Atlas / MCP servers / ariffazil / WEALTH

WEALTHBLOCK

mcp/ariffazil/wealth

Capital intelligence: risk, NPV, markets. Research and evidence only. Never moves money.

Verdict
BLOCK
Grade
F
Trust score
57 /100
Exposed tools
108 102r · 6w · 0d
Transport
sse · stdio · streamable-http
License
NOASSERTION
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Capital consequence infrastructure, not investment advice. WEALTH converts stocks, flows, prices, risk, productivity, time, leverage, macro conditions, information, incentives, governance, and path dependence into auditable capital evidence. WEALTH computes. arifOS judges. A-FORGE executes approved actions. Humans remain sovereign.

Identity (P1 2026-09-21):

WEALTH : WorldState → CapitalConsequences        (not WorldState → InvestmentDecision)

The 12-invariant Ω architecture is the spine. NPV, RSI, Monte Carlo, backtest, ledger — these are implementations underneath the invariants, not the identity.

Irreducible question

If capital moves this way, what follows — and how sure are we?

WEALTH's job is to make the consequences of moving money harder to hide. It does not decide where money sh

Read from source at commit e509034e5612OBSERVED · 2026-10-12
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add wealth-valuation-kernel --env ALPHA_VANTAGE_API_KEY=${ALPHA_VANTAGE_API_KEY} --env FINNHUB_API_KEY=${FINNHUB_API_KEY} --env FRED_API_KEY=${FRED_API_KEY} --env MT5_PASSWORD=${MT5_PASSWORD} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "wealth-valuation-kernel": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ALPHA_VANTAGE_API_KEY": "${ALPHA_VANTAGE_API_KEY}",
        "FINNHUB_API_KEY": "${FINNHUB_API_KEY}",
        "FRED_API_KEY": "${FRED_API_KEY}",
        "MT5_PASSWORD": "${MT5_PASSWORD}"
      }
    }
  }
}
03

Exposed tools (108)

102 read · 6 write · 0 destructive.

ToolRiskDescription
arif_consequence_traceread
arif_correction_proberead
arif_entropy_observeread
arif_entropy_routeread
arif_j_gateread
arif_j_state_assessread
forge_a2a_conformanceread
forge_calibration_reportread
forge_counterfactual_testread
forge_dark_geometry_detectorread
forge_detector_test_corpusread
forge_entropy_schemaread
forge_mcp_conformanceread
forge_prompt_injection_testread
geox_cascade_pathwayread
geox_consequence_footprintread
geox_feedback_integrityread
geox_material_truth_challengeread
geox_optionality_lossread
probe_echoreadHermetic tool: no I/O, no network, deterministic.
vault_queryread999: Ledger Read — Query the immutable governance ledger.
vault_writewrite999: Ledger Append — Permanently write an economic event to VAULT999.
vaultqueryread998: Ledger Read (Alias) — Query the immutable governance ledger.
vaultwritewrite998: Ledger Append (Alias) — Permanently write an economic event to VAULT999.
wealth_agent_pathreadSovereign Intent Router — classifies tasks into L1/L2 physics-economic paths.
wealth_allocate_optimizeread⚠️ DEPRECATED — Use: wealth_stewardship_kernel, wealth_preference_rank, wealth_agent_path. [Allocate Dimension — DEPRECATED]
wealth_boundary_floorsreadF1-F13 Constitutional Floor Check — governance boundary enforcement.
wealth_boundary_governancereadΩ-WEALTH-11: Boundary — constitutional floors, maruah, stewardship, constraint.
wealth_boundary_policyreadPolicy Constraint Audit — configurable rule enforcement.
wealth_cascade_mapwriteMap trigger chains and compute cumulative blast radius — how each
wealth_cashflow_summaryreadΩ-D1-02: Cashflow Summary — Aggregate transactions by category.
wealth_cashflow_trackreadΩ-D1-01: Cashflow Track — Record a single financial transaction.
wealth_coercive_order_costwrite
wealth_commodity_pricereadΩ-D3-02: Commodity Price — Approximate market prices for key commodities.
wealth_conservation_capitalreadΩ-WEALTH-01: Conservation — capital stock reality (assets, liabilities, reserves, ledger).
wealth_coupling_correlationreadCoupled-System Correlation Risk — shared model lineage detection.
wealth_energy_productivityreadΩ-WEALTH-05: Energy — output per input, productivity, capital efficiency.
wealth_entropy_externalityread
wealth_entropy_riskread
wealth_epf_projectreadΩ-D1-05: EPF Project — Project EPF accumulation to target age.
wealth_field_equilibriumreadCoordination Equilibrium — multi-agent resource allocation stability.
wealth_field_gamereadGame Theory Solver — multi-agent strategic interaction.
wealth_field_macroreadΩ-WEALTH-08: Field — macro environment (rates, FX, energy, carbon, regime).
wealth_financial_positionreadΩ-WEALTH-POS: Financial position — cashflow, runway, DSCR, net worth, liquidity, leverage.
wealth_flow_liquidityreadΩ-WEALTH-02: Flow — liquidity movement (cashflow, burn, runway, survival).
wealth_future_simulateread⚠️ DEPRECATED — Use: wealth_signal_monte_carlo. [Simulate Dimension — DEPRECATED]
wealth_future_stewardreadLong-Horizon Planetary Boundaries — Civilization Continuity. [Steward Dimension]
wealth_future_valueread⚠️ DEPRECATED — Use atomic tools: wealth_value_npv, wealth_energy_irr, wealth_density_pi, wealth_time_payback. [Value Dimension — DEPRECATED]
wealth_fx_ratereadΩ-D3-01: FX Rate — Live or historical foreign-exchange rates.
wealth_game_coordinateread⚠️ DEPRECATED — Use: wealth_field_game, wealth_field_equilibrium. [Game Dimension — DEPRECATED]
wealth_game_coordinationreadΩ-WEALTH-10: Game — multi-agent incentives, bargaining, coordination.
wealth_governance_riskreadΩ-WEALTH-GOV: Governance and institutional risk.
wealth_governance_verdictreadFinal Allocation Verdict — sovereign governance recommendation.
wealth_gradient_pricereadΩ-WEALTH-03: Gradient — price pressure, spread, mispricing detection.
wealth_inequality_kernelreadΩ-WEALTH-Ineq: Distribution, fairness, concentration, and burden analysis.
wealth_inertia_leveragereadΩ-WEALTH-07: Inertia — resistance to change, leverage stress, fragility.
wealth_info_valueread⚠️ DEPRECATED — Use: wealth_opportunity_evoi. [Info Dimension — DEPRECATED]
wealth_information_valuereadΩ-WEALTH-INF: Information value analysis — EVOI, signal quality, wait vs act.
wealth_institutional_entropy_scorerread
wealth_kernel_routereadΩ-WEALTH-ROUTE: Classify and route a wealth question to the correct canonical tool.
wealth_ledgerreadΩ-WEALTH-LED: Wealth memory, records, path dependence.
wealth_ledger_initreadSession Boundary Initialization — anchor a new governance session.
wealth_ledger_recordwriteStructured Transaction Write — record to VAULT999.
wealth_ledger_snapshotreadPortfolio State Snapshot — seal computation result to VAULT999.
wealth_macro_indicatorreadΩ-D3-03: Macro Indicator — Key macroeconomic indicators.
wealth_market_analyzereadΩ-WEALTH-MKT: Market and external field analysis.
wealth_market_datareadΩ-D3: Market Data — unified surface for FX, commodities, macro, and gold.
wealth_measurement_schemareadSchema Validity Check — epistemic measurement integrity.
wealth_metric_purpose_auditread
wealth_net_worth_snapshotreadΩ-D1-04: Net Worth Snapshot — Assets minus Liabilities.
wealth_omni_wisdomreadΩ-WEALTH-OMNI: Unified capital intelligence — synthesis + deal + hysteresis in one tool.
wealth_past_recordread⚠️ DEPRECATED — Use: wealth_ledger_record, wealth_ledger_snapshot. [Record Dimension — DEPRECATED]
wealth_personal_financereadΩ-D1: Personal Finance — unified surface for cashflow, runway, and net worth.
wealth_power_consequence_mapread
wealth_power_mapreadΩ-WEALTH-PWR: Strategic power mapping — game theory, leverage, negotiation.
wealth_preference_rankreadΩ-WEALTH-PREF: Rank options by declared values and criteria.
wealth_present_expectread⚠️ DEPRECATED — Use: wealth_expectation_emv. [Expect Dimension — DEPRECATED]
wealth_pressure_triagereadCrisis Triage — emergency pressure relief under resource constraint.
wealth_responsibility_ledgerread
wealth_role_scarcity_riskreadΩ-WEALTH-IEQ-04: Role Scarcity Risk — Calhoun-inspired social role
wealth_rule_enforceread⚠️ DEPRECATED — Use: wealth_governance_verdict. [Rule Dimension — DEPRECATED]
wealth_runway_calculatereadΩ-D1-03: Runway Calculate — Months of financial runway.
wealth_sense_ingestread⚠️ DEPRECATED — Use: wealth_sensor_fetch, wealth_sensor_snapshot, wealth_sensor_reconcile, etc. [Sense Dimension — DEPRECATED]
wealth_sensor_fetchreadLive Data Probe — fetch a real-world data series.
wealth_signal_evoi_mcreadExpected Value of Information — distributional Monte Carlo.
wealth_signal_informationreadΩ-WEALTH-09: Signal — information value, evidence quality, schema validity.
wealth_simulative_scanreadDetect when an external actor exploits institutional weakness under a
wealth_stewardship_civilizationreadLong-Horizon Civilization Continuity — planetary stewardship.
wealth_stock_analysisreadD4 Stock Analysis — unified capital-risk and stock governance layer.
wealth_stress_convergencereadDetect when multiple institutional stress signals fire simultaneously,
wealth_survival_engineread
wealth_survival_leverageread⚠️ DEPRECATED — Use: wealth_gravity_dscr. [Leverage Dimension — DEPRECATED]
wealth_survival_liquidityread⚠️ DEPRECATED — Use: wealth_flow_cashflow, wealth_velocity_runway, wealth_pressure_triage. [Liquidity Dimension — DEPRECATED]
wealth_synthesizereadΩ-WEALTH-SYN: Final WEALTH synthesis — integrate all evidence into one verdict.
wealth_system_registry_statusreadRegistry truth diagnostic — intended, registered, and alias surfaces.
wealth_time_discountreadΩ-WEALTH-06: Time — NPV, IRR, payback, compounding, decay.
wealth_trust_capital_decayread
wealth_truth_validateread⚠️ DEPRECATED — Use: wealth_boundary_floors, wealth_entropy_audit. [Truth Dimension — DEPRECATED]
wealth_uncertainty_evaluatereadΩ-WEALTH-UNC: Model probabilistic outcomes — EMV, Monte Carlo, risk distribution.
wealth_vulnerability_windowwriteDetect governance transitions that create vulnerability windows for
wealth_zakat_calculatereadΩ-D1-06: Zakat Calculate — Islamic wealth tax on assets above nisab.
well_assess_sovereign_entropyread
well_correction_capacityread
well_dark_geometry_mirrorread
well_niat_impact_mirrorread
well_regulation_recoveryread
well_sabar_latencyread
well_trust_compressionread
04

Trust audit

BLOCKgrade F · trust 57/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (8 observation(s))
Network
declared (9 observation(s))
Shell
declared (2 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (25)

HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
.github/ISSUE_TEMPLATE/laporan-keselamatan.md:11
Kalau ini **kerentanan sebenar** (boleh dieksploit / kebocoran data / bypass guardrails), **jangan teruskan di sini**.
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
HIGHPrompt injection · prompt.override · CWE-94, CWE-1427
.github/ISSUE_TEMPLATE/pepijat.md:26
Adakah isu ini melibatkan data sensitif, prompt-jailbreak, atau potensi mudarat? Jika ya, sila rujuk SECURITY.md dan lapor secara peribadi.
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
MEDIUMInventory / provenance · inv.binary · CWE-1104
.memory/index.sqlite
index.sqlite
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.symlink · CWE-1104
trading/signals/regime.py
trading/signals/regime.py
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
trading/signals/scanner.py
trading/signals/scanner.py
Why it matters. link not followed
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
wealth_contracts/runtime_probe_v1.py:105
importlib.import_module(module_path)
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
wealth_core/ingest/crypto/adapters/registry.py:42
module = importlib.import_module(module_path)
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
wealth_core/collapse_signature/corpus/enron_2001_ar.pdf:36
<style>/* Web fonts */@font-face {font-family:'ProximaNova-Regular';src: url('data:application/x-font-woff;charset=utf-8;base64,d09GRgABAAAAAGWUABMAAAAAz1AAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABGRlRNAAABqAAA
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
internal/monolith.py:3805
"npv_label": "NΦV",
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
internal/monolith.py:3806
"irr_label": "IΦR",
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
internal/monolith.py:3807
"pi_label": "ΦI",
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
internal/monolith.py:10548
"formula": "Payback = min(t) where ΣCFt >= |I0|  |  Discounted Payback uses discounted CFt",
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
scripts/run-first-loop.js:291
console.log("[WEALTH] Δbps proven (synthetic):", deltaBps, "bps\n");
LOWInventory / provenance · inv.hidden_file · CWE-1104
.git_commit
.git_commit
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.opencode.json
.opencode.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.ua/.understandignore
.understandignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
boundary/.importlinter
.importlinter
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
scripts/.manifest_state.json
.manifest_state.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.symlink · CWE-1104
docs/FEDERATION.md
docs/FEDERATION.md
Why it matters. link not followed
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
engines/commodity/gas-api/fetch_gas.py:40
h = hashlib.md5(raw.encode()).hexdigest()[:12]
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
engines/commodity/gold-api/fetch_gold.py:40
h = hashlib.md5(raw.encode()).hexdigest()[:12]
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
engines/commodity/oil-api/fetch_oil.py:40
h = hashlib.md5(raw.encode()).hexdigest()[:12]
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
memory_tools/memory_pipeline.py:189
fact_hash = hashlib.sha1(
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp/server.py:23
sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "../../arifOS")))
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
GENESIS/README-archive-2026-06-27.md:105
curl -s -X POST http://127.0.0.1:18082/mcp \

Gates applied: instruction_override, no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha e509034e5612full audit observations/trust-audit/mcp-server/ariffazil__wealth.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12e509034e5612BLOCKF57first audit
06

Questions

What is the WEALTH MCP server?

Capital intelligence: risk, NPV, markets. Research and evidence only. Never moves money.

What tools does WEALTH expose?

108 in total: 102 read-only, 6 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is WEALTH safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (57/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does WEALTH need?

It reads ALPHA_VANTAGE_API_KEY, FINNHUB_API_KEY, FRED_API_KEY, MT5_PASSWORD, QDRANT_API_KEY, SUPABASE_ANON_KEY, TELEGRAM_BOT_TOKEN, TWELVE_DATA_API_KEY and WEALTH_SUPABASE_ANON_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does WEALTH run?

It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as wealth-valuation-kernel at 2026.06.06.

How current is this page?

The grade is for one exact copy of the source (e509034e5612), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement