Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add aaronjmars/aeon-agent --skill finance-district-mcpgit clone --depth 1 https://github.com/aaronjmars/aeon-agentWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aaronjmars/aeon-agent/finance-district-mcp)<a href="https://agentmods.dev/skills/aaronjmars/aeon-agent/finance-district-mcp"><img src="https://agentmods.dev/badge/skills/aaronjmars/aeon-agent/finance-district-mcp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aaronjmars/aeon-agent/finance-district-mcp"><img src="https://agentmods.dev/badge/skills/aaronjmars/aeon-agent/finance-district-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00081 | $0.01104 |
| Opus 5 | $0.00041 | $0.00552 |
| Sonnet 5 | $0.00016 | $0.00221 |
| Haiku 4.5 | $0.00008 | $0.00110 |
Grade A, and why
finance-district-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
This is a copy
100% identical to finance-district-mcp — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 53 lines — stays where its author put it; the contents beside it link to each section on GitHub.
${var} — what to do with the wallet. Empty → a daily wallet brief (balances + notable price moves + top stablecoin yield). Or a specific instruction, e.g.
best USDC yield on Base,swap 5 USDC to ETH on Base,pay <x402-url> for <data>.
Operate the operator's Finance District Agent Wallet. Non-custodial: private keys never leave a secure enclave (TEE) — the agent never sees them; it submits structured intent and the wallet server signs within limits. Per-transfer limits, an auto-approve threshold, and a destination denylist are enforced server-side, not in this prompt.
Detection & auth
Wired by the dashboard MCP panel's one-click Connect (OAuth with offline_access; tokens stored as MCP_FINANCE_DISTRICT_TOKEN + MCP_FINANCE_DISTRICT_OAUTH, refreshed each run by scripts/mcp-oauth-refresh.sh). Because Finance District rotates its refresh token, set GH_SECRETS_PAT so rotations persist (see docs/mcp-oauth.md). Tools surface as mcp__finance-district__* — discover them from the server each run; don't assume a fixed list.
- No
mcp__finance-district__*tool callable → not connected, or secrets missing (the workflow logs a::warning::and skips MCP). LogFD_NOT_CONNECTED, notify once pointing the operator at dashboard → MCP → Connect Finance District, and exit. - Tools return 401 / invalid-token → the OAuth refresh failed (rotating refresh tokens need
GH_SECRETS_PAT— seedocs/mcp-oauth.md). LogFD_AUTH_STALE, notify the operator to re-connect once, and exit.
Steps
- Identity + balances — confirm the wallet (
getMyInfo) and read balances per chain (getWalletOverview). Diff against the last entry inmemory/logs/; flag any unexplained change prominently. - Prices / yield (when relevant) —
getTokenPricefor held tokens; note 24h moves over ±5%.discoverYieldStrategiesfor idle stablecoins (EVM only) — surface the top option (protocol, APY, TVL) as a suggestion. Never deposit unless the task explicitly asks. - Act only on explicit instruction — transfers, swaps, yield deposits, and x402 payments move real value. Do exactly what
${var}asks, nothing more; sequence any irreversible action last, fail-closed. Amounts above the auto-approve threshold are rejected by the wallet — report that, never try to work around it. - x402 paid calls — follow the 402 flow (authorize within caps; gasless for the payer via EIP-3009).
- Notify once via
./notify -f <file>, and put the same record in your final output. This skill isread-only, so you can't writememory/logs/yourself (the sandbox write-locks the workspace); the workflow commits your captured output tomemory/logs/+output/.chains/after the run. Every value-moving action (transfer, swap, deposit, x402 payment) goes in both the notify and the output — the notification is the operator's only guaranteed record, so a payment that isn't in it effectively went unreported:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 53 lines · 81 tokens per session scan A 38229bcc443c
finance-district-mcp is a skill published in the GitHub repository aaronjmars/aeon-agent (11 stars, last pushed yesterday), licensed MIT. It adds 81 tokens to every session and 1,104 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to finance-district-mcp, differing in 0 lines, and is treated as a copy.
Other skills, from other repositories
mpp-agent
Pay HTTP 402 APIs via Machine Payments Protocol (MPP).
crypto-market-rank
Crypto market rankings and leaderboards. Query trending tokens, top searched tokens, Binance Alpha tokens, tokenized stocks, social hype sentiment ranks, smart money inflow token rankings, top meme token rankings from Pulse launchpad, and top trader PnL leaderboards. Use this skill when users ask about token rankings…
trading-signal
Subscribe and retrieve on-chain Smart Money signals. Monitor trading activities of smart money addresses, including buy/sell signals, trigger price, current price, max gain, and exit rate. Use this skill when users are looking for investment opportunities — smart money signals can serve as valuable references for…
hyperliquid
Hyperliquid L1 perps DEX (69% market share).
bridge
Cross-chain token transfers using Wormhole and CCTP.
token-pick
One token recommendation and one prediction market pick - scored, quantified, with a skip branch when signals are weak.