finance-district-mcp

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates a multichain non-custodial agent wallet capable of direct financial actions such as moving funds, swapping, yielding, and making x402 paid API calls (SKILL.md:3, 21, 36). Access control is independently enforced via OAuth Connect via the dashboard MCP panel, server-side TEE validation, spend caps, and token authentication (SKILL.md:3, 23, 27). This constitutes a direct financial operation with qualifying independent access control.