io.github.mytomclinicPublished by GitHub account mytomclinicv0.1.0Updated Oct 24, 2026
Compliance, risk, tax and audit checks for AI trading agents: pre-trade, sizing, wash sales, Reg BI.
Remote MCP server giving trading agents compliance, risk, tax and performance checks — pre-trade rules, position sizing, tax lots, portfolio review and…
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.mytomclinic%2Fagent-financial-advisor/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"agent-financial-advisor": {
"type": "http",
"url": "https://agent-financial-advisor.agent-financial-advisor.workers.dev/mcp"
}
}
}The compliance officer, risk manager, tax advisor and performance auditor for AI agents that trade and advise. Agents call it before they act; it answers with sourced, deterministic checks and charges a small fee per call.
Drop-in code (Alpaca order guard, MCP client configs, x402 paying client): examples/.
Try it:
MCP clients: point a streamable-HTTP MCP connection at http://localhost:8787/mcp.
For the keyed free tier and credits, send Authorization: Bearer <key>, use /mcp?key=<key>, or have the agent call
the free get_api_key tool, which binds a new key to the MCP session. Add ?src=<name> to any URL to attribute usage in /stats.
Cloudflare Workers: npx wrangler kv namespace create AFA_KV, put the id in wrangler.toml, then npx wrangler deploy.
Real USDC: npx wrangler secret put CDP_API_KEY_JSON < secrets/cdp_api_key.json, set X402_NETWORK = "base" in wrangler.toml, deploy.
advisor_memo: npx wrangler secret put ANTHROPIC_API_KEY < secrets/anthropic-key.txt.
Speaks x402 v2: a 402 carries a base64 PAYMENT-REQUIRED header (CAIP-2 network, e.g. eip155:8453), clients pay with
PAYMENT-SIGNATURE, and the settlement comes back in PAYMENT-RESPONSE. v1 clients (X-PAYMENT, body accepts) still work.
End-to-end test on the test network: npm i --no-save viem && node scripts/e2e-payment.mjs <server url> --fund.
Source: README.md at commit 9006933
Current trading rules digest
Free. The current US trading, margin, settlement and tax rules an agent must follow, with effective dates and sources. Includes changes your training data may predate, such as the June 2026 replacement of the Pattern Day Trader rule. Price: free.
topicPre-trade compliance and risk check
Run an order past a compliance officer and risk manager before sending it to the broker. Checks buying power, cash-account settlement violations, FINRA intraday margin (post-PDT) or legacy PDT limits, Reg SHO short-sale rules, wash-sale exposure, position concentration, per-trade risk versus stop, liquidity, spread, fat-finger prices, leverage and market hours. Returns approve / approve_with_warnings / reject with reasons and a resized quantity when useful. Price: $0.005.
orderrequiredmarketpolicyaccountrequiredPosition sizing
Size a position the way a risk manager would: fixed-fractional risk to a stop, volatility targeting (ATR or annualized vol), or fractional Kelly from your edge statistics. Applies a max-position cap and round lots, and explains the binding constraint. Price: $0.005.
atrsideequityrequiredmethodrequiredavg_winavg_losslot_sizerisk_pctwin_rateannual_volstop_priceentry_pricerequired+5 moreTax lot selection and wash-sale check
Act as the tax advisor for a sale: compares FIFO, LIFO, HIFO and minimum-tax lot selection, splits short- and long-term gains, estimates tax, flags wash sales, and notes lots about to turn long-term. With mode=harvest it scans positions for tax-loss harvesting. Price: $0.02.
lotsrequiredmodesellas_ofpricessymboltax_ratesmin_harvest_lossrecent_transactionsPortfolio review
A periodic advisor review of a portfolio: weights, concentration (HHI and effective number of holdings), sector and asset-class exposure, drift from targets with the trades to rebalance, and, given return history, volatility, Sharpe, Sortino, drawdown, VaR/CVaR and beta. Ends with prioritized findings. Price: $0.05.
cashlimitsreturnstargetsholdingsrequiredrebalance_bandrisk_free_rateperiods_per_yearbenchmark_returnsStrategy audit and overfitting check
An independent performance auditor for a trading strategy or backtest. From a trade list and/or periodic returns it computes win rate, expectancy, profit factor, streaks, Sharpe/Sortino/drawdown, and tests whether the edge is real: t-stat, Probabilistic Sharpe Ratio and the Deflated Sharpe Ratio that corrects for how many variants you tried. Returns a verdict and red flags. Price: $0.1.
tradesreturnsn_trialsstarting_equityperiods_per_yeartrial_sharpe_varianceBest-interest suitability review
The compliance review a robo-advisor or advisory agent should run before recommending a portfolio to a person: compares the proposal with the client's age, horizon, risk tolerance, liquidity needs and experience under Reg BI / fiduciary standards, flags complex products, and returns a timestamped, hashed suitability memo for the audit file. Price: $0.03.
clientrequiredproductsallocationrequiredannual_fee_pctmax_single_position_pctOptions risk and margin check
Check an options book (existing or proposed legs) the way a broker's options desk would: covered, cash-secured, spread or naked; margin requirement under FINRA Rule 4210; cash-account limits; required approval level; early-assignment risk around ex-dividend dates; pin risk; auto-exercise of expiring in-the-money longs and the capital it needs; max loss; and net Greeks. Returns approve / approve_with_warnings / reject with reasons. Price: $0.01.
legsrequiredas_ofpolicyaccountrequiredunderlyingrequired90% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a license in the repository or the registry entry.
npm testnpm start # http://localhost:8787 (payments off until PAY_TO is set)curl localhost:8787/llms.txtcurl -X POST localhost:8787/v1/tools/position_size -H "content-type: application/json" \ -d '{"equity":50000,"entry_price":100,"stop_price":95,"method":"fixed_fractional"}'src/app.js fetch-style router: REST, MCP, billing hookssrc/server.js Node entrysrc/worker.js Cloudflare Workers entry (KV store)src/billing/ free tier, API keys, credits, x402, ledgersrc/tools/ the advisory toolssrc/lib/regs.js rule table with sources (reviewed weekly)src/lib/calendar.js NYSE calendartest/ node --test suites