shoonya-mcp
The shoonya-mcp server is a secure Node.js-based MCP interface for algorithmic trading via the Shoonya Broker API, designed for seamless integration with AI assistants like Claude, Cursor, or Gemini.
Secure Credential Management: Encrypts broker credentials using AES-256-GCM with PBKDF2 (310,000 iterations), storing them locally in an encrypted vault (~/.shoonya-mcp/vault.enc). The AI never directly sees sensitive credentials. Includes CLI commands for one-time setup, editing (e.g., for 90-day password resets), and securely deleting the vault.
Core Trading Capabilities:
Login — Authenticate using only a master password; credentials are decrypted locally and never exposed to the AI.
Place Standard Orders — Place market or limit orders via a simple command string (e.g.,
NIFTY 24500 CE 30 L 110).Place Manual Stop Loss Orders — Place SL orders using a command string (e.g.,
NIFTY 24500 CE 30 SL 100).Place Auto Stop Loss Orders — Automatically fetch the average buy price of a filled order and place an SL-LMT order based on index-specific offsets.
Modify Open Orders — Update price, quantity, or price type of an existing open order.
Modify Stop Loss Orders — Adjust price, trigger price, quantity, or price type of an existing SL order.
Cancel Orders — Cancel any open order, including stop loss orders.
Exit Positions — Exit an open position by placing an opposite market order.
View Order Book — Fetch and review your full order book.
Check Margin — Retrieve available trading margin (cash + payin + payout − margin used).
Check Order Status — Look up the current status of a specific order by order ID.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@shoonya-mcpBuy NIFTY 24500 CE 30"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Shoonya MCP Server (Node.js)
A lightweight, bank-level secure Model Context Protocol (MCP) server for algorithmic trading via the Shoonya Broker API.
This package is designed for effortless and secure distribution. It runs natively over stdio, meaning it can be plugged directly into AI assistants like Claude Desktop, Cursor, or Gemini without requiring a Python environment.
🔐 Security Architecture
Your trading credentials are protected using military-grade encryption. The AI assistant never sees, stores, or transmits your passwords.
How It Works
┌─────────────────────────────────────────────────────────┐
│ YOUR LOCAL MACHINE │
│ │
│ ┌──────────────┐ Master ┌──────────────────┐ │
│ │ AI (Claude, │ Password │ Shoonya MCP │ │
│ │ Cursor, etc) │ ──────────► │ Server (Node.js)│ │
│ │ │ │ │ │
│ │ Never sees │ │ Decrypts vault │ │
│ │ credentials │ │ locally only │ │
│ └──────────────┘ └────────┬─────────┘ │
│ │ │
│ ▼ │
│ ┌──────────────────┐ │
│ │ ~/.shoonya-mcp/ │ │
│ │ vault.enc │ │
│ │ │ │
│ │ AES-256-GCM │ │
│ │ encrypted file │ │
│ └──────────────────┘ │
│ │ │
│ ▼ │
│ ┌──────────────────┐ │
│ │ Shoonya Broker │ │
│ │ API (HTTPS) │ │
│ └──────────────────┘ │
└─────────────────────────────────────────────────────────┘Encryption Details
Feature | Specification |
Encryption Algorithm | AES-256-GCM (used by banks, governments, military) |
Key Derivation | PBKDF2 with SHA-256, 310,000 iterations (OWASP 2023) |
Salt | 32 bytes, cryptographically random, unique per vault |
IV (Nonce) | 16 bytes, cryptographically random, unique per save |
Authentication | GCM auth tag prevents tampering |
File Permissions |
|
Vault Location |
|
AI Exposure | ❌ Credentials never sent to or seen by the AI |
What the AI Can See vs Cannot See
Data | AI Can See? |
Master Password | ✅ Only to decrypt vault (not stored) |
User ID | ❌ Never |
Broker Password | ❌ Never |
TOTP Secret Key | ❌ Never |
API Key | ❌ Never |
Vendor Code | ❌ Never |
IMEI | ❌ Never |
Order commands | ✅ (e.g., "NIFTY 24500 CE 30") |
Order results | ✅ (order ID, margin, status) |
Related MCP server: Kite MCP Server
Quick Start
Step 1: Setup Credentials (One-Time)
Run the interactive setup wizard in your terminal:
npx github:benatcmathew/Shoonya_Trading_MCP-Server --setupThis will:
Ask for your Shoonya broker credentials
Ask you to set a master password
Encrypt everything with AES-256-GCM and save to
~/.shoonya-mcp/vault.enc
Editing Credentials (90-Day Password Reset)
Shoonya requires users to reset their broker password every 90 days. To update your vault with your new password (or edit any other API details), simply run the edit command:
npx github:benatcmathew/Shoonya_Trading_MCP-Server --editWhen prompted, type yes to overwrite your existing vault, and enter your new details.
Step 2: Connect to Claude Desktop
Add this to your claude_desktop_config.json:
{
"mcpServers": {
"shoonya-mcp": {
"command": "npx",
"args": [
"-y",
"github:benatcmathew/Shoonya_Trading_MCP-Server"
]
}
}
}Step 3: Start Trading!
In Claude Desktop, simply say:
"Login to Shoonya" → The AI will ask for your master password only. "Buy NIFTY 24500 CE 30" → Places a market order. "Place auto SL for order 12345 on NIFTY" → Auto stop-loss.
CLI Commands
Command | Description |
| First-time credential setup (interactive wizard) |
| Edit/update stored credentials |
| Securely wipe and delete the vault |
| Check if a vault exists |
| Start the MCP server (default, used by Claude) |
Available MCP Tools
Tool | Parameters | Description |
|
| Decrypt vault & login to Shoonya |
|
| Smart order (e.g., |
|
| Manual SL (e.g., |
|
| Auto SL from filled order |
|
| Modify open order |
|
| Modify SL order |
|
| Cancel any order |
|
| Exit position |
| — | Fetch order book |
| — | Fetch available margin |
|
| Check specific order status |
Manual Build from Source
git clone https://github.com/benatcmathew/Shoonya_Trading_MCP-Server.git
cd Shoonya_Trading_MCP-Server
npm install
npm run build
npm startLicense
ISC
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/benatcmathew/Shoonya_Trading_MCP-Server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server