liquilens-evidence-carrierBLOCK
Read-only Trade Safety receipts and MCP interoperability for AI agents, with fail-closed financial evidence and a paper-only Alpaca adapter.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/beepboop2025/liquilens-evidence-carrier/actions/workflows/ci.yml) [](https://github.com/beepboop2025/liquilens-evidence-carrier/releases) [](LICENSE)
LiquiLens Evidence Carrier is a transport-neutral contract for moving financial evidence through files, warehouses, event buses, observability systems, data catalogs, FDC3 desktops, notebooks, citations, and AI agents without dropping provenance, rights, freshness, or authority boundaries.
The carrier is infrastructure for inspection and reproducibility. It is not an order, recommendation, credit rating, market-data entitlement, or endorsement by Bloomberg, LSEG, FactSet, FINOS, or any other platform.
The current signed core release is v0.20.1. Its offline routing resource uses Palimpsest's published catalog API while the additional MCP tool awaits approval. All 22 artifact checksums passed; the downloaded wheel and MCP bundle have verified provenance for the exact signed source, and the official MCP Registry advertises the new bundle. See docs/RELEASE-0.20.1.md for the publication receipt. The 0.20.0 receipt remains available. Independent consumer channels retain their own recorded versions.
The following historical core publication receipt describes v0.19.0. Published release v0.19.0 provides the preserved historical wheel and Registry record. Annotated tag object `c3239bfc7c4d3c4b7fc5ce26e0f60296
9e101a1a37f1OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add liquilens-evidence --env CREDENTIALS_DIRECTORY=${CREDENTIALS_DIRECTORY} --env GITHUB_TOKEN=${GITHUB_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"liquilens-evidence": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"CREDENTIALS_DIRECTORY": "${CREDENTIALS_DIRECTORY}",
"GITHUB_TOKEN": "${GITHUB_TOKEN}"
}
}
}
}Trust audit
BLOCKgrade F · trust 44/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (9 observation(s))
- Network
- declared (4 observation(s))
- Shell
- declared (1 observation(s))
- Dependencies
- pinned
- Secrets in source
- found
Findings (25)
exec(compile(adapted, str(path), "exec"), module.__dict__) # noqa: S102
CMD ["python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/healthz', timeout=2).read()"]f"http://127.0.0.1:{port}/v1/capabilities",parser.add_argument("--url", default="http://127.0.0.1:8766")parser.add_argument("--url", default="http://127.0.0.1:8766")"receipt_utf8_base64": "eyJhdXRob3JpdHkiOnsiY2FuX2FsbG9jYXRlX2NhcGl0YWwiOmZhbHNlLCJjYW5fZXhlY3V0ZSI6ZmFsc2UsImNhbl9yZWNvbW1lbmQiOmZhbHNlLCJmaW5hbmNpYWxfYXV0aG9yaXR5Ijoib3BlcmF0b3JfcG9saWN5X2NoZWNrX29u
"receipt_utf8_base64": "eyJhdXRob3JpdHkiOnsiY2FuX2FsbG9jYXRlX2NhcGl0YWwiOmZhbHNlLCJjYW5fZXhlY3V0ZSI6ZmFsc2UsImNhbl9yZWNvbW1lbmQiOmZhbHNlLCJmaW5hbmNpYWxfYXV0aG9yaXR5Ijoib3BlcmF0b3JfcG9saWN5X2NoZWNrX29u
"receipt_utf8_base64": "eyJhdXRob3JpdHkiOnsiY2FuX2FsbG9jYXRlX2NhcGl0YWwiOmZhbHNlLCJjYW5fZXhlY3V0ZSI6ZmFsc2UsImNhbl9yZWNvbW1lbmQiOmZhbHNlLCJmaW5hbmNpYWxfYXV0aG9yaXR5Ijoib3BlcmF0b3JfcG9saWN5X2NoZWNrX29u
"receipt_utf8_base64": "eyJhdXRob3JpdHkiOnsiY2FuX2FsbG9jYXRlX2NhcGl0YWwiOmZhbHNlLCJjYW5fZXhlY3V0ZSI6ZmFsc2UsImNhbl9yZWNvbW1lbmQiOmZhbHNlLCJmaW5hbmNpYWxfYXV0aG9yaXR5Ijoib3BlcmF0b3JfcG9saWN5X2NoZWNrX29u
"receipt_utf8_base64": "eyJhdXRob3JpdHkiOnsiY2FuX2FsbG9jYXRlX2NhcGl0YWwiOmZhbHNlLCJjYW5fZXhlY3V0ZSI6ZmFsc2UsImNhbl9yZWNvbW1lbmQiOmZhbHNlLCJmaW5hbmNpYWxfYXV0aG9yaXR5Ijoib3BlcmF0b3JfcG9saWN5X2NoZWNrX29u
secret = "fixture-signing-key-with-enough-entropy"
TOKEN = "synthetic-agent-client-token-0123456789abcdef"
TOKEN = "synthetic-agent-execution-token-0123456789abcdef"
SECRET = "test-secret-MUST-NOT-APPEAR-IN-REPORT"
TOKEN = "test_source_identity.only_test_material_123456789"
.pre-commit-hooks.yaml
.nojekyll
.vscodeignore
assert "eval(" not in javascriptexec( # noqa: S102 - execution is confined to the audited notebook cells
import { canonicalHashFromJsonText as nodeCanonicalHash } from "../../protocol/verify_hash_tree_v1.mjs";"../../../protocol/conformance/trade-safety-v1/corpus.json",
import { verifyCarrierText } from "../../../browser/verifier.mjs";import { FULL_EXAMPLE, REFERENCE_EXAMPLE } from "../../../browser/examples.mjs";import { verifyCarrierText } from "../../../browser/verifier.mjs";Gates applied: no_behavioural_pass.
9e101a1a37f1full audit observations/trust-audit/mcp-server/beepboop2025__liquilens-evidence-carrier.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 9e101a1a37f1 | BLOCK | F | 44 | first audit |
Questions
What is the liquilens-evidence-carrier MCP server?
Read-only Trade Safety receipts and MCP interoperability for AI agents, with fail-closed financial evidence and a paper-only Alpaca adapter.
Is liquilens-evidence-carrier safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (44/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does liquilens-evidence-carrier need?
It reads CREDENTIALS_DIRECTORY and GITHUB_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does liquilens-evidence-carrier run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as liquilens-evidence at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (9e101a1a37f1), read on 2026-10-11. The repository is watched and re-audited when it changes.