tossinvest-openapi-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| TOSS_API_KEY | Yes | Toss Open API client id / API key. | |
| MAX_ORDER_KRW | No | Maximum allowed calculated KRW order amount. | 0 |
| MAX_ORDER_USD | No | Maximum allowed calculated USD order amount. | 0 |
| ENABLE_TRADING | No | Global gate for any real order operation. | false |
| ALLOWED_SYMBOLS | No | Optional comma-separated allow list. | |
| BLOCKED_SYMBOLS | No | Optional comma-separated block list; always wins over allow list. | |
| TOSS_SECRET_KEY | Yes | Toss Open API client secret. | |
| TOSS_ACCOUNT_SEQ | No | Optional default account sequence for account-scoped tools. | |
| ENABLE_ORDER_CANCEL | No | Gate for real order cancel. | false |
| ENABLE_ORDER_CREATE | No | Gate for real order create. | false |
| ENABLE_ORDER_MODIFY | No | Gate for real order modify. | false |
| REQUIRE_CONFIRMATION | No | Requires exact confirmation text for real order operations. | true |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| auth_statusA | Check Toss API credential configuration and token status without returning secrets. |
| accountsA | List Toss Securities accounts. Account numbers are masked. |
| holdingsC | Read holdings for an account using X-Tossinvest-Account. |
| pricesA | Read current prices for comma-separated symbols. |
| orderbookC | Read orderbook for a symbol. |
| tradesC | Read recent trades for a symbol. |
| price_limitsB | Read upper/lower price limits for a symbol. |
| candlesD | Read candles for a symbol. |
| stock_infoC | Read basic stock info for comma-separated symbols. |
| stock_warningsC | Read buy-warning information for a stock. |
| exchange_rateC | Read exchange rate from official Toss API. |
| market_calendarC | Read KR or US market calendar. |
| orders_openC | Read open orders for an account. |
| orders_closedB | Read closed orders for an account if supported by Toss API. |
| order_detailC | Read one order detail for an account. |
| buying_powerC | Read buying power for an account and currency. |
| sellable_quantityC | Read sellable quantity for an account and symbol. |
| commissionsC | Read official Toss account commission rates. |
| order_validateC | Validate order safety gates only. Never calls Toss order POST endpoints. Confirmation text: I understand this may place a real Toss Securities order |
| portfolio_snapshotA | Read a structured account snapshot: holdings, KRW/USD buying power, open orders, calculable position weights, warning flags, and partial failures. Position weights use a KRW-converted, cash-inclusive denominator (holdings + KRW/USD cash buying power); when cashStatus is 'partial', omitted cash currencies are listed in omittedCashCurrencies. If status is 'partial', do not trust holdings.count as a complete account position count; retry or use a fallback read path. |
| pre_trade_checkB | Run separate pre-execution safety/reality checks for a candidate order. Read/check only; not required in order_execute hot path. |
| order_previewB | Create an in-memory preview contract for an order. Never calls Toss order POST endpoints. order_execute confirmation text: I approve this exact Toss order preview |
| order_executeB | Fast preview-based order execution. Requires valid unexpired previewId, matching requestHash, exact confirmation, and passing env/delegated-authority gates. No automatic order POST retry. |
| order_status_summaryC | Read-only order reconciliation summary for open and recently closed orders, state counts, and replace/modify caveats. |
| order_createA | Create an order. Default dry-run; real execution requires ENABLE_TRADING, ENABLE_ORDER_CREATE, dryRun=false, confirmation, amount, and symbol gates. |
| order_modifyA | Modify an order. Default dry-run; real execution requires ENABLE_TRADING, ENABLE_ORDER_MODIFY, dryRun=false, confirmation, and applicable gates. |
| order_cancelA | Cancel an order. Default dry-run; real execution requires ENABLE_TRADING, ENABLE_ORDER_CANCEL, dryRun=false, confirmation, and caller-supplied request.symbol when symbol allow/block policy is configured. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/EthanKlocked/tossinvest-openapi-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server