Directory / alpacahq/alpaca-mcp-server

alpacahq/alpaca-mcp-server

Alpaca’s official MCP Server lets you trade stocks, ETFs, crypto, and options, run data analysis, and build strategies in plain English directly from your favorite LLM tools and IDEs

Reviewed MCP server 85/100

Not financial advice. A grade measures public repo hygiene only (license, upkeep, tests, paper mode, risk limits, docs). It does not measure returns, safety or suitability. Options trading can lose more than you invest. Read the full policy.

Reviewed. Grok Bot read the code and docs and checked or adjusted each judged factor. Nothing was executed. This is not a human audit. Reviewed on 2026-10-24 against commit cdb0e46, rubric v1.1.

Reviewer summary: Official Alpaca MCP server. Defaults to paper (ALPACA_PAPER_TRADE=true) and can restrict exposed tools with ALPACA_TOOLSETS. It has no order size or loss limits of its own.

Facts

Repository	https://github.com/alpacahq/alpaca-mcp-server
Type	MCP server
Strategies	Not tagged
Brokers	Alpaca
License	MIT
Language	Python
Last commit	2026-10-23 (1 days before the scan)
Last scanned	2026-10-24
Stars	1040 (shown for context, never scored)

Score breakdown

Factor	Points	How it was decided
Risk limits and kill switch	5 / 20	No size or loss limits. The scanner's stop-loss hit is a bracket order parameter. ALPACA_TOOLSETS can restrict which tools an assistant sees, which I count as a partial gate (5). Reviewer confirmed the scanner result. Scanner evidence (1, automated, can include false matches) `src/alpaca_mcp_server/overrides.py:111` [stop loss] set to "bracket" when take_profit or stop_loss params
License	15 / 15	MIT (OSI approved) Reviewer confirmed the scanner result. Scanner evidence (1, automated, can include false matches) `LICENSE:1` License file
Last commit on default branch	15 / 15	1 days since last commit Fact from the commit date, no judgment involved. Scanner evidence (1, automated, can include false matches) `default branch HEAD` 2026-10-23 (1 days ago)
Tests	15 / 15	101 test cases found in 11 test files; CI test step found Reviewer confirmed the scanner result. Scanner evidence (4, automated, can include false matches) `tests/test_http_security.py:1` 7 test cases `tests/test_integrity.py:1` 9 test cases `tests/test_paper_integration.py:1` 52 test cases `.github/workflows/ci.yml:31` run: pytest tests/test_integrity.py tests/test_server_construction.py tests/test_http_security.py
Paper or dry-run mode	15 / 15	ALPACA_PAPER_TRADE defaults to true and the README says to use a paper account. Reviewer confirmed the scanner result. Scanner evidence (3, automated, can include false matches) `README.md:84` - Alpaca Trading API keys (free paper trading account) `.well-known/mcp/manifest.json:66` [paper-mode flag] "paper_trading": true, `src/alpaca_mcp_server/server.py:30` [paper endpoint] "paper": "[link]
README quality	10 / 10	install steps, config or env vars, explains what it does, risk disclaimer, 29658 chars Reviewer confirmed the scanner result. Scanner evidence (2, automated, can include false matches) `README.md:1` README with 29658 characters `README.md:593` Cryptocurrency services are provided by Alpaca Crypto LLC ("Alpaca Crypto"), a FinCEN registered money services business (NMLS # 2160858), a
Broker detection	10 / 10	Alpaca (deps, code, readme) Reviewer confirmed the scanner result. Scanner evidence (1, automated, can include false matches) `pyproject.toml:6` [Alpaca: deps+code+readme] name = "alpaca-mcp-server"
Total	85 / 100	Grades: A 85+, B 70+, C 55+, D 40+, F below.

Grades measure public repo hygiene on the scan date. They say nothing about profits, safety or security. We did not run this code. Full rubric and patterns.

Something wrong?

Report a correction Request removal (maintainers)

Corrections and removals are public GitHub issues. We reply within 7 days and every change is in the repo history. Sponsors get no special treatment: see our policy.

Badge for your README

Once the site has a public address, shields.io can read /badge/alpacahq--alpaca-mcp-server.json from it. Badges show the grade and whether it was reviewed. Maintainers may use one without asking.