> ## Documentation Index
> Fetch the complete documentation index at: https://docs.secapi.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Evaluate SEC Filings MCP Server

> Verify one authenticated MCP filing workflow and the source evidence it returns before enabling an agent.

Use the hosted MCP server when an agent client needs to discover and call SEC API tools. SEC API provides the MCP transport and the deployed tool inventory; it does not certify an agent's summary. Use REST or an SDK when your server owns the workflow directly or needs a documented HTTP operation that is not advertised by MCP discovery.

## Prove one agent task can return a source

Connect one supported MCP client using an environment-backed API key. Discover the available tools, resolve an issuer, retrieve a filing and section, then cross-check the same record over REST. A useful result is a reproducible filing record, not just a fluent response.

## Configure the client and verify the record

Discovery also requires an API key. Send it from a server-side secret or MCP client configuration, not from a browser bundle:

```bash theme={null}
export SECAPI_API_KEY="secapi_..."
curl --fail-with-body -sS -H "x-api-key: $SECAPI_API_KEY" \
  https://api.secapi.ai/mcp
```

Configure the client to send `x-api-key` from its secret environment. Ask it to discover tools, then use the deployed equivalents of issuer resolution, filing retrieval, and section retrieval for `AAPL` and `Item 1A`. The authenticated discovery response for that session is the tool contract to test.

Cross-check the selected source over REST:

```bash theme={null}
curl --fail-with-body -H "x-api-key: $SECAPI_API_KEY" \
  "https://api.secapi.ai/v1/filings/latest?ticker=AAPL&form=10-K"

curl --fail-with-body -H "x-api-key: $SECAPI_API_KEY" \
  "https://api.secapi.ai/v1/filings/latest/sections/item_1a?ticker=AAPL&form=10-K&mode=full"
```

`GET /mcp` returns discovery metadata only when the request is authenticated. JSON-RPC tool calls use `POST /mcp` with the same secret-backed API key.

## Evidence standard

Retain a redacted client configuration record, client name, discovered tools, arguments, accession number, filing URL, section key, returned text, `requestId`, `traceparent`, and available provenance or freshness. The REST and MCP records should identify the same source. They need not produce identical agent wording.

## Choose the right integration boundary

MCP is useful when a client can preserve source identity and surface a failed tool call. Keep the credential and retrieval loop behind your own server when the client cannot do that, or when you need direct control over retries, request shaping, or the full REST surface. Filing text is source material, not legal, accounting, or investment advice; use a human-review path when your application requires one.

## Next step

Enable one bounded agent task only after the source record is visible to a reviewer. Treat authentication, authorization, validation, quota, and execution failures as separate outcomes before broadening the tool set.

<CardGroup cols={3}>
  <Card title="Install MCP" icon="plug" href="/mcp-install">Set up an environment-backed client.</Card>
  <Card title="MCP workflows" icon="workflow" href="/mcp-workflows">Review discovery and evidence patterns.</Card>
  <Card title="API conventions" icon="braces" href="/api-conventions">Use REST when you own the integration.</Card>
</CardGroup>

<CardGroup cols={3}>
  <Card title="Create an API key" icon="key-round" href="https://secapi.ai/signup">Use a secret-backed credential.</Card>
  <Card title="Open the sandbox" icon="terminal-square" href="https://secapi.ai/sandbox">Inspect the REST evidence path.</Card>
  <Card title="Public pricing" icon="credit-card" href="https://secapi.ai/pricing">Review agent-loop usage.</Card>
</CardGroup>

<Steps><Step title="Read discovery">Configure the client from authenticated discovery metadata.</Step><Step title="Call a small tool chain">Require filing and section identity.</Step><Step title="Cross-check source">Confirm the source over REST.</Step></Steps>

<Prompt>With an environment-backed x-api-key, discover the deployed SEC API MCP tools. Resolve AAPL, retrieve its latest 10-K and Item 1A, and return the tools used, arguments, accession number, filing URL, section key, section text, request metadata, and available provenance. Confirm the filing and section through REST. Mark missing source identity, unsupported client behavior, or unavailable tool calls as failed evaluation states.</Prompt>