Interactive Brokers Mcp

code-rabi/interactive-brokers-mcpMIT77🔧 15 tools

F2.0SpiderScore (registry)
⚠ Hard constraint applied: critical vulnerability
Decision
Not Recommended
Confidence
90%

Interactive Brokers Mcp is not recommended — low score (2.0/10) with 2 critical issues.

Recommended Actions

  • high
    Run In Container
    2 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • running in production without container isolation
  • using for security-sensitive tasks
Risk Flags (5)
  • critical
    child_process_injection×2
    Command injection — child_process.exec() with non-literal command
  • high
    hardcoded_credential×3
    Hardcoded credential -- secret value embedded in source code
  • high
    token_leakage
    Secret or token may be leaked through error messages, logs, or return values
  • high
    ts_path_traversal
    Potential path traversal -- user input used in file system operations
  • medium
    input_reflection×2
    User input reflected directly in tool output -- may enable prompt injection via reflection
How This Was Decided
  • negativew=0.5Overall quality score = 2.0/10 (grade F)
  • negativew=0.82 critical security issue(s) detected
  • negativew=0.55 high-severity issue(s) detected
  • negativew=0.3Tool description clarity score = 2.3/10
Source: SpiderRating automated security scanUpdated: 2026-03-22Protocol: v1.1

Description Quality

Composite: 2.3 / 10

3-Layer Breakdown

Description (38%)
2.3
Security (34%)
6.0
Metadata (28%)
8.1

Description Dimensions

Intent Clarity
3.2
Permission Scope
0.0
Side Effects
2.0
Capability Disclosure
4.4
Operational Boundaries
2.6

Security Analysis

6.0
Score
2
Critical
5
High
2
Medium
0
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

2 CRITICAL5 HIGH2 MEDIUM

Metadata Health

Provenance (40%)
10.0
Maintenance (35%)
7.0
Popularity (25%)
6.7

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/code-rabi__interactive-brokers-mcp.svg)](https://spiderrating.com/servers/code-rabi/interactive-brokers-mcp)