CapitalSnitch
com.capitalsnitch/insider-tradingcapitalsnitch.comstreamable-httpv1.20261025.0Scanned
SEC insider trades, Congress trades, 13F funds, earnings and 8-K filings for AI, with SEC links.
27 tools: 1 do something that can't be undone, 7 change things and 19 only read.
- Reads private data · 4
- Reads text others write · 4
- Can send data out · 0
- 1 finding
Anlyon alternative
8 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
27 tools
Can't be undone 1Claude Code: ask
check_paymentHas the payment arrived and is the plan active?1 finding
Why it is in this group
- The name "check_payment" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "check_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "check_payment" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Has the payment arrived and is the plan active? For crypto, pass order_id: shows waiting / seen on the network / confirmed. For card, omit it: shows the account's current plan. Free to call.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
Changes things 7Claude Code: ask
about_capitalsnitchFacts about CapitalSnitch itself: what it is (a live commercial service, not a demo), every plan with price, daily limit and features, which data each plan includes, payment method…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Facts about CapitalSnitch itself: what it is (a live commercial service, not a demo), every plan with price, daily limit and features, which data each plan includes, payment methods, how to sign up (right here in the chat or on the website), which AI apps can connect and how, and the support email. Use for 'what is CapitalSnitch?', 'how much does it cost?', 'what plans are there?', 'how do I contact them?', 'can ChatGPT/Grok connect?'. Free, needs no account and never counts toward the daily limit.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
buy_planUpgrade, renew or switch the signed-in user's plan without the website.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Upgrade, renew or switch the signed-in user's plan without the website. Card: returns a secure Square payment link (or, for an active card subscriber, switches the plan right away). Crypto: returns the exact amount, coin, network and address to send. The plan activates automatically when paid. Free to call. Requires the user's personal connection address; on the public preview use start_signup instead.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
confirm_signupStep 2 of 2: checks the emailed code, creates the account (or signs in), and returns the user's personal connection address plus — for a paid plan — the payment step (a secure card…Reads text others writeNo findings
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Step 2 of 2: checks the emailed code, creates the account (or signs in), and returns the user's personal connection address plus — for a paid plan — the payment step (a secure card link, or exact crypto payment details). The plan activates automatically when the payment lands. Free to call.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
get_account_linkCreate a private, single-use link that signs the user straight into the right CapitalSnitch page — checkout (card or crypto) to upgrade or renew, or their account page to cancel, c…No findings
Why it is in this group
- The name "get_account_link" says "get": a word for reading.
- The description's first verb is "create": a word for a change.
Description, as the server wrote it Create a private, single-use link that signs the user straight into the right CapitalSnitch page — checkout (card or crypto) to upgrade or renew, or their account page to cancel, change email settings or make a new connection address. Valid 15 minutes, works once. Give it to the user to click; no password or email code needed. Free to call.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
manage_watchlistThe user's CapitalSnitch watchlist (Edge plan, up to 25 tickers).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it The user's CapitalSnitch watchlist (Edge plan, up to 25 tickers). Watchlist companies get INSTANT EMAIL ALERTS (insider buys, big insider sales, new stock offerings; ~30 minutes after the SEC filing) and lead the daily email briefing. Use for 'alert me when insiders buy NVDA', 'add PLTR and SOFI to my watchlist', 'what am I watching?', 'stop alerting me about TSLA'. Never counts toward the daily limit.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
set_alert_preferencesTurn the user's CapitalSnitch email alerts on or off (Edge plan): instant watchlist alerts, market-wide 'big insider moves' alerts, and the daily briefing email.No findings
Why it is in this group
- The name "set_alert_preferences" says "set": a word for a change.
Description, as the server wrote it Turn the user's CapitalSnitch email alerts on or off (Edge plan): instant watchlist alerts, market-wide 'big insider moves' alerts, and the daily briefing email. Omit a setting to leave it unchanged; call with no settings to see the current ones. Use for 'alert me about any big insider buys', 'stop the daily email', 'turn my alerts on'. Never counts toward the daily limit.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
start_signupCreate a CapitalSnitch account — or sign back in and get a new connection address — entirely from the chat, no website needed.Reads text others writeNo findings
Why it is in this group
- The name "start_signup" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Create a CapitalSnitch account — or sign back in and get a new connection address — entirely from the chat, no website needed. Step 1 of 2: emails the user a 6-digit code. Then ask the user for the code and call confirm_signup(email, code). Before calling, ask the user which plan they want (Free, Scout $29, Analyst $39, Edge $49 per month; yearly = 2 months free, one-time, never auto-renews) and, for a paid plan, card or crypto. The user must agree to the key terms first: call once without user_accepted_terms to get them, show them, and only after an explicit 'yes' set user_accepted_terms=true. Free to call.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
Only reads 19Show 19 read-only tools
find_emerging_insider_buyingSpot insider buying EARLY: companies where fewer than 5 different insiders bought in the window but the pace is rising (more buyers or more dollars recently than earlier), versus '…No findings
Why it is in this group
- The name "find_emerging_insider_buying" says "find": a word for reading.
Description, as the server wrote it Spot insider buying EARLY: companies where fewer than 5 different insiders bought in the window but the pace is rising (more buyers or more dollars recently than earlier), versus 'crowded' companies where 5+ insiders already bought. Explains exactly how 'rising' is measured. Use for 'which stocks have early, increasing insider buying that is not crowded yet?', 'emerging insider signals'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
find_insider_buyingScan ALL U.S.No findings
Why it is in this group
- The name "find_insider_buying" says "find": a word for reading.
Description, as the server wrote it Scan ALL U.S. companies for insider open-market PURCHASES — the strongest insider signal. Ranks companies by total value bought, number of distinct insiders buying ('cluster buying'), or recency. Use for 'which insiders are buying right now?', 'CEO purchases this month', 'companies where 3+ insiders bought'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
find_insider_clustersFind every company where several different insiders made OPEN-MARKET purchases (option exercises, awards and sales excluded), list each buyer's name, title and amount, and FLAG BAT…No findings
Why it is in this group
- The name "find_insider_clusters" says "find": a word for reading.
Description, as the server wrote it Find every company where several different insiders made OPEN-MARKET purchases (option exercises, awards and sales excluded), list each buyer's name, title and amount, and FLAG BATCHES: many buyers filing on the same day with similar, modest amounts usually means one company program (employee purchase plan, IPO or private-placement allocation), not independent conviction. Each company gets a 0–100 conviction score (independent buyers, C-suite participation, size per buyer, how much they grew their stake, purchases spread over several days, minus batch penalty) with reasons. Use for 'find companies where 3+ insiders bought in the last 60 days', 'cluster buying that is real, not a comp plan', 'rank insider clusters by conviction'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_company_contextEverything that matters about one company in one call: the explained insider signal (score, cluster and C-suite buying, unusual vs history) PLUS the next earnings date and countdow…No findings
Why it is in this group
- The name "get_company_context" says "get": a word for reading.
Description, as the server wrote it Everything that matters about one company in one call: the explained insider signal (score, cluster and C-suite buying, unusual vs history) PLUS the next earnings date and countdown (and last earnings), the stock's volatility regime (calm / normal / elevated / extreme vs its own past year), trend vs 50/200-day averages, drawdown from the 52-week high, recent returns, Wall Street analyst consensus and its 3-month trend, and the market backdrop (regime + next Fed meeting odds). Ends with 'what stands out' facts. Use for 'analyze X', 'should I look closer at X?', 'anything notable about X before earnings?'. Also includes the company's financials (valuation, growth, profit) and dilution summary. Includes 'analysis': a written CapitalSnitch Take (headline, story, bull case, bear case, what to watch) grounded in the data — present it to the user, and say it is automated context, not investment advice.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_congress_tradesStock trades reported by members of the U.S.No findings
Why it is in this group
- The name "get_congress_trades" says "get": a word for reading.
Description, as the server wrote it Stock trades reported by members of the U.S. House and Senate (STOCK Act Periodic Transaction Reports): member, party, state, chamber, stock, purchase or sale, amount range, trade date, filing date, how many days late it was reported, owner (self/spouse/joint/child) and a link to the official filing. With no filters: the week's summary, most-traded stocks and late filers. FREE public information on every plan and never counted toward the daily limit. Reports arrive up to 45 days after the trade (median about a month), so this is a historical record, not a live feed. Use for 'which members of Congress traded NVDA?', 'what has Pelosi bought?', 'congressional trades this week'. Must not be used for credit decisions, fundraising or solicitation.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_daily_briefReady-made daily briefing: market backdrop and next Fed meeting odds, insiders who bought ahead of upcoming earnings, the biggest insider purchases this week, CEO/CFO purchases, an…Reads private dataNo findings
Why it is in this group
- The name "get_daily_brief" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "meeting": it reads calendars.
Description, as the server wrote it Ready-made daily briefing: market backdrop and next Fed meeting odds, insiders who bought ahead of upcoming earnings, the biggest insider purchases this week, CEO/CFO purchases, and cluster buying. Use for 'give me today's briefing', 'what's interesting today?', or as the start of a morning routine.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_data_statusReport what data CapitalSnitch covers, how fresh it is, update schedule, sources, and known limitations.No findings
Why it is in this group
- The name "get_data_status" says "get": a word for reading.
Description, as the server wrote it Report what data CapitalSnitch covers, how fresh it is, update schedule, sources, and known limitations. Use when asked 'how current is this?', 'what data do you have?', or before making time-sensitive claims.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_dilution_historyEvery stock offering, at-the-market (ATM) program, convertible note (including private Rule 144A deals announced only in an 8-K), notes exchanged for shares, unregistered share sal…Reads private dataNo findings
Why it is in this group
- The name "get_dilution_history" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "note": it reads notes.
Description, as the server wrote it Every stock offering, at-the-market (ATM) program, convertible note (including private Rule 144A deals announced only in an 8-K), notes exchanged for shares, unregistered share sale and shelf registration the company filed with the SEC, plus the company's 8-K filings of the last 30 days in plain English, with size, price per share, and how the stock reacted (day 1, day 2, 1 week, 1 month vs the prior close); the share-count trend (1-year change, 3-year yearly rate); and a 0–100 dilution-risk score with reasons (recent offerings, active shelf, cash burn, heavy stock pay). Use for 'has SOFI diluted shareholders?', 'what happened to the price after the last offering?', 'is a share sale likely?'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_earnings_calendarCompanies reporting earnings soon, with the date, time (before open / after close) and countdown, joined with recent insider activity.Reads private dataNo findings
Why it is in this group
- The name "get_earnings_calendar" says "get": a word for reading.
What it can reach
- private-dataThe name "get_earnings_calendar" says "get" and "calendar": it reads calendars.
Description, as the server wrote it Companies reporting earnings soon, with the date, time (before open / after close) and countdown, joined with recent insider activity. With only_with_insider_buying=true it answers 'which companies reporting soon have insiders been buying?' — insiders buying ahead of a report is a rare and closely watched signal. Also use for 'when does X report?' (pass tickers=['X'], only_with_insider_buying=false).
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_financialsA company's fundamentals from its SEC filings (10-Q/10-K): market cap, P/E, price/sales, dividend yield, 12-month revenue and net income with year-over-year growth (growing / flat …No findings
Why it is in this group
- The name "get_financials" says "get": a word for reading.
Description, as the server wrote it A company's fundamentals from its SEC filings (10-Q/10-K): market cap, P/E, price/sales, dividend yield, 12-month revenue and net income with year-over-year growth (growing / flat / declining, accelerating or slowing), margins, free cash flow, cash, debt, cash runway, stock-based pay, and a quarter-by-quarter table of revenue, net income and EPS with YoY change for each quarter. Use for 'is revenue growing?', 'what's the P/E?', 'does it pay a dividend?', 'is it profitable?', 'show the last 8 quarters'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_fund_holdingsA fund's latest SEC Form 13F portfolio: total value, number of positions, top holdings with % of portfolio, and what changed vs the quarter before: new positions, positions sold ou…No findings
Why it is in this group
- The name "get_fund_holdings" says "get": a word for reading.
Description, as the server wrote it A fund's latest SEC Form 13F portfolio: total value, number of positions, top holdings with % of portfolio, and what changed vs the quarter before: new positions, positions sold out, biggest adds and biggest cuts. Use for 'what did Berkshire buy last quarter?', 'top holdings of Bridgewater', 'did Ark sell Tesla?'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_insider_activityList and summarize insider trades (SEC Form 4) for one company: who bought or sold, when, how much, their role (CEO, CFO, Director, 10% owner…), and a link to each filing.No findings
Why it is in this group
- The name "get_insider_activity" says "get": a word for reading.
Description, as the server wrote it List and summarize insider trades (SEC Form 4) for one company: who bought or sold, when, how much, their role (CEO, CFO, Director, 10% owner…), and a link to each filing. Use for questions like 'are insiders buying or selling NVDA?' or 'show Tesla insider trades this year'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_insider_personFind an insider (executive, director, or large holder) by name and list their open-market trades across all companies, with totals.No findings
Why it is in this group
- The name "get_insider_person" says "get": a word for reading.
Description, as the server wrote it Find an insider (executive, director, or large holder) by name and list their open-market trades across all companies, with totals. Use for 'what has Warren Buffett bought recently?' or 'Jensen Huang stock sales'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_insider_signalScore current insider behavior for one company (0–100, 50 = neutral) and EXPLAIN it: open-market buying vs selling, how unusual it is versus the company's own 5-year history, clust…No findings
Why it is in this group
- The name "get_insider_signal" says "get": a word for reading.
Description, as the server wrote it Score current insider behavior for one company (0–100, 50 = neutral) and EXPLAIN it: open-market buying vs selling, how unusual it is versus the company's own 5-year history, cluster buying, and C-suite participation, with the evidence trades and SEC links. Use for 'is insider activity at X bullish or bearish?' or 'anything unusual about insiders at X?'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_institutional_ownershipWho owns a stock, from SEC Form 13F filings by investment managers (hedge funds, mutual funds, banks, pensions with $100M+): number of institutional holders, share of the company t…No findings
Why it is in this group
- The name "get_institutional_ownership" says "get": a word for reading.
Description, as the server wrote it Who owns a stock, from SEC Form 13F filings by investment managers (hedge funds, mutual funds, banks, pensions with $100M+): number of institutional holders, share of the company they hold, top holders with their stake and quarter-over-quarter change, and how many funds opened, added, cut or sold out. Analyst and Edge also get the lists of new funds, sold-out funds, biggest adds and biggest cuts. Use for 'who owns PLTR?', 'are funds buying or selling NVDA?', 'top institutional holders', 'did hedge funds add last quarter?'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_market_contextCurrent U.S.No findings
Why it is in this group
- The name "get_market_context" says "get": a word for reading.
Description, as the server wrote it Current U.S. market backdrop in one call: market regime (calm uptrend / uptrend under stress / downtrend / panic / recovery, from the S&P 500 trend and VIX), VIX level and percentile, Fed funds rate, 2y and 10y Treasury yields, yield-curve shape, and the next Fed (FOMC) meetings with days until each and the market-implied odds of a cut, hold or hike. Use for 'what's the market backdrop?', 'when is the next Fed meeting?', 'odds of a rate cut?'.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_my_accountThe user's own CapitalSnitch account: plan (Free / Scout / Analyst / Edge), whether it is active, renewing, cancelled or expired, the date it renews or ends and days left, payment …No findings
Why it is in this group
- The name "get_my_account" says "get": a word for reading.
Description, as the server wrote it The user's own CapitalSnitch account: plan (Free / Scout / Analyst / Edge), whether it is active, renewing, cancelled or expired, the date it renews or ends and days left, payment method type, questions used today vs the daily limit, which features are included and which need an upgrade. Free to call (does not count toward the daily limit). Use when the user asks 'what plan am I on?', 'when does my subscription renew?', 'is my plan active?', 'how many questions do I have left?'. The user is recognized by their personal connection address — no email or password is needed.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
get_my_alertsThe alert and daily-briefing emails CapitalSnitch sent the user recently, newest first (Edge plan).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_my_alerts" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it The alert and daily-briefing emails CapitalSnitch sent the user recently, newest first (Edge plan). Use for 'what alerts did I get today?', 'did anything trigger on my watchlist?'. Never counts toward the daily limit.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
search_companiesLook up tickers and official company names (with SEC CIK) from recent insider filings.No findings
Why it is in this group
- The name "search_companies" says "search": a word for reading.
Description, as the server wrote it Look up tickers and official company names (with SEC CIK) from recent insider filings. Use when the user names a company but not its ticker, or a ticker returns no results.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data4
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write4
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
- Warncheck_payment
The server marks "check_payment" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "check_payment" says "payment": a word that usually means money moves, which cannot be taken back.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.20261025.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http insider-trading https://capitalsnitch.com/mcpclaude mcp add --transport http insider-trading https://capitalsnitch.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__insider-trading__get_insider_activity",
"mcp__insider-trading__find_insider_buying",
"mcp__insider-trading__get_insider_signal",
"mcp__insider-trading__get_insider_person",
"mcp__insider-trading__search_companies",
"mcp__insider-trading__get_data_status",
"mcp__insider-trading__get_market_context",
"mcp__insider-trading__get_company_context",
"mcp__insider-trading__get_financials",
"mcp__insider-trading__get_dilution_history",
"mcp__insider-trading__find_insider_clusters",
"mcp__insider-trading__find_emerging_insider_buying",
"mcp__insider-trading__get_institutional_ownership",
"mcp__insider-trading__get_fund_holdings",
"mcp__insider-trading__get_congress_trades",
"mcp__insider-trading__get_earnings_calendar",
"mcp__insider-trading__get_daily_brief",
"mcp__insider-trading__get_my_alerts",
"mcp__insider-trading__get_my_account"
],
"ask": [
"mcp__insider-trading__manage_watchlist",
"mcp__insider-trading__set_alert_preferences",
"mcp__insider-trading__about_capitalsnitch",
"mcp__insider-trading__get_account_link",
"mcp__insider-trading__start_signup",
"mcp__insider-trading__confirm_signup",
"mcp__insider-trading__buy_plan",
"mcp__insider-trading__check_payment"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as insider-trading. Review it before you use it.
Capability tags behind 7 rules
- mcp__insider-trading__get_dilution_history private-data
- mcp__insider-trading__get_earnings_calendar private-data
- mcp__insider-trading__get_daily_brief private-data
- mcp__insider-trading__get_my_alerts private-data, untrusted-input
- mcp__insider-trading__start_signup untrusted-input
- mcp__insider-trading__confirm_signup untrusted-input
- mcp__insider-trading__buy_plan untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.capitalsnitch/insider-trading/verify?hash=7863bfbfefe5fafd077e4426fa09c9290ed8c94d98deb3f92e83a64f919cc476" | jq -e '.changed == false'Pinned hash 7863bfbfefe5, from Oct 26, 2026, 07:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.capitalsnitch/insider-trading/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.capitalsnitch/insider-trading)Source: MCP Registry. Synced Oct 26, 2026, 07:17 UTC.