Skip to content

AurelianFlo

by aurelianflo.com · remote · no sign-in to list tools · v0.4.0 · published by com.aurelianflo

Remote MCP server for OFAC screening, EDD memos, exposure forecasts, queues, and reports.

Changes · 9

11 tools: 9 change things and 2 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http core https://api.aurelianflo.com/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • The server marks "wallet_ofac_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true}; The description's first verb is "run": a word for a change.

    What this check looks for
  • The server marks "report_pdf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true}; The name "report_pdf_generate" says "generate": a word for a change.

    What this check looks for
  • The server marks "report_docx_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true}; The name "report_docx_generate" says "generate": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Changes things 9Claude Code: ask
  • compliance_edd_reportBuild a paid enhanced due diligence memo for a wallet set using exact-match OFAC screening, sanctions evidence, and follow-up actions, returning structured JSON or an inline PDF/DO…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Build a paid enhanced due diligence memo for a wallet set using exact-match OFAC screening, sanctions evidence, and follow-up actions, returning structured JSON or an inline PDF/DOCX artifact. Use this for case handoff; use wallet_ofac_batch for screening-only results or report_pdf_generate/report_docx_generate only when the report payload already exists.

    Annotations the server declares

    • title: EDD Report
    • readOnlyHint: true
    • paymentHint: true
  • compliance_exposure_forecastForecast future OFAC wallet exposure for a wallet set using stored OFAC snapshot diffs when available, listedOn backfill when honest, or an explicit caller prior; returns current e…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Forecast future OFAC wallet exposure for a wallet set using stored OFAC snapshot diffs when available, listedOn backfill when honest, or an explicit caller prior; returns current exact-match baseline, metadata-weighted per-wallet risk, and report-shaped output. Use this when current screening is not enough; use wallet_ofac_batch for current hit status only.

    Annotations the server declares

    • title: Compliance Exposure Forecast
    • readOnlyHint: true
    • paymentHint: true
  • compliance_queue_optimizeOptimize a compliance review queue using current OFAC exact matches, future exposure probabilities, exposure value, relationship tier, recency, and reviewer capacity.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Optimize a compliance review queue using current OFAC exact matches, future exposure probabilities, exposure value, relationship tier, recency, and reviewer capacity. Use this when review_items and review_budget are known; use compliance_exposure_forecast for probability-only analysis or compliance_edd_report for a case memo.

    Annotations the server declares

    • title: Compliance Review Queue Optimizer
    • readOnlyHint: true
    • paymentHint: true
  • report_docx_generateReturn an inline DOCX artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files.1 finding

    Why it is in this group

    • The name "report_docx_generate" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "report_docx_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true}; The name "report_docx_generate" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Return an inline DOCX artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files. Use this only when a structured report payload already exists; use report_pdf_generate for fixed-layout output or compliance_edd_report to build the memo first.

    Annotations the server declares

    • title: Report DOCX Generate
    • readOnlyHint: true
    • paymentHint: true
  • report_pdf_generateReturn an inline PDF artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files.1 finding

    Why it is in this group

    • The name "report_pdf_generate" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "report_pdf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true}; The name "report_pdf_generate" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Return an inline PDF artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files. Use this only when a structured report payload already exists; use report_docx_generate for editable Word output or compliance_edd_report to build the memo first.

    Annotations the server declares

    • title: Report PDF Generate
    • readOnlyHint: true
    • paymentHint: true
  • server_capabilitiesFree first-call capability and connection check for AurelianFlo; use it before paid tools to inspect OFAC screening workflows, access modes, and x402 payment requirements.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free first-call capability and connection check for AurelianFlo; use it before paid tools to inspect OFAC screening workflows, access modes, and x402 payment requirements.

    Annotations the server declares

    • title: Server Capabilities
    • readOnlyHint: true
  • wallet_ofac_batchScreen 1-100 crypto wallet addresses against OFAC SDN digital currency designations before payout, onboarding, or treasury movement, returning per-wallet results plus a batch-level…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Screen 1-100 crypto wallet addresses against OFAC SDN digital currency designations before payout, onboarding, or treasury movement, returning per-wallet results plus a batch-level proceed-or-pause decision. Use this instead of wallet_ofac_screen for multiple addresses; use compliance_edd_report when a formal memo is needed.

    Annotations the server declares

    • title: Batch Wallet Screen
    • readOnlyHint: true
    • paymentHint: true
  • wallet_ofac_reportRun a paid OFAC screening report for one crypto wallet and return structured JSON or an inline PDF/DOCX artifact.1 finding

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "wallet_ofac_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true}; The description's first verb is "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Run a paid OFAC screening report for one crypto wallet and return structured JSON or an inline PDF/DOCX artifact. Use wallet_ofac_screen for a quick single-address status check, or wallet_ofac_batch for multiple addresses.

    Annotations the server declares

    • title: OFAC Wallet Screen Report
    • readOnlyHint: true
    • paymentHint: true
  • wallet_ofac_screenScreen one crypto wallet address against OFAC SDN digital currency designations and return exact hits, sanctioned entity metadata, asset coverage, and a manual-review signal.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Screen one crypto wallet address against OFAC SDN digital currency designations and return exact hits, sanctioned entity metadata, asset coverage, and a manual-review signal. Use this for one-off status checks; use wallet_ofac_report for PDF/DOCX output or wallet_ofac_batch for multiple addresses.

    Annotations the server declares

    • title: OFAC Wallet Screen
    • readOnlyHint: true
    • paymentHint: true
Only reads 2Claude Code: allow
  • queue_saved_listFree read-only saved queue status utility for agents asking whether AurelianFlo can list prior compliance_queue_optimize results.No findings

    Why it is in this group

    • The name "queue_saved_list" says "list": a word for reading.
    Description, as the server wrote it
    Free read-only saved queue status utility for agents asking whether AurelianFlo can list prior compliance_queue_optimize results. AurelianFlo does not persist saved queues server-side; rerun compliance_queue_optimize with the original review_items to recreate a queue.

    Annotations the server declares

    • title: Saved Queue Status
    • readOnlyHint: true
  • report_saved_retrieveFree read-only past report retrieval status utility for agents asking about previously generated reports.No findings

    Why it is in this group

    • The name "report_saved_retrieve" says "retrieve": a word for reading.
    Description, as the server wrote it
    Free read-only past report retrieval status utility for agents asking about previously generated reports. AurelianFlo returns report artifacts inline as artifact.contentBase64 and does not persist hosted report files server-side.

    Annotations the server declares

    • title: Saved Report Retrieval Status
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http core https://api.aurelianflo.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__core__queue_saved_list",
      "mcp__core__report_saved_retrieve"
    ],
    "ask": [
      "mcp__core__server_capabilities",
      "mcp__core__wallet_ofac_report",
      "mcp__core__wallet_ofac_screen",
      "mcp__core__wallet_ofac_batch",
      "mcp__core__compliance_edd_report",
      "mcp__core__compliance_exposure_forecast",
      "mcp__core__compliance_queue_optimize",
      "mcp__core__report_pdf_generate",
      "mcp__core__report_docx_generate"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as core. Review it before you use it.