tossinvest-openapi-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| TOSS_API_KEY | Yes | Toss Open API client id / API key. | |
| MAX_ORDER_KRW | No | Maximum allowed calculated KRW order amount. | 0 |
| MAX_ORDER_USD | No | Maximum allowed calculated USD order amount. | 0 |
| ENABLE_TRADING | No | Global gate for any real order operation. | false |
| ALLOWED_SYMBOLS | No | Optional comma-separated allow list. | |
| BLOCKED_SYMBOLS | No | Optional comma-separated block list; always wins over allow list. | |
| TOSS_SECRET_KEY | Yes | Toss Open API client secret. | |
| TOSS_ACCOUNT_SEQ | No | Optional default account sequence for account-scoped tools. | |
| ENABLE_ORDER_CANCEL | No | Gate for real order cancel. | false |
| ENABLE_ORDER_CREATE | No | Gate for real order create. | false |
| ENABLE_ORDER_MODIFY | No | Gate for real order modify. | false |
| REQUIRE_CONFIRMATION | No | Requires exact confirmation text for real order operations. | true |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| auth_statusA | Check Toss API credential configuration and token status without returning secrets. |
| accountsA | List Toss Securities accounts. Account numbers are masked. |
| holdingsC | Read holdings for an account using X-Tossinvest-Account. |
| pricesA | Read current prices for comma-separated symbols. |
| orderbookC | Read orderbook for a symbol. |
| tradesC | Read recent trades for a symbol. |
| price_limitsB | Read upper/lower price limits for a symbol. |
| candlesD | Read candles for a symbol. |
| stock_infoC | Read basic stock info for comma-separated symbols. |
| stock_warningsC | Read buy-warning information for a stock. |
| exchange_rateC | Read exchange rate from official Toss API. |
| market_calendarC | Read KR or US market calendar. |
| orders_openC | Read open orders for an account. |
| orders_closedB | Read closed orders for an account if supported by Toss API. |
| order_detailC | Read one order detail for an account. |
| buying_powerC | Read buying power for an account and currency. |
| sellable_quantityC | Read sellable quantity for an account and symbol. |
| commissionsC | Read official Toss account commission rates. |
| order_validateC | Validate order safety gates only. Never calls Toss order POST endpoints. Confirmation text: I understand this may place a real Toss Securities order |
| portfolio_snapshotA | Read a structured account snapshot: holdings, KRW/USD buying power, open orders, calculable position weights, warning flags, and partial failures. Position weights use a KRW-converted, cash-inclusive denominator (holdings + KRW/USD cash buying power); when cashStatus is 'partial', omitted cash currencies are listed in omittedCashCurrencies. If status is 'partial', do not trust holdings.count as a complete account position count; retry or use a fallback read path. |
| pre_trade_checkB | Run separate pre-execution safety/reality checks for a candidate order. Read/check only; not required in order_execute hot path. |
| order_previewB | Create an in-memory preview contract for an order. Never calls Toss order POST endpoints. order_execute confirmation text: I approve this exact Toss order preview |
| order_executeB | Fast preview-based order execution. Requires valid unexpired previewId, matching requestHash, exact confirmation, and passing env/delegated-authority gates. No automatic order POST retry. |
| order_status_summaryC | Read-only order reconciliation summary for open and recently closed orders, state counts, and replace/modify caveats. |
| order_createA | Create an order. Default dry-run; real execution requires ENABLE_TRADING, ENABLE_ORDER_CREATE, dryRun=false, confirmation, amount, and symbol gates. |
| order_modifyA | Modify an order. Default dry-run; real execution requires ENABLE_TRADING, ENABLE_ORDER_MODIFY, dryRun=false, confirmation, and applicable gates. |
| order_cancelA | Cancel an order. Default dry-run; real execution requires ENABLE_TRADING, ENABLE_ORDER_CANCEL, dryRun=false, confirmation, and caller-supplied request.symbol when symbol allow/block policy is configured. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/EthanKlocked/tossinvest-openapi-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server