Your assistant and your professionals' tools can read your wealth, under the same controls as your space. A household's holder and contributors can create a token.
What an agent can do
Read your assets, their links, their valuations and your balance sheet.
A trading book is never served through this channel; nor is the balance sheet of a household that carries one.
Nothing else: it writes nothing, moves no funds and receives no advice from us.
With a separate proposal token, it reads nothing: it proposes adding an asset, correcting an asset or adding a value. Nothing is recorded until you approve it in your space. This token has its own consent.
It sees exactly what your account sees, no more, no less.
Connect your agent
In your file, give your consent: “Let an agent read your wealth twin”. Without it, no agent reads anything.
In your space, create a token and copy it: it is shown only once.
In your agent, add an HTTP MCP server, at the address https://patrimoine.tradewars2026.io/mcp.
Give it the header Authorization: Bearer your-token. Never the token in an address: it would be refused.
lister_biens : Assets and liabilities open to this account.
lire_bien : One asset, its latest valuation and the share the balance sheet retains, with the amount retained.
lister_liens : Links between assets (holding, mandate, guarantee…) with both ends open to this account.
lire_valorisations : Valuations of an asset, most recent first.
lire_bilan : Consolidated balance sheet by currency, unconverted. For holders and contributors only; not served here for a household with a trading book.
Without an agent, from your own code, the same server answers in JSON-RPC:
deposer_proposition : Submits a proposed register entry. Nothing is written: the client approves or refuses it in their space. Actions: ajouter_bien (classe, libelle; juridiction; valeur and devise together), corriger_bien (bien_id; libelle or juridiction), ajouter_valeur (bien_id, valeur, devise).
lire_mes_propositions : The status of the proposals submitted with this token: pending, approved, refused, void or expired.
What leaves our hands
What an agent reads goes to that agent's publisher, under its own terms. Give a separate token to each tool and each professional, with the shortest duration that works.
Revoke
In your space, the “Revoke” button cuts access from the next call. Withdrawing your consent in your file also cuts it, for all your tokens. A token also expires by itself on its date, and the end of the subscription revokes all of yours: resubscribing requires new tokens. Each call is logged: which token, which tool, when, without the content.