Back to MCP Trust Indexm8ven
70
/ 100
11 days ago
glama

TradingView Chrome MCP

Enables AI assistants to remotely control TradingView charts in Chrome, including reading charts, writing and fixing Pine Script, managing watchlists and alerts, and capturing screenshots, all through natural language commands.

→ firyomaefx/tradingview-chrome-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 7 credentials: ANTHROPIC_API_KEY, KV_REST_API_TOKEN, OPENAI_API_KEY, SUPABASE_SERVICE_ROLE_KEY, TV_DASHBOARD_TOKEN, TV_EXTENSION_TOKEN, UPSTASH_REDIS_REST_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.0.4GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highplaywright@1.48.0GHSA-7mvr-c777-76hp

Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate

lowexpress@4.19.2GHSA-qw6h-vgh9-j6wx

express vulnerable to XSS via response.redirect()

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretANTHROPIC_API_KEY— OPENAI_API_KEY / — Enables autonomous tv_pine_autofix patching.
configFLAG_DISABLE_DESTRUCTIVE_TOOLS
configFLAG_DISABLE_TELEMETRY
configFLAG_READ_ONLY_MODE
🔐 secretKV_REST_API_TOKEN
configKV_URL
configLocalAppData
configMCP_API_KEYS
configMCP_RATE_LIMIT_PER_MINUTE
🔐 secretOPENAI_API_KEY— / ANTHROPIC_API_KEY — Enables autonomous tv_pine_autofix patching.
configPLAYWRIGHT_BROWSERS_PATH
configProgramFiles
configProgramFiles(x86)
🔐 secretSUPABASE_SERVICE_ROLE_KEY
configSUPABASE_URL
configTELEMETRY_ALLOWED_KEYS
configTELEMETRY_ENABLED
configTOOL_BACKEND
configTV_ALLOW_REAL_PROFILE— Chrome profile reuse Optional =1 keeps you logged into TradingView.
configTV_APPROVAL_TIMEOUT_MS— "": "120000"
configTV_AUTOFIX_MODEL— gpt-4o / claude-3-5-sonnet-20241022 LLM used by the repair loop.
configTV_AUTO_APPROVE_DESTRUCTIVE
configTV_BROWSER_DRIVER— $env: = "extension"
configTV_CDP_URL
configTV_CHROME_PATH
configTV_CHROME_USER_DATA
configTV_DASHBOARD_PORT— "": "3939",
🔐 secretTV_DASHBOARD_TOKEN— random Bearer token required by dashboard /api/.
configTV_DATA_DIR— %LOCALAPPDATA%\tradingview-chrome-mcp Logs, backups, screenshots, exports.
configTV_DEFAULT_TRADINGVIEW_URL— $env: = "https://www.tradingview.com/chart/?symbol=OANDA%3AXAUUSD"
configTV_ENABLE_HTTP_MCP
🔐 secretTV_EXTENSION_TOKEN— $env: = "tradingview-chrome-mcp"
configTV_EXTENSION_WS_PORT— $env: = "9223"
configTV_LOG_LEVEL— "": "info",
configTV_MCP_HTTP_PORT— 3940 Optional Streamable HTTP transport; set 0 to disable.
🔐 secretUPSTASH_REDIS_REST_TOKEN
configUPSTASH_REDIS_REST_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/firyomaefx-tradingview-chrome-mcp-16ru5x)](https://m8ven.ai/mcp/firyomaefx-tradingview-chrome-mcp-16ru5x)
commit: 61cf9041194dd060d78d1ddc77edfc36583c6339
code hash: 992e61ec3e2c91f33d2cd20e2ccaa8b0172de97c76c5fc742cbb11bb0907473a
verified: 7/21/2026, 9:35:56 AM
view raw JSON →