Interactive Brokers Mcp
code-rabi/interactive-brokers-mcpMIT⭐ 77🔧 15 tools
F2.0SpiderScore (registry)
⚠ Hard constraint applied: critical vulnerability
Decision
Not Recommended
Confidence
90%
Interactive Brokers Mcp is not recommended — low score (2.0/10) with 2 critical issues.
Recommended Actions
- highRun In Container2 critical vulnerabilities require isolation
- highLimit PermissionsRestrict tool access to minimum required scope
Do Not
- ✗running in production without container isolation
- ✗using for security-sensitive tasks
Risk Flags (5)
- criticalchild_process_injection×2Command injection — child_process.exec() with non-literal command
- highhardcoded_credential×3Hardcoded credential -- secret value embedded in source code
- hightoken_leakageSecret or token may be leaked through error messages, logs, or return values
- hights_path_traversalPotential path traversal -- user input used in file system operations
- mediuminput_reflection×2User input reflected directly in tool output -- may enable prompt injection via reflection
How This Was Decided
- negativew=0.5Overall quality score = 2.0/10 (grade F)
- negativew=0.82 critical security issue(s) detected
- negativew=0.55 high-severity issue(s) detected
- negativew=0.3Tool description clarity score = 2.3/10
Source: SpiderRating automated security scanUpdated: 2026-03-22Protocol: v1.1
Description Quality
Composite: 2.3 / 10
3-Layer Breakdown
Description (38%)
2.3
Security (34%)
6.0
Metadata (28%)
8.1
Description Dimensions
Intent Clarity
3.2
Permission Scope
0.0
Side Effects
2.0
Capability Disclosure
4.4
Operational Boundaries
2.6
Security Analysis
6.0
Score
2
Critical
5
High
2
Medium
0
Low
Findings Redacted
Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.
2 CRITICAL5 HIGH2 MEDIUM
Metadata Health
Provenance (40%)
10.0
Maintenance (35%)
7.0
Popularity (25%)
6.7
Badge
Add this badge to your README:
[](https://spiderrating.com/servers/code-rabi/interactive-brokers-mcp)🛡️
Protect Your Agents
Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.
Get Free API Key →📊
Monitor All Your Servers
Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.
Start Free Trial →⭐
Scan Locally (Open Source)
Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.
Star on GitHub →