Finance MCP Server

Tushare, Qveris, and Binance financial market data integrated via 19 unified MCP tools.

Data last scanned yesterday · Reviewed 3 weeks ago

4819 tools★ 642TypeScriptMIT

Overview

FinanceMCP provides AI agents with a unified, routable, and traceable interface for accessing diverse financial datasets. It aggregates 19 specialized tools supporting A-shares, Hong Kong and US stocks, funds, bonds, futures, forex, and cryptocurrency markets. The server features an intelligent routing engine that manages multiple data providers, including Tushare, Qveris, and Binance. It automatically handles request fallback—switching to secondary providers if a primary source is unavailable or rate-limited—and provides full attribution for every data point retrieved.

Our verdict

This server carries a high-risk rating with a security score of 43/100. The primary security concern is that it lacks a read-only mode, meaning every installation defaults to full write access permissions. Additionally, as a community-maintained project without official vendor backing or editorial review, users should be cautious and audit the implementation before connecting it to sensitive environments.

Supports 19 specialized financial tools in a single interface
Automatic fallback mechanism manages data provider outages
Source transparency with attribution for every result
Low supply-chain risk with only 4 direct dependencies

Lacks a read-only mode, providing full write access by default
Community-maintained project without official vendor oversight
Authentication methods have not undergone independent security review

Setup

Claude Desktop

{
  "mcpServers": {
    "financemcp": {
      "args": [
        "-y",
        "finance-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
current_timestamp	UTC+8 当前时间戳	low
finance_news	财经新闻关键词检索	low
stock_data	多市场历史行情与技术指标	low
stock_data_minutes	A 股与加密资产分钟 K 线	low
index_data	指数行情、基本信息与估值	low
macro_econ	GDP、CPI、PPI、PMI、Shibor、LPR、Libor、Hibor 等	low
company_performance	A 股公司、财务、分红、股东与估值数据	low
company_performance_hk	港股利润表、资产负债表与现金流量表	low
company_performance_us	美股财务报表与指标	low
fund_data	基金净值、持仓、分红与基础资料	low

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›Does this MCP server require any paid subscriptions to function?

It provides 19 tools that can operate with various data sources. While Binance and Baidu news data are public and require no credentials, Tushare and Qveris require registered accounts and API keys to access their respective data.

›How does the server handle multiple data sources?

The server uses a routing system that supports Tushare, Qveris, and Binance. It automatically downgrades to alternative sources if the primary source is unavailable, times out, or reaches a rate limit.

›Can I prioritize specific data sources for my requests?

Yes, you can set the source priority by using the 'X-Finance-Source-Priority' HTTP header or the 'FINANCE_SOURCE_PRIORITY' environment variable, listing your preferred sources in order.

›What are the system requirements for running this server locally?

The server requires Node.js version 18 or higher.

›Is it possible to use Qveris without incurring costs?

Qveris is an optional extension. If you do not provide an API key, the server will not attempt to call Qveris services and will not consume your credits.

›How can I keep my API keys and tokens secure?

Do not hardcode credentials in configuration files or Git repositories. It is recommended to use environment variables, local .env files, or pass them dynamically via HTTP request headers.