Safe-by-default local stdio MCP server for the official Toss Securities / 토스증권 Open API.
TossInvest OpenAPI MCP is an MCP project maintained in the ethanklocked/tossinvest-openapi-mcp repository. The maintainer describes its purpose as “Safe-by-default local stdio MCP server for the official Toss Securities / 토스증권 Open API”. Read the project documentation for the complete scope.
The project provides a local client configuration using node. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.
The example declares TOSS_API_KEY, TOSS_SECRET_KEY, TOSS_ACCOUNT_SEQ. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| auth_status | accounts |
| holdings | prices |
| orderbook | trades |
| price_limits | candles |
| stock_info | stock_warnings |
| exchange_rate | market_calendar |
| orders_open | orders_closed |
| order_detail | buying_power |
| sellable_quantity | commissions |
| portfolio_snapshot | reads holdings, KRW/USD buying power, open orders, calculable position weights, account/accountSeq state, warning flags, and partial failures. Position weights |
| pre_trade_check | separate read/check layer for candidate orders; returns canProceedDryRun, realOrderBlockedByDefault, checks, warnings, blockers, missing, estimate, and… |
| order_preview | creates an in-memory preview contract; returns previewId, requestHash, ttlSeconds, expiresAt, exact confirmationText, estimated amount/fee/cash/quantity… |
| order_execute | fast preview-based submission; requires previewId, matching requestHash, exact confirmation (I approve this exact Toss order preview), unexpired preview, env… |
| order_status_summary | read-only reconciliation summary for open/recently closed orders, state counts, filled/partial/canceled/rejected/replace-related states when present, and… |
| order_validate | checks local gates only and never calls Toss order POST endpoints. |
| order_create | defaults to dry-run; real execution requires all create gates. |
| order_modify | defaults to dry-run; real execution requires all modify gates. |
| order_cancel | defaults to dry-run; real execution requires all cancel gates. When ALLOWED_SYMBOLS or BLOCKED_SYMBOLS is configured, real cancellation also requires… |
{
"mcpServers": {
"tossinvest": {
"command": "node",
"args": [
"/absolute/path/to/cloned/tossinvest-openapi-mcp/dist/index.js"
],
"env": {
"TOSS_API_KEY": "YOUR_TOSS_API_KEY",
"TOSS_SECRET_KEY": "YOUR_TOSS_SECRET_KEY",
"TOSS_ACCOUNT_SEQ": "${TOSS_ACCOUNT_SEQ}"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| TOSS_API_KEY | Declared in the maintainer’s client configuration. | Check documentation |
| TOSS_SECRET_KEY | Declared in the maintainer’s client configuration. | Check documentation |
| TOSS_ACCOUNT_SEQ | Declared in the maintainer’s client configuration. | Optional |
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Use Microsoft’s Playwright MCP server to navigate pages, inspect accessibility snapshots, fill forms and capture browser screenshots.
Connect GitHub MCP to repositories, issues and pull requests with GitHub’s hosted service or a locally run server.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Search Linear issues and projects, inspect work context and manage updates through Linear’s hosted MCP server with OAuth.