stockbit-mcp

MCPattested
v1.4.1io.github.INo-xiousMITUpdated 27d agonpmGitHub

Indonesian exchange (IDX) via your own Stockbit account: quotes, bandarmology, charts. Unofficial.

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
710Downloads/wk
30GitHub stars
11Forks
27d agoLast update
Package
Authorio.github.INo-xious
LicenseMIT
Version1.4.1
Sourcenpm+mcp-registry
Trust Status
A
85/100Trusted
✓Listed in Forge index+10/10
✓Identity verified · attested build+20/20
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—npm maintainer match+0/5
→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain—
Provenance✓ Sigstore-verified · 405a862
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface17 tools · none privileged
Security scan✓ Cleanv1.2.1 · 1mo agoHow well does this scan work?
EvalsNone
IndexedAug 27, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

17 tools · none privileged
Statically extracted from the published packagev1.2.1 · 1mo ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

deep_diveEverything about one stock: quote, technical readings, an annotated chart, and who was on

Everything about one stock: quote, technical readings, an annotated chart, and who was on

No input schema was published for this tool.

morning_scanWhat moved, and whether the move has anything behind it: today's top gainers, then technical

What moved, and whether the move has anything behind it: today's top gainers, then technical

No input schema was published for this tool.

bandar_watchBandarmology for one stock over a window: per-broker net accumulation, then the

Bandarmology for one stock over a window: per-broker net accumulation, then the

No input schema was published for this tool.

alert_sweepEvaluate every stored alert and chart the ones that fired, so a fired alert arrives with the

Evaluate every stored alert and chart the ones that fired, so a fired alert arrives with the

No input schema was published for this tool.

pine_handoffTake an analysis to TradingView: read the levels from Stockbit data, then generate Pine that

Take an analysis to TradingView: read the levels from Stockbit data, then generate Pine that

No input schema was published for this tool.

strategy_checkHas this actually worked? Read the current technical state, run every built-in strategy over

Has this actually worked? Read the current technical state, run every built-in strategy over

No input schema was published for this tool.

screen_and_diveSweep today's movers for a condition, then look properly at the ones that matched: technical

Sweep today's movers for a condition, then look properly at the ones that matched: technical

No input schema was published for this tool.

portfolio_reviewLook at what the account ACTUALLY holds, then at each holding properly: who has been on

Look at what the account ACTUALLY holds, then at each holding properly: who has been on

No input schema was published for this tool.

sma_crossLong while the 20-day average is above the 50-day.

Long while the 20-day average is above the 50-day.

No input schema was published for this tool.

ema_crossThe same trade on exponential averages, which turn sooner and whipsaw more.

The same trade on exponential averages, which turn sooner and whipsaw more.

No input schema was published for this tool.

golden_crossThe classic 50/200 crossover. Few trades, long holds — expect a small sample.

The classic 50/200 crossover. Few trades, long holds — expect a small sample.

No input schema was published for this tool.

price_above_maHold whenever price is above its 50-day average.

Hold whenever price is above its 50-day average.

No input schema was published for this tool.

macd_crossLong when MACD crosses above its signal line.

Long when MACD crosses above its signal line.

No input schema was published for this tool.

rsi_reversionBuy the recovery out of oversold, sell into overbought.

Buy the recovery out of oversold, sell into overbought.

No input schema was published for this tool.

rsi_trendMomentum rather than reversion: long above 50, out below.

Momentum rather than reversion: long above 50, out below.

No input schema was published for this tool.

bollinger_breakoutLong on a close above the upper band, out at the basis.

Long on a close above the upper band, out at the basis.

No input schema was published for this tool.

donchian_breakoutLong when the 20-day high is taken out, out when the 20-day low is.

Long when the 20-day high is taken out, out when the 20-day low is.

No input schema was published for this tool.

17 of 17 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Indonesian exchange (IDX) via your own Stockbit account: quotes, bandarmology, charts. Unofficial.

Keywords
mcp
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-08-29 — observed resolution, not a publisher declaration.

60 packages resolved · 2 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the depth-4 limit. Anything below that level was never resolved.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

54 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+42 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.