Back to Home
TrBaPhong icon

xiaozhigetassetpricemcp

by TrBaPhong

Overview

Extending AI capabilities by providing tools to fetch real-time financial asset prices (cryptocurrency, stocks, gold) through a Model Context Protocol (MCP) server.

Installation

Run Command
docker-compose up --build

Environment Variables

  • MCP_ENDPOINT

Security Notes

The project includes 'calculator.py' which uses 'eval()' to execute arbitrary Python expressions. While attempts are made to restrict the scope, 'eval()' is inherently dangerous and poses a significant security risk if untrusted inputs from an AI model are passed, especially since 'calculator.py' is configurable via 'mcp_config.json'. Furthermore, 'getassetprice.py' hardcodes two critical API keys (CoinMarketCap and BTMC_API_KEY). Hardcoding secrets is a severe security vulnerability, as they should always be loaded securely from environment variables or a secret management system. The overall project structure allows for potentially insecure 'tools' to be exposed and managed.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassLow
Avg Tokens25
Stars0
Forks0
Last Update2025-11-28

Tags

AI toolsFinancial dataAsset pricingMCPWebSocket