← MCP servers · jerbouma
Finance Toolkit
BLOCKgrade F · trust 55/100Transparent and Efficient Financial Analysis
algorithmic tradingequitiesfactor analysisfinancefinancial analysisfinancial datafinancial statementsfundamental analysisOverview
From the repository's own README, as read at the audited commit.
<!-- mcp-name: io.github.JerBouma/financetoolkit -->[](https://github.com/JerBouma/FinanceToolkit)[](https://github.com/sponsors/JerBouma)[](https://www.buymeacoffee.com/jerbouma)[](https://www.linkedin.com/in/boumajeroen/)[](https://www.jeroenbouma.com/projects/financetoolkit/mcp)[](https://github.com/JerBouma/FinanceToolkit/releases/latest/download/financetoolkit.mcpb)[
claude mcp add financetoolkit --env FINANCIAL_MODELING_PREP_API_KEY=${FINANCIAL_MODELING_PREP_API_KEY} --env FRED_API_KEY=${FRED_API_KEY} -- None financetoolkit==2.1.5Details
- Source
- jerbouma/financetoolkit
- PyPI
financetoolkit- Transports
- stdio · streamable-http
- Credentials it reads
FINANCIAL_MODELING_PREP_API_KEYFRED_API_KEYFT_MCP_SECRET_KEY- Tools
- Registered at runtime; the list could not be read from source.
- License
- MIT
- Stars
- 5,327 · pushed 2d ago
Trust audit
Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (4 observation(s))
- Shell
- declared (4 observation(s))
- Dependencies
- pinned
- Secrets in source
- found
Findings (25)
HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95
financetoolkit/cache/serialization_model.py:50
return pickle.loads(zlib.decompress(payload)) # noqa: S301
Why it matters. deserialises untrusted bytes into live objects
Fix. use json or yaml.safe_load
HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95
financetoolkit/cache/serialization_model.py:78
return pickle.loads(zlib.decompress(payload)) # noqa: S301
Why it matters. deserialises untrusted bytes into live objects
Fix. use json or yaml.safe_load
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
financetoolkit/ratios/ratios_controller.py:495
calculation = eval(formula_adjusted) # noqa
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHNetwork egress · net.tls_off · CWE-200, CWE-319
financetoolkit/utilities/requests_model.py:59
url, headers=headers, timeout=timeout, verify=False # noqa
Why it matters. certificate verification is disabled
Fix. leave verification on
MEDIUMInventory / provenance · inv.binary · CWE-1104
financetoolkit/portfolio/example_datasets/example_portfolio.xlsx
example_portfolio.xlsx
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
financetoolkit/mcp_server/registry_controller.py:386
module = importlib.import_module(module_path)
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
README.md:118
discovery = Discovery(api_key="FINANCIAL_MODELING_PREP_KEY")
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
financetoolkit/discovery/discovery_controller.py:56
discovery = Discovery(api_key="FINANCIAL_MODELING_PREP_KEY")
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
financetoolkit/discovery/discovery_controller.py:124
discovery = Discovery(api_key="FINANCIAL_MODELING_PREP_KEY")
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
financetoolkit/discovery/discovery_controller.py:229
discovery = Discovery(api_key="FINANCIAL_MODELING_PREP_KEY")
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
financetoolkit/discovery/discovery_controller.py:292
discovery = Discovery(api_key="FINANCIAL_MODELING_PREP_KEY")
LOWInventory / provenance · inv.binary · CWE-1104
tests/datasets/balance_dataset.pickle
balance_dataset.pickle
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
tests/datasets/cash_dataset.pickle
cash_dataset.pickle
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
tests/datasets/historical_dataset.pickle
historical_dataset.pickle
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
tests/datasets/income_dataset.pickle
income_dataset.pickle
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.hidden_file · CWE-1104
.pre-commit-config.yaml
.pre-commit-config.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
financetoolkit/mcp_server/mcpb/.mcpbignore
.mcpbignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
financetoolkit/mcp_server/mcpb/build-mcpb.sh:18
REPO_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)"
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/mcp_server/test_mcp_oauth.py:104
client = TestClient(app, base_url="http://127.0.0.1:8000")
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/mcp_server/test_mcp_oauth.py:236
client = TestClient(app, base_url="http://127.0.0.1:8000")
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/mcp_server/test_mcp_oauth.py:291
client = TestClient(app, base_url="http://127.0.0.1:8000")
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/mcp_server/test_mcp_oauth.py:334
client = TestClient(app, base_url="http://127.0.0.1:8000")
LOWObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
README.md:9
[ and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Finance Toolkit need?
It reads FINANCIAL_MODELING_PREP_API_KEY, FRED_API_KEY and FT_MCP_SECRET_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Finance Toolkit run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on PyPI as financetoolkit.
How current is this page?
The grade is for one exact copy of the source (ffd971075709), read on 2026-09-13. The repository is watched and re-audited when it changes.
Provenance: OBSERVED · read 2026-09-13 · job trust-audit-2026-09-13