Back to Home
zhenxiay icon

stock_intelligence_mcp

by zhenxiay

Overview

This MCP server enables AI agents to access and analyze Yahoo Finance stock data, providing real-time information, technical analysis, and recommendations.

Installation

Run Command
docker run --name mcp-server-stock -p 8008:8008 mcp-server-stock-intelligence:test

Environment Variables

  • PYTHONPATH
  • HTTP_PROXY
  • HTTPS_PROXY
  • NO_PROXY

Security Notes

The `read_resources` tool located in `src/stock_intelligence_mcp/main.py` is vulnerable to path traversal. The `file_name` parameter is directly used to construct a file path (e.g., `f"resources/{file_name}"`). An attacker could provide a `file_name` like `../../../../etc/passwd` to read arbitrary files on the server, potentially exposing sensitive information depending on the server's file system permissions. This is a critical vulnerability for an AI agent server.

Similar Servers

Stats

Interest Score29
Security Score3
Cost ClassMedium
Avg Tokens500
Stars2
Forks1
Last Update2026-01-07

Tags

Stock AnalysisFinancial TradingAI AgentMCP ServerTechnical Indicators