46
grade D
10 days ago
glama
claude-fidelity-mcp
Enables interaction with Fidelity Investments brokerage accounts using Playwright browser automation to manage balances, positions, and trades. It supports secure 2FA authentication and session persistence for seamless account management via Claude.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 4 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: FIDELITY_PASSWORD, FIDELITY_TOTP_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
FIDELITY_DEBUG— No false Set to "true" to enable debug loggingconfig
FIDELITY_HEADLESS— No true Set to "false" to show the browser window🔐 secret
FIDELITY_PASSWORD— Yes — Fidelity login passwordconfig
FIDELITY_SESSION_DIR— No ~/.fidelity-mcp Directory for session persistence filesconfig
FIDELITY_SESSION_TITLE— No — Session file identifier (use for multiple accounts)config
FIDELITY_TIMEOUT— No 30000 Default timeout in milliseconds🔐 secret
FIDELITY_TOTP_SECRET— No — Base32 TOTP secret for authenticator app 2FA. Get from Fidelity Security Settings > Authenticator app > "Can't scan the code?"config
FIDELITY_USERNAME— Yes — Fidelity login username// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/tylerflar-claude-fidelity-mcp-1vnvtg)commit: 0fca726546fda70109381fbf72c44db81932f6d0
code hash: a0d93185ceb910fc729aa3bce5a767386e7f2a52195deff2998f55dcd77f3a7b
verified: 4/11/2026, 2:22:50 PM