Sato Check · MCP server

@arcadia-finance/mcp-server

mcp:npm:@arcadia-finance/mcp-server · v0.5.1 · sha256:7d6ff98b0129 · as of 2026-09-26

Does it take your key?: No private-key read found in what we read of its setup and published code — the limits say how much that was.; Our static read of the published artifact found it.
Does your key leave?: Not observed — no planted key left during install and start-up, under our test conditions — code paths that only run later, or only on a trigger, are not covered.; We ran it with planted test keys and saw it.
Can it move funds on its own?: Yes — 10 actions can sign or send funds when called: write_account_deposit (trade, limit unknown); write_account_withdraw (withdraw, limit unknown); write_account_borrow (trade, limit unknown); write_account_repay (trade, limit unknown); ….; The project says so — README, config, env list or tool description.
What changed?: First profile of this subject — nothing to compare yet.; No evidence line on file for this question yet.

Is this your project? Respond →Dispute this reading

Hosts contacted

Host	When	Role	Evidence
api.arcadia.finance	code	vendor	traced
mainnet.base.org	code	rpc	traced
mainnet.optimism.io	code	rpc	traced
mainnet.unichain.org	code	rpc	traced
mcp.arcadia.finance	code	vendor	traced
registry.npmjs.org	install	registry	observed

Evidence (17 lines)

observedO-hosts2026-09-25
registry.npmjs.org was contacted during install (registry).
sandbox:obs_0a2374cf7eb1012a
tracedT-hosts2026-09-26
api.arcadia.finance appears in shipped code (vendor).
dist/clients/api.js
tracedT-hosts2026-09-26
mainnet.base.org appears in shipped code (rpc).
dist/config/chains.js
tracedT-hosts2026-09-26
mainnet.optimism.io appears in shipped code (rpc).
dist/config/chains.js
tracedT-hosts2026-09-26
mainnet.unichain.org appears in shipped code (rpc).
dist/clients/chain.js
tracedT-hosts2026-09-26
mcp.arcadia.finance appears in shipped code (vendor).
dist/index.js
tracedT-key-handling2026-09-26
Turns key material it is GIVEN into an account or signer (privateKeyToAccount()); no read of a key from the environment or a key file was found. A signing library does this.
dist/tools/dev/send.js:58
declaredD-fund-tool2026-09-26
Tool write_account_deposit is described as a trade action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_account_withdraw is described as a withdraw action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_account_borrow is described as a trade action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_account_repay is described as a trade action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_account_swap is described as a swap action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_account_stake is described as a trade action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_wallet_approve is described as a approve action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_pool_deposit is described as a trade action.
tools/list
declaredD-fund-tool2026-09-26
Tool write_pool_redeem is described as a withdraw action.
tools/list
declaredD-fund-tool2026-09-26
Tool dev_send is described as a transfer action.
tools/list

Limits

Traced analysis follows flows inside one module only; a key handed from one module to another is not followed.
Key egress not observed during install and start-up, under our test conditions — code paths that only run later, or only on a trigger, are not covered.
Sandbox: DNS queries made directly by the target are not logged; hosts are recorded from proxied HTTP(S) requests and CONNECTs..
Sandbox: Code that ignores HTTP(S)_PROXY has no route out of the sandbox, so its attempts are not captured..

A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".

sato.custody/v1 · custody-1

Maintain this project? Respond to this reading

Loading sign-in…