13FLOW
by bluetouff · remote · no sign-in to list tools · v1.0.0 · published by GitHub user bluetouff
Source-linked SEC 13F research, quality checks, watchlists and audit trails for agents.
13 tools: 2 change things and 11 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads11Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http 13flow https://13flow.eu/api/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "preview_watchlist" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "preview_watchlist" says "preview": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
13 tools
Changes things 2Claude Code: ask
discover_watchlistRank trusted 13F watchlist candidates with explicit filters.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Rank trusted 13F watchlist candidates with explicit filters. Scores are ordinal research screens, not forecasts.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
preview_watchlistEvaluate 1 to 25 tickers against trusted 13F flow, quality gates and explainable watch/monitor/block triggers.1 finding
Why it is in this group
- The name "preview_watchlist" says "preview": a word for reading.
- The description's first verb is "evaluate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "preview_watchlist" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "preview_watchlist" says "preview": a word for reading.
Description, as the server wrote it Evaluate 1 to 25 tickers against trusted 13F flow, quality gates and explainable watch/monitor/block triggers.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 11Claude Code: allow
get_agent_statsReturn aggregate 7/30-day MCP usage, fixed client families, tool mix and reliability.No findings
Why it is in this group
- The name "get_agent_stats" says "get": a word for reading.
Description, as the server wrote it Return aggregate 7/30-day MCP usage, fixed client families, tool mix and reliability. Initializations are not unique users; no IP, user-agent, version, arguments, prompts or responses are stored.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_confluence_methodologyReturn the frozen Confluence v1 methodology contract, including proof boundary and validation requirements.No findings
Why it is in this group
- The name "get_confluence_methodology" says "get": a word for reading.
Description, as the server wrote it Return the frozen Confluence v1 methodology contract, including proof boundary and validation requirements.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_confluence_signalsReturn public cached Confluence v1 signals.No findings
Why it is in this group
- The name "get_confluence_signals" says "get": a word for reading.
Description, as the server wrote it Return public cached Confluence v1 signals. Scores are ordinal heuristic ranks, not probabilities. Diagnostics include up to 10 examples per category, with available/returned counts and a source_url for full API details.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_data_qualityReturn public read-only data-quality warnings.No findings
Why it is in this group
- The name "get_data_quality" says "get": a word for reading.
Description, as the server wrote it Return public read-only data-quality warnings. These are review signals, never automatic corrections.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_fundGet a bounded public fund portfolio by SEC CIK, including filing metadata, positions, moves and history counts.No findings
Why it is in this group
- The name "get_fund" says "get": a word for reading.
Description, as the server wrote it Get a bounded public fund portfolio by SEC CIK, including filing metadata, positions, moves and history counts.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_live_statusReturn verifiable public state: LIVE/DEMO/DEGRADED, commit, generated_at, data_as_of, 13F period and coverage.No findings
Why it is in this group
- The name "get_live_status" says "get": a word for reading.
Description, as the server wrote it Return verifiable public state: LIVE/DEMO/DEGRADED, commit, generated_at, data_as_of, 13F period and coverage.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_product_statusReturn go-to-market readiness, sellable boundaries, validation status and blocked full-quant artifact.No findings
Why it is in this group
- The name "get_product_status" says "get": a word for reading.
Description, as the server wrote it Return go-to-market readiness, sellable boundaries, validation status and blocked full-quant artifact.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_research_readinessReturn the current research, validation, data-quality and operator-review boundary without commercial claims.No findings
Why it is in this group
- The name "get_research_readiness" says "get": a word for reading.
Description, as the server wrote it Return the current research, validation, data-quality and operator-review boundary without commercial claims.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_signal_historyRead append-only Confluence signal revisions for audit and replay.No findings
Why it is in this group
- The name "get_signal_history" says "get": a word for reading.
Description, as the server wrote it Read append-only Confluence signal revisions for audit and replay.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_stockGet bounded current 13F holders, quarter moves, quality warnings and ordinal research score for one ticker.No findings
Why it is in this group
- The name "get_stock" says "get": a word for reading.
Description, as the server wrote it Get bounded current 13F holders, quarter moves, quality warnings and ordinal research score for one ticker.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_fundsSearch and page through compact tracked 13F manager summaries.No findings
Why it is in this group
- The name "list_funds" says "list": a word for reading.
Description, as the server wrote it Search and page through compact tracked 13F manager summaries. Use get_fund for positions and moves.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http 13flow https://13flow.eu/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__13flow__get_live_status",
"mcp__13flow__get_product_status",
"mcp__13flow__get_research_readiness",
"mcp__13flow__get_agent_stats",
"mcp__13flow__list_funds",
"mcp__13flow__get_fund",
"mcp__13flow__get_stock",
"mcp__13flow__get_confluence_signals",
"mcp__13flow__get_signal_history",
"mcp__13flow__get_confluence_methodology",
"mcp__13flow__get_data_quality"
],
"ask": [
"mcp__13flow__preview_watchlist",
"mcp__13flow__discover_watchlist"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as 13flow. Review it before you use it.
