@cyanheads/secedgar-mcp-server
Query SEC EDGAR filings, XBRL financials, and company data through MCP. STDIO & Streamable HTTP.
16 Tools (+1 opt-in) β’ 2 Resources β’ 1 Prompt
Overview
SEC EDGAR filings, XBRL financials, and ownership data. No API key needed, only the User-Agent header SEC requires. Resolve companies by ticker, name, or CIK, search filings back to 1993, pull XBRL financials and cross-company comparisons by concept, and trace ownership through insider transactions, 13F holdings, 13D/13G blockholders, and fund portfolios. Runs as a stdio process, a local Streamable HTTP server, or the public hosted endpoint above.
| Tool | Description |
|---|
secedgar_company_search | Find companies and retrieve entity info with optional recent filings |
secedgar_search_filings | Search EDGAR filings since 1993: full text from 2001, archive browse before that |
secedgar_get_filing | Fetch a filing's metadata and document text, paged or by section |
secedgar_get_financials | Get historical XBRL financial data for one company and concept |
secedgar_get_snapshot | One-call financial profile: the latest value of every supported concept |
secedgar_get_material_events | 8-K filings with item codes decoded and filterable |
secedgar_get_insider_transactions | Form 4 / 4-A insider transactions parsed from ownership XML |
secedgar_get_institutional_holdings | 13F-HR quarterly holdings of one institutional manager |
secedgar_find_holders | Reverse 13F lookup: which managers reported holding an issuer |
secedgar_get_beneficial_owners | 5%+ blockholders of an issuer from structured SCHEDULE 13D / 13G filings |
secedgar_get_fund_holdings | ETF and mutual fund portfolio holdings from the quarterly NPORT-P report |
secedgar_fetch_frames | One XBRL concept Γ one period across every reporting company |
secedgar_compare_companies | Compare named companies across several concepts, aligned on calendar periods |
secedgar_search_concepts | Discover supported XBRL concept names or reverse-lookup a raw tag |
secedgar_dataframe_describe | List canvas dataframes with provenance, TTL, and schema |
secedgar_dataframe_query | Run a single-statement SELECT across dataframes |
secedgar_dataframe_drop | Drop a canvas dataframe by name; opt-in via EDGAR_DATAFRAME_DROP_ENABLED=true |
Resources
| Resource | Description |
|---|
secedgar://concepts | XBRL financial concepts grouped by statement, mapping friendly names to XBRL tags |
secedgar://filing-types | Common SEC filing types, plus the 8-K item-code tables for both numbering regimes |
secedgar_search_concepts serves the same concept catalog to tool-only clients.
Prompts
| Prompt | Description |
|---|
secedgar_company_analysis | Structured analysis of a company's SEC filings: financial trends, risk factors, material events |
Capability reference
query takes a ticker (equities, ETFs, and mutual funds; BRK-B or BRK.B), a current or former company name, or a CIK; include_filings (default on) adds up to filing_limit filings (1β50, default 10), filtered by exact forms match and filed_after / filed_before
- Returns SIC code, exchanges, fiscal year end, and state of incorporation, plus
series_id / class_id for a fund ticker; fails as no_match (near matches in data.suggestions) or multiple_matches
- A date filter or an under-filled form filter scans past the recent window (the last year or 1,000 filings, whichever holds more) into the archive, up to 10 archive pages, and
history_scanned_through reports how far it reached
- Full-text
query (phrases, OR, -exclusion, wildcard*, ticker: / cik: scoping), or browse by forms and/or entity with no query; filed_after and filed_before must be given together; limit up to 100, and offset (up to 9,999) pages server-side only under sort: "relevance" on a 2001-onward search
- Full text covers 2001 onward. Earlier ranges, back to 1993, come from the archives, and pre-2001 free text needs
ticker: / cik: scope and reads up to 50 documents (scan reports candidates, scanned, and matched)
- A range crossing 2001-01-01 is split and merged, each row tagged with
source (efts, submissions, full-index); the response carries total, total_is_exact, and form_distribution
accession_number in dash or 18-digit form, optional cik to speed the lookup, document for an exhibit, include_xbrl for XBRL artifacts; content_limit 1,000β200,000 characters per page (default 50,000)
- Page with
offset / next_offset until content_truncated is false, or jump with section (substring match on detected headings); the first page of a truncated document carries an outline of up to 50 headings with offsets
documents splits the filing into primary, exhibits, and auxiliary; entries marked binary (scans, PDFs, archives) fail as binary_document, and a section miss returns section_not_found with the outline
form, filing_date, and period_ending come from the company's submissions feed for a recent filing and from the filing's own SEC header for an older one
company (ticker or CIK) plus concept as a friendly name or raw XBRL tag; taxonomy us-gaap (default), ifrs-full, or dei; period_type annual, quarterly, or all, defaulting to annual with a fallback to the full series for instant concepts; limit 1β100 trims the inline series
- A deduplicated series, newest first, one value per calendar period with its source
form, filed date, accession_number, and tag; tags_tried names the tags walked, and an empty result fails as no_concept_data, no_frame_data, or no_period_data
- A
concept that is neither a friendly name nor an UpperCamelCase tag fails as unknown_concept before any SEC request, with a formula for standard combinations (free_cash_flow, ebitda, working_capital) or up to three closest friendly names
company, taxonomy us-gaap (default) or ifrs-full, and period_type annual, quarterly, or both (default); one companyfacts read covers every supported concept, and nothing is staged as a dataframe
- Each
lines entry reports the latest annual and quarterly value for a duration concept, or the latest instant value for balance-sheet and entity-info concepts, each with the tag it came from, under the line's taxonomy; concepts the filer doesn't report land in gaps with tags_tried
company plus up to 20 items codes, dotted (2.02) since 2004-08-23 and single integers (12) before; the two regimes don't overlap, so pair them across the changeover; filed_after / filed_before work alone and reach into the archive; limit 1β100 (default 20)
- Each filing decodes its
items to code, label, and regime (current / legacy); item_distribution counts every code in the window before the filter, and total_8k_scanned against total_matched shows what the filter removed
- A date window reads every archive page overlapping it, up to 10; without one, the archive is read only to fill
limit, stopping on the page that fills it; history_scanned_through and dataset.truncated report what went unread
company is the issuer; transaction_type purchase (code P), sale (code S), or all (default); limit 1β100 (default 20); does not cover Forms 3 or 5
- Without a date window it scans up to 100 of the newest Form 4 / 4-A filings;
filed_after / filed_before (inclusive, either alone) read any period since mid-2003, paging into the archive (up to 10 pages) when the window predates the recent submissions window, and with a canvas every in-window filing is parsed, up to 100; history_scanned_through names the oldest filing parsed
- Each transaction carries the reporting person, relationship,
transaction_code and transaction_type, is_derivative, unsigned shares_traded with direction (acquire / dispose), price per share, and shares owned after; dataset.truncated flags Form 4 filings beyond those parsed
company is the 13F filer (a CIK is most reliable), not a portfolio company, which is secedgar_find_holders' job; quarter as YYYY-QN, defaulting to the newest filing; limit 1β500 (default 20) with offset / next_offset; consolidate (default true) merges sub-lines into positions sorted by value
- A
quarter older than the recent submissions window is found in the archive, read forward from the quarter end (up to 10 pages); a quarter the manager covered with a 13F-NT notice β or, with no quarter, a manager whose recent filings are notices only β fails as no_filings_found naming the notice's accession number and period
- Holdings carry issuer, CUSIP,
market_value_usd in whole USD, shares or principal, and put_call; total_holdings_in_filing counts raw rows and total_positions distinct positions; a shared legal name fails as ambiguous_entity
issuer as a ticker, CIK, or name, plus an optional 9-character cusip, the precise match key (a name phrase-match both over- and under-matches); quarter as YYYY-QN, defaulting to the newest quarter past its 45-day filing deadline; limit 1β100 (default 20) from up to 500 fetched filings
- Rows carry
filer_cik, accession_number, and form, while search_mode (cusip / name), total_filings, fetched, and holders_in_quarter size the result; the list is unranked, so pass a filer_cik to secedgar_get_institutional_holdings to read the position
issuer is the company being held; form_kind all (default), 13D, or 13G; include_amendments (default true); limit 1β20 filings (default 10), each a separate document fetch
- Each filing lists
reporting_persons with voting power, dispositive power, and percent_of_class per person, which joint filers report for the same shares, so they don't sum; a 13D carries purpose_of_transaction, a 13G has none
- Coverage starts 2024-12-18 with the structured XML schedules;
legacy_filings_before_coverage counts the issuer's older SC 13D / SC 13G text filings
fund as a ticker (VOO), series ID (S000002839), or CIK; series_id picks one fund of a multi-series trust, which otherwise fails as series_required with the series listed; report_date targets a period from available_report_periods; limit 1β100 (default 20) with offset / next_offset
- Positions come largest first by
percent_of_net_assets, with name, CUSIP / ISIN / LEI, balance and units, value_usd, and asset and issuer category, alongside fund net assets, total assets, and total liabilities
- Holdings are as of
report_period_date, roughly two months before filing_date; publication_lag_days states the gap
concept as a friendly name or raw tag, period as CY2023, CY2024Q2, or CY2023Q4I, unit (default USD), sort desc / asc; limit 1β100 (default 25) with offset / next_offset down the ranking
- One call queries one tag:
unqueried_tags lists same-meaning variants to fetch separately, and related_tags lists alternate-definition tags some filers report instead
value_distribution.max_to_p95_ratio flags scale-factor outliers, period_end_range shows fiscal-year mixing, and caveats names the fiscal-Q4 gap in quarterly frames, the proxy-statement rows in annual NetIncomeLoss frames, and the 10-Q trailing-twelve-month rows an annual frame can hold while its year is still open
- SEC publishes frames for us-gaap and dei tags only:
taxonomy us-gaap (default) or dei picks the namespace for a raw tag (EntityCommonStockSharesOutstanding is dei), a friendly name keeps its own mapped taxonomy (shares_outstanding reads dei), and an explicit dei reads a friendly name's tags from dei, as in secedgar_get_financials; IFRS filers are read per company with taxonomy ifrs-full
- A
concept that is neither a friendly name nor an UpperCamelCase tag fails as unknown_concept before the frames request, with the same formula or closest-name hint as secedgar_get_financials; a well-formed tag with no frame is no_data
- 2β10
companies Γ 1β8 concepts; taxonomy us-gaap (default) or ifrs-full; period_type annual (default) or quarterly; periods 1β12 (default 4), trimmed further when the inline matrix gets too large
cells align each value on a calendar period and keep its frame, period_end, and source tag; failed_companies (reason not_found, ambiguous, or no_company_facts) and gaps (no value in any period) report what's missing, and caveats flag differing period ends, unit mismatches, and, once per concept, the companies whose values all predate the inline window, each with its newest period
- A concept that is neither a friendly name nor an UpperCamelCase tag is listed once in
unknown_concepts with its hint, never as a gap per company; the call fails as unknown_concept only when every concept is one
- Inputs naming the same concept (
revenue and Revenue, or one raw tag spelled twice) are compared once under the first spelling, with a caveat naming the merged inputs; a friendly name and a raw tag it maps to (revenue and Revenues) stay separate
search is a substring over friendly name, label, and tags, so a raw tag like NetIncomeLoss reverse-maps to its friendly name; group and taxonomy filter; no arguments returns the full catalog
- Each concept lists
tags, ifrs_tags (only where an IFRS element was confirmed in live 20-F filings), related_tags, unit, and group
- Optional
name for one dataframe; omit it to list the tenant's active dataframes, newest first
- Each entry carries
source_tool, query_params, created_at / expires_at, row_count, truncated, and the column_schema that SQL for secedgar_dataframe_query has to match
- One DuckDB SELECT in
sql (joins, aggregates, window functions, CTEs); row_limit 1β10,000 (default 1,000), preview for fewer inline rows, and register_as (df_XXXXX_XXXXX) to save the result as a new dataframe
- Returns
columns, rows, row_count, and row_count_capped, which when true means row_count is the cap, not a total; BIGINT columns serialize as strings
- Writes, DDL, file-reading functions, multiple statements, and system catalogs are rejected with typed reasons (
non_select_statement, denied_function, multi_statement, system_catalog_access, and others)
name of the dataframe to drop; idempotent, returning dropped: false when nothing matched
- Off unless
EDGAR_DATAFRAME_DROP_ENABLED=true; disabled, it is absent from tools/list and uncallable, but still listed on the HTTP landing page with the flag that enables it
secedgar://concepts resource
- The friendly-name catalog grouped by statement, as
text/markdown, with the us-gaap, IFRS, and alternate-definition tags for each concept
- The names are what
secedgar_get_financials, secedgar_compare_companies, and secedgar_fetch_frames accept as concepts
secedgar://filing-types resource
- Common SEC forms with cadence and use cases, as
text/markdown
- Includes the 8-K item-code tables for both numbering regimes, the vocabulary of
secedgar_get_material_events' items filter
secedgar_company_analysis prompt
- Arguments:
company required; focus_areas optional free text
- Returns one user message with a numbered workflow (company search, a financial profile via
secedgar_get_snapshot with trends via secedgar_get_financials, filing review, material events, and a peer comparison via secedgar_compare_companies with secedgar_fetch_frames for a market-wide ranking) and a findings template; insider, institutional, or blockholder terms in focus_areas add those ownership steps, and "ownership" adds all three
Features
Built on @cyanheads/mcp-ts-core: stdio and Streamable HTTP transports, pluggable auth (none / jwt / oauth), swappable storage (in-memory, filesystem, Supabase, Cloudflare KV/R2/D1), structured logging with optional OpenTelemetry tracing.
EDGAR-specific:
- One process-wide queue paces SEC requests under the 10 req/s limit. A 429 is never retried: every SEC call is refused locally as
rate_limited with a retryAfter countdown for EDGAR_RATE_LIMIT_COOLDOWN_SECONDS, then a single probe goes out. Reads served from the local mirror keep answering
- CIK resolution from tickers (fund tickers included), current and former company names, or raw CIKs, with corporate-suffix normalization and near-match suggestions on a miss
- Friendly XBRL concept names that handle historical tag changes.
secedgar_get_financials, secedgar_get_snapshot, and secedgar_compare_companies share one frame dedup and tag priority, so their numbers agree; a period whose frame SEC assigned to a proxy statement's pay-versus-performance figure is answered from the filer's own report instead, an annual frame holding a 10-Q's trailing-twelve-month figure is left out of the annual series, and each reports caveats for calendar quarters missing from the frame-tagged series (SEC files fiscal Q4 only as the 10-K residual) and for series that stop years short
- Filing documents converted from HTML to text, with heading detection and offset paging for oversized filings
- Opt-in local SQLite mirror of company tickers and XBRL company-facts (
EDGAR_MIRROR_ENABLED) that serves CIK resolution and financials from disk
Agent-friendly output:
- In-conversation SQL: any tool whose response carries a
dataset field has staged its full result as a DuckDB dataframe (df_<id>), while the inline list stays capped at limit; inspect it with secedgar_dataframe_describe, then query it with secedgar_dataframe_query
- Discriminated outputs and explicit gaps:
source on filing-search rows, search_mode, 8-K item regime, typed failed_companies reasons, and gaps with tags_tried in place of zero-filled values
- Completeness disclosure:
history_scanned_through, total_is_exact, publication_lag_days, and dataset.truncated tell agents how deep a scan went and what it left out
- One parameter name per concept:
company, filed_after / filed_before, and forms mean the same thing on every tool, and common alternate spellings (ticker, cik, start_date, end_date, form_types, and others) are accepted as aliases
Getting started
Public Hosted Instance
A public instance is available at https://secedgar.caseyjhand.com/mcp β no installation required. Point any MCP client at it via Streamable HTTP:
{
"mcpServers": {
"secedgar-mcp-server": {
"type": "streamable-http",
"url": "https://secedgar.caseyjhand.com/mcp"
}
}
}
Self-Hosted / Local
Add the following to your MCP client configuration file.
{
"mcpServers": {
"secedgar-mcp-server": {
"type": "stdio",
"command": "bunx",
"args": ["@cyanheads/secedgar-mcp-server@latest"],
"env": {
"EDGAR_USER_AGENT": "YourAppName your-email@example.com",
"MCP_TRANSPORT_TYPE": "stdio"
}
}
}
}
Or with npx (no Bun required):
{
"mcpServers": {
"secedgar-mcp-server": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@cyanheads/secedgar-mcp-server@latest"],
"env": {
"EDGAR_USER_AGENT": "YourAppName your-email@example.com",
"MCP_TRANSPORT_TYPE": "stdio"
}
}
}
}
Or with Docker:
{
"mcpServers": {
"secedgar-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"run", "-i", "--rm",
"-e", "MCP_TRANSPORT_TYPE=stdio",
"-e", "EDGAR_USER_AGENT=YourAppName your-email@example.com",
"ghcr.io/cyanheads/secedgar-mcp-server:latest"
]
}
}
}
For Streamable HTTP, set the transport and start the server:
MCP_TRANSPORT_TYPE=http MCP_HTTP_PORT=3010 bun run start:http
Prerequisites
- Bun v1.4.0 or higher (or Node.js v24+).
- A User-Agent string in SEC's
"AppName contact@email.com" format; no account or key required.
Installation
- Clone the repository:
git clone https://github.com/cyanheads/secedgar-mcp-server.git
- Navigate into the directory:
- Install dependencies:
- Configure environment:
Configuration
| Variable | Description | Default |
|---|
EDGAR_USER_AGENT | Required. User-Agent sent to SEC, as "AppName contact@email.com". SEC blocks IPs without one. | β |
EDGAR_RATE_LIMIT_RPS | Max requests per second to SEC (1β10). | 10 |
EDGAR_RATE_LIMIT_COOLDOWN_SECONDS | Seconds to refuse calls locally after a 429 before one probe goes out. SEC lifts a block only after ten quiet minutes, so a shorter value probes into it. | 600 |
EDGAR_TICKER_CACHE_TTL | Seconds to cache the company and fund ticker files. A failed fund-file load is retried after a minute (or the rate-limit cool-down) instead of standing for the whole TTL. | 3600 |
EDGAR_DATASET_TTL_SECONDS | Per-table TTL for canvas dataframes, a sliding window renewed on every dataframe operation. | 86400 |
EDGAR_DATAFRAME_DROP_ENABLED | Set true to expose secedgar_dataframe_drop, the only destructive tool. | false |
EDGAR_MIRROR_ENABLED | Enable the local SQLite mirror of company tickers and XBRL company-facts. Node/Bun only; bootstrap once with bun run mirror:init. | false |
EDGAR_MIRROR_PATH | Directory holding the mirror databases. | ./data/edgar-mirror |
EDGAR_MIRROR_REFRESH_CRON | In-process refresh cron (HTTP transport only), e.g. 0 9 * * *. Omit to refresh with bun run mirror:refresh. | β |
EDGAR_MIRROR_FALLBACK_LIVE | Fall back to the live SEC API on a mirror miss. Set false for mirror-only reads. | true |
CANVAS_PROVIDER_TYPE | Canvas engine; none disables dataframes. | duckdb |
MCP_TRANSPORT_TYPE | Transport: stdio or http. | stdio |
MCP_HTTP_PORT | HTTP server port. | 3010 |
MCP_AUTH_MODE | Authentication: none, jwt, or oauth. | none |
MCP_LOG_LEVEL | Log level (debug, info, warning, error, etc.). | info |
See .env.example for the full list of optional overrides.
Running the server
Local development
Docker
docker build -t secedgar-mcp-server .
docker run -e EDGAR_USER_AGENT="MyApp my@email.com" -p 3010:3010 secedgar-mcp-server
The image defaults to HTTP on port 3010 and ships the mirror CLI, so a running container can bootstrap and refresh its own mirror:
docker exec <container> bun run mirror:verify
docker exec <container> bun run mirror:init
docker exec <container> bun run mirror:refresh
Project structure
| Directory | Purpose |
|---|
src/index.ts | createApp() entry point: registers resources and prompts, starts the SEC client, canvas, and optional mirror. |
src/config | Server environment variable parsing and validation with Zod. |
src/mcp-server/tools/definitions | Tool definitions (*.tool.ts) and the buildToolDefinitions() registration list. |
src/mcp-server/resources/definitions | Resource definitions: XBRL concepts and filing types. |
src/mcp-server/prompts/definitions | Prompt definitions: company analysis. |
src/services/edgar | Paced SEC client, CIK resolution, XBRL concept mapping and series dedup, ownership / 13D / 13G / NPORT-P parsers, 8-K item tables, HTML-to-text. |
src/services/edgar/mirror | Opt-in local SQLite mirror of company tickers and XBRL company-facts. |
src/services/canvas-bridge | Adapter over the framework DataCanvas: df_<id> naming, per-table TTL, system-catalog SQL deny. |
scripts | Build, devcheck, and lint tooling, plus the mirror:* commands. |
tests | Unit and integration tests, mirroring the src/ structure. |
Development guide
See CLAUDE.md and AGENTS.md for development guidelines and architectural rules. The short version:
- Handlers throw, framework catches β no
try/catch in tool logic
- Use
ctx.log for logging, ctx.state for storage
- Register new tools in
buildToolDefinitions() (src/mcp-server/tools/definitions/index.ts), and resources and prompts in the createApp() arrays in src/index.ts
- Wrap external SEC EDGAR calls: validate the raw response β normalize to a domain type β return the output schema; never fabricate a missing XBRL field β report it under
gaps instead
Contributing
Issues are welcome. Run checks and tests before submitting:
bun run devcheck
bun run test
License
This project is licensed under the Apache 2.0 License. See the LICENSE file for details.