xiaozhigetassetpricemcp
by TrBaPhong
Overview
Extending AI capabilities by providing tools to fetch real-time financial asset prices (cryptocurrency, stocks, gold) through a Model Context Protocol (MCP) server.
Installation
docker-compose up --buildEnvironment Variables
- MCP_ENDPOINT
Security Notes
The project includes 'calculator.py' which uses 'eval()' to execute arbitrary Python expressions. While attempts are made to restrict the scope, 'eval()' is inherently dangerous and poses a significant security risk if untrusted inputs from an AI model are passed, especially since 'calculator.py' is configurable via 'mcp_config.json'. Furthermore, 'getassetprice.py' hardcodes two critical API keys (CoinMarketCap and BTMC_API_KEY). Hardcoding secrets is a severe security vulnerability, as they should always be loaded securely from environment variables or a secret management system. The overall project structure allows for potentially insecure 'tools' to be exposed and managed.
Similar Servers
maverick-mcp
Personalized stock analysis, technical indicators, and portfolio optimization via Claude Desktop.
alpha_vantage_mcp
Enables LLMs and agentic workflows to seamlessly interact with real-time and historical stock market data through the Model Context Protocol (MCP).
mcp-crypto-price
Provides real-time price data, market analysis, and historical trends for cryptocurrencies using the CoinCap API.
my_stock_mcp_server
Provides real-time stock data and analysis tools for AI models by scraping EastMoney.com.