ai-connector-for-your-wealthsimpleSAFE
Ask Gemini, Claude or ChatGPT about your Wealthsimple portfolio. A private, read-only MCP connector you deploy to your own Firebase project. Unofficial.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Ask Gemini, Claude or ChatGPT about your Wealthsimple portfolio and activity, from a private connector that runs in your own Firebase project.
A simulated example, with made-up numbers:
- Yours alone. Each person deploys their own copy into their own Firebase
project. Your data goes from Wealthsimple to your project to the AI app you connect, and nowhere else: there is no shared server, and the developer never sees it.
- Read-only. The AI gets three read tools. There is no trading, transfer or
any other tool that changes your Wealthsimple accounts.
- One page to manage it. The dashboard shows your holdings, recent
activity and connected AI apps, and is where you sign in to Wealthsimple.
This project is unofficial and not affiliated with Wealthsimple. It reads Wealthsimple through the same private APIs its web app uses, which can change without notice. Wealthsimple is a trademark of Wealthsimple Technologies Inc.
Why this exists
I wanted to ask my AI app about my whole portfolio, not just part of it. Some brokers, such as Interactive Brokers, offer an official connector for that, but Wealthsimple doesn't.
Third-party platforms such as SnapTrade and BankSync can fill the gap, but they charge a subscription, and I don't trust them with my
1066076777a1OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add ai-connector-for-your-wealthsimple --env GOOGLE_APPLICATION_CREDENTIALS=${GOOGLE_APPLICATION_CREDENTIALS} --env MCP_AUTH_DATABASE=${MCP_AUTH_DATABASE} --env SESSION_SECRET_ID=${SESSION_SECRET_ID} -- uvx ai-connector-for-your-wealthsimple{
"mcpServers": {
"ai-connector-for-your-wealthsimple": {
"command": "uvx",
"args": [
"ai-connector-for-your-wealthsimple"
],
"env": {
"GOOGLE_APPLICATION_CREDENTIALS": "${GOOGLE_APPLICATION_CREDENTIALS}",
"MCP_AUTH_DATABASE": "${MCP_AUTH_DATABASE}",
"SESSION_SECRET_ID": "${SESSION_SECRET_ID}"
}
}
}
}Exposed tools (1)
0 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_data_status | write | Read saved data freshness and last sync results without refreshing. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (6 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
.gcloudignore
firebase-tools
Gates applied: no_behavioural_pass.
1066076777a1full audit observations/trust-audit/mcp-server/induction-axiom__ai-connector-for-your-wealthsimple.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 1066076777a1 | SAFE | B | 89 | first audit |
Questions
What is the ai-connector-for-your-wealthsimple MCP server?
Ask Gemini, Claude or ChatGPT about your Wealthsimple portfolio. A private, read-only MCP connector you deploy to your own Firebase project. Unofficial.
What tools does ai-connector-for-your-wealthsimple expose?
1 in total: 0 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is ai-connector-for-your-wealthsimple safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does ai-connector-for-your-wealthsimple need?
It reads GOOGLE_APPLICATION_CREDENTIALS, MCP_AUTH_DATABASE and SESSION_SECRET_ID from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does ai-connector-for-your-wealthsimple run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on PyPI as ai-connector-for-your-wealthsimple.
How current is this page?
The grade is for one exact copy of the source (1066076777a1), read on 2026-10-11. The repository is watched and re-audited when it changes.