MCP server · CyberMax

Figurewell MCP server

Point-in-time SEC financials API + MCP: XBRL as first reported, EDGAR times. 100 free/day.

Free: 100 free/dayPaid: $5 for 1,500 calls; keys from $19/mo

Connect

Streamable HTTP endpoint: https://figurewell-api.cybermaxtools.com/mcp (the original https://figurewell-api.cybermax-tools.workers.dev/mcp keeps working). Add it to Claude Desktop, Cursor, Windsurf or VS Code:

{
  "mcpServers": {
    "figurewell-api": {
      "type": "http",
      "url": "https://figurewell-api.cybermaxtools.com/mcp"
    }
  }
}

No key needed for the free tier. For more calls, add your paid key as the x-api-key header. Server card (JSON): https://figurewell-api.cybermaxtools.com/.well-known/mcp.json · Product page: Figurewell

Tools

Tool	What it does	Effect	Inputs (* required)
`financials_as_of`	A company's 10-K/10-Q/20-F/40-F filings (newest accepted first, up to 40) with revenue, profit, EPS, cash, debt, cash flow and margins as each filing first reported them, EDGAR acceptance time and filing link. as_of = only filings accepted by then.	read-only, calls public sources on the internet, never destructive	`ticker`, `cik`, `as_of`, `form`, `amendments`, `fields`, `limit`, `offset`
`snapshot_as_of`	For up to 10 tickers, the newest filing EDGAR had accepted by as_of, with key metrics as first reported.	read-only, calls public sources on the internet, never destructive	`tickers`, `as_of`, `form`
`metric_history`	One metric per period, newest first: value as first reported (and when), latest value known at as_of, restated flag.	read-only, calls public sources on the internet, never destructive	`ticker`, `metric`, `period`, `as_of`, `limit`

Security and data handling

Your tool arguments are used only to answer that call. They are not saved to a database, shared, sold or used for training.
To make repeat lookups fast, some servers keep the public answer to a lookup in Cloudflare's edge cache for up to 7 days (most for 1 hour or less). It holds the public result, not who asked.
Free tier: a per-day counter keyed by a SHA-256 hash of your IP address and the date (in a Cloudflare Durable Object). The raw IP is not stored.
Paid key: the key is checked with the payment provider (Stripe; Polar for older keys) and the result is cached for 10 minutes; usage is counted per key per month.
No accounts, cookies or tracking on the MCP endpoint. Errors may appear in Cloudflare's short-lived Worker logs.
Every tool is read-only: it looks up public data and returns it. No tool writes, deletes, sends messages or spends money.

Registry and source

Official MCP Registry: dev.workers.cybermax-tools.cybermax/figurewell-api, version 1.0.2.
Public manifest, tool schemas and security notes (MIT): gitlab.com/CyberMax.tools/agent-tools/mcp/figurewell-api. The hosted service code is not public.
Report a vulnerability: security policy.

← All CyberMax MCP servers

Free: the Free API Starter Kit

Copy-paste calls for 4 APIs with free daily tiers (CVE priority, VIN recalls, US duty rates, email checks), then 5 short emails on KEV/EPSS, MCP and free data.