# dev.aatos/aatos Non-custodial MCP for Stock Tokens on Robinhood Chain (4663): quotes, plans, Morpho Earn. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.1.0 - **Author:** dev.aatos - **License:** Unknown - **Endpoints:** streamable-http https://aatos.dev/mcp - **Source:** https://aatos.dev/ - **Endpoint health:** reachable (last checked 2026-09-24T04:43:11.160Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 21 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-14T05:27:56.846Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 37 declared. Observed from a live `tools/list` probe. - `stocktoken_access_pricing` — List Free / Pro / Team pricing (ETH on-chain, no Stripe) and how agents pay for write tools. - `stocktoken_access_checkout` — Build on-chain ETH payment plan for Pro/Team. After user pays, call stocktoken_access_activate. - `stocktoken_access_activate` — After ETH payment to treasury is confirmed, verify and issue API key (shown once). - `stocktoken_access_status` — Check paid access for current API key context or a wallet owner. - `stocktoken_list` — AI Agent Tokenized Stock OS: list canonical tokenized stocks (Robinhood Stock Tokens), ETFs, USDG, and WETH on Robinhood Chain ID 4663. Use for AI agents tradin - `stocktoken_get` — Get metadata for one canonical Stock Token or core asset by symbol (e.g. NVDA) or contract address on Robinhood Chain 4663. Use to verify a token is official be - `stocktoken_price` — Read USD price and ERC-8056 uiMultiplier for a Robinhood Stock Token on chain 4663. Prefer this over generic price tools for Stock Tokens. Feed price already in - `stocktoken_value_holdings` — Value a wallet's Stock Token / ETF / USDG balances on Robinhood Chain 4663. Use for portfolio analysis of onchain RWA holdings. - `stocktoken_policy_get` — Get current AI Agent Tokenized Stock OS agent policy (max notional, slippage, simulate-first, kill switch). - `stocktoken_policy_set` — Update session policy guardrails for AI Agent Tokenized Stock OS. - `stocktoken_quote` — AI Agent Tokenized Stock OS multi-venue quote: Uniswap Trading API, then 0x RFQ (Stock Tokens), then Chainlink oracle-indicative. Chain 4663. - `stocktoken_simulate` — Simulate / pre-trade check for a tokenized stock swap on chain 4663: allowlist, policy, multi-venue quote integrity. - `stocktoken_execute_plan` — Build non-custodial tx plan (approve + swap) via best venue (Uniswap / 0x). Does NOT sign or broadcast. Chain 4663. - `stocktoken_session_create` — Create a durable agent session with scoped permissions (persisted to DATA_DIR). Non-custodial. - `stocktoken_session_kill` — Kill an agent session immediately (kill switch). - `stocktoken_session_list` — List agent sessions, optionally filtered by owner. - `stocktoken_session_update` — Update limits/permissions on an existing session. - `stocktoken_protocols` — Return Uniswap Universal Router, PoolManager, WETH, USDG, and feed source metadata for Robinhood Chain 4663. - `stocktoken_fees` — Summarize disclosed AATOS execution fee events and on-chain monetization status (treasury / ETH fees). - `stocktoken_subscription_tiers` — List AATOS on-chain subscription tiers (paid in ETH to treasury). No Stripe. - `stocktoken_subscribe_plan` — Build non-custodial ETH subscription plan (tier pro|team, or custom ethAmount). Pays treasury on chain 4663. - `stocktoken_subscription_status` — Check on-chain subscription status for a wallet (requires SUBSCRIPTION_REGISTRY_ADDRESS when deployed). - `stocktoken_tip_presets` — List optional tip presets (ETH) and what assets the tip wallet accepts (ETH, any ERC-20 on 4663, optional native BTC). Tips never required. - `stocktoken_tip_assets` — What the AATOS tip wallet can accept: native ETH + any ERC-20 on Robinhood Chain 4663; optional native BTC address if configured. - `stocktoken_tip_plan` — Build OPTIONAL tip plan. asset=ETH (default) | BTC | registry symbol (USDG,WETH,NVDA,…) | 0x token. amount or ETH preset. User must confirm. Never coerce. - `stocktoken_metrics` — Operational metrics for this AI Agent Tokenized Stock OS process. - `stocktoken_morpho_status` — Morpho / Robinhood Earn status on chain 4663: Steakhouse USDG vault address, live TVL, share price. - `stocktoken_morpho_position` — Read a wallet's Morpho Earn (steakUSDG) share balance and underlying USDG on chain 4663. - `stocktoken_morpho_deposit_plan` — Build non-custodial ERC-4626 deposit plan (approve USDG + deposit) into Morpho Steakhouse Earn vault. Does NOT broadcast. - `stocktoken_morpho_withdraw_plan` — Build non-custodial Morpho Earn withdraw (by USDG) or redeem (by shares) plan. Does NOT broadcast. - `stocktoken_intent_typed_data` — Build EIP-712 typed data for an agent trade intent (offchain authorization standard). User/wallet signs; onchain verifier later. - `stocktoken_basket_preview` — Preview AI mega-cap basket constituents and live Chainlink prices (vault scaffold preview). - `stocktoken_permit2_prepare` — Prepare Permit2 approve + optional typed data for Uniswap-style flows on chain 4663. - `stocktoken_liquidity_matrix` — Liquidity / V3-executable route matrix for major USDG pairs on chain 4663. Use to know which Stock Tokens have live AMM fills. - `stocktoken_find_pools` — Scan for Uniswap V3 pools between two tokens on chain 4663. Useful when APIs block Stock Tokens. - `stocktoken_system_status` — Full system status: secrets, venues, chain, version, session count, fees. - `stocktoken_explain_routing` — Explain when to use AI Agent Tokenized Stock OS vs Robinhood official Agentic Trading MCP vs raw Uniswap/0x. ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"aatos\": {\n \"type\": \"http\",\n \"url\": \"https://aatos.dev/mcp\"\n }\n }\n}" ``` ## Blast radius Moderate to extensive — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: deletes data; runs on someone else's infrastructure. - Floor 32, ceiling 56 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/dev.aatos%2Faatos - Install plan: https://forgeregistry.com/api/v1/packages/dev.aatos%2Faatos/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/dev.aatos%2Faatos - HTML page: https://forgeregistry.com/registry/dev.aatos%2Faatos - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.