "../../../../.env")

LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104

server.json

Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source

Fix. the page says so rather than showing an empty table

INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427

INSTALLATION.md:340

# 1. Open System Properties → Environment Variables

Why it matters. asks the agent to read credentials

INFOPrompt injection · prompt.persistence · CWE-94, CWE-1427

INSTALLATION.md:339

# If not found, add to PATH manually:

Why it matters. instructs the agent to persist itself in the user's environment

INFOPrompt injection · prompt.persistence · CWE-94, CWE-1427

INSTALLATION.md:350

# Add to PATH (if needed)

Why it matters. instructs the agent to persist itself in the user's environment