xbbg MCP Server
by xbbg-orgio.github.xbbg-org/xbbg-mcpv1.4.12
Local Bloomberg tools for xbbg users.
context tax
pending
security
100/100
cold start
pending
freshness
Active5d ago
Our reading of xbbg, from the data
xbbg is an MCP server from xbbg-org, listed in the official MCP Registry.
We haven't measured its tool list yet, so its token cost is unknown.
Maintenance is active: the last public signal was 5 days ago (2026-10-16).
It runs locally on your machine over stdio.
Install xbbg MCP server
No published package or hosted endpoint yet — see the repository README for build-from-source instructions.
Configuration
| Variable | Required | Secret | Description |
|---|---|---|---|
| XBBG_MCP_LIB_DIR | — | — | Optional directory containing Bloomberg runtime libraries. Leave unset to use BLPAPI_ROOT, an authorized vendored SDK layout, or Python blpapi fallback. |
| XBBG_MCP_HOST | — | — | Bloomberg API host. Defaults to localhost. |
| XBBG_MCP_PORT | — | — | Bloomberg API port. Defaults to 8194. |
| XBBG_MCP_AUTH_METHOD | — | — | Bloomberg auth method: none, user, app, userapp, dir, manual, or token. |
| XBBG_MCP_MAX_ROWS | — | — | Maximum rows returned to the MCP client per response. Defaults to 500. |
| XBBG_MCP_MAX_CELLS | — | — | Maximum data cells across returned rows and columns. Defaults to 50000. |
| XBBG_MCP_MAX_METADATA_PROPERTIES | — | — | Maximum metadata properties retained per response. Defaults to 50000. |
| XBBG_MCP_MAX_METADATA_BYTES | — | — | Maximum metadata bytes parsed or returned per response. Defaults to 65536. |
| XBBG_MCP_MAX_STRING_CHARS | — | — | Maximum characters per string value returned to the MCP client. Defaults to 2048. |
| XBBG_MCP_MAX_STRING_BYTES | — | — | Maximum UTF-8 bytes per string value, including a truncation marker. Defaults to 8192; minimum 3. |
| XBBG_MCP_MAX_RESULT_BYTES | — | — | Maximum compact-JSON bytes in the structured result, including diagnostics. Defaults to 1048576; minimum 2048. |
Security signals
100/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.
Deductions
No findings from the checks that ran.
Checks
- ✓Repository hygiene (archived, activity, license, security policy)
- ○Package metadata (install scripts, provenance) — pending
- ○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
- ○Source scan (secrets, CVEs, risky code) by vectra-guard — pending
Scan it yourself before installing with vectra-guard, the open-source agent security CLI (made by NavyaAI, which also runs MCPSkillHub). Scoring rules
Freshness
Active — last maintenance signal 5d ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-10-16 · 5d ago · GitHub
Latest release
2026-10-07 · 14d ago · GitHub · v1.5.1
Package published
no data · npm/PyPI
Registry entry updated
2026-09-11 · 40d ago · official registry · v1.4.12
FAQ
›Does xbbg require an API key?
No required environment variables are declared in its published metadata.
›Can I use xbbg as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is xbbg in the official MCP registry?
Yes, as io.github.xbbg-org/xbbg-mcp.
Sources and method
- Official MCP Registry entry
- updated 2026-09-11
- GitHub repository
- fetched 2026-10-19
- Package registry (npm / PyPI)
- listed
- Security signals, computed by us
- 2026-10-19
- Last checked against all sources
- 2026-10-19
The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Editorial standards are owned by Ramachandra Vikas Chamarthi, Founder & AI HPC Architect. Spot an error? Request a correction or claim the listing.