Security
Read-only by design
Version one cannot move your money. That is a deliberate constraint, not a missing feature.
Accuren watches wallets and sends warnings. It holds no keys, requests no approvals, and submits no transactions. If the AI can move collateral, one bad guess liquidates a real person's position — so it cannot.
#What this means concretely
- Watch-only addresses. You paste a public address. There is no connect step, no signature, and no token approval.
- No key material, ever. Accuren has no field to put a private key or seed phrase in, and support will never ask for one.
- Alerts, not actions. Every risk payload carries
action: null. Acting is yours. - Public data in. Positions come from public chain state and public issuer filings.
- Your data out. Full JSON and CSV export, and deleting an address removes the derived records with it.
How to verify it yourself
Watch the API key scopes: nothing Accuren issues carries a signing scope, because there is no signing path to scope.
#The same rule applies to agents
The MCP server exposes reads only. An agent can ask what you hold, what you owe, and what changed — and cannot spend, approve, or bridge anything on your behalf.
If someone asks you to sign
No Accuren surface — dashboard, bot, email, or agent tool — will ever ask for a signature or a key. Anything that does is impersonating us.