intangible-valuationBLOCK
Intangible asset valuation library (124+ formulas) with a 14-tool MCP server and AI-agent skills — IP, technology, customer, goodwill, PPA, impairment
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A complete intangible asset valuation library implementing 124+ functions from the Intangible Asset Valuation textbook — Python library, MCP server, and AI-agent skills.
[](https://github.com/simonmak-ascent/intangible-valuation/actions/workflows/ci.yml) [](https://registry.modelcontextprotocol.io/v0/servers?search=io.github.simonmak-ascent/intangible-valuation) [](https://glama.ai/mcp/servers/simonmak-ascent/intangible-valuation) [](https://intangible-valuation.simonmak.com/api/mcp) [](https://pypi.org/project/intangible-valuation/) [](https://www.python.org/downloads/) [](https://github.com/simonmak-ascent/intangible-valuation/actions/workflows/ci.yml) [](https://intangible-valuation.simonmak.com) [](https://scorecard.dev/viewer/?uri=github.com/simonmak-ascent/intangible-valuation) [](https://opensource.org/licenses/MIT)
Overview
A production-grade Python library for intangible asset valuation, implementing every formula from the **[Intangible Asset Valuation](https://www.amazon.com/Intangible-Asset-Valuation-Comprehensive-Technology/d
15d0285349f8OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add intangible-valuation -- uvx intangible-valuation==2.1.2 intangible-valuation-mcp
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (12)
exec( # noqa: S102 — names come from the static PROMPTS table above
.cache/plugin/privacy/assets/external/fonts.googleapis.com/css.4ce4a530
.cache/plugin/privacy/assets/external/fonts.googleapis.com/css2.0412fd62
module = importlib.import_module(module_name)
.gitleaks.toml
.pre-commit-config.yaml
import { CATALOG } from "../../lib/valuation/catalog";import type { MethodDefinition, MethodParameter } from "../../lib/valuation/types";sudo mv mcp-publisher /usr/local/bin/
intangible-valuation
bcryptjs, lucide-react, next, react, react-dom, sonner, stripe, surrealdb
Gates applied: no_behavioural_pass.
15d0285349f8full audit observations/trust-audit/mcp-server/simonmak-ascent__intangible-valuation.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 15d0285349f8 | BLOCK | D | 69 | first audit |
Questions
What is the intangible-valuation MCP server?
Intangible asset valuation library (124+ formulas) with a 14-tool MCP server and AI-agent skills — IP, technology, customer, goodwill, PPA, impairment
Is intangible-valuation safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does intangible-valuation need?
It reads AI_API_KEY, DEEPSEEK_API_KEY, EODHD_API_KEY, FRED_API_KEY, GITHUB_CLIENT_SECRET, GOOGLE_CLIENT_SECRET, PERPLEXITY_API_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET and SURREALDB_PASS from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does intangible-valuation run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as intangible-valuation-webapp at 2.0.0.
How current is this page?
The grade is for one exact copy of the source (15d0285349f8), read on 2026-10-11. The repository is watched and re-audited when it changes.