etf-holdings-tracker (tradernetwork/etf-holdings-tracker) is an MCP server listed on the M8ven Trust Index. It scores 38 out of 100, grade F. It declares 20 tools. No publisher has claimed this listing.

Warning

38/100

etf-holdings-tracker

Item: etf-holdings-tracker
Rating: 38
Author: M8ven

Daily ETF holdings-change signals across 71 funds (ARK, YieldMax, Avantis, Roundhill and more): conviction-scored buy/sell signals, cross-fund divergences, sector flow. Free REST API + MCP server for AI agents, no auth required. TickerTrace, a TraderMatrix product.

→ tradernetwork/etf-holdings-tracker · listed on github_repo_search

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

tradernetwork

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

🚨

Secret credentials may flow to a network call

2 flows detected: OPENROUTER_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

🚨

Hardcoded credentials detected

1 live-looking API key in source: 1 Google API key

🔐

You'll be asked for 3 credentials: WHOP_API_KEY, OPENROUTER_API_KEY, GITHUB_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// tools this server exposes20 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

get_signals

Get today's top institutional buying and selling signals. Signals are ranked by conviction score (AUM-weighted, multi-provider bonus). Returns buying and selling lists with ticker, funds, providers, and conviction.

get_changes

Get all daily position changes across tracked ETFs.

get_fund_detail

Get full detail for a specific ETF fund.

get_ticker_detail

Get cross-fund detail for a specific stock ticker. Shows every fund holding this ticker, their weights, and share counts.

get_sector_flow

Get sector-level weight changes. Shows which economic sectors are seeing institutional inflows vs outflows.

get_divergences

Get cross-fund divergences — tickers where different funds disagree. One fund is buying while another is selling the same ticker. These are rare and notable.

get_layering_patterns

Get cross-fund "layering" patterns — tickers where multiple institutional stock-pickers each opened a BRAND-NEW position within a few trading days of each other. This is real-time consensus building that quarterly 13F data can't see; the entry order (who moved first) often precedes a breakout.

get_market_summary

Get a complete market summary: stats, top signals, sector flow, and divergences. Best for getting a quick overview of institutional activity today.

get_briefing

Get the pre-market institutional briefing. Returns top institutional buys, top sells, multi-provider convergence, active accumulation streaks, and notable new option positions.

get_institutional_flow

Get aggregate institutional accumulation and distribution flow. Blends every stock-picking fund (pure option-income funds excluded) into one AUM-weighted portfolio and reports which tickers institutions as a whole are net buying or selling.

get_institutional_trend

Get per-ticker institutional accumulation/distribution trend across all horizons (day/week/month) at once, ranked by the monthly move.

get_holdings_changes

Get institutional position changes over a daily/weekly/monthly window, filterable by provider, fund, direction, and fund category.

get_stock_activity

Get complete institutional activity for a single stock: current fund holders (like get_ticker_detail) plus the AUM-blended institutional accumulation/distribution trend and a trading-day history series.

list_all_funds

List all tracked institutional funds, enriched with holdings counts, options counts, and top holding.

list_all_tickers

List the most widely-held underlying tickers across all tracked funds.

get_income_overview

Get coverage and structural classification for all option-income funds.

get_income_fund_detail

Get an option-income fund's full book — one row per underlying, not per contract — with call coverage, moneyness, and options overlay details.

get_options_listings

Get the CBOE Options Scanner daily diff of CBOE's published option universe: stocks gaining options for the first time (Symbol Directory) and weekly-options promotions/demotions (Available Weeklys).

get_signal_performance

Get historical backtest performance for TickerTrace conviction signals: median forward return + win rate, overall and per fund family.

get_global_stats

Get global tracking stats: funds tracked, unique underlyings, options contracts, put/call ratio, and today's new positions/exits.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

🔐 secretWHOP_API_KEY

configTICKERTRACE_BASE_URL

configALLOWED_ORIGINS

configGIT_SHA

🔐 secretOPENROUTER_API_KEY

configVISIT_HASH_SALT

🔐 secretGITHUB_TOKEN

Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.

deployNEXT_PUBLIC_API_URL

deployNEXT_PUBLIC_GA_ID

deployNEXT_PUBLIC_WHOP_AGENT_USER_ID

deployNEXT_PUBLIC_WHOP_APP_ID

deployNEXT_PUBLIC_WHOP_COMPANY_ID

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

20/20 tools missing one or more hints — get_signals (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_changes (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_fund_detail (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +17 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

No hardcoded API keys

1 live-looking API key in source: 1 Google API key

Move secrets to environment variables (process.env.X) or your secret manager.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Verified](https://m8ven.ai/badge/mcp/tradernetwork/etf-holdings-tracker?variant=verified)](https://m8ven.ai/mcp/tradernetwork/etf-holdings-tracker)

Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.

commit: 5ae3d14b51796a239864e639953f7194558658f7

code hash: a65fc35fa7626c794f0f456e0b556db915784fec68f61d4c926bca36414fba21

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client