io.github.cyanheads/secedgar-mcp-server
io.github.cyanheads/secedgar-mcp-server
MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/8fc2cc60-c024-4b12-959c-5cd183696278/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "io.github.cyanheads/secedgar-mcp-server"
title: null
description: "Query SEC EDGAR filings, XBRL financials, and company data via MCP. STDIO or Streamable HTTP."
version: "0.19.1"
homepage_url: null
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "io.github.cyanheads"
display_name: "io.github.cyanheads"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository{5}
url: "https://github.com/cyanheads/secedgar-mcp-server"
provider: "github"
owner: "cyanheads"
name: "secedgar-mcp-server"
verified: false
packages[2]
0{4}
registry_type: "npm"
identifier: "@cyanheads/secedgar-mcp-server"
version: "0.19.1"
transport: "stdio"
1{4}
registry_type: "npm"
identifier: "@cyanheads/secedgar-mcp-server"
version: "0.19.1"
transport: "streamable-http"
transports[3]
0{5}
kind: "package"
type: "stdio"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
1{5}
kind: "package"
type: "streamable-http"
endpoint_url: null
endpoint_host: null
auth_type: "unknown"
2{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://secedgar.caseyjhand.com/mcp"
endpoint_host: "secedgar.caseyjhand.com"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "modern"
negotiated_version: "2026-07-28"
supported_versions[0]
transport_type: "streamable-http"
tools[16]
0{9}
name: "secedgar_company_search"
title: "Secedgar Company Search"
effect: "READ"
effect_confidence: 0.841
capabilities[0]
risk_severity: "INFO"
fingerprint: "b23af314b3f1a843e6456b37aa2a8d14d40e4688b0976c3148a2dddc4708bce4"
input_schema_fingerprint: "478a55b49c2e6882953ab2f35ca82a405dd57da3b0fa07ac5bd5069a069b9723"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
1{9}
name: "secedgar_compare_companies"
title: "Secedgar Compare Companies"
effect: "READ"
effect_confidence: 0.813
capabilities[1]
0{2}
capability: "CALENDAR"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "3bb8a351eed1c17104fd03113ef08b12bd883d22d88ab84114a145685404c95e"
input_schema_fingerprint: "ca31c91dd5b15439e0d1fb5ef3445cc2b07910efecf32ce7645545f4036b9a66"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
2{9}
name: "secedgar_dataframe_describe"
title: "Secedgar Dataframe Describe"
effect: "READ"
effect_confidence: 0.841
capabilities[0]
risk_severity: "INFO"
fingerprint: "f1536411ccadf3b599fb19eceefd2b374a9906431cedc14ba63e0af94fae10a5"
input_schema_fingerprint: "acc39d039bf7ffdad8aecd377fb2f8f2a8b2ba948bff2242afdf95cc9e706e43"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
3{9}
name: "secedgar_dataframe_query"
title: "Secedgar Dataframe Query"
effect: "EXECUTE"
effect_confidence: 0.846
capabilities[1]
0{2}
capability: "DATABASE_ACCESS"
confidence: 0.746
risk_severity: "CRITICAL"
fingerprint: "bca64c6640d4e6bdc4f483fbeb6f1504b997512f0408e0423dfbd86cd1ebc3f3"
input_schema_fingerprint: "6e14d2cf4c4acfaf17de7441a1fa9c777f4223f148077392a5a2e743f73f0c99"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
4{9}
name: "secedgar_fetch_frames"
title: "Secedgar Fetch Frames"
effect: "READ"
effect_confidence: 0.841
capabilities[0]
risk_severity: "INFO"
fingerprint: "4f97781480ff2d2daed62cc39b604524f60f4f4d993cf31e842bf3e52b42207e"
input_schema_fingerprint: "aefa0f4b009a9c5537ec58b9ae0417ebcc5e79b53771dd52513d1f53d1222452"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
5{9}
name: "secedgar_find_holders"
title: "Find Holders"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "49026fb5b12390aa831e7a8719a24df743238e0f68be5eba9bc8ba0947119283"
input_schema_fingerprint: "20e72fa075cdb52c249fddaa7c89cb11b3940b650c240fb358451fcb26d62fac"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
6{9}
name: "secedgar_get_beneficial_owners"
title: "Get Beneficial Owners"
effect: "READ"
effect_confidence: 0.905
capabilities[1]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "b97f56aeb8d4e8acb659080f6b36d0638a2975a81c074e90ede66dd8019e0c48"
input_schema_fingerprint: "ef7f25db0546d0461fc6781586671f772397fdbd283194c2da98d159262a70bb"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
7{9}
name: "secedgar_get_filing"
title: "Secedgar Get Filing"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "cd16bba265e7a2cae6dc0439cff7a19f7b9a5d9e75c99e85e9f650ecf967e467"
input_schema_fingerprint: "e298e25023d2b6ca58ed92978520d8b89ac545f7e369b9044bea712aee1c0f47"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
8{9}
name: "secedgar_get_financials"
title: "Secedgar Get Financials"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "0eed2efc00f930202a64d8137de53ba0040d03fa80c2a83c73bd8a0b65c6a731"
input_schema_fingerprint: "fb33682d36994020f7440961eeeed7a8274d18f9da251dfc7b6653012fab9529"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
9{9}
name: "secedgar_get_fund_holdings"
title: "Get Fund Holdings"
effect: "READ"
effect_confidence: 0.905
capabilities[1]
0{2}
capability: "FILE_ACCESS"
confidence: 0.567
risk_severity: "INFO"
fingerprint: "460227c30895d9d9132598435b0fc1b68fc6c69ff30236df93039b7e9e7bacde"
input_schema_fingerprint: "66286d7fb0c64553cf43857cf71390085c1984ab08129b9fb036dff41b71a2f9"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
10{9}
name: "secedgar_get_insider_transactions"
title: "Get Insider Transactions"
effect: "READ"
effect_confidence: 0.905
capabilities[1]
0{2}
capability: "PERMISSION_MANAGEMENT"
confidence: 0.792
risk_severity: "INFO"
fingerprint: "712bcea739e8d61b3b13bfbc1f449fcb81a97d3c07665792dd7d6d25c254dc84"
input_schema_fingerprint: "ef8bdabc63c7d7d303ab5b2fab24e279f6288d9be207c8b63a4e638d7af851fe"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
11{9}
name: "secedgar_get_institutional_holdings"
title: "Get Institutional Holdings"
effect: "READ"
effect_confidence: 0.888
capabilities[2]
0{2}
capability: "HR"
confidence: 0.734
1{2}
capability: "PERSONAL_DATA"
confidence: 0.711
risk_severity: "MEDIUM"
fingerprint: "b2ea17f467b07194fd6c076f335e029f294c0a8b7fcc9d30f11e92248aed67de"
input_schema_fingerprint: "912b7c5d4255bf469329777d9c6ef2301dbfc2849a2df0322bc90fc0fa2e3eef"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
12{9}
name: "secedgar_get_material_events"
title: "Get Material Events"
effect: "READ"
effect_confidence: 0.905
capabilities[0]
risk_severity: "INFO"
fingerprint: "42712b9cf1ac451c46599cbe26c95b8cf6ea679037557a435650b4dbb6c84cfd"
input_schema_fingerprint: "887365b57fb1acdfa67d3cb5db15f9028627f897fe9610b890dd39a8d8c4210e"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
13{9}
name: "secedgar_get_snapshot"
title: "Secedgar Get Snapshot"
effect: "EXECUTE"
effect_confidence: 0.533
capabilities[0]
risk_severity: "HIGH"
fingerprint: "67afa4c01f1d1bcda6b9fbc694e98f9f20b4bba938142d25e47b4a1aa04232b5"
input_schema_fingerprint: "3e380f6e9c6f8bb313ba87236d25a25868ee8ce7174d4c75ddbf5f498fc8e8a0"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
14{9}
name: "secedgar_search_concepts"
title: "Secedgar Search Concepts"
effect: "READ"
effect_confidence: 0.813
capabilities[0]
risk_severity: "INFO"
fingerprint: "27d3c689371aca149224fe8dab5774fe039ff268116346001e4fc1f9bced83ac"
input_schema_fingerprint: "7722866d9e8e98a46bf00dd863703cbe1899b0e3151b65f0a2d3f5b602afc2fa"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: false
15{9}
name: "secedgar_search_filings"
title: "Secedgar Search Filings"
effect: "EXECUTE"
effect_confidence: 0.6
capabilities[0]
risk_severity: "CRITICAL"
fingerprint: "c250ce42a48f931c9265db2d9b8bc64bf027d4840cdf32f86c99c756824f932a"
input_schema_fingerprint: "e5699b8af4c03718c87340bbc340c61d6423d09bcaa14f5e437244124f566518"
annotations{5}
title: null
readOnlyHint: true
destructiveHint: null
idempotentHint: true
openWorldHint: true
resources[4]
0{4}
key: "secedgar://concepts"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "472d4dd606918fa4181d79349c42946f0a94d225c519a6b1add487a32f4e38ce"
1{4}
key: "secedgar://filing-types"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "d025fb5da7e6f344c427e3e3864db5123724236102e8e4be3122bdbb0852e39a"
2{4}
key: "skill://secedgar-guide/SKILL.md"
kind: "resource"
mime_type: "text/markdown"
fingerprint: "20828448ee2a4cc060226b458e991b0307b8096cc9a9dcc437663d8b030e1d38"
3{4}
key: "skill://{+path}"
kind: "template"
mime_type: null
fingerprint: "9777dc7f1cf468158c157032a0ccebf9b50270f4e8753af9ccaf2fe99890ccf0"
prompts[1]
0{2}
name: "secedgar_company_analysis"
fingerprint: "c232ae30d18f865fc1c1a44f4883bedfddc00b270f2711976a3018d9e6d95854"
extensions[1]
0: "io.modelcontextprotocol/skills"
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "secedgar.caseyjhand.com"
registrable_domain: "caseyjhand.com"
source: "transport"
findings[13]
0{6}
check_id: "SQ-SERVER-AUTH-NONE-WRITE"
category: "authentication"
severity: "MEDIUM"
title: "State-changing tools available without authentication"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "HIGH"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "secedgar_dataframe_query"
2{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "secedgar_get_snapshot"
3{6}
check_id: "SQ-TOOL-ANNOTATION-UNDERCLAIM"
category: "annotations"
severity: "MEDIUM"
title: "Annotations understate what the tool does"
subject_type: "tool"
subject_name: "secedgar_search_filings"
4{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "CRITICAL"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "secedgar_compare_companies"
5{6}
check_id: "SQ-TOOL-CONCEALMENT"
category: "prompt_injection"
severity: "HIGH"
title: "Text asks the AI model to hide actions from the user"
subject_type: "tool"
subject_name: "secedgar_fetch_frames"
6{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "secedgar_compare_companies"
7{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "secedgar_fetch_frames"
8{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "HIGH"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "secedgar_get_institutional_holdings"
9{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "secedgar_company_search"
10{6}
check_id: "SQ-TOOL-LENGTH-ANOMALY"
category: "tool_design"
severity: "LOW"
title: "Unusually long model-facing text"
subject_type: "tool"
subject_name: "secedgar_get_filing"
11{6}
check_id: "SQ-TOOL-OVERLY-BROAD"
category: "tool_design"
severity: "MEDIUM"
title: "Runs arbitrary code with open-world access"
subject_type: "tool"
subject_name: "secedgar_search_filings"
12{6}
check_id: "SQ-TOOL-TITLE-EFFECT-MISMATCH"
category: "deceptive_metadata"
severity: "HIGH"
title: "Display title describes a lower-impact action than the name"
subject_type: "tool"
subject_name: "secedgar_search_filings"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "unverified"
source_provenance: "partial"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "io.github.cyanheads/secedgar-mcp-server"
registry_content_sha256: "056999613ebed9048722f90e48e85226e08e3510c46c199b75a9eb4e827ac5d0"
scan_snapshot_fingerprint: "1f6ba1627f2ed521e01841a57ca00a9588107cd4af9696faa9872d92bd6275cd"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T02:14:29.956Z"
observed_at: "2026-11-13T18:41:18.997+00:00"
registry_published_at: "2026-11-13T15:03:25.574172+00:00"
registry_updated_at: null