@arcadia-finance/mcp-server
mcp:npm:@arcadia-finance/mcp-server · v0.7.0 · sha256:007f21a15c9a · as of 2026-11-09
- Does it take your key? traced
- It asks for a private key or seed phrase in its setup.
- Our static read of the published artifact found it.
- Does your key leave? observed
- Not observed — no planted key left during install and start-up, under our test conditions — code paths that only run later, or only on a trigger, are not covered.
- We ran it with planted test keys and saw it.
- Can it move funds on its own? declared
- Yes — 1 action can sign or send funds when called: dev_send (transfer, limit unknown).
- The project says so — README, config, env list or tool description.
- What changed? observed
- No change in key, host or fund behaviour since 0.6.1.
- We ran it with planted test keys and saw it.
Is this your project? Respond →Dispute this reading
Hosts contacted
| Host | When | Role | Evidence |
|---|---|---|---|
| api.arcadia.finance | code | vendor | traced |
| eu.i.posthog.com | code | other | traced |
| mainnet.base.org | code | rpc | traced |
| mainnet.optimism.io | code | rpc | traced |
| mainnet.unichain.org | code | rpc | traced |
| mcp.arcadia.finance | code | vendor | traced |
| rpc.mainnet.chain.robinhood.com | code | rpc | traced |
| registry.npmjs.org | install | registry | observed |
Evidence (20 lines)
- observedO-hosts2026-11-09
registry.npmjs.org was contacted during install (registry).
sandbox:obs_1717b5268907eee1
- tracedT-hosts2026-11-09
api.arcadia.finance appears in shipped code (vendor).
dist/clients/api.js
- tracedT-hosts2026-11-09
eu.i.posthog.com appears in shipped code (other).
dist/utils/analytics.js
- tracedT-hosts2026-11-09
mainnet.base.org appears in shipped code (rpc).
dist/config/chains.js
- tracedT-hosts2026-11-09
mainnet.optimism.io appears in shipped code (rpc).
dist/config/chains.js
- tracedT-hosts2026-11-09
mainnet.unichain.org appears in shipped code (rpc).
dist/clients/chain.js
- tracedT-hosts2026-11-09
mcp.arcadia.finance appears in shipped code (vendor).
dist/index.js
- tracedT-hosts2026-11-09
rpc.mainnet.chain.robinhood.com appears in shipped code (rpc).
dist/clients/chain.js
- tracedT-key-handling2026-11-09
Turns key material it is GIVEN into an account or signer (privateKeyToAccount()); no read of a key from the environment or a key file was found. A signing library does this.
dist/tools/dev/send.js:53
- declaredD-env-key2026-11-09
Setup names PK (dev only): a private key (hex) the built-in dev_send too as something to provide.
deploy_spec.requires
- declaredD-unsigned-tool2026-11-09
Tool write_account_deposit is described as building an unsigned transaction (trade); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_account_withdraw is described as building an unsigned transaction (withdraw); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_account_borrow is described as building an unsigned transaction (trade); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_account_repay is described as building an unsigned transaction (trade); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_account_swap is described as building an unsigned transaction (swap); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_account_stake is described as building an unsigned transaction (trade); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_wallet_approve is described as building an unsigned transaction (approve); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_pool_deposit is described as building an unsigned transaction (trade); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-unsigned-tool2026-11-09
Tool write_pool_redeem is described as building an unsigned transaction (withdraw); it does not sign or send it — the caller's signer does.
tools/list
- declaredD-fund-tool2026-11-09
Tool dev_send is described as a transfer action.
tools/list
Limits
- Traced analysis follows flows inside one module and one hop across a relative import; a longer chain is not followed.
- Key egress not observed during install and start-up, under our test conditions — code paths that only run later, or only on a trigger, are not covered.
- Sandbox: DNS queries made directly by the target are not logged; hosts are recorded from proxied HTTP(S) requests and CONNECTs..
- Sandbox: Code that ignores HTTP(S)_PROXY has no route out of the sandbox, so its attempts are not captured..
A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".
sato.custody/v1 · custody-3
Maintain this project? Respond to this reading
Loading sign-in…