Q4 connector documentation

Who this is for

Analysts, investor-relations teams, and AI client administrators who want Claude (or another MCP client) to answer questions about Saudi listed companies from Q4’s research corpus. Each person signs in with their own Q4 account. There is no organization-wide SSO or tenant isolation in this version: every entitled user sees the same Tadawul universe.

Endpoint

Production MCP URL (Streamable HTTP):

• Health check (no auth): https://api.q4.sa/mcp/health
• Authentication: OAuth 2.1 with PKCE (S256). Always required.
• Client registration: CIMD (client ID is an HTTPS metadata URL). No dynamic client registration.
• Access token: 7-day JWT. Q4 does not issue refresh tokens.

Connect Claude

1. In Claude, add a custom connector (or enable Q4 from the directory once listed).
2. Server URL: https://api.q4.sa/mcp
3. Authentication: always required. Use Anthropic’s hosted OAuth client metadata.
4. Leave additional request headers empty. Do not paste a JWT.
5. Sign in with your Q4 email and password on the Q4 authorize page.

ChatGPT Developer Mode uses the same URL and OAuth sign-in. Cursor can send a Bearer JWT from a Q4 login instead of the browser OAuth flow.

Access

A Q4 platform subscription includes website and MCP access. You can also subscribe to MCP-only from the connector sign-in page (billed through Stream Pay). MCP-only accounts cannot use the q4.sa dashboard. Contact contact@q4.sa for help with entitlements.

Tools

Recommended loop: catalog → search → document or earnings call. Search is discovery. Confirm figures in the source excerpt before you publish them.

• q4_get_company — resolve a Tadawul company by id, symbol, or name and list available filings and earnings calls. Use first.
• q4_search — ranked hits across PDFs, transcripts, news, and Argaam, with citation metadata. Do not treat search snippets as audited numbers.
• q4_get_document — filing metadata and optional page or query excerpts. Does not return file bytes.
• q4_get_earnings_call — summary, insights, and speaker/timestamp passages for a catalogued call.

Sourced results include citation fields such as company, document, page, section, time range, quote, and a Q4 app path when available.

Security and limits

• Every tool call requires a valid subscriber token.
• Rate limit: 60 authenticated requests per user per minute.
• Tool timeout: 30 seconds.
• Internal errors are sanitized. Database credentials and file paths are not exposed.
• Q4 does not currently offer enterprise managed SSO or per-organization document ACLs.

Support

Email contact@q4.sa. Privacy practices for this connector are at q4.sa/mcp/privacy.