Skip to content

국내 주식·채권 MCP (Korea Stocks & Bonds)

space.finquest/finquestfinquest.spacestreamable-httpv1.0.1Scanned

Korean stocks & bonds: DART filings, segment trends, earnings drivers, dividends, prices, bonds.

14 tools: 3 do something that can't be undone, 8 change things and 3 only read.

Tools: 0 delete, 3 irreversible, 8 write, 3 read.
  • Reads private data · 0
  • Reads text others write · 0
  • Can send data out · 3
  • 4 findings

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

14 tools

Can't be undone 3Claude Code: ask
  • bond_calendar기간 내 채권 이자·원금 지급 일정.Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "bond_calendar" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    기간 내 채권 이자·원금 지급 일정. 오늘 이전은 실제 지급(actual=1), 이후는 예정(계산값, 공휴일 미반영). per_10k = 액면 1만원당 이자(원).

    Annotations the server declares

    • title: 채권 이자 일정
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • calendar배당 일정 — 배당기준일·배당지급·주주명부기준일(DART 공시 기준, 공시 링크 포함).Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "calendar" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    배당 일정 — 배당기준일·배당지급·주주명부기준일(DART 공시 기준, 공시 링크 포함). 종목 생략 시 시장 전체.

    Annotations the server declares

    • title: 일정
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • price주가·지수 흐름 — 일별 종가 기준 기간 수익률, 지수 대비 초과수익, 최대낙폭(MDD), 변동성, 고저 + 봉 데이터 [날짜,시가,고가,저가,종가,거래량].Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "price" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    주가·지수 흐름 — 일별 종가 기준 기간 수익률, 지수 대비 초과수익, 최대낙폭(MDD), 변동성, 고저 + 봉 데이터 [날짜,시가,고가,저가,종가,거래량]. index 로 KOSPI/KOSDAQ/KOSPI200. 출처 금융위원회 공공데이터(KRX), 다음 영업일 반영(장중 실시간 아님). 분할·병합은 보정.

    Annotations the server declares

    • title: 주가 흐름
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 8Claude Code: ask
  • bond채권 한 종목 상세 — 발행조건(순위·옵션·보증·금리·이자주기), 평가사별 등급, 일별 시세(가격·수익률·체결액면), 원리금 지급 내역과 예정일, 같은 발행사 다른 채권.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    채권 한 종목 상세 — 발행조건(순위·옵션·보증·금리·이자주기), 평가사별 등급, 일별 시세(가격·수익률·체결액면), 원리금 지급 내역과 예정일, 같은 발행사 다른 채권. 금융위원회 공공데이터 기반.

    Annotations the server declares

    • title: 채권 상세
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • bonds장내 회사채·금융채 찾기 (KRX 상장, 만기 전).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    장내 회사채·금융채 찾기 (KRX 상장, 만기 전). 발행사·종목명, 상장사 종목, 수익률·표면이율·잔존기간·등급·후순위·지급월·유동성 조건. 결과: 표면이율(coupon %), 이자주기(cycle_m)·지급일·지급월, 1만원당 1회 이자(coupon_10k), 다음 이자일, 만기·잔존년수, 등급, 마지막 체결 가격(액면 1만원당)·수익률, 최근 20거래일 체결일수 — 체결이 드문 종목의 수익률은 극단값일 수 있음.

    Annotations the server declares

    • title: 회사채 찾기
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • business_trend사업 지표 추이 — 여러 정기보고서를 이어 붙인 분기/연간 시계열 (분기 값이 없으면 누적에서 계산).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    사업 지표 추이 — 여러 정기보고서를 이어 붙인 분기/연간 시계열 (분기 값이 없으면 누적에서 계산). topic: segment(부문 매출·영업이익) · product_sales(제품별 매출) · region_sales(지역별) · main_products(주요 제품 비중) · capacity/production/utilization(생산능력·실적·가동률) · capex(시설투자) · rnd(연구개발비) · market_share(점유율) · inventory(재고) · cost_by_nature(비용 성격별) · sga(판관비) · raw_materials(원재료 매입) · material_prices(원재료·제품 가격) · backlog(수주) · channel(판매경로). topic 을 비우면 그 회사에 있는 topic 목록.

    Annotations the server declares

    • title: 사업 지표 추이
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • company종목 한눈에 — 특정 종목 질문은 여기서 시작.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    종목 한눈에 — 특정 종목 질문은 여기서 시작. 최근 정기보고서로 본 사업부문 구성(매출·영업이익·비중), 분기 실적 추이, 회사가 밝힌 최근 실적 변동 이유(원문 인용 + DART 링크), 사업 개요, 배당·자사주, 다가오는 배당 기준일. 모두 DART 공시 기반.

    Annotations the server declares

    • title: 종목 한눈에
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • earnings실적이 왜 바뀌었나 — 한 분기 실적 분석(DART 정기보고서 기반).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    실적이 왜 바뀌었나 — 한 분기 실적 분석(DART 정기보고서 기반). 연결 매출·영업이익·순이익의 YoY·QoQ, 부문별 매출·영업이익 증감, 회사가 정기보고서에 쓴 변동 이유(원문 문장 + 출처 [S#] + DART 링크). '영업이익이 왜 늘었어?' 같은 질문에 사용.

    Annotations the server declares

    • title: 실적 변동 이유
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • filing정기보고서(사업·반기·분기) 공시 정리본 읽기 — 표준 양식으로 정리된 표·회사 설명·실적 변동 이유, 모든 숫자에 출처 [S#].No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    정기보고서(사업·반기·분기) 공시 정리본 읽기 — 표준 양식으로 정리된 표·회사 설명·실적 변동 이유, 모든 숫자에 출처 [S#]. sections 로 필요한 부분만: drivers(변동 이유), segment, product_sales, region_sales, cost_by_nature, sga, inventory, raw_materials, capacity, production, utilization, capex, rnd, market_share, backlog, texts(회사 설명·MD&A), check(검증). list=true 면 정리된 보고서 목록.

    Annotations the server declares

    • title: 정기보고서 읽기
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • financials재무 추이 (억원, DART 정기보고서 주요계정 2015~).1 finding

    Why it is in this group

    • The input takes a statement or command to run (input.statement), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "financials" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.statement), which can change anything it can reach.

      What this check looks for
    Description, as the server wrote it
    재무 추이 (억원, DART 정기보고서 주요계정 2015~). freq=A: 연간 매출·영업이익·순이익·성장률·이익률·자산·부채·자본·부채비율·ROE. freq=Q: 분기 매출·영업이익·순이익의 YoY·QoQ(4분기는 연간 − 3분기 누적).

    Annotations the server declares

    • title: 재무 추이
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • rank순위 — 전 종목을 한 지표로 줄 세우기: 시가총액·배당수익률·주당배당·배당성향·자사주 소각/매입(최근 1년)·주주환원수익률·매출·영업이익·순이익·영업이익률·ROE·성장률·부채비율·PER·PBR·주가 수익률.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    순위 — 전 종목을 한 지표로 줄 세우기: 시가총액·배당수익률·주당배당·배당성향·자사주 소각/매입(최근 1년)·주주환원수익률·매출·영업이익·순이익·영업이익률·ROE·성장률·부채비율·PER·PBR·주가 수익률. 시장·업종·테마(예: '방산', '2차전지')로 좁힐 수 있음. '배당 많이 주는 회사', '자사주 소각 많이 한 회사', 'ROE 높은 회사' 같은 질문에.

    Annotations the server declares

    • title: 순위
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 3Show 3 read-only tools
  • search_filings전 종목 정기보고서 문장 검색 — 회사가 직접 쓴 실적 변동 이유(전 기간), MD&A, 최신 보고서의 사업·산업 설명.No findings

    Why it is in this group

    • The name "search_filings" says "search": a word for reading.
    Description, as the server wrote it
    전 종목 정기보고서 문장 검색 — 회사가 직접 쓴 실적 변동 이유(전 기간), MD&A, 최신 보고서의 사업·산업 설명. 예: 'HBM', '가동률 하락', '판가 인상', '환율 효과'. 어떤 회사들이 어떤 이유를 대는지 찾을 때.

    Annotations the server declares

    • title: 공시 문장 검색
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • shareholders주주와 환원 — returns: 연도별 DPS·배당총액·자사주 취득/처분/소각, 배당·자사주 결정 공시 / ownership: 연도별 최대주주측 지분 변화(사업보고서).No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    주주와 환원 — returns: 연도별 DPS·배당총액·자사주 취득/처분/소각, 배당·자사주 결정 공시 / ownership: 연도별 최대주주측 지분 변화(사업보고서). 기본 둘 다. 모두 DART 공시 기반.

    Annotations the server declares

    • title: 주주와 환원
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "financials" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.statement), which can change anything it can reach.

    What this check looks for
  • Warnprice

    The server marks "price" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "calendar" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "bond_calendar" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http finquest https://mcp.finquest.space/public/mcp
claude mcp add --transport http finquest https://mcp.finquest.space/public/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__finquest__search",
      "mcp__finquest__search_filings",
      "mcp__finquest__shareholders"
    ],
    "ask": [
      "mcp__finquest__rank",
      "mcp__finquest__company",
      "mcp__finquest__earnings",
      "mcp__finquest__business_trend",
      "mcp__finquest__filing",
      "mcp__finquest__financials",
      "mcp__finquest__price",
      "mcp__finquest__calendar",
      "mcp__finquest__bonds",
      "mcp__finquest__bond",
      "mcp__finquest__bond_calendar"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as finquest. Review it before you use it.

Capability tags behind 3 rules
  • mcp__finquest__price outbound
  • mcp__finquest__calendar outbound
  • mcp__finquest__bond_calendar outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/space.finquest/finquest/verify?hash=4b7695c5c826aa5b5f9bf6f0cb6c209edf703efb12f0ea18c23f10c3589e397a" | jq -e '.changed == false'

Pinned hash 4b7695c5c826, from Nov 4, 2026, 08:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/space.finquest/finquest/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for space.finquest/finquest
[![anlyon.dev](https://anlyon.dev/badge/space.finquest/finquest.svg)](https://anlyon.dev/servers/space.finquest/finquest)

Source: MCP Registry. Synced Nov 4, 2026, 08:18 UTC.