TossInvest OpenAPI MCP
@EthanKlocked
Safe-by-default local stdio MCP server for the official Toss Securities Open API. Read-only market/account tools are available by default; order operations require explicit trading gates, dry-run defaults, confirmation, and max-order safeguards.
Overview
What is TossInvest OpenAPI MCP?
TossInvest OpenAPI MCP is a local stdio MCP server for the official Toss Securities Open API. It is designed for developers who want to inspect account, market, holdings, orderbook, candles, and order history data from MCP clients without exposing secrets to model providers.
How to use TossInvest OpenAPI MCP?
Configure the server and connect any MCP client (e.g., Claude Desktop, Cline). The server starts without credentials; you must provide Toss Securities API credentials via environment variables. Read-only tools are available by default; trading requires explicitly enabling via environment gates and confirmation text.
Key features of TossInvest OpenAPI MCP
- Starts safely without credentials, reporting missing configuration
- Read-only tools enabled by default
- OAuth access tokens kept in memory only
- Secrets, bearer tokens, and account identifiers are redacted from output
- Trading disabled by default, with dry-run default for order tools
- Real order operations require explicit environment gates and limits
Use cases of TossInvest OpenAPI MCP
- Inspect account balances and holdings without exposing credentials
- Review market data, orderbooks, and candle charts from MCP clients
- Safely test order creation in dry-run mode before enabling real trading
- Monitor order history and trade status programmatically
FAQ from TossInvest OpenAPI MCP
What happens if I start the server without credentials?
The server starts but reports missing configuration via auth_status instead of crashing. No tools fail unexpectedly.
Are my API credentials exposed to model providers?
No. OAuth tokens remain in memory only, and all secrets, bearer tokens, and account identifiers are redacted from tool output and errors.
Can I trade using this server?
Trading is disabled by default. Order tools default to dryRun=true. Real order create, modify, or cancel operations require explicit environment gates, confirmation text, and maximum order limits to be set.
What data can I access with read-only tools?
You can inspect account information, market data, holdings, orderbooks, candles, and order history.
What transport does the server use?
The server uses local stdio transport (no HTTP endpoints exposed).
