Skip to content

13FLOW

by bluetouff · remote · no sign-in to list tools · v1.0.0 · published by GitHub user bluetouff

Source-linked SEC 13F research, quality checks, watchlists and audit trails for agents.

Changes · 2

13 tools: 2 change things and 11 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http 13flow https://13flow.eu/api/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "preview_watchlist" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "preview_watchlist" says "preview": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Changes things 2Claude Code: ask
  • discover_watchlistRank trusted 13F watchlist candidates with explicit filters.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Rank trusted 13F watchlist candidates with explicit filters. Scores are ordinal research screens, not forecasts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • preview_watchlistEvaluate 1 to 25 tickers against trusted 13F flow, quality gates and explainable watch/monitor/block triggers.1 finding

    Why it is in this group

    • The name "preview_watchlist" says "preview": a word for reading.
    • The description's first verb is "evaluate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "preview_watchlist" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "preview_watchlist" says "preview": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Evaluate 1 to 25 tickers against trusted 13F flow, quality gates and explainable watch/monitor/block triggers.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 11Claude Code: allow
  • get_agent_statsReturn aggregate 7/30-day MCP usage, fixed client families, tool mix and reliability.No findings

    Why it is in this group

    • The name "get_agent_stats" says "get": a word for reading.
    Description, as the server wrote it
    Return aggregate 7/30-day MCP usage, fixed client families, tool mix and reliability. Initializations are not unique users; no IP, user-agent, version, arguments, prompts or responses are stored.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_confluence_methodologyReturn the frozen Confluence v1 methodology contract, including proof boundary and validation requirements.No findings

    Why it is in this group

    • The name "get_confluence_methodology" says "get": a word for reading.
    Description, as the server wrote it
    Return the frozen Confluence v1 methodology contract, including proof boundary and validation requirements.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_confluence_signalsReturn public cached Confluence v1 signals.No findings

    Why it is in this group

    • The name "get_confluence_signals" says "get": a word for reading.
    Description, as the server wrote it
    Return public cached Confluence v1 signals. Scores are ordinal heuristic ranks, not probabilities. Diagnostics include up to 10 examples per category, with available/returned counts and a source_url for full API details.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_data_qualityReturn public read-only data-quality warnings.No findings

    Why it is in this group

    • The name "get_data_quality" says "get": a word for reading.
    Description, as the server wrote it
    Return public read-only data-quality warnings. These are review signals, never automatic corrections.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_fundGet a bounded public fund portfolio by SEC CIK, including filing metadata, positions, moves and history counts.No findings

    Why it is in this group

    • The name "get_fund" says "get": a word for reading.
    Description, as the server wrote it
    Get a bounded public fund portfolio by SEC CIK, including filing metadata, positions, moves and history counts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_live_statusReturn verifiable public state: LIVE/DEMO/DEGRADED, commit, generated_at, data_as_of, 13F period and coverage.No findings

    Why it is in this group

    • The name "get_live_status" says "get": a word for reading.
    Description, as the server wrote it
    Return verifiable public state: LIVE/DEMO/DEGRADED, commit, generated_at, data_as_of, 13F period and coverage.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_product_statusReturn go-to-market readiness, sellable boundaries, validation status and blocked full-quant artifact.No findings

    Why it is in this group

    • The name "get_product_status" says "get": a word for reading.
    Description, as the server wrote it
    Return go-to-market readiness, sellable boundaries, validation status and blocked full-quant artifact.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_research_readinessReturn the current research, validation, data-quality and operator-review boundary without commercial claims.No findings

    Why it is in this group

    • The name "get_research_readiness" says "get": a word for reading.
    Description, as the server wrote it
    Return the current research, validation, data-quality and operator-review boundary without commercial claims.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_signal_historyRead append-only Confluence signal revisions for audit and replay.No findings

    Why it is in this group

    • The name "get_signal_history" says "get": a word for reading.
    Description, as the server wrote it
    Read append-only Confluence signal revisions for audit and replay.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_stockGet bounded current 13F holders, quarter moves, quality warnings and ordinal research score for one ticker.No findings

    Why it is in this group

    • The name "get_stock" says "get": a word for reading.
    Description, as the server wrote it
    Get bounded current 13F holders, quarter moves, quality warnings and ordinal research score for one ticker.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_fundsSearch and page through compact tracked 13F manager summaries.No findings

    Why it is in this group

    • The name "list_funds" says "list": a word for reading.
    Description, as the server wrote it
    Search and page through compact tracked 13F manager summaries. Use get_fund for positions and moves.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http 13flow https://13flow.eu/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__13flow__get_live_status",
      "mcp__13flow__get_product_status",
      "mcp__13flow__get_research_readiness",
      "mcp__13flow__get_agent_stats",
      "mcp__13flow__list_funds",
      "mcp__13flow__get_fund",
      "mcp__13flow__get_stock",
      "mcp__13flow__get_confluence_signals",
      "mcp__13flow__get_signal_history",
      "mcp__13flow__get_confluence_methodology",
      "mcp__13flow__get_data_quality"
    ],
    "ask": [
      "mcp__13flow__preview_watchlist",
      "mcp__13flow__discover_watchlist"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as 13flow. Review it before you use it.