
Toolstem Sec Mcp Server
io.github.toolstemPublished by GitHub account toolstemv0.1.9Updated Oct 24, 2026
SEC filing MCP for AI agents — insider signals, 13F flow, material events. Pre-computed.
Overview
Local MCP server that pulls SEC EDGAR filings and returns pre-computed disclosure signals — filing velocity, insider counts, 13D activist flags and 8-K…
- What you can do
- Summarize a company's filing activity: last 20 filings, filing velocity, 8-K count and form types
- Probe Form 3/4 insider filing counts within a lookback window
- Check SC 13D/13D-A activist filings and an activist risk flag
- Build a severity-ranked digest of 8-K/8-K-A events with plain-English item labels
- Compare 2–5 companies side by side on disclosure signals and name the quietest, most active or most red-flagged
- When to use it
- Useful when an assistant needs quick, structured SEC filing intelligence for a ticker or CIK — screening disclosure activity, checking for activist stakes or scanning material events — without parsing EDGAR raw filings itself.
- Requirements
- Runs as a local npm package over stdio (Node.js via npx or global install). Needs network access to SEC EDGAR. SEC_USER_AGENT_CONTACT supplies the contact email in the EDGAR User-Agent and defaults to a built-in address. Self-hosted HTTP mode adds PORT, ALLOW_REMOTE, MCP_AUTH_TOKEN and MCP_AUTH_DISABLED.
Installation
In SourceWeft
- Open Toolstem Sec Mcp Server in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
SEC EDGAR MCP Server — Insider Signals, 13D Activist Risk & Filing Intelligence
[npm version] [npm downloads] [License: MIT]
SEC EDGAR intelligence for AI agents. Five composite tools that pre-compute high-value signals directly from SEC EDGAR's public submissions API, returned as structured JSON.
No SEC API key required. Data is sourced directly from SEC EDGAR's public submissions API. A built-in sliding-window rate limiter keeps traffic under SEC's 10 rps fair-access ceiling automatically.
Quickstart — hosted endpoint (recommended)
Point your MCP client or agent at the hosted endpoint. No API key, no infra, no setup. Billing is per-call via x402 — the agent's wallet pays directly in USDC on Base mainnet.
- No SEC API key, no signup, no marketplace account — the agent's wallet pays directly.
- No infrastructure — nothing to install, host, or keep running.
- No setup — connect an MCP client and call a tool.
initializeandtools/listare free (discovery and schema introspection).tools/callis tiered per tool (see Pricing below).
Claude Desktop
Drop this into your claude_desktop_config.json:
Restart Claude Desktop, then ask: "Has TSLA disclosed any material 8-K events in the last 90 days?"
Any MCP client (LangChain.js)
The official @langchain/mcp-adapters library connects directly to the hosted URL:
LangChain quick-start (langchain-toolstem)
The langchain-toolstem wrapper handles x402 payment for you — pass a funded wallet key and the SEC tools are included automatically:
Prefer to run the server yourself over stdio/HTTP? See Advanced: self-host at the bottom.
Try the tools live in the Toolstem playground.
Pricing
- MCP
initializeandtools/listare free — discover the server and its tool surface without paying anything. tools/callis tiered per tool, paid in USDC on Base mainnet via x402. No API key, no signup, no marketplace account — agents pay directly from their own wallet.
Per-tool breakdown:
How billing works
Toolstem uses the x402 payment protocol. Agents pay per call in USDC on Base — no API keys, no subscriptions, no invoices. The agent's wallet settles each call automatically via EIP-3009.
See the live pricing page on toolstem.com/sec/ for current rates.
The five tools
All five tools are composite/curated (they compute derived signals or aggregate across multiple EDGAR endpoints — no raw passthroughs). Annotations: readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true.
1. get_company_filings_summary
Overview of a company's filing activity: last 20 filings + computed signals.
Example output (abbreviated):
2. get_insider_signal
Probes Form 3 / 4 / 4/A insider filing activity within a configurable lookback window. Required: ticker_or_cik. Optional: lookback_days (1–730, default 90).
Returns: recent_insider_filings[] (accession numbers + SEC URLs), net_transaction_count, buy_count, sell_count, and insider_signal.
v0.1 limitation — counts only. v0.1 returns counts and Form 4 references only; direction-aware buy/sell signals ship in v0.2 (Form 4 XML parsing). Today,
insider_signalisnullwhen filings exist in the window (direction unknown) and"NEUTRAL"when no insider filings exist (verified absence).buy_count/sell_countare0in v0.1.
Example output (abbreviated):
3. get_institutional_signal
Probes for activist investor activity via SC 13D / 13D/A filings. Required: ticker_or_cik. Optional: quarters_back (1–20, default 4 ≈ 1 year).
v0.1 limitation — activist flag only. v0.1 ships the live
activist_risk_flag(from 13D/13D-A) and a list of 13D filings. Quarterly 13F XBRL parsing — which producesinstitutional_signal(ACCUMULATING/HOLDING/DISTRIBUTING) andrecent_13f_count— ships in v0.2. Today those two fields arenull/0.
Example output (abbreviated):
4. get_material_events_digest ⚡ Premium tier
Premium tier — $0.50 USDC per call on Base mainnet, settled via x402. See the live pricing page on toolstem.com/sec/ for current rates.
Severity-ranked digest of all 8-K and 8-K/A filings within a configurable lookback window. Each item code is mapped to a plain-English label and severity rating. Required: ticker_or_cik. Optional: lookback_days (1–1825, default 365).
Returns: events[] (sorted newest-first), redflag_count, category_counts.
Example output (abbreviated):
5. compare_disclosure_signals
Side-by-side comparison of 2–5 companies across all key disclosure signals. Required: tickers_or_ciks (string[2..5]). All lookups run in parallel.
Returns per-company: filing_velocity, material_event_count_90d, redflag_count_365d, activist_risk_flag, last_filing_date.
Returns winners (as CIKs, not tickers — cross-reference with the companies[] array): quietest_disclosure, most_active, most_redflags, activist_targets.
Example output (abbreviated):
Advanced: self-host
Most users should use the hosted endpoint above — it needs no API key, no infrastructure, and no setup. This section is for users who specifically want to run the server themselves. When self-hosting you are responsible for running the process and for supplying an EDGAR fair-access contact (
SEC_USER_AGENT_CONTACT).
Claude Desktop (self-hosted over stdio)
Run locally over stdio — no x402 charges, you bring your own EDGAR fair-access contact:
npm (MCP stdio transport)
Self-hosted HTTP
Three modes:
Local-only (default — safest):
Remote with auth:
Remote without auth (use at your own risk):
SEC EDGAR fair-access policy
All outbound traffic goes through a shared sliding-window rate limiter (8 rps target, 4 rps safety margin below SEC's 10 rps hard cap). Every request includes a User-Agent header identifying the package and a contact email per SEC policy. Override the contact email via:
Violating SEC's fair-access policy can result in your IP being blocked. This server is designed to stay compliant automatically.
v0.2 roadmap
- Form 4 XML parsing — direction-aware insider signals (
STRONG_BUYING/BUYING/NEUTRAL/SELLING/STRONG_SELLING) with net share counts - 13F XBRL parsing — quarterly institutional flow signals (
ACCUMULATING/HOLDING/DISTRIBUTING) with institution count - 8-K text extraction — natural-language summaries of each material event from the filing's primary HTML document
License & author
MIT License — see LICENSE.
Source: README.md at commit 7dd22e1
Tools
0Version history
1- v0.1.9LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts