almanac-mcp

v0.7.2 safe
4.0
Medium Risk

MCP server for Almanac — Argentine financial data (BCRA, CNV, INDEC, SEC) for Claude Desktop, Cursor, Copilot

🤖 AI Analysis

Final verdict: SAFE

The package appears safe with minimal risks identified. While there's some concern about the maintainer's limited presence and unavailability of the git repository, these factors alone do not suggest malicious intent.

  • Low network, shell, obfuscation, and credential risks
  • Maintainer has only one package and missing git repository
Per-check LLM notes
  • Network: The use of HTTP requests to a remote server is common for fetching configuration or data, but should be reviewed for the destination URL and request content.
  • Shell: No shell execution patterns detected, which is normal and expected.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has only one package and the git repository is not found, which raises some suspicion but does not definitively indicate malice.

📦 Package Quality Overall: Low (3.6/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://almanac.ar/mcp
  • Detailed PyPI description (5834 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 17 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Could not retrieve contributor data from GitHub

  • GitHub API error: 404

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • settings self._http = httpx.Client( base_url=settings.site_url, timeout
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Nicolás Colombo" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with almanac-mcp 
Create a Python-based financial dashboard app that integrates the 'almanac-mcp' package to fetch and display real-time financial data from major Argentine institutions such as BCRA, CNV, INDEC, and SEC. This app will serve as a user-friendly interface for tracking economic indicators, stock market performance, and other financial metrics specific to Argentina. Here’s a detailed outline of what your project should include:

1. **Setup Environment**: Begin by setting up your Python environment and installing the necessary packages including 'almanac-mcp'. Ensure you have a virtual environment set up for dependency management.

2. **Data Fetching**: Utilize 'almanac-mcp' to connect to the MCP server and fetch the latest financial data from the specified sources. Your app should be able to handle different types of data requests and return structured data that can be easily processed and displayed.

3. **User Interface**: Design a simple yet effective user interface using a framework like Tkinter or PyQt for desktop applications. The UI should allow users to select which type of financial data they want to view (e.g., stock prices, inflation rates, exchange rates).

4. **Data Visualization**: Implement basic data visualization features within your app. Use libraries like Matplotlib or Plotly to create graphs and charts that help users understand trends over time. For instance, users could see a line chart showing the fluctuation of the Argentine peso against the US dollar over the past year.

5. **Real-Time Updates**: Enhance your app with real-time update capabilities. Users should be able to refresh the data manually or set it to auto-refresh at regular intervals.

6. **Error Handling & Logging**: Incorporate robust error handling mechanisms to manage any issues that arise during data fetching or processing. Additionally, implement logging to track the app's operations and troubleshoot issues efficiently.

7. **Documentation**: Finally, write comprehensive documentation explaining how to install and use your app, including setup instructions and examples of how to fetch and visualize specific datasets.

This project aims to provide a practical example of integrating 'almanac-mcp' into a real-world application, showcasing its capabilities in accessing and displaying financial data.