
Biopharma Catalyst Mcp
io.github.yesc97Published by GitHub account yesc97v1.2.0Updated Oct 24, 2026
Forensic biopharma catalyst auditor — 10 tools, deterministic CLEAN/BEAR_SIGNAL verdict.
Overview
Audits biopharma catalyst stories by pulling trial, literature, SEC, FDA and market data and returning a deterministic verdict.
- What you can do
- Runs a forensic biopharma research workflow over free public sources: ClinicalTrials.gov, PubMed, SEC EDGAR and XBRL, openFDA and Yahoo Finance. Its headline tool, audit_catalyst, takes a ticker, drug and sponsor and returns a verdict such as CLEAN, FLAG, BEAR_SIGNAL, BLACK_FLAG or DISQUALIFIED, plus the underlying math. Nine connector tools expose the raw data separately, including trial status flags, filings, cash runway, insider transactions, short interest, protocol snapshots, options chains and FDA submission history.
- When to use it
- Useful when you want to check whether a biopharma catalyst thesis holds up without manually grinding trial registries, filings and FDA records. Suited to research on a specific drug or sponsor combination rather than broad screening, and to users who want the verdict computed by code while the model narrates.
- Requirements
- Runs locally as a Node.js process installed from the npm package or built from source. Requires the SEC_USER_AGENT environment variable set to a real contact string, since SEC EDGAR rate-limits or blocks requests without one. Network access to the public data sources is needed; no API keys or accounts are declared.
Installation
In SourceWeft
- Open Biopharma Catalyst Mcp in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
biopharma-catalyst-mcp
A forensic biopharma research MCP server — pulls catalyst-grade signals from 6 free, authoritative sources (ClinicalTrials.gov, PubMed, SEC EDGAR, SEC XBRL companyfacts, openFDA, Yahoo Finance) and hands them to your LLM. Includes a server-side aggregator that runs the full forensic workflow in one tool call and returns a deterministic verdict.
Built for the workflow most retail biopharma analysts actually run: a ticker hits the radar, you spend 2–4 hours grinding Google Scholar, FDA pages, EDGAR, and the options chain to decide if the catalyst story holds up. This compresses that to ~30 seconds.
Table of Contents
- The headline tool: audit_catalyst
- The Tactical Auditor system prompt (alternative)
- Tools
- Install
- Configure as an MCP server
- CLI mode
- Why search by drug name, not ticker
- Live analysis examples
- Roadmap
- Technical reference & maintenance
- Contributing
- Contact
- Notes
- License
The headline tool: audit_catalyst
Single tool, single call, single verdict. Works on any sponsor / drug combination — no hardcoded tickers anywhere.
Big Pharma example — the "Clean" case
A CLEAN verdict is the highest praise this tool gives. It means the auditor cross-referenced 9 sources, tried to break the bull thesis, and couldn't (or could only surface secondary concerns that don't outweigh an S-tier bull signal). That's a stronger long signal than a generic "BUY" rating, because failing to break a thesis is harder than confirming it.
The verdict scale:
CLEAN— tried to break the thesis, couldn't. Confidence drops if A-tier concerns surface.FLAG— A-tier bear signal fired without an offsetting S-tier bull. Data ambiguous; look harder.BEAR_SIGNAL— at least one S-tier bear fired (terminated trial, FDA rejection, dilution risk, etc.). Confidence rises with multiple S-tier bears.BLACK_FLAG— Going Concern disclosed by auditors + cash runway under 6 months. Equity at high risk of zero.DISQUALIFIED— insufficient data tied to the company. Try a different drug or query the underlying connectors directly.
The math (cash runway, months to catalyst, insider sentiment, ATM IV, catalyst date) is also returned for the user to inspect. The LLM narrates; the verdict is code.
The Tactical Auditor system prompt (alternative)
If you'd rather have the LLM run the workflow itself across the individual tools, drop this prompt into your MCP client as a custom instruction or system prompt:
Then ask: audit ticker SRPT, drug elevidys (or whatever).
A CLEAN verdict is the highest praise this tool gives — it means the auditor tried to find a hole in the thesis and couldn't. That's a stronger long signal than a generic bull stamp.
Tools
Ten tools — nine raw connectors plus the aggregator:
All sources are free, no API keys required.
Install
Configure as an MCP server
Add to your MCP client config (e.g. ~/.config/claude/claude_desktop_config.json):
SEC_USER_AGENT is required by SEC EDGAR — use a real contact email or you'll be rate-limited.
CLI mode
For headless runs without an MCP client:
The CLI prints a structured human-readable snapshot — same data the MCP tools expose.
Why search by drug name, not ticker
Biopharma research signal lives at the pipeline drug level, not the corporate level. Searching CT.gov for "Pfizer" returns hundreds of unrelated trials across every therapeutic area. Searching for Comirnaty returns the specific vaccine trials that drive regulatory outcomes. Always feed the tools the drug name (brand or generic), and use the ticker only for market data + SEC filings.
Live analysis examples
Institutional-grade biopharma research requires analyzing the world's largest pipelines. A few examples from live runs:
audit_catalyst("LLY", "Mounjaro", "Eli Lilly")
audit_catalyst("PFE", "Comirnaty", "Pfizer")
audit_catalyst("MRK", "Keytruda", "Merck")
10b5-1 plans don't exempt insider selling from the bear column — management chose to schedule those sales. Real money out the door is real money out the door.
Roadmap
- CT.gov protocol diff — currently we detect late-stage amendments via the proximity heuristic (last update vs primary completion date). The CT.gov v2 API does not expose what changed in an amendment. To detect specific endpoint changes (the canonical goalpost move), we'd need to scrape the public version-history web UI or wait for an API update.
- FDA AdComm forward calendar — currently we surface FDA submission history. A forward calendar of advisory committee meetings would let users plan around binary regulatory events.
- Polygon / Tradier connector — Yahoo's options data is incomplete on illiquid small-cap biotech. A paid market-data option for power users.
- Sponsor-class weighting — currently the aggregator filters trials to those sponsored by the queried company. Industry-academic partnerships and NIH-sponsored trials are excluded. Could weight rather than filter.
- 10-K MD&A scan — extract the "Risk Factors" section and look for management-disclosed risks beyond the Going Concern check.
Technical reference & maintenance
Verifying locally
After any change, rebuild and run the MCP stdio smoke test:
For the aggregator specifically:
Both should complete in under 30 seconds against live APIs. If they don't, check whether SEC has rate-limited you (see Per-source caveats below).
Adding a new connector
- Create
src/connectors/<name>.ts. Export a single async function that returns a structured shape (no LLM-dependent fields, just data). - If it hits
sec.govordata.sec.gov, wrap each axios call inthrottleSec(() => axios.get(...)). - Wire it in
src/index.ts: import, add to thetools/listschema, add the dispatch case in the request handler. - Optionally wire into
audit_catalyst— add to thePromise.allSettledblock and write the signal logic against the spec. - Add a smoke test invocation to your local
verify-mcp.mjs.
Per-source caveats
- SEC.gov: 10 req/sec hard cap. Throttled to ~5 req/sec via
sec-throttle.ts. Going over triggers a 10-minute IP block. TheSEC_USER_AGENTenv var must be a real contact email — fake placeholders are rate-limited harder. - CT.gov v2: No protocol-diff endpoint. The goalpost detector uses a proximity heuristic (firstPost vs primaryCompletion vs lastUpdate). True diff requires scraping the public version-history UI; queued for v1.2.
- Yahoo Finance: Schema validation is suppressed because Yahoo drifts on illiquid biotech option chains. Calls return what they can; expect occasional empty option chains.
- openFDA:
drugsfda.jsoncovers NDA/BLA submission history but not always forward PDUFA dates. Use CT.govcompletionDateas the leading catalyst indicator. - Form 4 XML: EDGAR's
primaryDocumentfield points to the HTML wrapper, not the structured XML. The connector lists each filing's folder viaindex.jsonand finds the.xmlentry. Capped at 25 most recent filings per audit to bound cost.
Security
SEC_USER_AGENTmust stay in local environment variables and never be committed to version control. It contains a real contact email and gets logged on the SEC side; treating it as a secret keeps it out of public git history and avoids inadvertent doxxing..envand.env.localare gitignored by default in this repo; keep your contact details there.- If you fork this project, set your own
SEC_USER_AGENT— do not reuse another user's. - Agent context files (
GEMINI.md,CLAUDE.md,.gemini/,.claude/) are also gitignored; never commit those, they may contain operating notes / strategy details meant for local use only.
Versioning
- Patch (
x.x.+1): bug fixes, doc tweaks, no schema changes. - Minor (
x.+1.0): new tools, new connectors, additive signal logic, schema additions to existing tools. - Major (
+1.0.0): breaking schema changes (renamed fields, removed tools), new required env vars, MCP protocol upgrades.
Shipping a release
- Bump
versioninpackage.jsonto match the change scope. - Update README "headline tool" or "Forensic case studies" sections if behavior changed.
- Run
npm run build && node verify-mcp.mjs— must be 9/9 passing. - Commit using conventional-commit style (
feat:,fix:,chore:). - Tag the commit:
git tag v<X.Y.Z>. - Push to your remote when ready; optional
npm publishif you maintain a public npm release.
Contact
Attila Kovacs (yesc97)
- Email: [email protected]
- GitHub: yesc97
Notes
- Not investment advice. This is research automation. The synthesis step — and the trade — is on you.
License
ISC
Source: README.md at commit 3f27653
Tools
0Version history
1- v1.2.0LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts