MoneyMan is a personal capital-management workbench that runs on your machine. Snapshot a real portfolio, decompose index funds into the stocks you actually own, tune a proposal, assess it on the numbers that matter, backtest it, and only then deploy.
The whole product runs on one machine. No cloud login, no email, no analytics SaaS. Fully usable offline on a bundled S&P 500 fixture.
Sharpe, volatility, drawdown, PE / leverage / asset-turnover, industry exposure, an efficient frontier, and a sandbox backtest with real confidence intervals.
An AI read on whether a move makes sense — via your host's own AI CLI. It degrades to local heuristics, so the app never depends on it.
E*TRADE keys are sealed under a master held in your OS keychain, fail-closed, and prod keys need a fresh authenticator code to decrypt.
A live deploy is authenticator-gated. Without a completed OAuth handshake the broker stays safely simulated — misconfiguration can't route a live order.
Elasticsearch is the single system of record; every AI exchange and every trade is logged locally for your own review and rollback by release.
Local-only auth — a one-time password plus Google Authenticator (TOTP). No cloud identity, no email.
Sandbox & prod keys, sealed in the OS keychain. Prod is hard-encrypted and bound to your authenticator.
Fetch holdings, decompose index funds into constituent stocks, and index by industry / PE / leverage for a multidimensional health view.
Shop the full US universe by name, ticker, or financials; build baskets; preview each pick's impact on the numbers you trade on.
Sharpe-focused impact, a historical what-if backtest, an efficient frontier, and an AI rating — with a clear "local heuristic" label when AI is offline.
Run a sandbox regression (paired bootstrap, 95% CI, ≤5 market variables); review the result; then deploy to E*TRADE on an explicit, TOTP-gated confirmation.
E*TRADE keys are AES-GCM sealed under a master in your macOS Keychain / Windows Credential Locker, brokered host-side. The master is never written to the data store — and storage fails closed if the keychain is unreachable.
Production keys are bound to your TOTP secret and decrypt only with a fresh live code. A stolen disk yields ciphertext, not trades.
Token and password entry are rate-limited with escalating, restart-proof lockouts — a 6-digit code rotating every 30s can't be brute-forced.
The public domain reaches only the application through a Cloudflare tunnel — Elasticsearch, Kibana, and internal services are never exposed to the internet.
Is my portfolio data shipped to third parties? No.
Sign in locally and walk the flow — onboarding, connect, snapshot, tune, assess, deploy.
Launch the app →