这是一个金融领域相关的mcp,本项目通过集成 Tushare API 和 Binance API 为语言模型（如Claude）提供全面的实时金融数据访问能力，支持股票、基金、债券、宏观经济指标、稳定币、虚拟货币等多维度金融数据分析。其中也包含了金融数据查询、财经新闻查询、国家统计局数据查询等
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
guangxiangdebizi
Source: github_topic · also listed on modelscope
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
COINGECKO_API_KEYCOINGECKO_DEMO_API_KEYCOINGECKO_PRO_API_KEYFINANCE_SOURCE_PRIORITY"": "tushare,qveris,binance"GITHUB_REPOSITORYGITHUB_TOKEN如果 FinanceMCP 对你有帮助，欢迎点一个 ⭐。趋势图由仓库自己的 GitHub Actions 每周一自动更新，也支持手动刷新；使用仓库临时 ，不依赖第三方 Star 抓取服务或长期凭证。QVERIS_API_KEYQveris 是可选扩展。未提供 X-Qveris-Api-Key / 时不会调用 Qveris，也不会消耗 credits。接口契约参见 [Qveris REST API](https://qveris.ai/docs/rest-api)。QVERIS_BASE_URL默认强制 HTTPS；仅 loopback 地址允许 HTTP 回归测试。STAR_HISTORY_OUTPUTTUSHARE_TOKENTushare Pro 需要 Token [注册账号](https://tushare.pro/document/1?doc_id=38) · [获取 Token](https://tushare.pro/document/1?doc_id=39) stdio：；HTTP：X-Tushare-TokenPORTTests exist
No test files found
Add tests that exercise each declared tool.
Shell command execution
1 child_process call — runs shell commands
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
Secrets stay with their owner
1 secret/sensitive value flow into network calls (GITHUB_TOKEN → dynamic)
Audit where credentials are sent. A NOTION_TOKEN should only reach api.notion.com — never a third-party host.
Secrets not logged
1 secret value sent to console.log
Redact or omit secret values from log output.
Production dependencies are patched
0 critical, 1 high severity in production deps — @modelcontextprotocol/sdk@0.6.0 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Your fixes are re-checked automatically. Claim the listing and we tell you when the grade moves, and reach you directly if we find anything urgent.
[](https://m8ven.ai/mcp/guangxiangdebizi-financemcp-fhaaej)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check