Connections & Capabilities
Connects To
Capabilities
Exposed MCP Tools (5)
create_orderCreates a new trading order.
Can execute trades, potentially leading to financial loss.
amend_orderModifies an existing trading order.
Incorrect modifications can lead to unintended trades.
cancel_orderCancels a pending trading order.
Canceling the wrong order can have financial implications.
query_quotesRetrieves real-time or historical stock quotes.
Read-only operation, no side effects.
query_portfolioRetrieves real-time data about account assets and positions.
Read-only operation, no side effects.
Safety Assessment
The LongPort OpenAPI offers powerful trading and data access capabilities, but the ability to execute trades and access sensitive financial data introduces risk. Secure handling of API keys, access tokens, and adherence to best practices for secrets management are crucial. The availability of multiple SDKs can improve security if used correctly, but also increases the attack surface if vulnerabilities exist within the SDKs themselves.
- Requires authentication via API Key, App Secret, and Access Token.
- Provides both HTTP and WebSocket endpoints, allowing for different levels of interaction.
- Clear documentation on environment variables and troubleshooting.
- SDKs available in multiple languages, potentially aiding in secure implementation.
- Trading functionality allows for creating, amending, and canceling orders, posing a financial risk.
- Access to real-time quotes and portfolio data could be misused if credentials are compromised.
- Reliance on environment variables for secrets management can be insecure if not handled properly.
- No explicit mention of rate limiting, which could lead to abuse or denial-of-service.