alpaca-trading-mcp-server

BENIGN in publisher/tool alignment and data flow: it uses Alpaca's official MCP server from Alpaca-controlled sources for a stated trading purpose. However, it is HIGH security risk overall because it enables autonomous real-world financial transactions and forwards brokerage credentials to a server process, with additional supply-chain hygiene risk from unpinned `uvx` execution.