
Form4API — SEC Insider Trading
io.github.theodor90Published by GitHub account theodor90v1.17.0Updated Nov 4, 2026
Real-time SEC Form 4, Form 144, 13F-HR & congressional STOCK Act insider data. 39 tools + 6 prompts.
Overview
Local MCP server that gives an assistant 39 tools and 6 prompts for SEC insider-trading data: Form 4 transactions, Form 144, 13F-HR holdings and congressional…
- What you can do
- Resolve company names, tickers and insider names to tickers or CIKs, and browse company and insider directories
- Search and page Form 4 insider transactions and filings, with filters for transaction codes, 10b5-1 plans, value, role and date range
- Pull company profiles, insiders, peers and per-insider transaction histories, plus career summaries and buy scorecards
- Read cluster buy/sell signals, monthly sentiment scores, Form 144 notices, 13F-HR institutional holdings and 13D/13G ownership crossings
- List congressional STOCK Act trades and politician rollups, and find tickers where insider and congressional buying converge
- Check API key usage, webhook delivery health, data quality and…
- When to use it
- Useful when research sessions need SEC insider-trading, institutional-ownership or congressional-trade facts without hand-querying EDGAR or scraping sites. Suited to analysts and developers who want the assistant to answer questions about insider buying, planned sales or 13F positioning in one turn.
- Requirements
- Runs locally over stdio, typically launched with npx, so Node.js is needed. Requires a Form4API key in the FORM4API_KEY environment variable; a free key covers 500 requests per day. Network access to the hosted Form4API service is required. A few tools work without a key.
Installation
In SourceWeft
- Open Form4API — SEC Insider Trading in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
form4api-mcp
Production-grade SEC Form 4 insider trading data for any MCP-compatible AI assistant — amendment-aware, 10b5-1 clean, with Form 144 + institutional 13F-HR overlay, plus congressional STOCK Act trades and insider/Congress convergence — 39 tools + 6 ready-made research prompts
[npm version] [Available on mcp.so] [form4api-mcp MCP server]
An MCP server that exposes the hosted Form4API REST API to Claude Desktop, Cursor, Windsurf, VS Code, Codex CLI, and any other MCP-compatible client. Configured once, your LLM can answer questions about insider trading, institutional positioning, and intent-to-sell filings directly during research sessions.
Four data-quality claims no scraping-based alternative can make:
- 🛡 Amendment-aware — Form 4/A amendments are reconciled automatically. No double-counting when an insider corrects a filing.
- 🎯 10b5-1 clean — every transaction flagged as pre-scheduled (10b5-1 plan) or discretionary. Cluster signals exclude planned trades by construction.
- 📜 Form 144 intent-to-sell — 125K+ Form 144 filings indexed. Catch insider sales ~2 days before they hit Form 4.
- 🏛 Institutional × insider join — every transaction carries the current 13F-HR ownership context (top-3 holders, AUM trend) in the same response: no second call, no client-side join. Among the self-serve SEC data APIs we've surveyed, none return both sides in one query — sec-api.io and Kaleidoscope both ship 13F and insider data as separate endpoints.
Quick install
1. Get a free API key
Go to www.form4api.com → Sign in → Dashboard. Free plan includes 500 requests/day, no credit card required.
2. Add to your MCP client
Claude Desktop — edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
Restart the client. The tools appear automatically.
Claude Code (CLI):
…then set FORM4API_KEY in your shell or in ~/.claude/mcp.json.
Cursor — edit ~/.cursor/mcp.json (user-level) or .cursor/mcp.json (workspace-level):
Restart Cursor. The tools appear automatically.
Windsurf — edit ~/.codeium/windsurf/mcp_config.json:
Restart Windsurf. The tools appear automatically.
VS Code — edit .vscode/mcp.json (workspace-level). Note: VS Code uses the servers key (not mcpServers):
Restart VS Code. The tools appear automatically.
Codex CLI — config is TOML at ~/.codex/config.toml:
Verify it works
Ask your LLM to run the verify_setup tool — it confirms your API key is valid and the MCP server is reachable, or returns the exact fix steps.
Example: "Run the verify_setup tool to confirm the MCP is configured correctly."
Try before you commit a key
get_public_stats is a keyless tool — it works with no FORM4API_KEY set. Try it first to preview live data coverage before signing up:
Once you like what you see, sign up for a free key at www.form4api.com → set FORM4API_KEY → all tools unlock.
3. Or run directly
Available tools (39)
Search
Form 4 insider trading
Signals + sentiment
Form 144 + institutional
Congress + convergence
Utility
Prompts (6)
Beyond the 39 tools, this MCP ships 6 prompts — ready-made research recipes that a client can list (prompts/list) and load (prompts/get) so you don't have to hand-assemble the right tool sequence yourself. Each one tells the LLM exactly which SEC Form 4 / Form 144 / 13F-HR tools to call, in what order, and how to read plan-gated results.
These map to the recipe workflows scraping-based Form 4 MCPs don't offer — each one leans on data this MCP alone exposes (10b5-1 flags, Form 144, 13F-HR join, per-insider return scoring). Plan requirements are honored honestly: prompts that touch Business-plan tools (get_signals, get_sentiment, get_form144, get_holdings, get_managers) or Pro-plan tools (get_insider_career_summary, get_insider_scorecard) instruct the LLM to surface the structured upgrade_required response rather than silently failing.
In Claude Desktop, prompts surface as a / slash-command picker; in Claude Code or other MCP clients, ask the assistant to "use the insider_monitor prompt for NVDA" (or similar) and it will fetch and follow the recipe.
Example prompts
Configured? Ask your LLM:
Quality-led (these require our amendment-aware, 10b5-1 clean, joined dataset):
- "Show me cluster buy signals from this week — discretionary only, no planned trades"
- "Which companies have insiders buying while institutional ownership is increasing this quarter?"
- "Are there any Form 144 filings at NVDA suggesting upcoming sales?"
- "What's the monthly insider sentiment for TSLA over the last 6 months, with 10b5-1 plans excluded?"
- "Berkshire Hathaway's top 13F-HR holdings — what did they add or trim this quarter?"
Standard insider research:
- "What insider trades happened at NVDA in the last 30 days, excluding 10b5-1 plans?"
- "What is Tim Cook's career insider-trading summary?"
- "Show me all open-market purchases over $1M at Tesla in 2026"
- "What has the CFO of Microsoft been doing with their shares this year?"
Why this MCP vs scraping-based alternatives
Some MCPs in this space scrape free public sites (e.g. openinsider.com) for Form 4 data. That's fine for a quick prototype but the data layer they give your LLM has structural gaps:
If your LLM session is the start of a real research workflow that eventually wants production delivery, picking the MCP that has a graduation path matters.
Beyond MCP — when you need more
Webhook tools are read-only. The MCP can list your webhooks (list_webhooks) and replay delivery events (get_webhook_events), nothing more. Creating, deleting, enabling and testing webhooks, and setting a custom auth header, are done through the REST API or the dashboard. This is deliberate: the MCP exposes no write tools for webhooks.
The MCP is the easiest entry point. When your workflow grows past LLM-mediated research, the rest of the Form4API platform is right behind it:
- Webhooks — HMAC-signed, exponential backoff, dead-letter queue, auto-disable on persistent failure. For production pipelines, not just LLM chats.
- Python SDK —
pip install form4api(PyPI) - JS / TypeScript SDK —
npm install form4api(npm) - Dashboard — usage, billing self-serve, key rotation, webhook health, billing history.
The MCP wraps the same backend as all of the above — every fact your LLM cites can be re-fetched programmatically through any of these channels with the same key.
Plans
25 of the 39 tools work on the free plan, and every tool that is free today stays free. New premium capability gets tiered as it ships; nothing that already works on your key is taken away later.
Starter sits between Free and Pro: 7,500 requests/day and 120/minute, 100 pages of get_transactions paging depth and a 366-day congressional history window. Tools marked Pro or Business in the table still need that plan. Enterprise is unlimited requests/day at 2,000/minute.
For a bulk historical pull, use the REST /v1/transactions/export endpoint (Business) rather
than paging — it streams the whole filtered set as CSV in one request.
What your agent sees at a paywall
A gated call never surfaces a bare HTTP error. The MCP returns a structured
upgrade_required payload so the model can explain the situation and the fix in one turn:
message is the API's own explanation, kept verbatim — it names the specific limit or
parameter that stopped the call, which is usually what the model needs to suggest a working
alternative. The same shape is returned when a Pro-only parameter is used on an otherwise
free tool, so the model can simply retry without that filter.
upgrade_url is included only when the API supplies one; it is omitted otherwise.
Data coverage
- 1.38M+ Form 4 transactions from SEC EDGAR
- 620K+ filings across all reporting companies
- 125K+ Form 144 notice-of-proposed-sale filings (Business+)
- 45M+ Form 13F-HR holdings across 118K+ filings, $80T+ AUM in the latest complete quarter (Business+)
- 3.3+ years of history (since 2023-04)
- 10b5-1 plan flag on every transaction
- Amendment-aware — Form 4/A reconciled
- Congressional STOCK Act trades — U.S. House Clerk periodic transaction reports only (Senate eFD is not ingested).
list_congress_tradesis available on every plan with a history window by plan (Free 30 days, Starter 366 days, Pro+ unlimited); politician rollups and convergence need Pro+. Digital filings, amounts always shown as disclosed ranges (amountLow/amountHigh), never a fabricated midpoint, plusdisclosureLagDayson every trade (up to 45 days under the STOCK Act) - Real-time ingestion — new filings within minutes of SEC publication
Install as a Claude Desktop Extension (DXT)
A manifest.json is included at the repo root for one-click install via the Desktop Extensions (DXT) format. Once Claude Desktop supports .dxt files natively, pack and install with:
Until then, use the standard claude_desktop_config.json method described in Quick install above.
How tools stay in sync with the backend
This MCP is split between two layers:
- Hand-written tools in
src/tools/*.ts(transactions, signals, sentiment, form144, holdings, …) — these carry the LLM-discriminator descriptions (amendment-aware, 10b5-1 clean, etc.) that make this MCP pick correctly over alternatives. - Auto-generated tools in
src/tools/_generated.ts— produced fromhttps://api.form4api.com/openapi/v1.jsonbynpm run codegen. Every new backend endpoint that lands in the OpenAPI spec flows in here automatically. CI runsnpm run codegen:checkon every PR and fails the build if the committed file drifts from what the live spec would produce, so the MCP is never silently behind the backend.
To add a new generated tool: ship the endpoint on the backend, regenerate (npm run codegen), commit src/tools/_generated.ts, publish. No tool-wrapper code needed.
The 6 recipe prompts live in src/prompts/recipes.ts — also hand-written, not generated. They add no new backend surface area; each one is a client-side template that tells the LLM which existing tools to call and in what order.
Links
Source: README.md at commit 536eeac
Tools
0Version history
7- v1.17.0LatestOct 14, 2026
- v1.16.0Oct 13, 2026
- v1.15.3Oct 12, 2026
- v1.15.2Oct 5, 2026
- v1.15.1Oct 2, 2026
- v1.15.0Sep 24, 2026
- v1.9.3Sep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
