# xoomar-mcp MCP server for the XOOMAR free market data API: short interest, insider trades, 13F holdings, company financials, COT positioning, funding rates, Fed liquidity and more, as tools for AI agents. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 0.1.8 - **Author:** XOOMAR - **License:** Apache-2.0 - **npm:** xoomar-mcp - **Endpoints:** streamable-http https://xoomar.com/mcp - **Source:** https://github.com/xoomar-dev-cloud/xoomar-mcp - **Endpoint health:** reachable (last checked 2026-09-19T10:53:36.565Z, 1 sample) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-19T14:22:19.238Z - **Version scanned:** 0.1.8 - **CVEs:** none found by OSV at scan time ## Tools 26 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `short_interest` — Short interest for a US stock: shares short, average daily volume, days to cover, change, per FINRA settlement date (twice a month), newest first. Without a sym - `short_volume` — Daily short sale volume and total volume per symbol from FINRA's Reg SHO files since August 2021, with the short share of volume. History for a symbol (oldest f - `fails_to_deliver` — SEC fails-to-deliver quantity and price by settlement date for a symbol since January 2010 (from, to and limit select the window, up to 5,000 dates), or the lat - `insider_trades` — Insider transactions from SEC Form 4: insider name and title, transaction code, shares, price, value, date. History for a ticker from filings since 2020 (from, - `insider_clusters` — Companies where several different insiders bought their own stock on the open market within a window (Form 4 transaction code P only): distinct buyers with titl - `threshold_list` — Reg SHO threshold lists from the Nasdaq and Cboe daily files since 2022: securities whose fails to deliver stayed above the threshold for five settlement days. - `planned_insider_sales` — Form 144 notices: an affiliate's planned sale of restricted or control stock (seller, shares, approximate market value, planned date), filed before the trade. - `large_holders` — Holders above 5% from Schedule 13D (active) and 13G (passive) cover pages: holder, shares, percent of class, filing date. For a symbol or the latest filings. - `fund_holders` — Which tracked 13F managers (Berkshire, Bridgewater, Citadel, Renaissance and others) held a ticker at their latest quarterly filing: shares, value, share of por - `fund_portfolio` — The latest 13F portfolio of one tracked manager by slug, e.g. berkshire-hathaway, bridgewater, citadel-advisors, renaissance-technologies. Positions with value, - `company_financials` — Quarterly revenue, net income and diluted EPS (calendar quarters, fourth quarter derived from the annual report), annual revenue, net income, operating cash flo - `corporate_events` — 8-K current reports with their item numbers (2.02 earnings, 5.02 officer changes, 1.01 agreements and so on), for a ticker or the latest across companies. - `earnings_calendar` — When US companies report results, from their own 8-K filings. With a ticker: every reported date since 2023 and the next expected date (an estimate: last year's - `cot_positioning` — Weekly CFTC positioning: the latest report across all tracked markets, or one market's history (e.g. gold, crude-oil, sp500, bitcoin, euro-fx, 10-year-note): op - `funding_rates` — Current perpetual funding rates on Binance, Bybit, OKX, Hyperliquid, Kraken and BitMEX for tracked crypto symbols (hourly venues shown as the 8-hour equivalent) - `fed_liquidity` — Weekly US net liquidity (Fed balance sheet minus the Treasury General Account minus reverse repo) with its components, oldest first, or one FRED series (WALCL, - `policy_rates` — Policy rates for 49 economies: the current table, or one country code's history (e.g. us, eu, jp, gb). - `macro_series` — US Treasury yield curve points, curve spreads and stablecoin supply as daily series. Filter by series name and date range. - `treasury_auctions` — Treasury auction results and calendar since 2010 from TreasuryDirect: security type and term, auction and issue dates, offering amount, high yield or discount r - `economic_calendar` — Scheduled US releases from the agencies' own calendars (CPI, PPI, payrolls, weekly jobless claims, PCE, GDP, retail sales, housing, durable goods, industrial pr - `private_placements` — Form D notices of exempt offerings: issuer, amount sold, amount offered, investors, whether it is a pooled fund. Largest raises in a window, one issuer by CIK, - `ipo_pipeline` — S-1 and F-1 registration statements, 424B4 final prospectuses, EFFECT notices and RW withdrawals from EDGAR, with the filer's listing status. - `bitcoin_treasuries` — Bitcoin holdings of public companies from their own XBRL filings: coins, fair value, cost basis, as of the filing period. - `federal_contracts` — Largest US federal contract actions from USAspending, optionally summed by listed parent company (by=ticker) or filtered to one ticker. - `crypto_market` — Open interest history for a symbol slug, recent liquidations across exchanges, Deribit options metrics (put/call, max pain, DVOL) for BTC or ETH, or Hyperliquid - `api_reference` — How the underlying free API works: endpoints, parameters, rate limits, CSV downloads and the attribution terms. Use when a tool here does not cover the exact qu ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"xoomar\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"xoomar-mcp\"\n ],\n \"env\": {\n \"XOOMAR_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `XOOMAR_API_KEY` — Xoomar API Key (optional) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (0 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — runs locally and hosted; holds an api key. - Floor 27, ceiling 27 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/xoomar-mcp - Install plan: https://forgeregistry.com/api/v1/packages/xoomar-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/xoomar-mcp - HTML page: https://forgeregistry.com/registry/xoomar-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.