by alpacahq · MCP Server · ★ 1.1k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
uvx alpaca-mcp-server init
git clone https://github.com/alpacahq/alpaca-mcp-server.git
Taken from the project's README on GitHub. Check the security audit before running it.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 1,057 |
| Forks | 354 |
| Language | Python |
| Category | MCP Server |
| License | MIT |
| Quality Score | 72/100 |
| Open Issues | 29 |
| Last Updated | 2026-11-04 |
| Created | 2025-06-03 |
| Platforms | mcp, python |
| Est. Tokens | ~25k |
A comprehensive Model Context Protocol (MCP) server for Alpaca's Trading API. Enable natural language trading operations through AI assistants like Claude, Cursor, and VS Code. Supports stocks, options, crypto
These tools work well together with alpaca-mcp-server for enhanced workflows:
Looking for a alpaca-mcp-server alternative? If you're comparing alpaca-mcp-server with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Korea Investment & Securities Open API Github
Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-25
Backtrader-powered backtesting framework for algorithmic trading, featuring 20+ strategies, multi-market suppo
An MCP server for Massive.com Financial Market Data
📈 提供股票、加密货币的数据查询和分析功能MCP服务器
Composer's MCP server lets MCP-enabled LLMs like Claude backtest trading ideas and automatically invest in the
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: