Directory / technet365/TastyScanner-MCP-Server

technet365/TastyScanner-MCP-Server

MCP Server for TastyTrade - Let Claude/GPT trade options for you. Iron Condor strategy builder, market scanner, position tracking.

Reviewed MCP server 73/100

Not financial advice. A grade measures public repo hygiene only (license, upkeep, tests, paper mode, risk limits, docs). It does not measure returns, safety or suitability. Options trading can lose more than you invest. Read the full policy.

Reviewed. Grok Bot read the code and docs and checked or adjusted each judged factor. Nothing was executed. This is not a human audit. Reviewed on 2026-10-24 against commit b2599b5, rubric v1.1.

Reviewer summary: tastytrade MCP server with live trading disabled by default through ENABLE_LIVE_TRADING and sandbox support. No limits on order size or loss, and no tests (the CI step runs npm test --if-present with nothing to run).

Facts

Repository	https://github.com/technet365/TastyScanner-MCP-Server
Type	MCP server
Strategies	Iron condor
Brokers	tastytrade
License	MIT
Language	TypeScript
Last commit	2026-10-22 (3 days before the scan)
Last scanned	2026-10-24
Stars	3 (shown for context, never scored)

Score breakdown

Factor	Points	How it was decided
Risk limits and kill switch	10 / 20	ENABLE_LIVE_TRADING defaults to false and blocks order tools (10). The scanner's limit hits were strategy filters and example output, not risk limits. Reviewer adjusted this factor (scanner said 20). Scanner evidence (4, automated, can include false matches) `examples/tool-responses.json:48` [max loss] "max_loss": 3.30, `src/mcp-server.ts:540` [stop loss] .enum(["take_profit", "stop_loss", "dte_expiry", "manual"]) `src/strategy-builder.ts:76` [max notional or exposure] maxRiskReward: number; // 4 - maximum risk/reward ratio `src/mcp-server.ts:485` [trading enabled flag] "TRADING_DISABLED",
License	15 / 15	MIT (OSI approved) Reviewer confirmed the scanner result. Scanner evidence (1, automated, can include false matches) `LICENSE:1` License file
Last commit on default branch	15 / 15	2 days since last commit Fact from the commit date, no judgment involved. Scanner evidence (1, automated, can include false matches) `default branch HEAD` 2026-10-22 (2 days ago)
Tests	0 / 15	No test files found; CI uses npm test --if-present. Reviewer confirmed the scanner result. Scanner evidence (1, automated, can include false matches) `.github/workflows/ci.yml:39` run: npm test --if-present (CI runs tests but no test cases found, no CI points)
Paper or dry-run mode	15 / 15	documented and code or config switch Reviewer confirmed the scanner result. Scanner evidence (2, automated, can include false matches) `README.md:44` \| 🔒 Safety First \| Live trading disabled by default, sandbox support \| `.env.example:9` [sandbox flag] TASTY_PRODUCTION=true # true=production, false=sandbox/cert
README quality	8 / 10	install steps, config or env vars, explains what it does, 9390 chars Reviewer confirmed the scanner result. Scanner evidence (1, automated, can include false matches) `README.md:1` README with 9390 characters
Broker detection	10 / 10	tastytrade (deps, readme) Reviewer confirmed the scanner result. Scanner evidence (1, automated, can include false matches) `package.json:13` [tastytrade: deps+readme] "@tastytrade/api": "^6.0.1",
Total	73 / 100	Grades: A 85+, B 70+, C 55+, D 40+, F below.

Grades measure public repo hygiene on the scan date. They say nothing about profits, safety or security. We did not run this code. Full rubric and patterns.

Something wrong?

Report a correction Request removal (maintainers)

Corrections and removals are public GitHub issues. We reply within 7 days and every change is in the repo history. Sponsors get no special treatment: see our policy.

Badge for your README

Once the site has a public address, shields.io can read /badge/technet365--tastyscanner-mcp-server.json from it. Badges show the grade and whether it was reviewed. Maintainers may use one without asking.