Shelter

io.github.nextauralabs由 GitHub 账号 nextauralabs 发布v1.0.7更新于 Oct 28, 2026

Connect AI agents to scoped financial context from your own Shelter account

已验证STDIO仅桌面金融数据与分析

概览

AI 生成的概览

只读 MCP 服务器,让助手以受限权限访问你自己 Shelter 账户的预测、可用资金跑道、提醒与可负担性建议。

可以做什么
  • 查看连接与授权状态,并获取用于推理的受限财务上下文
  • 获取安全可支出跑道、即将到来的资金压力与现金流预测
  • 列出当前财务提醒与可执行的省钱机会
  • 模拟某笔消费是否可负担
  • 获取每日教练摘要、指定主题的教练建议以及财务问题解答
  • 使用内置提示进行财务体检、支出复盘与购买规划
适用场景
适合希望助手基于已接入 Shelter 的数据来分析个人或企业现金流、资金跑道和消费决策,同时不赋予其转账能力的场景。
运行要求
通过 npx 在本地运行,需要 Node.js 20 或更高版本。需要已连接财务数据的 Shelter 账户,以及通过环境变量 SHELTER_API_KEY 提供的受限 API 密钥;SHELTER_API_URL 可覆盖 API 基础地址。无需 Plaid 开发者账户。
安装前请注意
API 密钥属于凭据,应像密码一样保管:不要提交到代码库,也不要在共享机器的命令历史中直接写入。缺少密钥时服务器仍会暴露工具定义,但返回不含任何财务数值的抑制响应。服务器为只读,不能转账或访问 Plaid 凭据,但会把你的财务上下文发送到 Shelter 托管的 Agent API。可选的 HTTP 模式绑定 0.0.0.0,不建议个人使用。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Shelter,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Shelter MCP Server

Connect Claude, Codex, Cursor, and other MCP-compatible agents to scoped financial context from your own Shelter account.

The server is read-only. It can retrieve forecasts, runway, alerts, opportunities, and affordability guidance, but it cannot move money or access Plaid credentials.

Requirements

  • Node.js 20 or newer
  • A Shelter account with connected financial data
  • A scoped API key from shelter.money/developer

No Plaid developer account is required.

Quick start

Create an API key, then configure your MCP client to run:

bash
npx -y @shelter.money/mcp

with SHELTER_API_KEY in the server environment.

Claude Code

Install the Shelter plugin, which bundles this server with the Shelter skill:

bash
/plugin marketplace add nextauralabs/shelter-skill/plugin install shelter@shelter-skills

Export SHELTER_API_KEY in your shell before starting Claude Code. Or add only the server:

bash
claude mcp add shelter --env SHELTER_API_KEY=wv_your_key_here -- npx -y @shelter.money/mcp

Claude Desktop

json
{  "mcpServers": {    "shelter": {      "command": "npx",      "args": ["-y", "@shelter.money/mcp"],      "env": {        "SHELTER_API_KEY": "wv_your_key_here"      }    }  }}

Restart Claude Desktop after saving its configuration.

Codex

bash
codex mcp add shelter --env SHELTER_API_KEY=wv_your_key_here -- npx -y @shelter.money/mcp

Cursor

Add this server to Cursor's MCP settings:

json
{  "shelter": {    "command": "npx",    "args": ["-y", "@shelter.money/mcp"],    "env": {      "SHELTER_API_KEY": "wv_your_key_here"    }  }}

The package also provides financial checkup, spending review, and purchase-planning prompts.

Available tools

  • shelter_status: connection and authority status
  • shelter_runway: safe-to-spend runway and upcoming pressure
  • shelter_forecast: manifest-bound cash-flow forecast
  • shelter_alerts: current financial alerts
  • shelter_opportunities: actionable savings opportunities
  • shelter_context: scoped financial context for agent reasoning
  • shelter_affordability: purchase affordability simulation
  • shelter_coach_daily: daily coaching summary
  • shelter_coach_advice: coaching for a requested topic
  • shelter_ask: ask Guardian a financial question

Environment variables

VariableRequiredDescription
SHELTER_API_KEYYesScoped key created in Shelter. Keep it secret.
SHELTER_API_URLNoAPI base URL. Defaults to https://api.shelter.money/agent.
PORTHTTP mode onlyLocal HTTP port. Defaults to 3100.

If SHELTER_API_KEY is missing, the server still exposes its tool definitions but returns suppressed responses with no financial values. It never substitutes sample money data for a user's real financial state.

Security model

  • End-user identity comes only from the scoped Shelter API key.
  • Keys are stored by Shelter as SHA-256 hashes and shown only once when created.
  • Keys can be scoped and revoked from the Shelter developer page.
  • The hosted Agent API applies authentication, authorization, rate limits, and audit logging.
  • The MCP package does not contain Shelter backend code, deployment secrets, Plaid tokens, or bank credentials.
  • Financial responses fail closed when authoritative data is unavailable.

Treat the API key like a password. Do not commit it or place it directly in command history on shared machines. See SECURITY.md for vulnerability reporting.

Development

bash
npm cinpm run typechecknpm run build

Run the stdio server from the built package:

bash
SHELTER_API_KEY=wv_your_key_here node dist/bin/shelter-mcp.js

A stateless Streamable HTTP entrypoint is also built for controlled hosting:

bash
SHELTER_API_KEY=wv_your_key_here npm start

The HTTP entrypoint binds to 0.0.0.0 and is not the recommended personal-client setup. Use stdio unless you operate and secure the HTTP environment yourself.

Architecture

This public repository contains only the MCP adapter. It calls Shelter's hosted, read-only Agent API. Shelter's private financial calculations, authentication gateway, database schema, and service credentials are not part of this package.

License

MIT

Listed in the Claude Market MCP directory.

来源:README.md,提交 194a5d8

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

2
  1. v1.0.7最新Oct 16, 2026
  2. v1.0.6Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分