twolven/mcp-optionsflow

A typed FastMCP server that analyzes option strategies from Yahoo Finance data. It supports local stdio and containerized Streamable HTTP transports.
## Tool
analyzebasicstrategies(symbol, strategy, expirationdate, deltatarget=0.3, widthpct=0.05) preserves the original public tool name, required arguments, defaults, and strategy values: ccs, pcs, csp, and cc. Prices and payoff values distinguish per-share amounts from the standard 100-share contract multiplier. Results include breakeven, maximum profit/loss, return on capital, probability evaluated at the actual breakeven, position Greeks, provider/as-of metadata, warnings, and rejection reasons.
powershell
uv sync --locked
uv run python optionsflow.py
The server uses stdio and writes no protocol-unrelated content to stdout. Black-Scholes values are theoretical European-model estimates; dividends and American-style early assignment may make them differ materially from realized outcomes. Yahoo Finance is an unofficial personal-use source and may be delayed, incomplete, rate-limited, or structurally changed. Nothing returned is investment advice or guaranteed real-time data.
## Docker / Streamable HTTP
The container runs as an unprivileged user, installs the locked production dependencies, and serves MCP at http://127.0.0.1:8000/mcp. Start it with:
powershell
docker compose up --build -d
Invoke-RestMethod http://127.0.0.1:8000/health
Connect a Streamable HTTP-capable MCP client to http://127.0.0.1:8000/mcp. To avoid a port collision when running multiple servers, set MCPHOSTPORT before starting Compose, for example $env:MCPHOSTPORT=8001. Stop and remove the container with docker compose down.
The Compose mapping intentionally binds to localhost. The endpoint has no authentication or TLS and must not be exposed to an untrusted network without a properly configured reverse proxy and access control.
Binding to loopback alone does not make the endpoint private: a browser can still reach it through DNS rebinding, so the server validates Host and Origin headers before a request reaches an MCP session. Requests carrying a foreign Host are answered with 421 Misdirected Request and those carrying a foreign Origin with 403 Forbidden, while same-origin loopback traffic and non-browser clients that send no Origin are unaffected.
| Variable | Default | Purpose |
| MCPTRANSPORT | stdio | stdio, http, or streamable-http. |
| MCPHOST | 127.0.0.1 | Interface the HTTP server binds. |
| MCPPORT | 8000 | Port inside the container. |
| MCPPATH | /mcp | Streamable HTTP endpoint path. |
| MCPHOSTPORT | 8000 | Host port Compose publishes on 127.0.0.1. |