Dealgo Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Dealgo Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Runtime decision firewall for AI agents. Exposes the CSC engine (via the dealgo-portal control layer) as a Model Context Protocol server so any MCP-aware client — Claude Desktop, Claude Code, Cursor, custom agents — can consult CSC before executing risky actions.
Claude / agent
↓
MCP tool: csc_check(...)
↓
dealgo-portal /api/csc/check (Bearer dealgo_sk_live_…)
↓
CSC engine: reality · policy · throttle gates
↓
{ decision, action, reason, v2_bias, latency_ms }csc_check(feed, risk?, volatility?, confidence?, symbol?, source?, intent?, v2_aware=True)Primary tool. Score one signal/action against CSC. Returns
{ "decision": "APPROVE" | "DELAY" | "DENY",
"action": "EXECUTE" | "WAIT" | "REJECT",
"reason": "...",
"v2_bias": -0.018,
"stimulus_id": "stim_…",
"latency_ms": 41 }Proceed only on APPROVE. On DELAY, retry with backoff. On DENY, do not retry — surface the reason to the user.
check_action(intent, action, actor_id, domain, environment, metadata)Backwards-compat shim. Maps the legacy governance payload onto csc_check so existing demos and Claude Desktop configs keep working. Prefer csc_check directly in new code.
governance://decisions/recent — last 20 decisions logged for the configured API key. Lets agents introspect their own history.
pip install dealgo-mcp(or https://api.dealgo.io/quickstart for a one-click reveal). Use a dealgo_sk_test_… key for a no-meter sandbox, dealgo_sk_live_… for prod.
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json {
"mcpServers": {
"dealgo-csc": {
"command": "dealgo-mcp",
"env": {
"DEALGO_API_KEY": "dealgo_sk_test_…",
"DEALGO_API_URL": "https://api.dealgo.io"
}
}
}
}"Use csc_check before doing anything risky."Every risky action will now consult /v1/decide and surface the verdict.
git clone https://github.com/dealgo-systems/dealgo-mcp-server
cd dealgo-mcp-server
pip install -e . # editable install — picks up changes immediatelyThen point Claude Desktop config to the editable install ("command": "dealgo-mcp" still works after pip install -e . — entry point is registered system-wide).
DEALGO_API_KEY=dealgo_sk_test_... python smoke_test.pyExercises all three CSC gates (reality, policy, throttle), the backwards-compat shim, and the recent-decisions resource. Pass = CSC governance is live over MCP.
| Env var | Default | Required |
|---|---|---|
DEALGO_API_KEY | (none) | yes |
DEALGO_API_URL | https://api.dealgo.io | no |
Now Claude can call CSC before executing actions.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.