xbbg MCP Server
by underloamio.github.underloam/xbbg-mcpv1.5.1
Local Bloomberg tools for xbbg users.
context tax
pending
security
100/100
cold start
pending
freshness
Active5d ago
Our reading of xbbg, from the data
xbbg is an MCP server from underloam, listed in the official MCP Registry.
We haven't measured its tool list yet, so its token cost is unknown.
Maintenance is active: the last public signal was 5 days ago (2026-10-16).
It runs locally on your machine over stdio.
Install xbbg MCP server
No published package or hosted endpoint yet — see the repository README for build-from-source instructions.
Configuration
| Variable | Required | Secret | Description |
|---|---|---|---|
| XBBG_MCP_LIB_DIR | — | — | Optional directory containing Bloomberg runtime libraries. Leave unset to use BLPAPI_ROOT, an authorized vendored SDK layout, or Python blpapi fallback. |
| XBBG_MCP_HOST | — | — | Bloomberg API host. Defaults to localhost. |
| XBBG_MCP_PORT | — | — | Bloomberg API port. Defaults to 8194. |
| XBBG_MCP_AUTH_METHOD | — | — | Bloomberg auth method: none, user, app, userapp, dir, manual, or token. |
| XBBG_MCP_MAX_ROWS | — | — | Maximum rows returned to the MCP client per response. Defaults to 500. |
| XBBG_MCP_MAX_CELLS | — | — | Maximum data cells across returned rows and columns. Defaults to 50000. |
| XBBG_MCP_MAX_METADATA_PROPERTIES | — | — | Maximum metadata properties retained per response. Defaults to 50000. |
| XBBG_MCP_MAX_METADATA_BYTES | — | — | Maximum metadata bytes parsed or returned per response. Defaults to 65536. |
| XBBG_MCP_MAX_STRING_CHARS | — | — | Maximum characters per string value returned to the MCP client. Defaults to 2048. |
| XBBG_MCP_MAX_STRING_BYTES | — | — | Maximum UTF-8 bytes per string value, including a truncation marker. Defaults to 8192; minimum 3. |
| XBBG_MCP_MAX_RESULT_BYTES | — | — | Maximum compact-JSON bytes in the structured result, including diagnostics. Defaults to 1048576; minimum 2048. |
Security signals
100/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.
Deductions
No findings from the checks that ran.
Checks
- ✓Repository hygiene (archived, activity, license, security policy)
- ○Package metadata (install scripts, provenance) — pending
- ○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
- ○Source scan (secrets, CVEs, risky code) by vectra-guard — pending
Scan it yourself before installing with vectra-guard, the open-source agent security CLI (made by NavyaAI, which also runs MCPSkillHub). Scoring rules
Freshness
Active — last maintenance signal 5d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-10-16 · 5d ago · GitHub
Latest release
2026-10-07 · 14d ago · GitHub · v1.5.1
Package published
no data · npm/PyPI
Registry entry updated
2026-10-07 · 14d ago · official registry · v1.5.1
FAQ
›Does xbbg require an API key?
No required environment variables are declared in its published metadata.
›Can I use xbbg as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is xbbg in the official MCP registry?
Yes, as io.github.underloam/xbbg-mcp.
Sources and method
- Official MCP Registry entry
- updated 2026-10-07
- GitHub repository
- fetched 2026-10-19
- Package registry (npm / PyPI)
- listed
- Security signals, computed by us
- 2026-10-19
- Last checked against all sources
- 2026-10-19
The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Editorial standards are owned by Ramachandra Vikas Chamarthi, Founder & AI HPC Architect. Spot an error? Request a correction or claim the listing.