Back to Browse

Botspot MCP Server

FinanceModerate7.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

AI agents backtest, paper trade and live trade via your broker. Free to connect; OAuth.

About

AI agents backtest, paper trade and live trade via your broker. Free to connect; OAuth.

Remote endpoints: streamable-http: https://mcp.botspot.trade/mcp

Security Report

7.2
Moderate7.2Low Risk

The package contains only a README and a distribution test file, with no server source code, so the hosted backend at mcp.botspot.trade cannot be audited directly. Authentication is delegated to Auth0 OAuth, and no credentials or hooks are bundled. The main concern is that the full connection exposes write tools for live trading and deployments, which the README acknowledges.

2 files analyzed · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

trade_execution

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

BotSpot: strategies, backtests and bot monitoring

Add to Cursor Install in VS Code Add to Claude

Claude Code, one command:

claude mcp add --transport http botspot https://mcp.botspot.trade/mcp

Connect your AI assistant to your own BotSpot account. Create and edit LumiBot strategies, run historical backtests, analyze results and monitor bots.

Free to connect. Signing in creates a free BotSpot account. Paid plans unlock heavier backtests, live bots and real-money trades; see current pricing and the setup guide. Broker access, data subscriptions, regional availability and account permissions depend on the workflow.

Quick start

  1. Click a button above, or run the Claude Code command.
  2. Sign in with BotSpot when your app asks. No API key needed; signing in creates your free account.
  3. Ask: "List my BotSpot strategies and latest completed backtests. Do not create, edit, deploy or trade."
  4. Then try: "Create a simple moving-average LumiBot strategy and run a historical backtest."

Want your coding agent to write LumiBot strategies well? Add the free LumiBot trading skills.

Connect

Use the Streamable HTTP endpoint https://mcp.botspot.trade/mcp. Sign in through BotSpot OAuth. Never paste credentials into a chat or commit them to a repository.

Claude

Open Customize → Connectors → Add custom connector. Name it BotSpot, enter the endpoint above and complete sign-in. This is a custom connection; it does not establish a public directory listing.

Claude Code

claude mcp add --transport http botspot https://mcp.botspot.trade/mcp

Run /mcp to finish OAuth sign-in. The repository also includes a Claude-compatible plugin manifest and MCP configuration for plugin hosts, including Grok Build.

Cursor

Add this to your MCP configuration and use Cursor's sign-in control:

{
  "mcpServers": {
    "botspot": {
      "url": "https://mcp.botspot.trade/mcp"
    }
  }
}

This repository also contains a portable Agent Plugins package (plugin.json and mcp.json) for hosts supporting that standard. A marketplace application is separate from installing this configuration manually.

ChatGPT and Codex

For a custom ChatGPT connection, open Plugins → Add custom MCP server, enter the endpoint above and complete OAuth. Custom connections and local plugin packages are separate from the public directory. Public OpenAI review has additional requirements, including restrictions on investment-trade execution; this current full-capability connection is not yet qualified for that listing.

For Codex CLI, add the same remote endpoint through its MCP settings and complete the normal OAuth flow. See the official Codex MCP documentation.

Grok and Muse

MCP support and public distribution differ by product. Grok Build accepts Claude-compatible plugin packages; its official marketplace requires a reviewed catalog pull request pinned to an exact public commit. Grok Bot has separate product surfaces. Muse accepts approved connectors, and its current finance policy excludes new trade-order tools. A working custom connection is not a store approval.

Trading skills for your AI

Free, MIT-licensed LumiBot trading skills that teach Claude Code, Codex, Cursor and other agents to write, backtest and fix strategies: Lumiwealth/lumibot-trading-skills.

npx skills add Lumiwealth/lumibot-trading-skills

Example requests

  • “List my BotSpot strategies and show the latest saved revision.”
  • “Create a simple moving-average strategy, save its files and run a historical backtest.”
  • “Open my latest backtest, report its status and summarize the available trade and performance artifacts.”
  • “Show performance and positions for my existing bot.”

Backtests are historical simulations and do not guarantee future returns. Missing data is unknown. Ask your assistant to wait for confirmed results before claiming a backtest or deployment completed.

Capabilities and permissions

The live server discovers its current tool list at connection time. Strategy workflows use create_strategy and direct file/revision tools. Backtest workflows use start_backtest, backtest_status and artifact tools. Monitoring includes deployments, broker snapshots and portfolio reports.

The direct connection also exposes writes, including trading and deployment actions. Account ownership, plan entitlements and product approvals apply. Connecting an account does not itself authorize a trade. Directory eligibility must be verified against the tools actually offered; do not describe this full connection as read-only.

Package and license

  • plugin.json and mcp.json: portable Agent Plugins package.
  • .claude-plugin/plugin.json and .mcp.json: compatibility package for Claude-format plugin hosts.
  • server.json: official MCP Registry metadata.
  • smithery.yaml and glama.json: directory metadata.
  • assets/botspot.png: existing BotSpot brand asset, used unchanged.

No server executable, hooks or credentials are bundled. The host contacts mcp.botspot.trade and discovers BotSpot's authorization provider at botspot.us.auth0.com. The hosted service remains commercial; see LICENSE, privacy, terms and support.

Validate the package

python3 -m unittest discover -s tests -v

Distribution status and requirements tracks evidence separately for live, submitted, prepared and blocked destinations.

Reviews

No reviews yet

Be the first to review this server!