LeanTrading MCP

io.leantrading由 leantrading.io 发布官方发布者v1.2.0更新于 Oct 24, 2026

OAuth LeanTrading tools for eligible Pro, Elite, Blueprint, and Admin users.

已验证Streamable HTTP可网页运行金融数据与分析

概览

AI 生成的概览

托管的 LeanTrading MCP 服务器，通过 OAuth 将 MCP 客户端连接到 LeanTrading 交易助手，仅限符合条件的付费账户。

可以做什么
通过 OAuth 2.1 与 PKCE 将 MCP 客户端连接到托管的 LeanTrading 助手界面，无需手动复制会话令牌。获取用户的 LeanTrading 系统上下文、情报、风险预览、建议和图表数据。需由客户端显式请求图表、写入和执行能力，这些能力仍受 LeanTrading 权限范围检查和确认流程约束。未公布工具清单，因此具体操作在此不作说明。
适用场景
当你已拥有符合条件的 LeanTrading 账户（Pro、Elite、Blueprint、Admin，或处于前 14 天试用期内的 Product Tester），并希望 Cursor、Claude 或其他 MCP 客户端使用你的 LeanTrading 上下文、风险预览和图表数据时使用。
运行要求
通过 streamable HTTP 访问的远程托管端点，无需本地软件包或运行时。需要 OAuth 连接 LeanTrading，且账户为符合条件的付费账户；Explorer 和免费账户无权访问。图表、写入和执行能力必须由客户端显式请求。
安装前请注意
请求可能将你的 LeanTrading 系统上下文、情报、风险预览、建议和图表数据暴露给所连接的客户端。图表和提醒的修改需要更强的权限范围和确认流程，默认 OAuth 请求为只读。不提供静默的券商下单功能。托管调用会以服务器端元数据审计，托管和认证涉及第三方子处理商。该上架信息并非安全认证，连接前请先查看权限范围和隐私说明。

安装

在 SourceWeft 中

  1. 打开 控制台中的 LeanTrading MCP，将其添加到工作区。
  2. 连接 所需的 凭据。它们会被私密存储，绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.leantrading%2Fleantrading-mcp/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。 客户端会在首次连接时完成 OAuth 登录。

{
  "mcpServers": {
    "leantrading": {
      "type": "http",
      "url": "https://www.leantrading.io/api/mcp"
    }
  }
}

README

LeanTrading MCP

Connect Cursor, Claude, and other MCP clients to the hosted LeanTrading assistant surface through OAuth 2.1/PKCE.

Hosted server

text
https://www.leantrading.io/api/mcp

The server requires a LeanTrading OAuth connection and an eligible account: paid Pro/Elite/Blueprint/Admin, or Product Tester during the first 14 days of the tester grant. After that window, Product Tester must upgrade to Pro. Explorer and free accounts are not granted hosted MCP access.

Installation

This repository contains the marketplace metadata and Cursor plugin wrapper. It does not contain credentials and does not require a manually copied Supabase session JWT.

The default OAuth request is read-only. Chart, write, and execute capabilities must be explicitly requested by the client and remain subject to LeanTrading scope checks and confirmation boundaries.

Safety boundaries

  • OAuth authorization uses PKCE with the S256 method.
  • Access and refresh tokens are not stored in plaintext by the server.
  • Entitlements are checked again on every hosted MCP call.
  • Webhook secrets are redacted and are not returned by the MCP tools.
  • Silent broker order placement is not exposed as an MCP operation.
  • Chart and alert mutations require stronger scopes and confirmation flows.

Marketplace listing is not a security certification. Review the source, requested scopes, and the LeanTrading privacy/security notices before connecting an account.

Repository packaging

This directory is the export bundle for the public LeanTrading/leantrading-mcp repository. It contains metadata and a thin wrapper for the hosted service; it does not contain the private server source.

Before submitting it to a marketplace:

  1. Keep the repository public and limited to this bundle.
  2. Keep the repository URL in server.json and plugin.json synchronized.
  3. Keep the hosted endpoint and version in all metadata synchronized with the deployed server.
  4. Publish the approved data-retention and deletion policy before final marketplace submission.

Privacy note

MCP requests can expose the user's requested LeanTrading system context, intelligence, risk-preview, advisory, and charting data to the connected client. Hosted MCP calls are audited using server-side metadata such as user, client, event, tool, status, and structured metadata; raw tool arguments are not stored. This metadata is retained only as long as necessary to provide the service, protect it, and comply with legal obligations, then deleted or anonymized when no longer needed. Account deletion remains subject to short backup cycles and statutory retention duties.

MCP hosting and database/authentication subprocessors include Vercel and Supabase. Data-protection requests can be sent to [email protected].

来源：README.md，提交 d6fa5e3

工具

0
该服务器需要登录，因此 SourceWeft 无法在没有账号的情况下读取其工具，也未收录。已连接账号所能看到的内容可能因账号及其权限而异。

版本历史

1
  1. v1.2.0最新Sep 16, 2026

评分

已满足适用检查项的 85%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分