Skip to main content
Glama

SEC EDGAR Company Facts & CIK Financial Filings

Server Details

Extract structured SEC EDGAR company facts, CIK lookups, and regulatory financial filings.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-03-26
URL
ChatGPT
–
Claude
–

TDQS

C2.9/5.0

Scored across 4 tools

Disambiguation4/5

The four tools target clearly different domains (GCP catalog, package health, CVE audit, vault transcripts), so an agent can tell them apart. However, gcp_catalog_search and vault_knowledge_search are both FTS5 search tools and could be momentarily confused without reading descriptions.

Naming Consistency4/5

All names use consistent snake_case with three-part noun-phrase structure (domain_subject_action). No verb-first convention, but the pattern is predictable across all four tools.

Tool Count2/5

Four tools is a reasonable count in general, but for a server billed as SEC EDGAR Company Facts & CIK Financial Filings, none of the tools earn their place—there is no CIK lookup, company facts retrieval, or filing search.

Completeness1/5

The surface has zero SEC EDGAR operations (no company search, CIK resolution, facts retrieval, or filing access). The stated domain is entirely uncovered, making the server non-functional for its advertised purpose.

Available Tools

4 tools
package_health_pulseC
Read-only
Inspect

Parallel health pulse inspection across NPM and PyPI ecosystems.

NameRequiredDescriptionDefault
package_nameYesTarget package name

TDQS

C2.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, and destructiveHint=false, so the safety profile is covered. The description does add that the call fans out across two registries in parallel, which tells the agent to expect aggregated cross-ecosystem results rather than a single-registry lookup. It says nothing about partial failures (e.g., package missing on PyPI) or rate-limit behavior for an open-world remote call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single ten-word sentence with no filler and the ecosystem scope front-loaded. It is efficient, though efficiency here reflects under-specification rather than tight editing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description is the only place the agent could learn what a "pulse" result contains, and it does not say. For an open-world tool hitting two external registries, the missing return-shape and partial-failure behavior leave a real gap despite the simple one-parameter surface.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for the single required parameter, so "Target package name" is already documented structurally. The description adds no meaning about naming conventions – scoped NPM names like @scope/pkg versus PyPI normalization – which is the one piece of semantics an agent actually needs here. Baseline 3 applies when the schema carries the weight.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

"Parallel health pulse inspection across NPM and PyPI ecosystems" names the two registries it queries and implies a read-only diagnostic, but "health pulse inspection" is undefined jargon – an agent cannot tell whether this returns downloads, version freshness, deprecation status, or a composite score. It also does no work to distinguish itself from security_cve_audit, which plausibly overlaps on package risk.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to call this versus the sibling tools (security_cve_audit in particular), no prerequisites, and no indication of what to do when a package name exists on one registry but not the other. The word "parallel" hints that both ecosystems are checked in one call, but that is inference, not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

security_cve_auditB
Read-only
Inspect

Audit package vulnerabilities and CVE advisories via OSV.dev database.

NameRequiredDescriptionDefault
packageYesPackage name (e.g. 'jinja2', 'requests')
versionNoSpecific version string (optional)
ecosystemNoEcosystem (PyPI, npm, Go, etc.)PyPI

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, and destructiveHint=false, so the safety profile is fully covered elsewhere. The description's only additive context is naming OSV.dev as the external source, which reinforces the open-world nature of the query. It says nothing about whether a version is needed for meaningful results or how advisories are ranked/returned, leaving gaps for a lookup tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler or redundancy. It is efficient, though the terseness borders on under-specification for a tool whose siblings need disambiguating.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple three-parameter read-only lookup with annotations and full schema coverage, the description is minimally sufficient to pick and invoke the tool. It stops short of covering result expectations (severity, advisory count) and the behavioral effect of the optional version parameter, which is the one thing an agent would most want clarified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters (package, version, ecosystem with PyPI default) are already documented in the schema. The description adds no meaning beyond that—it does not say that omitting version returns all known advisories or how the ecosystem string should be matched.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ("Audit") and resource ("package vulnerabilities and CVE advisories") plus the underlying data source (OSV.dev), so the agent knows exactly what the call returns in kind. It does not distinguish itself from the nearest sibling, package_health_pulse, which an agent could plausibly confuse with this vulnerability lookup.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no when-to-use guidance, no prerequisites, and no exclusions relative to package_health_pulse, gcp_catalog_search, or vault_knowledge_search. The agent must infer from the word "CVE" alone when this audit is the right choice.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updates
    • First observedgcp_catalog_search
    • First observedpackage_health_pulse
    • First observedsecurity_cve_audit
    • First observedvault_knowledge_search

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables searching SEC EDGAR for companies, retrieving recent filings (e.g., 10-K, 10-Q), and accessing structured XBRL financial facts.
    180 npm
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Query SEC EDGAR for company filings, financial data, and executive disclosures. Search by company name or ticker, retrieve 10-K/10-Q/8-K filings, and extract structured financials — backed by the official SEC EDGAR API, built for AI agents.
    4
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables LLMs to download, parse, and analyze SEC EDGAR filings, including 10-K/Q reports, XBRL financial statements, and insider trading data. It provides structured access to institutional holdings, corporate events, and financial facts for comprehensive investment research.
    19
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables LLMs to access SEC EDGAR data: search filings, extract sections, pull structured financials, and track insider transactions.
    43 npm
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources