Is io.github.evan-moon/firma safe to use?

io.github.evan-moon/firma has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.evan-moon/firma?

io.github.evan-moon/firma can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.evan-moon/firma?

io.github.evan-moon/firma is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

Is io.github.evan-moon/firma actively maintained?

io.github.evan-moon/firma is actively maintained — last commit was 0 days ago. It has 3 GitHub stars.

io.github.evan-moon/firma

Local-first portfolio tracker for overseas investors. Claude reads and writes your finances via MCP.

3 0 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 0d ago

Untested

Transport: stdio

0 tools

Grade F

AI / ML Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Untested on Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-evan-moon-firma": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-evan-moon-firma)](https://mcppedia.org/s/io-github-evan-moon-firma)

Read me

What io.github.evan-moon/firma does

🚧 Early stage — feedback and contributions welcome. If you've installed it, I'd love to hear how you found it: Discussions

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

29/100across 5 weighted dimensions

How we score →

0255075100

−71

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.evan-moon/firma safe to use?: io.github.evan-moon/firma has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.evan-moon/firma?: io.github.evan-moon/firma can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.evan-moon/firma?: io.github.evan-moon/firma is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.
Is io.github.evan-moon/firma actively maintained?: io.github.evan-moon/firma is actively maintained — last commit was 0 days ago. It has 3 GitHub stars.

Similar servers

Others in ai-ml / finance

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.3k 2

Sequential Thinking MCP Server96

Dynamic problem-solving through sequential thought chains

84.5k 1

Arxiv Mcp Server96

A Model Context Protocol server for searching and analyzing arXiv papers

2.6k 4

Python Sdk95

The official Python SDK for Model Context Protocol servers and clients

22.8k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.evan-moon/firma and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

AI / ML Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Untested on Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-evan-moon-firma": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-evan-moon-firma)](https://mcppedia.org/s/io-github-evan-moon-firma)

Read me

What io.github.evan-moon/firma does

🚧 Early stage — feedback and contributions welcome. If you've installed it, I'd love to hear how you found it: Discussions

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

firma

You earned well this year.
Do you know where it went?

Drop your trade history into Claude.
Get back a full financial picture — portfolio, net worth, cash flow — stored in a local SQLite file.

npm install -g firma-app

You:    Here's my IBKR trade history [trades.csv]. Set up firma.
Claude: I see 47 transactions. Logging in chronological order... done.
        Syncing prices and FX history... your portfolio: $179K, +61% all-time. TSLA is 78%.

You:    My portfolio feels really volatile lately. Should I be worried?
Claude: TSLA is 74% of your equity — a 10% TSLA move is a 7% net worth move.
        Cash flow is solid at $6.4k/month saved. The volatility is market, not lifestyle.

You:    That July expense spike looks alarming.
Claude: That was $57k in TSLL — a leveraged bet, not spending.
        Strip it out: expenses flat at ~$7k/month, savings rate 47.8%.

You:    Give me a full overview with charts.
Claude: Net worth: $294k → $490k in 8 months, pulled back to $427k with TSLA's Q1 dip.
        [builds net worth trend, income vs expenses, portfolio allocation, unrealized P&L]

Why firma

Talks to Claude natively. firma mcp install wires firma into Claude Desktop. Every command you can run in the terminal, Claude can call through MCP — log trades, sync prices, render charts, reason about your data.
Local-first, no exceptions. Everything lives in ~/.firma/firma.db. No server, no sync, no account. Your financial data never leaves your machine.
Built for overseas investors. Multi-currency (USD, KRW, EUR, JPY, and more) with historical FX rates from FRED — so a 2018 balance shows the 2018 exchange rate, not today's.
Transactions as source of truth. No holdings table to drift out of sync. Portfolio, cost basis, and P&L are always derived live from your trade log.
Developer-friendly. --json on every read command. Three clean verb groups: add, show, report.

Get started

# 1. Install
npm install -g firma-app

# 2. Set API keys (both free)
firma config set finnhub-key YOUR_KEY   # finnhub.io — prices, news, earnings
firma config set fred-key YOUR_KEY      # fred.stlouisfed.org — macro & FX history

# 3. Connect Claude Desktop
firma mcp install
# Restart Claude Desktop — firma tools will appear in the toolbar.

4. Drop your data into Claude. Paste a CSV, brokerage export, or plain text — Claude logs everything and syncs prices automatically.

Prefer the terminal? Every MCP tool has a matching firma command — see CLI reference.

CLI reference

--json is available on every read command. Alias: firma rm = firma delete.

Portfolio

Command	What it does
`firma show portfolio`	Holdings with P&L, avg cost, mar

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

29/100across 5 weighted dimensions

How we score →

0255075100

−71

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.evan-moon/firma safe to use?: io.github.evan-moon/firma has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.evan-moon/firma?: io.github.evan-moon/firma can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.evan-moon/firma?: io.github.evan-moon/firma is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.
Is io.github.evan-moon/firma actively maintained?: io.github.evan-moon/firma is actively maintained — last commit was 0 days ago. It has 3 GitHub stars.