MCP server · CyberMax
Insidewell MCP server
Insider trading API + MCP: SEC Form 4 buys/sells, cluster buys. Keys $19/mo; 100 free/day.
Free: 100 free/dayPaid: Keys $19/moConnect
Streamable HTTP endpoint: https://insidewell-api.cybermaxtools.com/mcp (the original https://insidewell-api.cybermax-tools.workers.dev/mcp keeps working). Add it to Claude Desktop, Cursor, Windsurf or VS Code:
{
"mcpServers": {
"insidewell-api": {
"type": "http",
"url": "https://insidewell-api.cybermaxtools.com/mcp"
}
}
}No key needed for the free tier. For more calls, add your paid key as the x-api-key header. Full API docs: https://insidewell-api.cybermaxtools.com/docs · Product page: Insidewell
Tools
| Tool | What it does | Effect | Inputs (* required) |
|---|---|---|---|
insider_trades | Latest insider transactions from SEC Form 4 filings (EDGAR, refreshed about once a minute), newest filed first, up to 100 rows: ticker, insider, role, code (P buy, S sale, ...), shares, price, dollar value, dates and the filing link. Defaults to open-market buys and sales filed in the last 7 days. | read-only, calls public sources on the internet, never destructive | ticker, insider, code, minValue, from, to, days, role, plan, limit, offset |
cluster_buys | Companies where 2+ different insiders bought the stock on the open market within 7 days (window, minimum insiders and minimum dollars adjustable), with each insider, total dollars and filing links. | read-only, calls public sources on the internet, never destructive | days, window, minInsiders, minValue, ticker, limit |
data_status | When Insidewell last pulled new Form 4 filings from EDGAR and which filed dates it covers. | read-only, calls public sources on the internet, never destructive | none |
Security and data handling
- Your tool arguments are used only to answer that call. They are not saved to a database, shared, sold or used for training.
- To make repeat lookups fast, some servers keep the public answer to a lookup in Cloudflare's edge cache for up to 7 days (most for 1 hour or less). It holds the public result, not who asked.
- Free tier: a per-day counter keyed by a SHA-256 hash of your IP address and the date (in a Cloudflare Durable Object). The raw IP is not stored.
- Paid key: the key is checked with the payment provider (Stripe; Polar for older keys) and the result is cached for 10 minutes; usage is counted per key per month.
- No accounts, cookies or tracking on the MCP endpoint. Errors may appear in Cloudflare's short-lived Worker logs.
- Every tool is read-only: it looks up public data and returns it. No tool writes, deletes, sends messages or spends money.
Registry and source
- Official MCP Registry:
dev.workers.cybermax-tools.cybermax/insidewell-api, version 1.1.0. - Public manifest, tool schemas and security notes (MIT): gitlab.com/CyberMax.tools/agent-tools/mcp/insidewell-api. The hosted service code is not public.
- Report a vulnerability: security policy.