AurelianFlo
by aurelianflo.com · remote · no sign-in to list tools · v0.4.0 · published by com.aurelianflo
Remote MCP server for OFAC screening, EDD memos, exposure forecasts, queues, and reports.
11 tools: 9 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things9Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http core https://api.aurelianflo.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "wallet_ofac_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The description's first verb is "run": a word for a change.
The server marks "report_pdf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "report_pdf_generate" says "generate": a word for a change.
The server marks "report_docx_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "report_docx_generate" says "generate": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
11 tools
Changes things 9Claude Code: ask
compliance_edd_reportBuild a paid enhanced due diligence memo for a wallet set using exact-match OFAC screening, sanctions evidence, and follow-up actions, returning structured JSON or an inline PDF/DO…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Build a paid enhanced due diligence memo for a wallet set using exact-match OFAC screening, sanctions evidence, and follow-up actions, returning structured JSON or an inline PDF/DOCX artifact. Use this for case handoff; use wallet_ofac_batch for screening-only results or report_pdf_generate/report_docx_generate only when the report payload already exists.
Annotations the server declares
- title: EDD Report
- readOnlyHint: true
- paymentHint: true
compliance_exposure_forecastForecast future OFAC wallet exposure for a wallet set using stored OFAC snapshot diffs when available, listedOn backfill when honest, or an explicit caller prior; returns current e…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Forecast future OFAC wallet exposure for a wallet set using stored OFAC snapshot diffs when available, listedOn backfill when honest, or an explicit caller prior; returns current exact-match baseline, metadata-weighted per-wallet risk, and report-shaped output. Use this when current screening is not enough; use wallet_ofac_batch for current hit status only.
Annotations the server declares
- title: Compliance Exposure Forecast
- readOnlyHint: true
- paymentHint: true
compliance_queue_optimizeOptimize a compliance review queue using current OFAC exact matches, future exposure probabilities, exposure value, relationship tier, recency, and reviewer capacity.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Optimize a compliance review queue using current OFAC exact matches, future exposure probabilities, exposure value, relationship tier, recency, and reviewer capacity. Use this when review_items and review_budget are known; use compliance_exposure_forecast for probability-only analysis or compliance_edd_report for a case memo.
Annotations the server declares
- title: Compliance Review Queue Optimizer
- readOnlyHint: true
- paymentHint: true
report_docx_generateReturn an inline DOCX artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files.1 finding
Why it is in this group
- The name "report_docx_generate" says "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "report_docx_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "report_docx_generate" says "generate": a word for a change.
Description, as the server wrote it Return an inline DOCX artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files. Use this only when a structured report payload already exists; use report_pdf_generate for fixed-layout output or compliance_edd_report to build the memo first.
Annotations the server declares
- title: Report DOCX Generate
- readOnlyHint: true
- paymentHint: true
report_pdf_generateReturn an inline PDF artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files.1 finding
Why it is in this group
- The name "report_pdf_generate" says "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "report_pdf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The name "report_pdf_generate" says "generate": a word for a change.
Description, as the server wrote it Return an inline PDF artifact from supplied report_meta, tables, metrics, and summary content; this read-only renderer does not persist hosted files. Use this only when a structured report payload already exists; use report_docx_generate for editable Word output or compliance_edd_report to build the memo first.
Annotations the server declares
- title: Report PDF Generate
- readOnlyHint: true
- paymentHint: true
server_capabilitiesFree first-call capability and connection check for AurelianFlo; use it before paid tools to inspect OFAC screening workflows, access modes, and x402 payment requirements.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free first-call capability and connection check for AurelianFlo; use it before paid tools to inspect OFAC screening workflows, access modes, and x402 payment requirements.
Annotations the server declares
- title: Server Capabilities
- readOnlyHint: true
wallet_ofac_batchScreen 1-100 crypto wallet addresses against OFAC SDN digital currency designations before payout, onboarding, or treasury movement, returning per-wallet results plus a batch-level…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Screen 1-100 crypto wallet addresses against OFAC SDN digital currency designations before payout, onboarding, or treasury movement, returning per-wallet results plus a batch-level proceed-or-pause decision. Use this instead of wallet_ofac_screen for multiple addresses; use compliance_edd_report when a formal memo is needed.
Annotations the server declares
- title: Batch Wallet Screen
- readOnlyHint: true
- paymentHint: true
wallet_ofac_reportRun a paid OFAC screening report for one crypto wallet and return structured JSON or an inline PDF/DOCX artifact.1 finding
Why it is in this group
- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "wallet_ofac_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true}; The description's first verb is "run": a word for a change.
Description, as the server wrote it Run a paid OFAC screening report for one crypto wallet and return structured JSON or an inline PDF/DOCX artifact. Use wallet_ofac_screen for a quick single-address status check, or wallet_ofac_batch for multiple addresses.
Annotations the server declares
- title: OFAC Wallet Screen Report
- readOnlyHint: true
- paymentHint: true
wallet_ofac_screenScreen one crypto wallet address against OFAC SDN digital currency designations and return exact hits, sanctioned entity metadata, asset coverage, and a manual-review signal.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Screen one crypto wallet address against OFAC SDN digital currency designations and return exact hits, sanctioned entity metadata, asset coverage, and a manual-review signal. Use this for one-off status checks; use wallet_ofac_report for PDF/DOCX output or wallet_ofac_batch for multiple addresses.
Annotations the server declares
- title: OFAC Wallet Screen
- readOnlyHint: true
- paymentHint: true
Only reads 2Claude Code: allow
queue_saved_listFree read-only saved queue status utility for agents asking whether AurelianFlo can list prior compliance_queue_optimize results.No findings
Why it is in this group
- The name "queue_saved_list" says "list": a word for reading.
Description, as the server wrote it Free read-only saved queue status utility for agents asking whether AurelianFlo can list prior compliance_queue_optimize results. AurelianFlo does not persist saved queues server-side; rerun compliance_queue_optimize with the original review_items to recreate a queue.
Annotations the server declares
- title: Saved Queue Status
- readOnlyHint: true
report_saved_retrieveFree read-only past report retrieval status utility for agents asking about previously generated reports.No findings
Why it is in this group
- The name "report_saved_retrieve" says "retrieve": a word for reading.
Description, as the server wrote it Free read-only past report retrieval status utility for agents asking about previously generated reports. AurelianFlo returns report artifacts inline as artifact.contentBase64 and does not persist hosted report files server-side.
Annotations the server declares
- title: Saved Report Retrieval Status
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.4.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http core https://api.aurelianflo.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__core__queue_saved_list",
"mcp__core__report_saved_retrieve"
],
"ask": [
"mcp__core__server_capabilities",
"mcp__core__wallet_ofac_report",
"mcp__core__wallet_ofac_screen",
"mcp__core__wallet_ofac_batch",
"mcp__core__compliance_edd_report",
"mcp__core__compliance_exposure_forecast",
"mcp__core__compliance_queue_optimize",
"mcp__core__report_pdf_generate",
"mcp__core__report_docx_generate"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as core. Review it before you use it.