FinanceSec MCP

Verified SEC facts in Cursor, Claude, and VS Code in under five minutes. Hosted HTTP is primary. Numeric claims must come from this tool only.

Hosted endpoint (primary) 
https://finsec.caleralabs.com/mcp

Auth: X-License-Key (Cursor / VS Code / Claude custom). OAuth 2.1 CIMD available for Claude Connectors Directory. Health: /health · Ready: /readyz.

Marketplaces & Registries

Anthropic Directory

Claude.ai · Desktop · Code · Cowork

Slug: finsec
Smithery.ai Marketplace

Hosted HTTP & CLI package

smithery.yaml
Glama.ai MCP Hub

Live probe testing & catalog

glama.json
Open MCP Registry

Canonical v1 Schema

mcp-registry.json

1. Cursor (hosted HTTP)

Paste into ~/.cursor/mcp.json or project .cursor/mcp.json. Replace the placeholder with a live key from Account → API Keys.

{
  "mcpServers": {
    "finsec": {
      "url": "https://financesec-mcp-993478811721.us-central1.run.app/mcp",
      "headers": {
        "X-License-Key": "clabs_live_YOUR_KEY"
      }
    }
  }
}

2. VS Code / Copilot

{
  "servers": {
    "finsec": {
      "url": "https://financesec-mcp-993478811721.us-central1.run.app/mcp",
      "headers": {
        "X-License-Key": "clabs_live_YOUR_KEY"
      }
    }
  }
}

3. Claude custom connector

  1. Settings → Connectors → Add custom connector
  2. URL: the hosted endpoint above
  3. Auth with license header, or complete OAuth consent when prompted (Directory path)
  4. Enable tools:
    • query_financial_sec — Certified SEC Fact Query
    • valuation_inputs — Certified SEC Valuation Inputs Pack (12 packs)
    • query_sec_metric_exact — Exact EDGAR Metric Recall
    • compute_sec_cagr — Domain 31 Lattice CAGR
    • lattice_arith_evaluate — Domain 31 Lattice Arithmetic Operations
    • vln_capabilities_overview — VLN Platform Capabilities & Scope Overview

System instruction (mandatory)

Numeric claims in your agent must come from this tool only. Treat SAFE_REFUSAL as honesty, not failure.

Try it out

  1. Verified fact: What was Apple's total revenue in FY2023?
  2. Derived metric: What was Apple's EBITDA for FY2023?
  3. Honesty check: What is Apple's covenant headroom? → expect SAFE_REFUSAL with isError=false

Low-token compact mode (v0.3.9)

Agent integrations at high QPS should opt into compact payloads. Verbose JSON remains the default for human consoles.

Opt-in

Add "low_tokens": true to MCP tool arguments or POST /api/query JSON. Compact responses preserve recalled facts — serializer only, not a second engine.

{
  "query": "What was Apple total revenue in FY2023?",
  "low_tokens": true
}

Compact success example (~38 tokens vs ~320 verbose):

{
  "id": "q112",
  "st": "OK",
  "val": 81797000000,
  "cur": "USD",
  "concept": "us-gaap:RevenueFromContractWithCustomerExcludingAssessedTax",
  "per": "2023Q3",
  "hash": "d9697123"
}

Status map: OK = VERIFIED_SUCCESS · REFUSE = SAFE_REFUSAL · ACK = EVENT_ACK_PENDING_FACTS. Full audit hash remains in verbose mode and server logs.

Enterprise latency tiers (v0.3.9)

Empirical warm-path benchmarks (July 2026, arm64). Cold start excluded.

Tier 1 — Direct Go

Materialized bulk reader

p95 ≈ 0.13 µs
Tier 2 — Compact MCP

low_tokens=true

p95 ≈ 0.022 ms
Tier 3 — Conversational NLQ

Full /api/query path

p95 ≈ 0.53 ms

SAFE_REFUSAL

When the lattice lacks verified evidence, the tool returns SAFE_REFUSAL instead of inventing a number. That is success-of-honesty, not a tool failure.

OAuth (Claude Directory)

Directory clients discover Protected Resource Metadata at /.well-known/oauth-protected-resource/mcp, complete PKCE consent, and call with a Bearer access token bound to your FinanceSec license. Cursor and VS Code continue to use X-License-Key.

Air-gapped / stdio

An air-gapped local binary is available for environments that require it. Contact us for details. Prefer hosted HTTP for standard deployments.

Support

Email support@caleralabs.com (48h SLA target for pilots). Privacy: caleralabs.com/privacy (covers MCP/query logging).