Shelter

io.github.nextauralabs由 GitHub 帳號 nextauralabs 發布v1.0.7更新於 Oct 28, 2026

Connect AI agents to scoped financial context from your own Shelter account

已驗證STDIO僅桌面金融資料與分析

概覽

AI 產生的概覽

唯讀 MCP 伺服器,讓助理以受限權限存取你自己 Shelter 帳戶的預測、可用資金跑道、警示與可負擔性建議。

可以做什麼
  • 查看連線與授權狀態,並取得供推理使用的受限財務脈絡
  • 取得安全可支出跑道、即將到來的資金壓力與現金流預測
  • 列出目前財務警示與可執行的省錢機會
  • 模擬某筆消費是否可負擔
  • 取得每日教練摘要、指定主題的教練建議以及財務問題解答
  • 使用內建提示進行財務健檢、支出檢視與購買規劃
適用情境
適合希望助理根據已連結 Shelter 的資料,分析個人或企業現金流、資金跑道與消費決策,同時不賦予其轉帳能力的場合。
執行需求
透過 npx 在本機執行,需要 Node.js 20 或更新版本。需要已連結財務資料的 Shelter 帳戶,以及透過環境變數 SHELTER_API_KEY 提供的受限 API 金鑰;SHELTER_API_URL 可覆寫 API 基礎位址。不需要 Plaid 開發者帳戶。
安裝前請注意
API 金鑰屬於憑證,應像密碼一樣保管:不要提交到版本庫,也不要在共用機器的命令歷史中直接寫入。缺少金鑰時伺服器仍會提供工具定義,但回應會受到抑制、不含任何財務數值。伺服器為唯讀,不能轉帳或存取 Plaid 憑證,但會將你的財務脈絡傳送到 Shelter 託管的 Agent API。可選的 HTTP 模式會綁定 0.0.0.0,不建議個人使用。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Shelter,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Shelter MCP Server

Connect Claude, Codex, Cursor, and other MCP-compatible agents to scoped financial context from your own Shelter account.

The server is read-only. It can retrieve forecasts, runway, alerts, opportunities, and affordability guidance, but it cannot move money or access Plaid credentials.

Requirements

  • Node.js 20 or newer
  • A Shelter account with connected financial data
  • A scoped API key from shelter.money/developer

No Plaid developer account is required.

Quick start

Create an API key, then configure your MCP client to run:

bash
npx -y @shelter.money/mcp

with SHELTER_API_KEY in the server environment.

Claude Code

Install the Shelter plugin, which bundles this server with the Shelter skill:

bash
/plugin marketplace add nextauralabs/shelter-skill/plugin install shelter@shelter-skills

Export SHELTER_API_KEY in your shell before starting Claude Code. Or add only the server:

bash
claude mcp add shelter --env SHELTER_API_KEY=wv_your_key_here -- npx -y @shelter.money/mcp

Claude Desktop

json
{  "mcpServers": {    "shelter": {      "command": "npx",      "args": ["-y", "@shelter.money/mcp"],      "env": {        "SHELTER_API_KEY": "wv_your_key_here"      }    }  }}

Restart Claude Desktop after saving its configuration.

Codex

bash
codex mcp add shelter --env SHELTER_API_KEY=wv_your_key_here -- npx -y @shelter.money/mcp

Cursor

Add this server to Cursor's MCP settings:

json
{  "shelter": {    "command": "npx",    "args": ["-y", "@shelter.money/mcp"],    "env": {      "SHELTER_API_KEY": "wv_your_key_here"    }  }}

The package also provides financial checkup, spending review, and purchase-planning prompts.

Available tools

  • shelter_status: connection and authority status
  • shelter_runway: safe-to-spend runway and upcoming pressure
  • shelter_forecast: manifest-bound cash-flow forecast
  • shelter_alerts: current financial alerts
  • shelter_opportunities: actionable savings opportunities
  • shelter_context: scoped financial context for agent reasoning
  • shelter_affordability: purchase affordability simulation
  • shelter_coach_daily: daily coaching summary
  • shelter_coach_advice: coaching for a requested topic
  • shelter_ask: ask Guardian a financial question

Environment variables

VariableRequiredDescription
SHELTER_API_KEYYesScoped key created in Shelter. Keep it secret.
SHELTER_API_URLNoAPI base URL. Defaults to https://api.shelter.money/agent.
PORTHTTP mode onlyLocal HTTP port. Defaults to 3100.

If SHELTER_API_KEY is missing, the server still exposes its tool definitions but returns suppressed responses with no financial values. It never substitutes sample money data for a user's real financial state.

Security model

  • End-user identity comes only from the scoped Shelter API key.
  • Keys are stored by Shelter as SHA-256 hashes and shown only once when created.
  • Keys can be scoped and revoked from the Shelter developer page.
  • The hosted Agent API applies authentication, authorization, rate limits, and audit logging.
  • The MCP package does not contain Shelter backend code, deployment secrets, Plaid tokens, or bank credentials.
  • Financial responses fail closed when authoritative data is unavailable.

Treat the API key like a password. Do not commit it or place it directly in command history on shared machines. See SECURITY.md for vulnerability reporting.

Development

bash
npm cinpm run typechecknpm run build

Run the stdio server from the built package:

bash
SHELTER_API_KEY=wv_your_key_here node dist/bin/shelter-mcp.js

A stateless Streamable HTTP entrypoint is also built for controlled hosting:

bash
SHELTER_API_KEY=wv_your_key_here npm start

The HTTP entrypoint binds to 0.0.0.0 and is not the recommended personal-client setup. Use stdio unless you operate and secure the HTTP environment yourself.

Architecture

This public repository contains only the MCP adapter. It calls Shelter's hosted, read-only Agent API. Shelter's private financial calculations, authentication gateway, database schema, and service credentials are not part of this package.

License

MIT

Listed in the Claude Market MCP directory.

來源:README.md,提交 194a5d8

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

2
  1. v1.0.7最新Oct 16, 2026
  2. v1.0.6Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分