What is finance-district-mcp?

A wallet service for holding and using cryptocurrency across Ethereum-compatible networks, Solana, Bitcoin, and Sui. It can check funds, trade assets, find yields, move money, and pay for certain data requests while keeping signing keys in a protected system.

Use it to check balances and prices, find DeFi yields, swap tokens, transfer funds, or make x402 payments for data or APIs.

It lets an agent carry out wallet tasks without exposing private keys, while applying transfer limits and approval rules.

finance-district-mcp — Skill for Claude Code and Codex by aeonfun

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add aeonfun/aeon --skill finance-district-mcp

Clone the repo

git clone --depth 1 https://github.com/aeonfun/aeon

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/aeonfun/aeon/finance-district-mcp.svg)](https://agentmods.dev/skills/aeonfun/aeon/finance-district-mcp)

Your own site

<a href="https://agentmods.dev/skills/aeonfun/aeon/finance-district-mcp"><img src="https://agentmods.dev/badge/skills/aeonfun/aeon/finance-district-mcp.svg" alt="Measured on agentmods" height="20"></a>

Per session 81 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,104 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 2 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Excessive Agency · line 23
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
medium Excessive Agency · line 36
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00081	$0.01104
Opus 5	$0.00041	$0.00552
Sonnet 5	$0.00016	$0.00221
Haiku 4.5	$0.00008	$0.00110

Measured 8d ago against content hash 38229bcc443c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

finance-district-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

finance-district-mcp — 100% identical, 0 lines differ

skills/finance-district-mcp/SKILL.md · 53 lines

How it starts

The opening of the file, as written. The whole thing — 53 lines — stays where its author put it; the contents beside it link to each section on GitHub.

${var} — what to do with the wallet. Empty → a daily wallet brief (balances + notable price moves + top stablecoin yield). Or a specific instruction, e.g. best USDC yield on Base, swap 5 USDC to ETH on Base, pay <x402-url> for <data>.

Operate the operator's Finance District Agent Wallet. Non-custodial: private keys never leave a secure enclave (TEE) — the agent never sees them; it submits structured intent and the wallet server signs within limits. Per-transfer limits, an auto-approve threshold, and a destination denylist are enforced server-side, not in this prompt.

Detection & auth

Wired by the dashboard MCP panel's one-click Connect (OAuth with offline_access; tokens stored as MCP_FINANCE_DISTRICT_TOKEN + MCP_FINANCE_DISTRICT_OAUTH, refreshed each run by scripts/mcp-oauth-refresh.sh). Because Finance District rotates its refresh token, set GH_SECRETS_PAT so rotations persist (see docs/mcp-oauth.md). Tools surface as mcp__finance-district__* — discover them from the server each run; don't assume a fixed list.

No mcp__finance-district__* tool callable → not connected, or secrets missing (the workflow logs a ::warning:: and skips MCP). Log FD_NOT_CONNECTED, notify once pointing the operator at dashboard → MCP → Connect Finance District, and exit.
Tools return 401 / invalid-token → the OAuth refresh failed (rotating refresh tokens need GH_SECRETS_PAT — see docs/mcp-oauth.md). Log FD_AUTH_STALE, notify the operator to re-connect once, and exit.

Steps

Identity + balances — confirm the wallet (getMyInfo) and read balances per chain (getWalletOverview). Diff against the last entry in memory/logs/; flag any unexplained change prominently.
Prices / yield (when relevant) — getTokenPrice for held tokens; note 24h moves over ±5%. discoverYieldStrategies for idle stablecoins (EVM only) — surface the top option (protocol, APY, TVL) as a suggestion. Never deposit unless the task explicitly asks.
Act only on explicit instruction — transfers, swaps, yield deposits, and x402 payments move real value. Do exactly what ${var} asks, nothing more; sequence any irreversible action last, fail-closed. Amounts above the auto-approve threshold are rejected by the wallet — report that, never try to work around it.
x402 paid calls — follow the 402 flow (authorize within caps; gasless for the payer via EIP-3009).
Notify once via ./notify -f <file>, and put the same record in your final output. This skill is read-only, so you can't write memory/logs/ yourself (the sandbox write-locks the workspace); the workflow commits your captured output to memory/logs/ + output/.chains/ after the run. Every value-moving action (transfer, swap, deposit, x402 payment) goes in both the notify and the output — the notification is the operator's only guaranteed record, so a payment that isn't in it effectively went unreported:

Read the full file on GitHub · 53 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

8d ago First seen · 53 lines · 81 tokens per session scan A 38229bcc443c

Subscribe to this mod's changes

finance-district-mcp is a skill published in the GitHub repository aeonfun/aeon (716 stars, last pushed yesterday), licensed MIT. It adds 81 tokens to every session and 1,104 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Claude Code Finance and fintech Web3 and blockchain agent-framework agents ai ai-agents anthropic

defi-protocol-templates

Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and flash loans. Use when building decentralized finance applications or smart contract protocols.

wshobson/agents · 38 tokens

crypto-sage

Activates CryptoSage for crypto, DeFi, and Web3 intelligence. Use when you need on-chain analytics (MVRV, SOPR, NVT, exchange flows), DeFi TVL trend analysis, tokenomics review (vesting schedules, inflation rate, unlock impact), narrative momentum tracking, or rug pull / audit risk assessment.

vignesh2027/Claude-Agentic-Skills2.0-version · 73 tokens

finance-district-mcp