cardano-mcp-transactions

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill signs and submits blockchain transactions (Cardano ₳) via an MCP tool (submit_transaction), constituting a direct financial operation. The text explicitly states that the MCP server has no server-side approval gate and signs any CBOR passed to it, relying entirely on agent-enforced preview and user confirmation (which do not qualify as independent access control enforced by the service or execution layer).