IG Integration MCP

MCP server for IG's REST Trading API and Lightstreamer streaming API. It uses stdio, so it works with MCP clients such as Claude Desktop and OpenCode.

Release 0.1.1

• Add support for IG's current v3 OAuth session response and required IG-ACCOUNT-ID REST header.

• Retain compatibility with legacy CST and X-SECURITY-TOKEN sessions.

• Configure the Pricing data adapter for PRICE subscriptions.

• Validate OAuth authentication, market search, and historical-price retrieval against the demo API.

Related MCP server: ibkr-mcp

Setup

1. Use Python 3.10 or newer and install the project: python3 -m pip install -e '.[dev]'.

2. Copy .env.example to .env and set a separately generated IG API key, identifier, password, and IG_ENVIRONMENT=demo or live. Do not commit .env or .env.demo.

3. Start the server with ig-mcp.

Example MCP configuration:

{
  "mcpServers": {
    "ig": {
      "command": "ig-mcp",
      "cwd": "/absolute/path/to/ig_integration_mcp_v4"
    }
  }
}

Tools

Focused tools cover accounts, preferences, sessions, markets, historical prices, positions, working orders, confirmations, watchlists, sentiment, OTC trades, and bounded Lightstreamer PRICE, ACCOUNT, TRADE, and CHART subscriptions. ig_request provides access to the complete documented REST API where no focused tool exists.

Every POST, PUT, and DELETE request requires confirm=true. This includes deals, position/order changes, watchlist mutations, account preferences, session account switches, and all generic mutation calls. Check the configured environment before confirming a state-changing operation.

Authentication

The server logs in with IG REST API v3. Current IG sessions return an OAuth access token and selected account ID, which are sent as Authorization: Bearer ... and IG-ACCOUNT-ID on REST requests. Older IG sessions using CST and X-SECURITY-TOKEN remain supported. All credentials and tokens are redacted from logs and MCP results.

Logging And Secrets

Every REST request and response is logged to a rotating file specified by IG_LOG_PATH, defaulting to ~/.cache/ig-mcp/ig-mcp.log. MCP uses stdout for its protocol and no operational logs are written there. Passwords, API keys, session tokens, OAuth tokens, and encryption material are recursively redacted in logs and MCP REST results.

Tests

Run uv run --extra dev pytest. Demo validation should use only read-only tools such as accounts, search_markets, market_details, historical_prices, and a short stream_updates price collection. Version 0.1.1 was validated against the demo API for login, market search, and historical prices; the Lightstreamer subscription connection is established but may return no update for an inactive or unavailable demo price feed.