ToolTrust
B17/100
Smithery

stockslash-sec-13f

mcpsmithery

@Smithery

**SEC 13F filings, Congress trades, and insider buying as MCP tools. Free, no API key, accepts natural names.** StockSlash exposes ~80 institutional investors (Buffett, Burry, Ackman, Pabrai, Tepper, Loeb, and more), the members of Congress who trade stocks, and corporate insider filings as **23 callable tools**. Pass natural names like `investor: "Buffett"`, `stock: "Apple"`, or `member_name: "Pelosi"`. No CIK or ticker lookup needed. Typical agent queries: - *"Tell me about Buffett"* - *"Compare Burry and Ackman"* - *"Are insiders bullish on Tesla?"* - *"What did Pabrai buy last quarter?"* - *"What is Nancy Pelosi trading?"* ## Start here: 4 bundle tools Each replaces 3 to 4 separate calls. - **`analyze_investor`** — full fund profile in one call: AUM, 8-quarter trend, top 10 holdings with weights, recent activity (Buy / Add / Reduce / Sold), and trading style. Required: `investor`. - **`analyze_stock`** — full institutional picture of a stock: top 10 holders, recent fund activity, and insider transaction summary. Required: `stock`. - **`compare_investors`** — side-by-side comparison of two funds: overlapping positions, unique-to-each, and divergent moves. Required: `investor_a`, `investor_b`. - **`get_insider_summary`** — aggregated Form 4 sentiment over a window: net flow, top buyers and sellers, plus a bullish / bearish / mixed label. Required: `stock`. Optional: `days_back`. ## 19 granular tools **Investor data** - `get_super_investors` — list and filter all 80 tracked funds; search by tag, style, or description. - `get_investor_current_holdings` — every stock owned by one fund at a given quarter. - `get_investor_fund_value` — latest total AUM for one fund. - `get_investor_fund_value_history` — quarterly AUM with period returns. - `get_fund_activity` — buys and sells made in one quarter. - `get_fund_distribution` — trading cadence across quarters. **Stock data** - `get_stock_holders` — top 20 institutional holders plus summary. - `get_stock_activity` — recent buy and sell activity across all funds for one stock. - `get_ownership_statistics` — institutional ownership concentration plus top 5 holders. - `get_insider_trades` — raw Form 4 transactions (filter by Buy or Sell). **Congress and insiders** - `get_congress_trades` — U.S. Congress stock trades from STOCK Act disclosures; filter by `member_name` (e.g. "Pelosi") or `ticker`. - `get_congress_consensus` — stocks several members of Congress bought recently, a consensus signal. - `get_top_insider_stocks` — stocks with the most insider buying, scoped by default to super-investor holdings (where insiders and smart money overlap). **Market-wide** - `get_filings_buy_status` — top 25 stocks being bought across funds this quarter. - `get_filings_sell_status` — top 25 stocks being sold across funds this quarter. - `get_latest_filings_updates` — most recent 13F submissions. - `get_sp_stocks_by_holders` — S&P 500 stocks ranked by institutional holder count. - `get_ownership_statistics_home` — dashboard snapshot: top owned, most bought, most sold. - `get_latest_quarter` — which quarter has the most recent data. Full reference at [stockslash.com/mcp-api](https://stockslash.com/mcp-api). ## Built for agents Responses include a `resolved` block showing exactly which entity matched the input, and `related_tickers` suggestions when a query returns no data. Payloads max ~25 KB, average ~7 KB. All 23 tools ship with full JSON Schema `outputSchema` and MCP 2024-11-05 `annotations`. ## Data Normalized 13F holdings, Form 4 insider transactions, and congressional (STOCK Act) trades across ~80 tracked investors and the members of Congress who trade. Holdings are quarterly snapshots, lagged up to 45 days; insider and congressional filings carry their own disclosure lag. Not real-time, analytical use only ([terms](https://stockslash.com/imprint)). **Free. Rate-limited to 200 requests per 15 minutes per IP.**

By Smithery | 35 findings | Scanned 7/16/2026 | tooltrust-scanner/v0.3.19

2 High2 Low31 Info

Risk Summary

Safe With Normal Controls

Dep Visibility is the main signal, but overall risk remains within an acceptable range.

Potential impact: This finding indicates the tool should be reviewed before it is trusted.

Recommended action: No high-risk findings were detected in this scan, but you should still apply least-privilege defaults and rescan after changes.

Suggested policy: keep this tool behind manual approval, do not allow unattended runs, and re-scan after narrowing risky permissions.

Security Findings (35)

  • HighAS-003

    🔀Scope Mismatch ×2

    tool name "get_insider_trades" implies read-only operation but declares exec permission

    get_insider_trades

    tool name "get_insider_summary" implies read-only operation but declares exec permission

    get_insider_summary

    Fix: Ensure tool names, descriptions, and permission declarations are internally consistent. Use explicit naming conventions that fully reflect actual capabilities.

  • LowAS-011

    ℹ️Missing Rate-Limit / Timeout ×2

    tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

    get_insider_tradesget_insider_summary

    Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

  • InfoAS-002

    ⚠️Excessive Permissions ×8

    declared capabilities: filesystem access

    get_super_investorsget_investor_current_holdingsget_latest_filings_updatesget_latest_quarteranalyze_investorcompare_investors

    declared capabilities: code/command execution

    get_insider_tradesget_insider_summary

    Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

  • InfoAS-014

    ℹ️Dependency Inventory Unavailable ×23

    Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

    get_super_investorsget_investor_fund_valueget_investor_fund_value_historyget_investor_current_holdingsget_fund_activityget_fund_distributionget_stock_holdersget_stock_activityget_ownership_statisticsget_insider_tradesget_sp_stocks_by_holdersget_latest_filings_updatesget_filings_buy_statusget_filings_sell_statusget_ownership_statistics_homeget_latest_quarteranalyze_investoranalyze_stockcompare_investorsget_insider_summaryget_congress_tradesget_top_insider_stocksget_congress_consensus

    Fix: Review and remediate the identified issue.

Scan this tool yourself

Reproduce this audit locally, integrate into CI, or let your agent audit its own tools.

Install once, then scan any MCP server:

$ curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
$ tooltrust-scanner scan --server "npx -y stockslash-sec-13f"

Adjust the package name if your npm registry name differs from the tool ID. View source

Add badge to your README

Copy this Markdown to show your ToolTrust grade on GitHub.

[![ToolTrust Grade B](https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-directory/main/docs/badges/grade-b.svg)](https://github.com/AgentSafe-AI/tooltrust-directory)