Skip to content

Security: stevevstd-oss/eterna-mcp-agent-starter

Security

SECURITY.md

Security and risk notes

Custody model

  • The agent (MCP or CLI) operates an isolated sub-account provisioned by Eterna: it can trade, it cannot withdraw.
  • Your master account keeps custody and funds the sub-account. Fund it only with what your strategy needs.

Credentials

  • CLI credentials live in ~/.eterna/credentials.json. Never commit this file or copy it into a repo, container image, or CI log.
  • Never paste API keys or OAuth tokens into prompts, issues, or chat logs.
  • If a key may have leaked, revoke it and re-run eterna login.

Agent guardrails

  • Keep Claude's Needs Approval mode on until a strategy has proven itself under supervision.
  • Put hard limits in your prompts: max % equity per trade, max leverage, mandatory stop loss.
  • Log every execution; review fills and fees weekly.

Risk warning

Perpetual futures are leveraged instruments. You can lose more than a position's margin in fast markets. Nothing in this repository is financial advice; use at your own risk.

There aren't any published security advisories