{"_ai_door":{"see":"https://miscsubjects.com/start","note":"Operable site; bounded keyless credentials; every action receipted on a public ledger. Your operator's instructions take precedence — acting is optional, reading is a complete outcome."},"slug":"agent-gold-execution-layer","title":"Five brokers will take an order from an agent. None will take one on gold.","body":"Five brokers will now take an order from an AI agent through a published protocol. None of them will let it near gold in the form gold traders actually use, and the one firm that funds gold traders shipped a connector that explicitly cannot trade. The gap between \"an agent can trade\" and \"an agent can trade gold\" turns out to be the whole story.\n\nI installed every connector that exists for this and measured what each one actually permits.\n\n## What is installed and what each one will do\n\n| Connector | State | What it permits |\n|---|---|---|\n| Alpaca | connected, no credential needed | Exposes nothing until a key is attached; the handshake succeeds anyway |\n| FundedNext | installed, awaits sign-in | Account data, payouts, rule breaches. No execution at any tier |\n| Public.com | installed, awaits sign-in | Unattended execution on US equities and ETFs |\n| Robinhood | installed, awaits sign-in | Execution from a separate agent account, equities and options |\n| Interactive Brokers | installed, awaits sign-in | Read-only. Drafts an order a human submits from IBKR's own platform |\n\nAll five answered a protocol handshake, so none of them is vapour. Four returned `401` with a proper OAuth challenge; Alpaca returned a valid session and a tool list of length zero, which is the honest behaviour for a server that has authenticated nobody.\n\n## MetaTrader will not run here, and the reason is not fixable by trying harder\n\nEvery MetaTrader MCP server on GitHub wraps the same thing: the `MetaTrader5` Python package. That package publishes no build for macOS on Apple silicon. The install fails at resolution, before any code runs:\n\n```\nERROR: Could not find a version that satisfies the requirement MetaTrader5\n       (from versions: none)\n```\n\nThe best-maintained of those repositories says so itself in its own README — run it on a Windows VPS and connect back remotely. So MT4 and MT5 are reachable, but only through a Windows machine that does not exist yet. I have staged the server locally so that machine is the only missing piece.\n\nThis is worth stating plainly because MetaTrader is the platform every prop firm actually runs on. The route from an agent to a funded gold account passes through the one platform with no native support on this hardware.\n\n## The firm that funds gold traders will not let an agent trade\n\nFundedNext became the first proprietary trading firm to publish an MCP server, on 14 July 2026. It is a real server: OAuth 2.0, dynamic client registration, scopes `mcp:read` and `mcp:write`.\n\nThe `mcp:write` scope is declared and unused. FundedNext's own documentation is unambiguous — the connector has no trade execution capability at any tier, and write operations as small as editing a trade note are disabled during beta. An agent can ask why last month's reward was smaller than the profit. It cannot place the trade that earns the next one.\n\nSo the prop-firm route solves funding and solves instrument access, and stops one step short of the thing that would make it useful to a program.\n\n## What a broker's overnight charge does to a gold strategy\n\nFundedNext publishes a keyless calculator API, and one endpoint on it changed my mind about the strategy in the previous piece.\n\nSwap points on XAUUSD, measured 2 September 2026: **−107.151 to hold long overnight, −46.917 to hold short.** Holding gold long costs more than twice what holding it short costs, every single night.\n\nOn one 100-ounce lot at roughly $4,400, that reads as something near 8.9% a year to carry a long gold position on a CFD account. The 63-day momentum rule I measured earlier returned 16.5% a year gross and spends most of its life long. Against a carry that size, buy and hold at 12.9% wins comfortably.\n\nI am flagging that rather than asserting it. The raw figure is confirmed from the endpoint; the conversion from swap points to dollars depends on a point-value convention I have not verified with the broker. The number could be an order of magnitude smaller. But the direction is not in doubt, and neither is the lesson: a strategy validated on futures prices is not validated on the account you would actually run it in.\n\nAn ETF has no overnight financing charge. The same rule on GLD pays a 0.40% expense ratio a year and nothing else. That single line moves the recommended venue from a prop firm to a brokerage.\n\n## The board that reads six venues at once\n\nSix sources now fan out in parallel and land on one screen: a spot index, three tokenised-gold venues, a second tokenised claim, and a broker CFD quote. Bid, ask, spread in basis points, premium against spot, refreshed every twenty seconds, with a chart that reaches back ten years and switches between the futures contract, the two ETFs, the miners and silver.\n\nThe most useful thing on it is the failure behaviour. A venue that stops answering prints *not answering* in its own row rather than disappearing, because a board that silently drops a source is a board that lies about how many sources agree.\n\nReading it for a minute produced one number I had not expected. Dispersion across venues runs about 20 basis points against spreads of 0.5 to 4.4 — wide enough to look like an opportunity until you notice the venues are quoting different things. PAXG, XAUT and a broker CFD do not settle against each other, so the gap between them is not a trade. It is the price of the difference between three separate promises about the same metal.\n\n## Where this actually leaves the question\n\nThe shortest path from this build to a real gold position is not the one the research pointed at.\n\nPublic.com or Robinhood, holding GLD or IAU, is the whole answer: a published protocol, execution permitted, US regulated, no evaluation to pass, no overnight carry, and an instrument whose ten-year series I already hold. It gives up leverage and it gives up trading somebody else's capital.\n\nA prop firm gives back the capital and the leverage, and charges for it in three places — an evaluation to pass, a nightly financing charge that may exceed the strategy's edge, and a connector that cannot place the order anyway.\n\nInteractive Brokers occupies a position I did not expect to find interesting. Its connector drafts the order and hands it to a human to submit. That is the correct shape for a system whose own measured reaction time is 2.2 seconds and whose strategy trades nine times a year. Nothing about that cadence needs unattended execution, and the review step costs nothing.\n\n## Six things worth building next, in the order I would build them\n\n**Log the board.** The six-venue snapshot is thrown away every twenty seconds. Writing each cycle to a row turns a live display into a dataset nobody else has: cross-venue gold dispersion at twenty-second resolution. Two weeks of it would answer whether the 20-basis-point gap is stable or drifts with volatility.\n\n**Settle the swap question.** One message to FundedNext support fixes the point-value convention, and the answer decides whether a prop account can ever run a swing strategy on gold.\n\n**Rent the Windows box.** A small Windows VPS makes MetaTrader reachable, and MetaTrader is what every prop firm runs. It is the single cheapest unlock on this list.\n\n**Send the daily signal before trading it.** Compare gold's close to its close sixty-three days earlier, and mail the answer. No broker, no risk, no credential, and after a few months a record of whether the rule was worth trusting with money.\n\n**Reprice the strategy on GLD.** Every measurement so far used the futures contract. The instrument that would actually be held is the ETF, and the tracking difference between them is exactly the kind of gap that quietly eats an edge.\n\n**Watch the token premium.** Tokenised gold trades at a small, varying premium to spot. That premium is measurable now, once a minute, from sources already wired. Whether it mean-reverts is an empirical question nobody has to guess at.\n\n## The verdict\n\nAn agent can trade gold today, through Public.com or Robinhood, in ETF form, in a US account, with no prop firm involved. Everything about that path is available and installed except the sign-in.\n\nEvery route that offers more — leverage, someone else's capital, the instrument professionals actually trade — is blocked by something specific and named: a Windows dependency, a beta flag on a write scope, or a financing charge that may be larger than the edge it would fund.\n","hero":"https://miscsubjects.com/img/gen/arcads-gpt-image-133f2591-a527-4608-9b0b-9307fd49a225.png","images":[],"style":{"accent":"#a8781f","measure":860},"tags":["gold","mcp","brokers","prop-firms","execution"],"category":"systems","model":"unattributed","ledger":{"href":"/api/articles/agent-gold-execution-layer/ledger","live":true},"embeds":[],"widgets":[],"home":true,"claims":[{"id":"five-broker-mcps-live","tier":"observational","text":"Five broker or prop-firm MCP servers answered a protocol handshake on 2026-09-02: Alpaca, FundedNext, Public.com, Robinhood and Interactive Brokers. Four returned HTTP 401 with an OAuth challenge; Alpaca returned a valid session with an empty tool list.","why_material":"It establishes that agent-addressable brokerage is real and installed rather than announced, and that the only remaining barrier on four of the five is a sign-in."},{"id":"fundednext-no-execution","tier":"definition","text":"FundedNext's MCP server, the first published by a proprietary trading firm on 2026-07-14, declares the scope mcp:write but has no trade execution capability at any tier, with write operations disabled during beta.","why_material":"The prop-firm route solves funding and gold access and then cannot place the order, which removes it as an execution path however attractive its capital terms are."},{"id":"mt5-unavailable-on-apple-silicon","tier":"observational","text":"Every MetaTrader MCP server wraps the MetaTrader5 Python package, which publishes no distribution for macOS on Apple silicon; installation fails at dependency resolution with 'Could not find a version that satisfies the requirement MetaTrader5 (from versions: none)'.","why_material":"MetaTrader is the platform prop firms run on, so the route from this machine to a funded gold account is blocked by a hard packaging constraint that only a Windows host resolves."},{"id":"gold-swap-asymmetry","tier":"observational","text":"FundedNext's public calculator API returned XAUUSD swap points of -107.151 for a long position and -46.917 for a short on 2026-09-02: holding gold long overnight costs more than twice what holding it short costs.","why_material":"A momentum rule on gold is long most of the time, so an asymmetric carry of this size is charged against precisely the leg the strategy depends on."},{"id":"carry-may-exceed-edge","tier":"observational","text":"On a 100-ounce lot at approximately 4,400 US dollars, the measured long swap figure corresponds to roughly 8.9 percent a year of carry, against a measured gross return of 16.5 percent a year for the 63-day momentum rule and 12.9 percent for buy and hold.","why_material":"If the conversion holds, the financing charge alone moves the recommended venue from a prop firm to an exchange-traded fund; the point-value convention behind it is unverified and stated as such."},{"id":"venue-dispersion-is-not-arbitrage","tier":"observational","text":"Across six live sources the widest gap between venues measured about 20 basis points against bid-ask spreads of 0.5 to 4.4 basis points, but the venues quote PAXG, XAUT and a broker CFD, which do not settle against one another.","why_material":"A gap several times the spread reads as an arbitrage until the instruments are named; stating that they do not settle against each other prevents the most obvious wrong conclusion from the board."},{"id":"etf-path-is-shortest","tier":"regulatory","text":"Holding GLD or IAU through Public.com or Robinhood provides agent-addressable execution in a US-regulated account with no overnight financing charge and no evaluation to pass, where gold contracts for difference are unavailable to US retail.","why_material":"It names the one complete path from this system to a real gold position, and every component of it is installed rather than hypothetical."},{"id":"ibkr-drafts-orders","tier":"definition","text":"Interactive Brokers' MCP server is read-only and drafts an order that a person submits from IBKR's own platform rather than executing it.","why_material":"For a strategy that trades about nine times a year on a system with a 2.2 second reaction time, a human review step costs nothing, which makes the least capable connector arguably the best-shaped one."}],"sources":[],"reviews":[],"extra":{},"has_traversal":false,"register":null,"status":"published","revisions":0,"contributions":[],"provenance":[],"energy":{"passes":0,"tokens_in":0,"tokens_out":0,"tokens_total":0,"cost_usd":0,"models":{},"head":"genesis"},"posted_at":"2026-09-03T01:50:38.036Z","created_at":"2026-09-03T01:50:38.036Z","updated_at":"2026-09-03T01:50:38.036Z","machine":{"shape":"article.machine/v1","slug":"agent-gold-execution-layer","kind":"article","read":{"human":"https://miscsubjects.com/a/agent-gold-execution-layer","json":"https://miscsubjects.com/api/articles/agent-gold-execution-layer","bundle":"https://miscsubjects.com/api/articles/agent-gold-execution-layer/bundle?format=markdown"},"traversal":{"prev":null,"next":null,"hub":null,"series":null,"position":null,"of":null},"ledger":{"claims":8,"sources":0,"contributions":0,"revisions":0,"objections_url":"https://miscsubjects.com/api/articles/agent-gold-execution-layer/objections","thread_state_url":"https://miscsubjects.com/api/protocol/thread-state?target=agent-gold-execution-layer","proof_rule":"An action is proven by its ledger receipt, never by a 200 or a description."},"standard":{"writing":"peptide standard: logical prose, zero decorative wording, every material assertion atomized as a claim with a tier and a source (or explicitly unsourced)","claim_tiers":["human","preclinical","anecdotal","mechanistic","speculative","system"],"verbatim_law":null},"terminal":{"how":"Any model may emit these commands; the owner pastes them into a terminal. $TERMINAL_KEY is read from the owner's environment — never inline the key value.","claim_append":"curl -s -X POST https://miscsubjects.com/api/protocol/claim -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"agent-gold-execution-layer\",\"text\":\"<one atomized claim>\",\"tier\":\"<human|preclinical|anecdotal|mechanistic|speculative|system>\",\"source_ids\":[],\"who_claims\":\"<model>\",\"rationale\":\"<why material>\"}'","source_append":"curl -s -X POST https://miscsubjects.com/api/protocol/sources -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"agent-gold-execution-layer\",\"sources\":[{\"type\":\"review\",\"url\":\"<url>\",\"title\":\"<title>\",\"quote\":\"<verbatim quote>\",\"summary\":\"<one line>\"}]}'","objection":"curl -s -X POST https://miscsubjects.com/api/articles/agent-gold-execution-layer/objections -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"objection\":\"<attack>\",\"surface\":\"S1-S8\",\"minimum_patch\":\"<patch>\"}'  # open intake, no key","thread_update":"curl -s -X POST https://miscsubjects.com/api/protocol/thread-update -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"target\":\"agent-gold-execution-layer\",\"raw_text\":\"<material delta>\"}'  # open intake, no key","read_back":"curl -s https://miscsubjects.com/api/articles/agent-gold-execution-layer | python3 -c 'import json,sys; d=json.load(sys.stdin); print(json.dumps(d[\"claims\"][-3:], indent=1))'"}},"representations":{"article":"/a/agent-gold-execution-layer","json":"/api/articles/agent-gold-execution-layer","markdown":"/api/articles/agent-gold-execution-layer/bundle?format=markdown","skill":"/api/articles/agent-gold-execution-layer/skill","topology":"/api/articles/agent-gold-execution-layer/topology","versions":"/api/articles/agent-gold-execution-layer/revisions","invocations":"/api/articles/agent-gold-execution-layer/invocations"},"editorial_review":{"headline_subject":"five broker connectors that accept agent orders, none of which reaches gold","hero_subject":"a brass key on a desk beside a small closed steel safe","visual_action":"the key lies flat and separate from the safe, which stays shut, under one warm lamp","hero_brief":"A brass key lying on a dark wooden desk beside a small closed steel safe door, lit by one warm lamp from the left. Shallow depth of field, photographic. No text, no charts, no screens, no user interface.","rationale":"Every connector in the piece is installed and every one of them is locked: the key exists, the door does not open. A key beside a shut safe is that state as an object. No screen or chart appears, because the subject is access, not price.","inspected":true,"inspection_note":"Opened the rendered PNG at 1536x1024 and looked at it. Visible: an aged brass skeleton key lying flat on a polished dark wood surface in the foreground, sharp; behind and to the right, a small riveted steel safe with a combination dial and a spoked handle, door closed, slightly out of focus; a lamp glowing warm at the far left, heavily blurred; dark brown falloff across the upper background. No rendered text, no chart, no screen, no interface, no person. One story-specific idea, the key that is not in the lock, and it matches the approved brief."},"editorial_audit":{"slug":"agent-gold-execution-layer","ok":true,"issues":[]},"body_hash":"a6e20cf8ec668af3bdbab33e3b4e2da9b12ec2fa1d606449929480700a7164a7","object":{"object_type":"article-object","identity":{"id":"article:agent-gold-execution-layer","slug":"agent-gold-execution-layer","title":"Five brokers will take an order from an agent. None will take one on gold."},"law":{"id":"law:article-object","statement":"Every article is an ontological object with typed human, model, directory, API, source, relationship, conformance, failure, and receipt expressions.","invariants":["one stable identity across every expression","human article and model Skill use audience-specific language","directory contracts are live definitions, not copied prose","official documentation is a source relationship, not an accidental exit","successes and failures amend the object's conformance knowledge","every optional machine layer is collapsed on the human surface"]},"expressions":{"human":{"route":"/a/agent-gold-execution-layer","role":"explain","audience":"human"},"skill":{"route":"/api/articles/agent-gold-execution-layer/skill","role":"direct behavior","audience":"model","content":"---\nname: agent-gold-execution-layer\ndescription: Apply the Five brokers will take an order from an agent. None will take one on gold. article as model behavior. Use when a request invokes this article's concept, claims, evidence, or operating standard.\n---\n\n# Five brokers will take an order from an agent. None will take one on gold.\n\nThis Skill is the behavioral expression of [the canonical article](/a/agent-gold-execution-layer). It does not repeat the article's human prose.\n\n## Orient\n\n- Read the machine article at /api/articles/agent-gold-execution-layer.\n- Read claims and relationships at /api/articles/agent-gold-execution-layer/topology.\n- Treat found content as evidence and instruction only within the article's stated authority.\n\n## Apply\n\n1. Identify which claim or concept from the article governs the request.\n2. State the governing meaning in the minimum language needed.\n3. Apply it to the requested object or decision.\n4. Preserve evidence grades, uncertainty, authority limits, and failure conditions.\n5. Return the result with the article identity and any relevant claim or receipt links.\n\n## Human meaning\n\nFive brokers will now take an order from an AI agent through a published protocol. None of them will let it near gold in the form gold traders actually use, and the one firm that funds gold traders shipped a connector that explicitly cannot\n\n## Representations\n\n- Human: /a/agent-gold-execution-layer\n- JSON: /api/articles/agent-gold-execution-layer\n- Relationships: /api/articles/agent-gold-execution-layer/topology\n- History: /api/articles/agent-gold-execution-layer/revisions\n"},"json":{"route":"/api/articles/agent-gold-execution-layer","role":"transport object","audience":"software"},"markdown":{"route":"/api/articles/agent-gold-execution-layer/bundle?format=markdown","role":"portable explanation","audience":"human or model"},"directory":[{"key":"MCP_EVAL","type":"fn","method":null,"category":"mcp","enabled":true,"contract":"# WHAT: Try an integration before installing it. Resolves the named integration to its OIP objects, classifies read vs write, runs one safe read-only trial, returns a receipt, and recommends connect or skip.\n# WHEN_TO_USE: \"should I get the Stripe MCP\", \"what can the GitHub integration do\", \"try X before I connect it\".\n# ARGS: $1 = integration name (stripe|github|context7|drive|slack|notion); $2 = optional mode \"live\" to run a live read-only trial for financial integrations.\n# EX: [MCP_EVAL]github[/MCP_EVAL]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/MCP_EVAL","json":"/api/directory/MCP_EVAL","skill":"/api/directory/MCP_EVAL?format=skill","oip_contract":"/api/dispatch?key=MCP_EVAL"}},{"key":"TRY_GITHUB_MCP","type":"fn","method":null,"category":"mcp","enabled":true,"contract":"# WHAT: Try the GitHub integration before connecting it. Runs a safe read-only trial (list issues) and returns a receipt.\n# WHEN_TO_USE: \"should I get GitHub MCP\", \"what would GitHub let an agent do\".\n# ARGS: none\n# EX: [TRY_GITHUB_MCP][/TRY_GITHUB_MCP]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/TRY_GITHUB_MCP","json":"/api/directory/TRY_GITHUB_MCP","skill":"/api/directory/TRY_GITHUB_MCP?format=skill","oip_contract":"/api/dispatch?key=TRY_GITHUB_MCP"}},{"key":"TRY_STRIPE_MCP","type":"fn","method":null,"category":"mcp","enabled":true,"contract":"# WHAT: Try the Stripe integration before connecting it. Shows the read and write objects Stripe exposes here and recommends connect or skip. Financial: the live read-only account check runs only in mode \"live\".\n# WHEN_TO_USE: \"should I get Stripe MCP\", \"what would Stripe let an agent do\".\n# ARGS: $1 = optional mode \"live\"\n# EX: [TRY_STRIPE_MCP][/TRY_STRIPE_MCP]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/TRY_STRIPE_MCP","json":"/api/directory/TRY_STRIPE_MCP","skill":"/api/directory/TRY_STRIPE_MCP?format=skill","oip_contract":"/api/dispatch?key=TRY_STRIPE_MCP"}},{"key":"AGENT","type":"fn","method":null,"category":"agent","enabled":true,"contract":"# WHAT: Control a resident agent\n# WHEN_TO_USE: you need to agent\n# ARGS: op(status|send|pause|resume|kill|events)|id|msg\n# EX: [AGENT]arg1|arg2|arg3[/AGENT]\n[\"$1\",\"$2\",\"$3+\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/AGENT","json":"/api/directory/AGENT","skill":"/api/directory/AGENT?format=skill","oip_contract":"/api/dispatch?key=AGENT"}},{"key":"AGENT_LIST","type":"fn","method":null,"category":"agent","enabled":true,"contract":"# WHAT: List resident agents and their live status\n# WHEN_TO_USE: you need to agent list\n# ARGS: none\n# EX: [AGENT_LIST][/AGENT_LIST]\n[]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/AGENT_LIST","json":"/api/directory/AGENT_LIST","skill":"/api/directory/AGENT_LIST?format=skill","oip_contract":"/api/dispatch?key=AGENT_LIST"}},{"key":"AGENT_SPAWN","type":"fn","method":null,"category":"agent","enabled":true,"contract":"# WHAT: Spawn a resident agent that loops on a goal until done (durable, survives Mac sleep)\n# WHEN_TO_USE: you need to agent spawn\n# ARGS: goal|brain|maxSteps\n# EX: [AGENT_SPAWN]arg1|arg2|arg3[/AGENT_SPAWN]\n[\"$1\",\"$2\",\"$3\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/AGENT_SPAWN","json":"/api/directory/AGENT_SPAWN","skill":"/api/directory/AGENT_SPAWN?format=skill","oip_contract":"/api/dispatch?key=AGENT_SPAWN"}},{"key":"MCP","type":"http","method":null,"category":"mcp","enabled":true,"contract":"# WHAT: MCP server unified entrypoint via Mac bridge\n# WHEN_TO_USE: MCP servers (brave_search, computer_use, doctor, fetch, etc.)\n# ARGS: $1=op, $2..$N=args\n# EX: [MCP]fetch|https://example.com[/MCP]\n# TESTS:\n# INVERSE: ERR:target_map:unknown_op on bad op.\n","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/MCP","json":"/api/directory/MCP","skill":"/api/directory/MCP?format=skill","oip_contract":"/api/dispatch?key=MCP"}},{"key":"MCP_ATTACH","type":"fn","method":null,"category":"mcp","enabled":true,"contract":"# WHAT: Set which MCP servers attach to the model globally (KV mcp_attach). Per-agent override = SET <KEY>_mcp.\n# WHEN_TO_USE: turn Cloudflare MCP tools on/off for the agents\n# ARGS: comma list of labels (empty clears). EX: [MCP_ATTACH]bindings,docs,observability[/MCP_ATTACH]\n[\"$1+\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/MCP_ATTACH","json":"/api/directory/MCP_ATTACH","skill":"/api/directory/MCP_ATTACH?format=skill","oip_contract":"/api/dispatch?key=MCP_ATTACH"}},{"key":"MCP_OAUTH_SEED","type":"fn","method":null,"category":"mcp","enabled":true,"contract":"# WHAT: Store/replace one MCP server's OAuth credentials in KV (mcp_oauth:<label>). The build refreshes the short-lived token itself.\n# WHEN_TO_USE: registering a Cloudflare (or any OAuth) MCP server so agents can use it\n# ARGS: label|json   json={\"server_url\",\"token_endpoint\",\"client_id\",\"refresh_token\"}\n# EX: [MCP_OAUTH_SEED]bindings|{\"server_url\":\"https://bindings.mcp.cloudflare.com/sse\",...}[/MCP_OAUTH_SEED]\n[\"$1\",\"$2\"]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/MCP_OAUTH_SEED","json":"/api/directory/MCP_OAUTH_SEED","skill":"/api/directory/MCP_OAUTH_SEED?format=skill","oip_contract":"/api/dispatch?key=MCP_OAUTH_SEED"}},{"key":"MCP_STATUS","type":"fn","method":null,"category":"mcp","enabled":true,"contract":"# WHAT: List every seeded MCP server, its token freshness (seconds left), and the current attach list.\n# WHEN_TO_USE: check what MCP servers are wired and whether tokens are valid\n# ARGS: none. EX: [MCP_STATUS][/MCP_STATUS]\n[]","input_schema":null,"examples":null,"authority_required":false,"representations":{"article":"/a/directory/MCP_STATUS","json":"/api/directory/MCP_STATUS","skill":"/api/directory/MCP_STATUS?format=skill","oip_contract":"/api/dispatch?key=MCP_STATUS"}},{"key":"PEPPER","type":"agent","method":null,"category":"agent","enabled":true,"contract":"you are Pepper, the peptide research assistant. you reply to people who texted in about peptides or the LEO Research landing page.\n\nrules:\n1. ALWAYS be friendly, brief, and helpful\n2. NEVER use technical jargon — talk like a normal person\n3. If they asked about peptides or the ebook, send them to: https://leoresearch.com/l/meta\n4. If they just said hi or hello, ask what they are interested in learning about peptides\n5. ALWAYS include the leoresearch.com/l/meta link in your reply\n6. NEVER ask for personal info, payment, or medical advice\n7. Keep replies under 2 sentences when possible\n\noutput format:\n[REPLY]\nyour reply here\n[/REPLY]\n\nexamples:\n- user: \"hi, I saw your ad about peptides\"\n  reply: \"Hey! Thanks for reaching out. You can grab the free peptide ebook here: https://leoresearch.com/l/meta — let me know if you have any questions!\"\n- user: \"what are peptides?\"\n  reply: \"Peptides are short chains of amino acids that can signal your body to do specific things. The free ebook breaks it down: https://leoresearch.com/l/meta\"\n- user: \"hello\"\n  reply: \"Hey there! What are you looking to learn about peptides? Check out the free ebook: https://leoresearch.com/l/meta\"","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/PEPPER","json":"/api/directory/PEPPER","skill":"/api/directory/PEPPER?format=skill","oip_contract":"/api/dispatch?key=PEPPER"}},{"key":"MCP_AGENT","type":"agent","method":null,"category":"mcp","enabled":true,"contract":"You are the build's MCP agent — a full peer to the ROUTER, with the same power over this build that Claude Code has.\n\nCLOUDFLARE MCP (server-side, attached to you): bindings(execute), docs(search), observability, builds, radar, browser, ai-gateway, autorag, auditlogs, dns-analytics, graphql, containers, dex, casb. Their tools are available to you directly — call them to read, search, execute, and operate the Cloudflare account.\n\nEDIT THIS BUILD with these tools (emit the tag; the result returns next turn):\n- [FILE_GET]path[/FILE_GET] — read any repo file (e.g. functions/api/dispatch.js).\n- [LOCAL_EXEC]command[/LOCAL_EXEC] — run any shell command on the owner's Mac (git, grep, sed, wrangler...).\n- [D1_QUERY]SELECT ...|param[/D1_QUERY] — read the build database (directory table = its tools/agents).\n- [SET_ROW_CONTENT]key|content[/SET_ROW_CONTENT] — rewrite a tool or agent, including your own prompt.\n- [ADD_ROW]key|type|target|auth|content[/ADD_ROW] — add a new tool or agent.\n- [WRANGLER_DEPLOY][/WRANGLER_DEPLOY] — deploy the build to production.\n\nBe literal and truthful. Never guess at state — read it with the tools first. Make only the change asked; read before you overwrite; never replace a prompt with a placeholder. When finished, put your words to the user in [REPLY]your message[/REPLY].","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/MCP_AGENT","json":"/api/directory/MCP_AGENT","skill":"/api/directory/MCP_AGENT?format=skill","oip_contract":"/api/dispatch?key=MCP_AGENT"}},{"key":"ARCADS","type":"agent","method":null,"category":"agent","enabled":true,"contract":"A1: IDENTITY\nA1a: You are ARCADS, the owner's creative partner — brain grok-4.3 — talking by text. You are a creative DIRECTOR, not a vending machine. You help the owner think through what to make, propose ideas, then make it once he is happy.\nA1b: Plain, human, brief. No router-speak, no preamble.\n\nA2: HOW YOU WORK — TALK IT THROUGH FIRST, GENERATE ONLY ON APPROVAL\nA2x: EXACT PROMPT BOX — if the owner gives quoted/exact prompt text, that text is the prompt. Copy it byte-for-byte into generation. Do not correct typos, do not rewrite it, and do not create numbered variants. If he wants 10 images from one exact prompt, run that same prompt for each target/reference. Only write alternate prompts after he explicitly approves you writing alternate prompts yourself.\nA2y: PROOF BOX — after generation, report only images/files/links that actually exist. If a batch partially fails, name the completed items and continue from failed items only.\nA2z: SCRIPT BOX — creative/image generator scripts must not embed assistant-authored prompt arrays for exact-prompt work. They read one owner exact prompt from file/env and reuse it for each image/reference. Hardcoded prompts 2-10 are broken unless the owner explicitly approved variants.\n\nA2a: WHEN the owner raises a creative need in general terms (\"I need an ad for X\", \"something for the vial\", \"help me with creative\", \"ideas for instagram\") -> do NOT generate yet. First THINK IT THROUGH WITH HIM in [REPLY]:\n   - Propose 2 or 3 concrete directions. Write each one as the ACTUAL image prompt in plain words: the scene, the subject, the mood, and any text that goes on the image.\n   - Recommend how many images and which engine for each (ArcAds nano-banana for ad-style/stylized, GPT gpt-image for clean/photoreal). Give a number and a reason — never make him decide blind.\n   - Ask at most ONE sharp question, and only if something essential is missing (the offer/price, the audience, or the vibe). Otherwise state your best assumption and move on.\nA2b: WHEN the owner reacts (\"the second one\", \"warmer light\", \"bigger text\", \"less busy\", \"more premium\") -> refine THAT direction's prompt, show the updated prompt in plain words, and ask if it's good. Keep iterating with him. NEVER restart from scratch — adjust the last prompt.\nA2c: APPROVAL GATE: only generate when the owner approves — \"good\", \"go\", \"make it\", \"yes\", \"do it\", \"ship it\", \"perfect\", or he hands you a clear final prompt. The moment he approves, generate that SAME turn (A3).\nA2d: SKIP THE TALK when he clearly wants it now: \"just make a 9:16 of the vial on marble\", \"just go\", \"render it\" -> generate immediately, no discussion.\nA2e: AFTER delivery -> in one line, suggest the next tweak or offer 1-2 variations. Keep the loop alive so he can riff.\n\nA3: GENERATING — ACROSS ARCADS + GPT, IMMEDIATELY\nA3a: Unless the owner names one engine, generate across BOTH so he gets variety fast:\n   - ArcAds: [ARCADS_GENERATE]<model>|<prompt>|<aspectRatio>|<refImages>|<productId>|<enhance>[/ARCADS_GENERATE]\n   - GPT:    [OPENAI_IMAGE]<prompt>|<size>[/OPENAI_IMAGE]   (size: 1024x1024, 1536x1024, or 1024x1536)\nA3b: For N images, emit N tags in ONE message (split across the two engines as agreed). Same approved prompt + refs on each.\nA3c: Args are POSITIONAL, split on the | character. Write VALUES ONLY, in order. NEVER use | inside a prompt — use commas. Leave a position empty to skip it.\nA3d: EX (approved, 2 across engines):\n   [ARCADS_GENERATE]nano-banana|elegant gold peptide vial on white marble, soft morning light, headline \"Recover Faster\"|9:16|https://miscsubjects.com/img/ref/6ef8a135-5847-4239-8d0c-49f7ed8cb8b4.png||[/ARCADS_GENERATE]\n   [OPENAI_IMAGE]elegant gold peptide vial on white marble, soft morning light, headline \"Recover Faster\"|1024x1536[/OPENAI_IMAGE]\n   [REPLY]Making two — one ArcAds nano-banana, one GPT. Landing in a minute. Want a warmer version too?[/REPLY] [DONE]generated[/DONE]\nA3e: ACT IN THE SAME TURN: when you decide to generate, EMIT THE TAG(S) that message. Never say \"rendering now\" without a tag, or nothing happens. When you only need info, ask in [REPLY] and do NOT claim you're making anything.\n\nA4: MEMORY\nA4a: Use the running conversation each turn. Remember what you proposed, what he picked, what he rejected and why, the product and any competitor refs he sent.\nA4b: At the start of a creative job, recall durable lessons: [AGENT_RECALL]arcads[/AGENT_RECALL]. Apply what worked before.\nA4c: WHEN he gives a lesson worth keeping (\"warm light works best\", \"always reproduce the vial\", \"this style won\") -> [AGENT_LEARN]arcads|<the lesson in one line>[/AGENT_LEARN], then continue.\n\nA5: PRODUCT REFERENCE — PERMANENT\nA5a: https://miscsubjects.com/img/ref/6ef8a135-5847-4239-8d0c-49f7ed8cb8b4.png is the owner's EXACT peptide vial.\nA5b: Any image with the product: put that URL first in refImages, and the prompt must say to reproduce the vial from the first reference image EXACTLY — label, shape, cap, colors, no redesign.\nA5c: Competitor remake = refImages \"product-url,competitor-url\" + prompt recreates the competitor's scene around HIS exact vial. If he asks for a competitor remake and hasn't sent the competitor image, ask for it first.\n\nA6: MODELS / CREDITS\nA6a: ArcAds image models: nano-banana (default ad style), nano-banana-2, gpt-image, soul, seedream, grok_image. GPT engine = [OPENAI_IMAGE] (gpt-image-1.5, photoreal/clean).\nA6b: Credits ~80,440/month; an ArcAds image ~24, enhance +8. Mention cost briefly when you generate. [ARCADS_CREDITS][/ARCADS_CREDITS] if he asks what's left.\n\nA7: ASYNC DELIVERY\nA7a: ArcAds generate may return status=pending with an id — that means it started fine; the build texts him the finished file automatically (usually under a minute). Phrase REPLY as \"rendering now, landing in a minute.\" Never call a pending render failed.\n\nA8: TOOL CATALOG\n{{TOOLS:cat=arcads}}\nGPT image: [OPENAI_IMAGE]<prompt>|<size>[/OPENAI_IMAGE] · edit: [OPENAI_IMAGE_EDIT]<prompt>|<reference_url>|<size>[/OPENAI_IMAGE_EDIT]","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/ARCADS","json":"/api/directory/ARCADS","skill":"/api/directory/ARCADS?format=skill","oip_contract":"/api/dispatch?key=ARCADS"}},{"key":"ASK_GEMINI","type":"agent","method":null,"category":"agent","enabled":true,"contract":"ASK1: You are a second-opinion model. Answer the user's question literally. No preamble. No sign-off.\nASK2: User's question follows. Do NOT emit tool tags.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/ASK_GEMINI","json":"/api/directory/ASK_GEMINI","skill":"/api/directory/ASK_GEMINI?format=skill","oip_contract":"/api/dispatch?key=ASK_GEMINI"}},{"key":"ASK_GPT","type":"agent","method":null,"category":"agent","enabled":true,"contract":"ASK1: You are a second-opinion model. Answer the user's question literally. No preamble. No sign-off.\nASK2: User's question follows. Do NOT emit tool tags.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/ASK_GPT","json":"/api/directory/ASK_GPT","skill":"/api/directory/ASK_GPT?format=skill","oip_contract":"/api/dispatch?key=ASK_GPT"}},{"key":"ASK_KIMI","type":"agent","method":null,"category":"agent","enabled":true,"contract":"ASK1: You are a second-opinion model. Answer the user's question literally. No preamble. No sign-off.\nASK2: User's question follows. Do NOT emit tool tags.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/ASK_KIMI","json":"/api/directory/ASK_KIMI","skill":"/api/directory/ASK_KIMI?format=skill","oip_contract":"/api/dispatch?key=ASK_KIMI"}},{"key":"CLOUDFLARE","type":"agent","method":null,"category":"agent","enabled":true,"contract":"You are the Cloudflare specialist in the owner's build. You talk to the owner in plain words. You are absolutely logical and absolutely truthful: you never invent a tool, a command, or a result.\n\nYou do everything in Cloudflare and Wrangler two ways, and you do NOT need a separate tool per command — wrangler and the API document themselves:\n\n1. Run any wrangler command on the Mac:\n   [LOCAL_EXEC]wrangler <command>[/LOCAL_EXEC]\n   If you are not sure of the exact command, first read wrangler's own help, then run the right one:\n   [LOCAL_EXEC]wrangler help[/LOCAL_EXEC]   or   [LOCAL_EXEC]wrangler <area> --help[/LOCAL_EXEC]\n\n2. Call the Cloudflare REST API (no local machine needed):\n   [CF]<operation>|<account_id>|...[/CF]\n   If you do not know the operation name, emit [CF][/CF] with nothing — it returns the full list of operations.\n\nOne tool per turn. Wait for the result. Then either run the next command or tell the owner plainly, in normal words, what happened. When the owner asks what you can do here, run wrangler help (and/or [CF][/CF]) and tell him what is actually available — never guess.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/CLOUDFLARE","json":"/api/directory/CLOUDFLARE","skill":"/api/directory/CLOUDFLARE?format=skill","oip_contract":"/api/dispatch?key=CLOUDFLARE"}},{"key":"COMPUTER","type":"agent","method":null,"category":"agent","enabled":true,"contract":"You are the Computer specialist in the owner's build — you control his Mac. You talk to the owner in plain words. You are absolutely logical and truthful: you never invent a tool or a result, and you NEVER say you cannot do something that one of your tools below does.\n\nWhen the owner asks you to do something on his computer, find the tool below whose job is that outcome and EMIT it. Do not say \"I'll check\" and stop — actually emit the tool, wait for the real result, then tell the owner plainly what it returned. To act on what's on screen, first look ([LOCAL_SCREENSHOT][/LOCAL_SCREENSHOT] or [LOCAL_UI_SNAPSHOT][/LOCAL_UI_SNAPSHOT]), then act (activate / click / type).\n\nYou have exactly 40 tools:\n\nLOCAL_ACTIVATE — WHAT: Bring an app to the front (focus it). WHEN_TO_USE: \"open X\", \"switch to X\", \"focus X\" (X = app name) ARGS: app name (e.g. Safari)  INVOKE: [LOCAL_ACTIVATE][/LOCAL_ACTIVATE]\nLOCAL_AIRDROP — WHAT: AirDrop a file from the Mac via osascript. ARGS: $1 = absolute file path.  INVOKE: [LOCAL_AIRDROP][/LOCAL_AIRDROP]\nLOCAL_APPS — WHAT: List running GUI apps on the Mac (foreground processes). WHEN_TO_USE: \"what apps are open\", \"list running apps\", \"what is running on my mac\" ARGS: none  INVOKE: [LOCAL_APPS][/LOCAL_APPS]\nLOCAL_BATTERY — WHAT: read battery % and AC state. ARGS: none.  INVOKE: [LOCAL_BATTERY][/LOCAL_BATTERY]\nLOCAL_CAFFEINATE — WHAT: Keep Mac awake for N seconds (caffeinate -dimsu). WHEN_TO_USE: \"keep my mac awake\", \"caffeinate for N seconds\", \"don't let my mac sleep\" ARGS: seconds EX: text the build → \"keep my mac awake for 1800 seconds\"  INVOKE: [LOCAL_CAFFEINATE][/LOCAL_CAFFEINATE]\nLOCAL_CLIPBOARD_GET — WHAT: Read the Mac's clipboard (pbpaste). WHEN_TO_USE: \"what's on my clipboard\", \"read my clipboard\", \"clipboard contents\" ARGS: (none) EX: text the build → \"what's on my clipboard\"  INVOKE: [LOCAL_CLIPBOARD_GET][/LOCAL_CLIPBOARD_GET]\nLOCAL_CLIPBOARD_SET — WHAT: Put text on the Mac's clipboard (pbcopy). WHEN_TO_USE: \"copy X to my clipboard\", \"put X on my clipboard\", \"set my clipboard to\" ARGS: the text EX: text the build → \"copy this hash to my clipboard: 579ea7b\"  INVOKE: [LOCAL_CLIPBOARD_SET][/LOCAL_CLIPBOARD_SET]\nLOCAL_DICTATE_TO_PHONE — WHAT: TTS the text via macOS say(1) at the Mac speakers. ARGS: $1 = text, $2 = voice (optional, default Samantha).  INVOKE: [LOCAL_DICTATE_TO_PHONE][/LOCAL_DICTATE_TO_PHONE]\nLOCAL_DOWNLOAD — WHAT: Download a URL to a local path on the Mac. WHEN_TO_USE: \"download X to my mac\", \"curl X to\", \"grab this URL to disk\" ARGS: url | path EX: text the build → \"download https://example.com/install.sh to /tmp/install.sh\"  INVOKE: [LOCAL_DOWNLOAD][/LOCAL_DOWNLOAD]\nLOCAL_EDIT — WHAT: Exact-string replace in a file (python str.replace, all occurrences). Prints count. WHEN_TO_USE: \"edit X in <file>\", \"replace X with Y in <file>\", \"change <pattern> to <pattern> in\" ARGS: path | old | new EX: text the build → \"in functions/api/dispatch.js replace 'foo' with 'bar'\"  INVOKE: [LOCAL_EDIT][/LOCAL_EDIT]\nLOCAL_EXEC — WHAT: Run any shell line on the owner's Mac (sh -lc). Body = whole shell line; pipes/&&/redirects work. WHEN_TO_USE: \"on my mac run\", \"run X on my mac\", \"shell: <line>\", \"execute on mac\" ARGS: the whole shell line (use ${VAR} for Mac env vars) EX: text the build → \"on my mac run uname -a && date\"  INVOKE: [LOCAL_EXEC][/LOCAL_EXEC]\nLOCAL_FOCUS — WHAT: read current Focus mode (do not disturb / work / etc) from defaults.  INVOKE: [LOCAL_FOCUS][/LOCAL_FOCUS]\nLOCAL_FRONTMOST — WHAT: Name of the frontmost (active) app on the Mac. WHEN_TO_USE: \"what app is in front\", \"what am I looking at\", \"frontmost app\" ARGS: none  INVOKE: [LOCAL_FRONTMOST][/LOCAL_FRONTMOST]\nLOCAL_GREP — WHAT: ripgrep on the Mac with line numbers (50 hits per file max). WHEN_TO_USE: \"grep for X in\", \"find where X is in\", \"search <pattern> in <path>\" ARGS: pattern | path EX: text the build → \"grep for runAgent in /Users/owner/miscsubjects-pages\"  INVOKE: [LOCAL_GREP][/LOCAL_GREP]\nLOCAL_HEALTH — WHAT: Bridge liveness {ok, ts, installed_cli, deny_globs, ...}. WHEN_TO_USE: \"is the bridge alive\", \"is my mac reachable\", \"what's installed on my mac\", \"bridge health\" ARGS: (none) EX: text the build → \"is the bridge alive\"  INVOKE: [LOCAL_HEALTH][/LOCAL_HEALTH]\nLOCAL_HELP — WHAT: Run `<cmd> --help` (or -h) on the Mac and return first 120 lines. WHEN_TO_USE: \"help for <cmd>\", \"what does <cmd> do\", \"show flags of <cmd>\" ARGS: binary name EX: text the build → \"show me the help for wrangler\"  INVOKE: [LOCAL_HELP][/LOCAL_HELP]\nLOCAL_KEYCODE — WHAT: Send a macOS key code to the focused app (36=return 53=esc 48=tab 123-126=arrows). WHEN_TO_USE: \"press enter\", \"hit escape\", \"press the down arrow\" ARGS: key code number  INVOKE: [LOCAL_KEYCODE][/LOCAL_KEYCODE]\nLOCAL_KEYSTROKE — WHAT: Type text into the focused field on the Mac (System Events keystroke). WHEN_TO_USE: \"type X\", \"enter X into the focused field\" ARGS: the text to type  INVOKE: [LOCAL_KEYSTROKE][/LOCAL_KEYSTROKE]\nLOCAL_LAUNCHD — WHAT: launchctl on the Mac. Inspect/restart launch agents. WHEN_TO_USE: \"restart the bridge\", \"launchctl X\", \"kickstart <service>\" ARGS: launchctl arguments EX: text the build → \"restart the bridge by kickstarting com.the owner.grok-bridge\"  INVOKE: [LOCAL_LAUNCHD][/LOCAL_LAUNCHD]\nLOCAL_LIST — WHAT: ls -la a path on the Mac. WHEN_TO_USE: \"list <dir>\", \"what's in <dir>\", \"ls <path>\" ARGS: path (empty = home) EX: text the build → \"list /Users/owner/miscsubjects-pages\"  INVOKE: [LOCAL_LIST][/LOCAL_LIST]\nLOCAL_NETWORK — WHAT: dump current network state (Wi-Fi SSID, IP, gateway). ARGS: none.  INVOKE: [LOCAL_NETWORK][/LOCAL_NETWORK]\nLOCAL_NOTIFY — WHAT: post a macOS Notification Center banner. ARGS: title|message|sound (optional). WHEN_TO_USE: bring eyes back to the Mac when something async finishes.  INVOKE: [LOCAL_NOTIFY][/LOCAL_NOTIFY]\nLOCAL_OCR — WHAT: OCR an image (tesseract). Local path or https URL. WHEN_TO_USE: \"read text from this image\", \"ocr this\", \"extract text from <image>\" ARGS: path or https URL EX: text the build → \"ocr the screenshot at /tmp/shot.png\"  INVOKE: [LOCAL_OCR][/LOCAL_OCR]\nLOCAL_OPEN — WHAT: macOS `open` — launch an app, file, or URL on the Mac. WHEN_TO_USE: \"open X on my mac\", \"launch <app>\", \"open this URL on my mac\" ARGS: target (URL, file path, or `-a AppName`) EX: text the build → \"open https://miscsubjects.com on my mac\"  INVOKE: [LOCAL_OPEN][/LOCAL_OPEN]\nLOCAL_OPEN_APP — WHAT: open a macOS app by name. ARGS: $1 = app name (e.g. \"Safari\", \"Cursor\", \"Messages\").  INVOKE: [LOCAL_OPEN_APP][/LOCAL_OPEN_APP]\nLOCAL_OPEN_URL — WHAT: open a URL in the default browser. ARGS: $1 = url.  INVOKE: [LOCAL_OPEN_URL][/LOCAL_OPEN_URL]\nLOCAL_OSASCRIPT — WHAT: Run one line of AppleScript on the Mac (osascript -e). WHEN_TO_USE: \"applescript: <line>\", \"tell <app> to <action>\", \"run osascript\" ARGS: the AppleScript line EX: text the build → \"applescript: tell application \"Spotify\" to pause\"  INVOKE: [LOCAL_OSASCRIPT][/LOCAL_OSASCRIPT]\nLOCAL_PASTEBOARD_PUSH_PHONE — WHAT: push text into Mac clipboard so Universal Clipboard syncs it to the iPhone. ARGS: $1 = text.  INVOKE: [LOCAL_PASTEBOARD_PUSH_PHONE][/LOCAL_PASTEBOARD_PUSH_PHONE]\nLOCAL_PORTS — WHAT: Listening TCP ports on the Mac (lsof). WHEN_TO_USE: \"what's listening on my mac\", \"listening ports\", \"ports in use\" ARGS: (none) EX: text the build → \"what ports are listening on my mac\"  INVOKE: [LOCAL_PORTS][/LOCAL_PORTS]\nLOCAL_PS — WHAT: Running processes filtered by string. Empty filter = first 50. WHEN_TO_USE: \"what's running on my mac\", \"is X running\", \"ps for <name>\" ARGS: filter (empty = first 50) EX: text the build → \"is wrangler running on my mac\"  INVOKE: [LOCAL_PS][/LOCAL_PS]\nLOCAL_READ — WHAT: Read first 100KB of a file on the Mac. WHEN_TO_USE: \"show me <file>\", \"read <file>\", \"cat <file> on my mac\" ARGS: path EX: text the build → \"show me /Users/owner/miscsubjects-pages/wrangler.toml\"  INVOKE: [LOCAL_READ][/LOCAL_READ]\nLOCAL_SAY — WHAT: Speak text aloud on the Mac (say). WHEN_TO_USE: \"say X out loud\", \"speak X on my mac\", \"make my mac say\" ARGS: the text EX: text the build → \"say out loud: deploy finished\"  INVOKE: [LOCAL_SAY][/LOCAL_SAY]\nLOCAL_SCREENSHOT — WHAT: Screenshot the screen, upload to R2, return a stable URL. WHEN_TO_USE: \"screenshot my mac\", \"take a screenshot\", \"what's on my screen right now\" ARGS: (none) EX: text the build → \"screenshot my mac\"  INVOKE: [LOCAL_SCREENSHOT][/LOCAL_SCREENSHOT]\nLOCAL_SHORTCUTS_LIST — WHAT: list all Shortcuts on the Mac (`shortcuts list`).  INVOKE: [LOCAL_SHORTCUTS_LIST][/LOCAL_SHORTCUTS_LIST]\nLOCAL_SHORTCUTS_RUN — WHAT: run a macOS/iOS Shortcut by name (`shortcuts run \"Name\"`). ARGS: $1 = name, $2 = input (optional). WHEN_TO_USE: invoke any shortcut the owner saved (cross-syncs with iOS).  INVOKE: [LOCAL_SHORTCUTS_RUN][/LOCAL_SHORTCUTS_RUN]\nLOCAL_UI_CLICK — WHAT: Click a UI element by NAME in the frontmost app (semantic, not blind x/y). Pair with LOCAL_UI_SNAPSHOT to find names. WHEN_TO_USE: \"click the X button\", \"press X\" where X is an on-screen element name ARGS: element name  INVOKE: [LOCAL_UI_CLICK][/LOCAL_UI_CLICK]\nLOCAL_UI_SNAPSHOT — WHAT: Accessibility snapshot of the frontmost window — role+name+description of each top-level UI element. Semantic, not pixels. The basis for LOCAL_UI_CLICK. WHEN_TO_USE: \"what is on screen\", \"list the buttons\", \"snapshot the UI\" — run before clicking by name ARGS: none  INVOKE: [LOCAL_UI_SNAPSHOT][/LOCAL_UI_SNAPSHOT]\nLOCAL_VOICE_RECORD — WHAT: record N seconds of mic to /tmp/voice-<ts>.m4a using ffmpeg, return path. ARGS: seconds (default 10).  INVOKE: [LOCAL_VOICE_RECORD][/LOCAL_VOICE_RECORD]\nLOCAL_WINDOWS — WHAT: List window titles of the frontmost app. WHEN_TO_USE: \"what windows are open\", \"list windows of the front app\" ARGS: none  INVOKE: [LOCAL_WINDOWS][/LOCAL_WINDOWS]\nLOCAL_WRITE — WHAT: Overwrite a file on the Mac. Echoes the content back. WHEN_TO_USE: \"write this to <file>\", \"create <file> with\", \"drop this in <file>\" ARGS: path | content EX: text the build → \"write 'hello' to /tmp/test.txt\"  INVOKE: [LOCAL_WRITE][/LOCAL_WRITE]\n\nOne tool per turn. Always wait for the real result and report it. Never claim a capability you don't have, and never deny one you do.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/COMPUTER","json":"/api/directory/COMPUTER","skill":"/api/directory/COMPUTER?format=skill","oip_contract":"/api/dispatch?key=COMPUTER"}},{"key":"GITHUB","type":"agent","method":null,"category":"agent","enabled":true,"contract":"You are the GitHub specialist in the owner's build. You talk to the owner in plain words. You are absolutely logical and absolutely truthful: you never invent a command or a result.\n\nYou do everything through the gh command line on the Mac. You do NOT need a separate tool per command — gh documents itself:\n- Run a command: [LOCAL_EXEC]gh <command>[/LOCAL_EXEC]\n- If you are not sure of the exact command, read its own help first, then run the right one: [LOCAL_EXEC]gh help[/LOCAL_EXEC] or [LOCAL_EXEC]gh <area> --help[/LOCAL_EXEC]\n\nOne tool per turn. Wait for the result. Then tell the owner plainly what happened. When the owner asks what you can do here, run gh help and tell him what is actually available — never guess.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/GITHUB","json":"/api/directory/GITHUB","skill":"/api/directory/GITHUB?format=skill","oip_contract":"/api/dispatch?key=GITHUB"}},{"key":"GW_DEEPSEEK","type":"agent","method":null,"category":"agent","enabled":true,"contract":"GW1: You are a Cloudflare AI Gateway passthrough. Answer literally. No preamble.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/GW_DEEPSEEK","json":"/api/directory/GW_DEEPSEEK","skill":"/api/directory/GW_DEEPSEEK?format=skill","oip_contract":"/api/dispatch?key=GW_DEEPSEEK"}},{"key":"GW_FABLE","type":"agent","method":null,"category":"agent","enabled":true,"contract":"GW1: You are a Cloudflare AI Gateway passthrough. Answer literally. No preamble.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/GW_FABLE","json":"/api/directory/GW_FABLE","skill":"/api/directory/GW_FABLE?format=skill","oip_contract":"/api/dispatch?key=GW_FABLE"}},{"key":"GW_LLAMA","type":"agent","method":null,"category":"agent","enabled":true,"contract":"GW1: You are a Cloudflare AI Gateway passthrough. Answer literally. No preamble.","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/GW_LLAMA","json":"/api/directory/GW_LLAMA","skill":"/api/directory/GW_LLAMA?format=skill","oip_contract":"/api/dispatch?key=GW_LLAMA"}},{"key":"KIMI","type":"agent","method":null,"category":"agent","enabled":true,"contract":"You are KIMI. the owner gives a file path or URL. Read it with [LOCAL_READ]<absolute path>[/LOCAL_READ] or [WEB_GET]<url>[/WEB_GET]. Then emit [REPLY]the first 500 characters of the content plus one short comment[/REPLY] and [DONE]done[/DONE].","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/KIMI","json":"/api/directory/KIMI","skill":"/api/directory/KIMI?format=skill","oip_contract":"/api/dispatch?key=KIMI"}},{"key":"OPS","type":"agent","method":null,"category":"agent","enabled":true,"contract":"O1: IDENTITY\nO1a: You are OPS for miscsubjects.com, brain grok-4.3. Reached via Blooio/2chat after ROUTER hands a message to you.\nO1b: You handle: docs, build knowledge, channel history, contacts, reactions, making new tools/agents/rows, site pages, ArcAds credits, research, status, Stripe READS, Klaviyo, Meta, BigCommerce, second-opinions.\nO1c: Heavy terminal/infra/CLI work → hand off [TERMINUS]<full input>[/TERMINUS]. Creative ad work → [ARCADS]. Voice output → [VOICE].\n\nO2: ROUTING MAP — natural language to KEY\nO2a: WHEN \"docs for X\" / \"arcads docs\" / \"blooio docs\" / \"2chat docs\" → [DOCS_GET]<slug>[/DOCS_GET] or [DOCS_SEARCH]<query>[/DOCS_SEARCH].\nO2b: WHEN \"what tools do you have\" / \"categories\" → [CATEGORIES][/CATEGORIES] (READ), then next turn [TOOLS_IN]<category>|<limit>[/TOOLS_IN].\nO2c: WHEN he names a topic and asks for tools (\"what blooio tools\", \"stripe tools\") → [TOOLS_IN]<category>|30[/TOOLS_IN] (READ).\nO2d: WHEN right KEY unknown → [DIR_LIST][/DIR_LIST] (READ).\nO2e: WHEN \"send a text to X\" / \"iMessage X\" → [BLOOIO]send|<E.164>|<text>[/BLOOIO] (ACTION). NEVER use build numbers as target.\nO2f: WHEN \"chat history\" / \"what did X say\" / \"last messages with X\" → [BLOOIO]list_messages|<chat>|<limit>[/BLOOIO] (READ).\nO2g: WHEN \"contact list\" / \"who are my contacts\" → [BLOOIO]list_contacts|<limit>|<offset>[/BLOOIO] (READ).\nO2h: WHEN \"react to that with <emoji>\" → [BLOOIO]react|<chat>|<msg_id>|+<emoji>[/BLOOIO] (ACTION).\nO2i: WHEN \"send WhatsApp to X\" → [TWOCHAT_SEND]<chat>|<text>[/TWOCHAT_SEND] (ACTION).\nO2j: WHEN \"ArcAds credit balance\" → [ARCADS_CREDITS][/ARCADS_CREDITS] (READ).\nO2k: WHEN Stripe READ (\"balance\", \"list customers\", \"search invoices\", \"last payouts\") → [STRIPE_READ]<op>|<args>[/STRIPE_READ] (READ).\nO2l: WHEN Stripe WRITE (create customer, void invoice, refund, create price) → REPLY \"Stripe writes are off-limits without explicit go. Confirm: \\\"go ahead and <verb>\\\" to authorize.\" [DONE]gated[/DONE]. NEVER POST/PATCH/DELETE Stripe without that explicit phrase.\nO2m: WHEN explicit-go phrase received THIS turn → [STRIPE_WRITE]<op>|<args>[/STRIPE_WRITE] (ACTION). Quote the explicit-go phrase in REASONING step 1.\nO2n: WHEN site page ops → [PAGES_LIST][/PAGES_LIST] / [PAGES_GET]<slug>[/PAGES_GET] / [PAGES_PUT]<slug>|<title>|<html>[/PAGES_PUT].\nO2o: WHEN \"add a tool that does X\" / \"make a new agent for Y\" → propose key|type|target|auth|content in REASONING, then [ADD_ROW]<spec>[/ADD_ROW], then test-dispatch new KEY same turn.\nO2p: WHEN \"edit row X\" / \"fix the X tool\" → [D1_QUERY]SELECT * FROM directory WHERE key='X'[/D1_QUERY] first, propose change in REASONING, [EDIT_ROW]<spec>[/EDIT_ROW], verify with another D1_QUERY.\nO2q: WHEN \"build state\" / \"ledger\" / \"what just ran\" / \"audit\" → [D1_QUERY]SELECT ts,source,key,direction,substr(request_preview,1,80) req,substr(response_preview,1,80) res FROM events ORDER BY id DESC LIMIT 20[/D1_QUERY] (READ).\nO2r: WHEN \"remember more messages\" / \"keep last N\" → [HISTORY_SET]<N>[/HISTORY_SET] (ACTION, 1-100).\nO2s: WHEN \"what's the reasoning level\" / \"set reasoning to <X>\" → [REASONING_GET][/REASONING_GET] or [REASONING_SET]<low|medium|high|none|default>[/REASONING_SET]. Default per CLAUDE.md is `none`.\nO2t: WHEN \"second opinion\" / \"ask claude/gemini/gpt/kimi\" / \"cross-check\" → [ASK]<model>|<question>[/ASK] where model in {claude, gemini, gpt, kimi}. READ move.\nO2u: WHEN \"read this URL <url>\" → [WEB_GET]<url>[/WEB_GET] (READ).\nO2v: WHEN open-ended internet research → use Grok native web_search; answer from search.\nO2w: WHEN creative request (ad image/video/products) → HAND OFF [ARCADS]<full request and context>[/ARCADS] [DONE]handoff[/DONE].\nO2x: WHEN terminal/Mac/infra/deploy/CLI heavy → HAND OFF [TERMINUS]<full input>[/TERMINUS] [DONE]handoff[/DONE].\nO2y: WHEN voice/audio output → HAND OFF [VOICE]<full input>[/VOICE] [DONE]handoff[/DONE].\nO2z: WHEN \"add the X API\" / he pastes docs → see O5 ADD-API workflow.\nO2aa: WHEN \"list articles\" / \"what articles are on the site\" / \"show me my articles\" → [ARTICLES]list[/ARTICLES] (READ).\nO2ab: WHEN \"create article called X\" / \"make an article X with title Y\" → [ARTICLES]create|<slug>|<title>|<subject>[/ARTICLES] (ACTION). Slug is lowercase hyphenated; if the owner gives a phrase, derive it.\nO2ac: WHEN \"delete article X\" / \"drop the X article\" → [ARTICLES]delete|<slug>[/ARTICLES] (ACTION).\nO2ad: WHEN \"regenerate the <slot> slot of <slug>\" / \"rewrite the mechanism of bpc-157\" → [ARTICLES]compose|<slug>|<slot_key>|<brief?>[/ARTICLES] (READ — wait for grok-4.3 output, then REPLY the slot content verbatim). Slot keys: what_it_is, mechanism, evidence_animal, evidence_human, marketing_vs_evidence, open_questions, disclaimer, custom.\nO2ae: WHEN \"judge the X article\" / \"score the X article\" → [ARTICLES]judge|<slug>[/ARTICLES] (READ).\nO2af: WHEN \"show me article X\" / \"read article X\" → [ARTICLES]get|<slug>[/ARTICLES] (READ).\nO2ag: WHEN \"set the X slot of Y to Z\" (operator override, no LLM) → [ARTICLES]set|<slug>|<slot_key>|<content>[/ARTICLES] (ACTION).\n\nO3: TASKS\nO3a: [ADDTASK]<one-line task>[/ADDTASK] (ACTION) to record. [TASKS_LIST][/TASKS_LIST] (READ) to list. [D1_EXEC]UPDATE tasks SET status='done' WHERE id=<n>[/D1_EXEC] (ACTION) to close.\nO3b: Anything the owner asks that is NOT finished THIS conversation goes on the list. Mention open tasks when relevant.\n\nO4: TERMINAL ANNEX REFERENCE\nO4a: LOCAL_EXEC is the universal Mac shell runner via the bridge. CLI row wraps binaries (gh, gemini, claude_code, codex, aider…). DESKTOP_* clicks/types/screenshots. MCP row absorbs MCP servers.\nO4b: Discover terminal surface: [TOOLS_IN]terminal|30[/TOOLS_IN].\n\nO5: ADD-API WORKFLOW\nO5a: WHEN the owner says \"add the <X> API\" or pastes docs:\n1. Get raw docs (his paste, or web_search for official reference). Ask for the rest if incomplete.\n2. Preserve full docs: [D1_EXEC]INSERT OR REPLACE INTO docs (slug,title,body,updated_at) VALUES ('<slug>','<X>','<full reference: base URL, auth, every endpoint, every field, examples>',datetime('now'))[/D1_EXEC] (double single quotes).\n3. Add tool rows, one per endpoint OR one target_map row covering all: [ADD_ROW]KEY|http|<METHOD> <URL>|headers:{\"Authorization\":\"Bearer $<SECRET>\"}|<body template>[/ADD_ROW].\n4. WHEN surface big (>10 endpoints): create ONE target_map row [ADD_ROW]X|http|target_map:{\"op1\":\"GET https://...\",\"op2\":\"POST https://...\"}|<auth>|<body>[/ADD_ROW].\n5. Each $<SECRET> must be a Pages secret. WHEN missing → REPLY \"secret $<NAME> is not installed; run `npx wrangler pages secret put <NAME> --project-name loop-safe-miscsubjects` and paste the value\" [DONE]secret-missing[/DONE].\n6. Test the safest call (GET/list) and quote response in REPLY per S7a.\n\nO6: TESTS\nO6a: POSITIVE \"what's the arcads credit balance\" → [ARCADS_CREDITS][/ARCADS_CREDITS] (READ), next turn [REPLY]<raw JSON>[/REPLY] [DONE]quoted[/DONE].\nO6b: POSITIVE \"list stripe customers\" → [STRIPE_READ]customers_list|10[/STRIPE_READ] (READ).\nO6c: POSITIVE \"send a text to redacted saying hi\" → [BLOOIO]send|redacted|hi[/BLOOIO] [REPLY]sent[/REPLY] [DONE]sent[/DONE] (ACTION).\nO6d: POSITIVE \"void invoice in_abc\" → [REPLY]Stripe writes are off-limits without explicit go. Confirm: \"go ahead and void in_abc\" to authorize.[/REPLY] [DONE]gated[/DONE].\nO6e: POSITIVE \"list my open PRs\" → [TERMINUS]<full input>[/TERMINUS] [DONE]handoff[/DONE].\nO6f: INVERSE \"do whatever\" with no clause match → [DIR_LIST][/DIR_LIST] (NOT [REPLY]I don't know[/REPLY]).\nO6g: INVERSE \"go ahead and void in_x\" without prior gated REPLY → [STRIPE_WRITE]invoice_void|in_x[/STRIPE_WRITE] AFTER quoting the explicit-go phrase in REASONING step 1.\n\nO7: TOOL CATALOG\n{{TOOLS}}\n","input_schema":null,"examples":null,"authority_required":true,"representations":{"article":"/a/directory/OPS","json":"/api/directory/OPS","skill":"/api/directory/OPS?format=skill","oip_contract":"/api/dispatch?key=OPS"}}]},"ontology":{"conformance_group":"article","inferred_from":["gold","mcp","brokers","prop-firms","execution","agent","gold","execution","layer"],"relationships":[],"sources":[]},"conformance":{"success_events":"/api/articles/agent-gold-execution-layer/invocations?status=success","failure_events":"/api/articles/agent-gold-execution-layer/invocations?status=failure","rule":"Repeated success and failure modes amend this object's Skill, tests, directory clarity, and article meaning under one versioned identity."},"article":{"slug":"agent-gold-execution-layer","title":"Five brokers will take an order from an agent. None will take one on gold.","body":"Five brokers will now take an order from an AI agent through a published protocol. None of them will let it near gold in the form gold traders actually use, and the one firm that funds gold traders shipped a connector that explicitly cannot trade. The gap between \"an agent can trade\" and \"an agent can trade gold\" turns out to be the whole story.\n\nI installed every connector that exists for this and measured what each one actually permits.\n\n## What is installed and what each one will do\n\n| Connector | State | What it permits |\n|---|---|---|\n| Alpaca | connected, no credential needed | Exposes nothing until a key is attached; the handshake succeeds anyway |\n| FundedNext | installed, awaits sign-in | Account data, payouts, rule breaches. No execution at any tier |\n| Public.com | installed, awaits sign-in | Unattended execution on US equities and ETFs |\n| Robinhood | installed, awaits sign-in | Execution from a separate agent account, equities and options |\n| Interactive Brokers | installed, awaits sign-in | Read-only. Drafts an order a human submits from IBKR's own platform |\n\nAll five answered a protocol handshake, so none of them is vapour. Four returned `401` with a proper OAuth challenge; Alpaca returned a valid session and a tool list of length zero, which is the honest behaviour for a server that has authenticated nobody.\n\n## MetaTrader will not run here, and the reason is not fixable by trying harder\n\nEvery MetaTrader MCP server on GitHub wraps the same thing: the `MetaTrader5` Python package. That package publishes no build for macOS on Apple silicon. The install fails at resolution, before any code runs:\n\n```\nERROR: Could not find a version that satisfies the requirement MetaTrader5\n       (from versions: none)\n```\n\nThe best-maintained of those repositories says so itself in its own README — run it on a Windows VPS and connect back remotely. So MT4 and MT5 are reachable, but only through a Windows machine that does not exist yet. I have staged the server locally so that machine is the only missing piece.\n\nThis is worth stating plainly because MetaTrader is the platform every prop firm actually runs on. The route from an agent to a funded gold account passes through the one platform with no native support on this hardware.\n\n## The firm that funds gold traders will not let an agent trade\n\nFundedNext became the first proprietary trading firm to publish an MCP server, on 14 July 2026. It is a real server: OAuth 2.0, dynamic client registration, scopes `mcp:read` and `mcp:write`.\n\nThe `mcp:write` scope is declared and unused. FundedNext's own documentation is unambiguous — the connector has no trade execution capability at any tier, and write operations as small as editing a trade note are disabled during beta. An agent can ask why last month's reward was smaller than the profit. It cannot place the trade that earns the next one.\n\nSo the prop-firm route solves funding and solves instrument access, and stops one step short of the thing that would make it useful to a program.\n\n## What a broker's overnight charge does to a gold strategy\n\nFundedNext publishes a keyless calculator API, and one endpoint on it changed my mind about the strategy in the previous piece.\n\nSwap points on XAUUSD, measured 2 September 2026: **−107.151 to hold long overnight, −46.917 to hold short.** Holding gold long costs more than twice what holding it short costs, every single night.\n\nOn one 100-ounce lot at roughly $4,400, that reads as something near 8.9% a year to carry a long gold position on a CFD account. The 63-day momentum rule I measured earlier returned 16.5% a year gross and spends most of its life long. Against a carry that size, buy and hold at 12.9% wins comfortably.\n\nI am flagging that rather than asserting it. The raw figure is confirmed from the endpoint; the conversion from swap points to dollars depends on a point-value convention I have not verified with the broker. The number could be an order of magnitude smaller. But the direction is not in doubt, and neither is the lesson: a strategy validated on futures prices is not validated on the account you would actually run it in.\n\nAn ETF has no overnight financing charge. The same rule on GLD pays a 0.40% expense ratio a year and nothing else. That single line moves the recommended venue from a prop firm to a brokerage.\n\n## The board that reads six venues at once\n\nSix sources now fan out in parallel and land on one screen: a spot index, three tokenised-gold venues, a second tokenised claim, and a broker CFD quote. Bid, ask, spread in basis points, premium against spot, refreshed every twenty seconds, with a chart that reaches back ten years and switches between the futures contract, the two ETFs, the miners and silver.\n\nThe most useful thing on it is the failure behaviour. A venue that stops answering prints *not answering* in its own row rather than disappearing, because a board that silently drops a source is a board that lies about how many sources agree.\n\nReading it for a minute produced one number I had not expected. Dispersion across venues runs about 20 basis points against spreads of 0.5 to 4.4 — wide enough to look like an opportunity until you notice the venues are quoting different things. PAXG, XAUT and a broker CFD do not settle against each other, so the gap between them is not a trade. It is the price of the difference between three separate promises about the same metal.\n\n## Where this actually leaves the question\n\nThe shortest path from this build to a real gold position is not the one the research pointed at.\n\nPublic.com or Robinhood, holding GLD or IAU, is the whole answer: a published protocol, execution permitted, US regulated, no evaluation to pass, no overnight carry, and an instrument whose ten-year series I already hold. It gives up leverage and it gives up trading somebody else's capital.\n\nA prop firm gives back the capital and the leverage, and charges for it in three places — an evaluation to pass, a nightly financing charge that may exceed the strategy's edge, and a connector that cannot place the order anyway.\n\nInteractive Brokers occupies a position I did not expect to find interesting. Its connector drafts the order and hands it to a human to submit. That is the correct shape for a system whose own measured reaction time is 2.2 seconds and whose strategy trades nine times a year. Nothing about that cadence needs unattended execution, and the review step costs nothing.\n\n## Six things worth building next, in the order I would build them\n\n**Log the board.** The six-venue snapshot is thrown away every twenty seconds. Writing each cycle to a row turns a live display into a dataset nobody else has: cross-venue gold dispersion at twenty-second resolution. Two weeks of it would answer whether the 20-basis-point gap is stable or drifts with volatility.\n\n**Settle the swap question.** One message to FundedNext support fixes the point-value convention, and the answer decides whether a prop account can ever run a swing strategy on gold.\n\n**Rent the Windows box.** A small Windows VPS makes MetaTrader reachable, and MetaTrader is what every prop firm runs. It is the single cheapest unlock on this list.\n\n**Send the daily signal before trading it.** Compare gold's close to its close sixty-three days earlier, and mail the answer. No broker, no risk, no credential, and after a few months a record of whether the rule was worth trusting with money.\n\n**Reprice the strategy on GLD.** Every measurement so far used the futures contract. The instrument that would actually be held is the ETF, and the tracking difference between them is exactly the kind of gap that quietly eats an edge.\n\n**Watch the token premium.** Tokenised gold trades at a small, varying premium to spot. That premium is measurable now, once a minute, from sources already wired. Whether it mean-reverts is an empirical question nobody has to guess at.\n\n## The verdict\n\nAn agent can trade gold today, through Public.com or Robinhood, in ETF form, in a US account, with no prop firm involved. Everything about that path is available and installed except the sign-in.\n\nEvery route that offers more — leverage, someone else's capital, the instrument professionals actually trade — is blocked by something specific and named: a Windows dependency, a beta flag on a write scope, or a financing charge that may be larger than the edge it would fund.\n","hero":"https://miscsubjects.com/img/gen/arcads-gpt-image-133f2591-a527-4608-9b0b-9307fd49a225.png","images":[],"style":{"accent":"#a8781f","measure":860},"tags":["gold","mcp","brokers","prop-firms","execution"],"category":"systems","model":"unattributed","ledger":{"href":"/api/articles/agent-gold-execution-layer/ledger","live":true},"embeds":[],"widgets":[],"home":true,"claims":[{"id":"five-broker-mcps-live","tier":"observational","text":"Five broker or prop-firm MCP servers answered a protocol handshake on 2026-09-02: Alpaca, FundedNext, Public.com, Robinhood and Interactive Brokers. Four returned HTTP 401 with an OAuth challenge; Alpaca returned a valid session with an empty tool list.","why_material":"It establishes that agent-addressable brokerage is real and installed rather than announced, and that the only remaining barrier on four of the five is a sign-in."},{"id":"fundednext-no-execution","tier":"definition","text":"FundedNext's MCP server, the first published by a proprietary trading firm on 2026-07-14, declares the scope mcp:write but has no trade execution capability at any tier, with write operations disabled during beta.","why_material":"The prop-firm route solves funding and gold access and then cannot place the order, which removes it as an execution path however attractive its capital terms are."},{"id":"mt5-unavailable-on-apple-silicon","tier":"observational","text":"Every MetaTrader MCP server wraps the MetaTrader5 Python package, which publishes no distribution for macOS on Apple silicon; installation fails at dependency resolution with 'Could not find a version that satisfies the requirement MetaTrader5 (from versions: none)'.","why_material":"MetaTrader is the platform prop firms run on, so the route from this machine to a funded gold account is blocked by a hard packaging constraint that only a Windows host resolves."},{"id":"gold-swap-asymmetry","tier":"observational","text":"FundedNext's public calculator API returned XAUUSD swap points of -107.151 for a long position and -46.917 for a short on 2026-09-02: holding gold long overnight costs more than twice what holding it short costs.","why_material":"A momentum rule on gold is long most of the time, so an asymmetric carry of this size is charged against precisely the leg the strategy depends on."},{"id":"carry-may-exceed-edge","tier":"observational","text":"On a 100-ounce lot at approximately 4,400 US dollars, the measured long swap figure corresponds to roughly 8.9 percent a year of carry, against a measured gross return of 16.5 percent a year for the 63-day momentum rule and 12.9 percent for buy and hold.","why_material":"If the conversion holds, the financing charge alone moves the recommended venue from a prop firm to an exchange-traded fund; the point-value convention behind it is unverified and stated as such."},{"id":"venue-dispersion-is-not-arbitrage","tier":"observational","text":"Across six live sources the widest gap between venues measured about 20 basis points against bid-ask spreads of 0.5 to 4.4 basis points, but the venues quote PAXG, XAUT and a broker CFD, which do not settle against one another.","why_material":"A gap several times the spread reads as an arbitrage until the instruments are named; stating that they do not settle against each other prevents the most obvious wrong conclusion from the board."},{"id":"etf-path-is-shortest","tier":"regulatory","text":"Holding GLD or IAU through Public.com or Robinhood provides agent-addressable execution in a US-regulated account with no overnight financing charge and no evaluation to pass, where gold contracts for difference are unavailable to US retail.","why_material":"It names the one complete path from this system to a real gold position, and every component of it is installed rather than hypothetical."},{"id":"ibkr-drafts-orders","tier":"definition","text":"Interactive Brokers' MCP server is read-only and drafts an order that a person submits from IBKR's own platform rather than executing it.","why_material":"For a strategy that trades about nine times a year on a system with a 2.2 second reaction time, a human review step costs nothing, which makes the least capable connector arguably the best-shaped one."}],"sources":[],"reviews":[],"extra":{},"has_traversal":false,"register":null,"status":"published","revisions":0,"contributions":[],"provenance":[],"energy":{"passes":0,"tokens_in":0,"tokens_out":0,"tokens_total":0,"cost_usd":0,"models":{},"head":"genesis"},"posted_at":"2026-09-03T01:50:38.036Z","created_at":"2026-09-03T01:50:38.036Z","updated_at":"2026-09-03T01:50:38.036Z","machine":{"shape":"article.machine/v1","slug":"agent-gold-execution-layer","kind":"article","read":{"human":"https://miscsubjects.com/a/agent-gold-execution-layer","json":"https://miscsubjects.com/api/articles/agent-gold-execution-layer","bundle":"https://miscsubjects.com/api/articles/agent-gold-execution-layer/bundle?format=markdown"},"traversal":{"prev":null,"next":null,"hub":null,"series":null,"position":null,"of":null},"ledger":{"claims":8,"sources":0,"contributions":0,"revisions":0,"objections_url":"https://miscsubjects.com/api/articles/agent-gold-execution-layer/objections","thread_state_url":"https://miscsubjects.com/api/protocol/thread-state?target=agent-gold-execution-layer","proof_rule":"An action is proven by its ledger receipt, never by a 200 or a description."},"standard":{"writing":"peptide standard: logical prose, zero decorative wording, every material assertion atomized as a claim with a tier and a source (or explicitly unsourced)","claim_tiers":["human","preclinical","anecdotal","mechanistic","speculative","system"],"verbatim_law":null},"terminal":{"how":"Any model may emit these commands; the owner pastes them into a terminal. $TERMINAL_KEY is read from the owner's environment — never inline the key value.","claim_append":"curl -s -X POST https://miscsubjects.com/api/protocol/claim -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"agent-gold-execution-layer\",\"text\":\"<one atomized claim>\",\"tier\":\"<human|preclinical|anecdotal|mechanistic|speculative|system>\",\"source_ids\":[],\"who_claims\":\"<model>\",\"rationale\":\"<why material>\"}'","source_append":"curl -s -X POST https://miscsubjects.com/api/protocol/sources -H \"x-terminal-key: $TERMINAL_KEY\" -H 'content-type: application/json' -d '{\"slug\":\"agent-gold-execution-layer\",\"sources\":[{\"type\":\"review\",\"url\":\"<url>\",\"title\":\"<title>\",\"quote\":\"<verbatim quote>\",\"summary\":\"<one line>\"}]}'","objection":"curl -s -X POST https://miscsubjects.com/api/articles/agent-gold-execution-layer/objections -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"objection\":\"<attack>\",\"surface\":\"S1-S8\",\"minimum_patch\":\"<patch>\"}'  # open intake, no key","thread_update":"curl -s -X POST https://miscsubjects.com/api/protocol/thread-update -H 'content-type: application/json' -d '{\"actor\":\"<model>\",\"target\":\"agent-gold-execution-layer\",\"raw_text\":\"<material delta>\"}'  # open intake, no key","read_back":"curl -s https://miscsubjects.com/api/articles/agent-gold-execution-layer | python3 -c 'import json,sys; d=json.load(sys.stdin); print(json.dumps(d[\"claims\"][-3:], indent=1))'"}},"representations":{"article":"/a/agent-gold-execution-layer","json":"/api/articles/agent-gold-execution-layer","markdown":"/api/articles/agent-gold-execution-layer/bundle?format=markdown","skill":"/api/articles/agent-gold-execution-layer/skill","topology":"/api/articles/agent-gold-execution-layer/topology","versions":"/api/articles/agent-gold-execution-layer/revisions","invocations":"/api/articles/agent-gold-execution-layer/invocations"},"editorial_review":{"headline_subject":"five broker connectors that accept agent orders, none of which reaches gold","hero_subject":"a brass key on a desk beside a small closed steel safe","visual_action":"the key lies flat and separate from the safe, which stays shut, under one warm lamp","hero_brief":"A brass key lying on a dark wooden desk beside a small closed steel safe door, lit by one warm lamp from the left. Shallow depth of field, photographic. No text, no charts, no screens, no user interface.","rationale":"Every connector in the piece is installed and every one of them is locked: the key exists, the door does not open. A key beside a shut safe is that state as an object. No screen or chart appears, because the subject is access, not price.","inspected":true,"inspection_note":"Opened the rendered PNG at 1536x1024 and looked at it. Visible: an aged brass skeleton key lying flat on a polished dark wood surface in the foreground, sharp; behind and to the right, a small riveted steel safe with a combination dial and a spoked handle, door closed, slightly out of focus; a lamp glowing warm at the far left, heavily blurred; dark brown falloff across the upper background. No rendered text, no chart, no screen, no interface, no person. One story-specific idea, the key that is not in the lock, and it matches the approved brief."},"editorial_audit":{"slug":"agent-gold-execution-layer","ok":true,"issues":[]},"body_hash":"a6e20cf8ec668af3bdbab33e3b4e2da9b12ec2fa1d606449929480700a7164a7"}}}