API Keys

Manage keys for the ETSquare SEC Intelligence API.

Key Types

Public

For client-side applications and websites. Requires a domain allowlist. Read-only access to search endpoints.

100 requests/dayDomain-restrictedSearch only

Developer

For server-side integrations and scripts. Full API access including search, XBRL metrics, and bulk operations.

100 requests/dayNo domain restrictionFull access

Quick Start

// Add to your Claude Desktop config:
// macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
// Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "etsquare-sec": {
      "command": "npx",
      "args": ["-y", "@etsquare/mcp-server-sec"],
      "env": {
        "ETSQUARE_API_KEY": "YOUR_API_KEY"
      }
    }
  }
}

// Then ask Claude: "Search SEC filings for going concern warnings"
// Tools available: search filings, look up companies,
//   find financial analyses, execute XBRL metrics

Security

Never expose developer keys in client-side code

Use public keys with domain restrictions for browser applications.

Rotate keys regularly

Revoke and recreate keys periodically, especially if a key may have been compromised.

Use environment variables

Store keys in environment variables or a secrets manager, never in source code.

Monitor usage

Check the "Last used" timestamp on your keys to detect unexpected activity.