yahoo-finance-mcp

https://gateway.mcpservers.org/yahoo-finance/mcp · scanned 2026-10-17

None of its 4 tools were flagged. They read like lookups and searches.

0/ 100 · heuristic risk · Low

4 tools · 0 flagged

Runs code or commands0
Moves money0
Touches credentials0
Deletes0
Sends data out0
Exports data0
Writes or changes0

get_chart0 · Low
Get historical OHLCV price data (and optionally dividend/split events) for a symbol over a date range.
get_quote0 · Low
Get real-time (or near real-time) quote data for one or more symbols, including price, change, OHLC, volume, market cap, 52-week range and more.
quote_summary0 · Low
Get detailed fundamental and financial data for a symbol via Yahoo's quoteSummary modules (profile, financials, statistics, holders, etc.).
search0 · Low
Search for instruments and related news by name, ticker or keyword. Returns matching quotes (symbol, name, exchange, type) and news articles.

Vulnify checks each tool call before it runs: ALLOW, REVIEW or BLOCK, with the reason logged.

Try Vulnify free Scan again

Badge for your README

Markdown

[![Scanned by Vulnify](https://api.vulnify.io/public/mcp-scanner/servers/gateway-mcpservers-org-yahoo-finance-mcp.svg)](https://www.vulnify.io/scanner/gateway-mcpservers-org-yahoo-finance-mcp?utm_source=badge&utm_medium=readme&utm_campaign=scanner-badge)

Automated heuristic result, scanned on 2026-10-17. It is based only on the tool names, descriptions, schemas and annotations this server publishes; no tool was called. It is not a security audit or certification, and not an endorsement of or accusation against the server or its operator. A high score is not a vulnerability finding, and a low score does not mean the server is safe. Vulnify is not affiliated with this server or its operator; names and marks belong to their owners. Server owner? Write to security@vulnify.io from an address at the server's domain to remove or correct this page, or scan it again to update it. We reply within 5 business days.

To exclude your server (and its subdomains) from the scanner and remove its public page, write to security@vulnify.io from an address at its domain. We process requests within 5 business days: the page stops being shown and its stored result is deleted. To fix an error instead, tell us what's wrong or scan the server again.