com.cofferline/treasury

MCPCommunitylive
v1.0.0com.cofferlineUnknownAktualisiert vor 1 Mon.

Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.

Endpunkt-Statuslive
geprüft vor 9 Tagen · 310 ms
100 % der letzten 5 Prüfungen haben diesen Endpunkt erreicht
Läuft in
ClaudeCursorCopilotChatGPTGemini

Abgeleitet aus den Transporten, die dieser Eintrag deklariert (streamable-http). Ein Client, der hier nicht steht, ist damit nicht ausgeschlossen — Forge kann ihn nur nicht bestätigen.

Automatisch aus öffentlichen Quellen indexiert. Vom Entwickler auf Forge noch nicht verifiziert.Diesen Eintrag beanspruchen →
vor 1 Mon.Letzte Aktualisierung
Paket
Autorcom.cofferline
LizenzUnknown
Version1.0.0
Quellemcp-registry
Trust-Status
B
60/100Gut
Nur gehosteter Endpunkt: Diese Bewertung umfasst, wer ihn veröffentlicht und ob er antwortet – nicht den Code dahinter. CVE-, Abhängigkeits- und Quellcodeanalysen sind nicht anwendbar, daher ist nichts hier ein Unbedenklichkeitsnachweis für diesen Code.
✓Im Forge-Index gelistet+10/10
—Publisher-Identität verifiziert+0/30
→ Publisher: für diesen Eintrag ist kein Repository hinterlegt, daher kann `forge publish` die Inhaberschaft nicht automatisch prüfen. Nutze oben „Diesen Eintrag beanspruchen“ — Forge prüft diese Fälle von Hand.
—Domain-Verifizierung+0/10
→ Für diesen Eintragstyp derzeit nicht verfügbar — die Domain-Prüfung läuft heute nur für npm-gestützte Pakete, diese Zeile lässt sich hier also noch nicht erreichen, unabhängig davon, was auf der Domain liegt.
✓Prompt-Injection-Scan · sauber+30/30
✓Obfuskations-/Exfiltrations-Scan · sauber+20/20
StatusVon der Community indexiert
PublisherNicht verifiziert
SignaturNicht signiert
Domain—
Herkunft—
AbhängigkeitenNicht auditiert
Tool-Oberfläche47 Tools · 1 privilegiert
Sicherheits-Scan✓ Saubervlive · vor 9 TWie gut funktioniert dieser Scan?
EvaluierungenKeine
Indexiert25. Aug. 2026

Die Verifizierung bestätigt die Identität des Publishers (die Inhaberschaft am Repo), nicht die Sicherheit des Codes. Der Sicherheits-Scan deckt bekannte CVEs und verdächtige Installationsskripte ab.

Tools

47 Tools · 1 privilegiert
Live am Endpunkt des Anbieters beobachtet9d ago

Aus einem echten MCP-Handshake initialize → tools/list gegen den deklarierten Endpunkt gelesen. Es wurde nie ein Tool aufgerufen — tools/list ist der lesende Introspektionsaufruf, den das Protokoll dafür vorsieht. Es spiegelt wider, was der Server in diesem Moment angeboten hat; ein gehosteter Endpunkt ist an keine Version gebunden und kann sich ohne Ankündigung ändern.

  • https://mcp.cofferline.com47 Tools · 310 ms
get_quotesLive venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth.

Live venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth.

ParameterTypBeschreibung
sell_token*stringERC-20 address being sold
buy_token*stringERC-20 address being bought
sell_amount*stringsell amount in base units, decimal string
chain_idnumber8453 (Base)
get_benchmarksMeasured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.

Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

screen_addressOFAC SDN counterparty screening for an address. Free, no auth.

OFAC SDN counterparty screening for an address. Free, no auth.

ParameterTypBeschreibung
address*stringEVM address to screen
list_tokensTokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth.

Tokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth.

ParameterTypBeschreibung
chain_idnumberlimit to one chain; omit for every supported chain
list_feedbackEvery feature request ever submitted, public and unauthenticated. Free.

Every feature request ever submitted, public and unauthenticated. Free.

ParameterTypBeschreibung
limitnumbermax results
submit_feedbackSubmit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MC…

Submit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MC…

ParameterTypBeschreibung
title*stringshort title, 8-120 chars
body*stringthe request, 20-4000 chars
x_paymentstringbase64 X-PAYMENT value from a previously answered 402 (see description)
start_siwe_loginStart wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth.

Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth.

ParameterTypBeschreibung
address*stringwallet address to authenticate
chain_idnumber8453
complete_siwe_loginFinish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.

Finish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.

ParameterTypBeschreibung
message*stringthe exact SIWE message from start_siwe_login
signature*stringthe wallet's signature over the message, 0x…
get_meIdentify the authenticated account: address, kind, scopes. Auth required.

Identify the authenticated account: address, kind, scopes. Auth required.

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

export_accountExport all of this account's data in one document. Auth required.

Export all of this account's data in one document. Auth required.

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

offboard_accountClose this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required.

Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required.

ParameterTypBeschreibung
confirm_wallet_address*stringthe account's wallet address, typed to confirm
reasonstringoptional reason, recorded
put_policyCreate or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and are stored into the do…

Create or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and are stored into the do…

ParameterTypBeschreibung
policy*objectPolicyV1 document; {"version":1,"wallet":"0x…","chain_id":8453} is a complete one
get_policyList policy versions, newest first (the first entry is active). Auth required.

List policy versions, newest first (the first entry is active). Auth required.

ParameterTypBeschreibung
walletstringoptional wallet filter
limitnumbermax results
check_spendPre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.

Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.

ParameterTypBeschreibung
wallet*stringwallet address
amount_usd*stringspend amount in USD, decimal string
token*stringtoken symbol, e.g. USDC
counterpartystringoptional counterparty address to screen
check_pm_orderPre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.

Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.

ParameterTypBeschreibung
wallet*stringwallet address
condition_id*stringmarket/condition identifier
cost_usd*stringorder cost in USD, decimal string
stateobjectoptional current exposure: {market_exposure_usd, realized_loss_today_usd, total_open_exposure_usd} as decimal strings
poll_eventsPoll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required.

Poll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required.

ParameterTypBeschreibung
walletstringoptional wallet filter
cursornumberresume after this event id
limitnumbermax results
typestringoptional event-type filter, e.g. intent.filled
get_statementDeterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.

Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.

ParameterTypBeschreibung
wallet*stringwallet address
period*stringcalendar month, YYYY-MM
formatstring'json' (default) or 'csv'
create_intentCreate a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required.

Create a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required.

ParameterTypBeschreibung
wallet*stringwallet address
kind*string—
sell_token*stringERC-20 address being sold
buy_token*stringERC-20 address being bought
sell_amount*stringbase units, decimal string
max_slippage_bpsnumberoptional per-intent slippage cap
venuesarrayoptional venue override
get_intentFetch an intent, including fills and the post-trade report once filled. Auth required.

Fetch an intent, including fills and the post-trade report once filled. Auth required.

ParameterTypBeschreibung
id*stringintent id (uuid)
list_intentsList intents, newest first. Auth required.

List intents, newest first. Auth required.

ParameterTypBeschreibung
walletstringoptional wallet filter
limitnumbermax results
offsetnumberskip this many
cancel_intentCancel a planned intent (a few-second window before execution claims it). Auth required.

Cancel a planned intent (a few-second window before execution claims it). Auth required.

ParameterTypBeschreibung
id*stringintent id (uuid)
prepare_delegationPrepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required.

Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required.

ParameterTypBeschreibung
account*stringthe Kernel smart account granting scope
chain_id*number8453 (Base) or 84532 (Base Sepolia)
calls*arrayallowed calls: each {target: contract address, selector: 0x + 4 bytes, value_limit: max native value in wei as decimal string}
valid_afternumberoptional start, unix seconds
valid_until*numberexpiry, unix seconds
rate_limitobjectoptional {count, interval_secs}: max delegated calls per interval
confirm_delegationActivate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.

Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.

ParameterTypBeschreibung
id*stringdelegation id (uuid)
enable_sig*stringowner's 65-byte signature over the digest, 0x…
ownerstringoptional owner address, when it differs from the caller
renew_delegationRenew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required.

Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required.

ParameterTypBeschreibung
id*stringdelegation id (uuid)
valid_untilnumberoptional new expiry, unix seconds; defaults to the original duration
revoke_delegationRevoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.

Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.

ParameterTypBeschreibung
id*stringdelegation id (uuid)
get_delegationFetch one delegation. Auth required.

Fetch one delegation. Auth required.

ParameterTypBeschreibung
id*stringdelegation id (uuid)
list_delegationsList delegations, newest first. Auth required.

List delegations, newest first. Auth required.

ParameterTypBeschreibung
accountstringoptional smart-account filter
limitnumbermax results
panicEmergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.

Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.

ParameterTypBeschreibung
reasonstringoptional reason, recorded
get_balancePrepaid fee balance: settled credits minus fee debits. Auth required.

Prepaid fee balance: settled credits minus fee debits. Auth required.

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

topup_balanceTop up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x…

Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x…

ParameterTypBeschreibung
amount_usd*stringtop-up amount in USD, decimal string
x_paymentstringbase64 X-PAYMENT value from a previously answered 402 (see description)
set_auto_topupConfigure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required.

Configure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required.

ParameterTypBeschreibung
threshold_usd*stringrefill when balance drops below this, USD decimal string
max_per_monthnumbercap on automatic top-ups per month (default 10)
authorizations*arraypre-signed transferWithAuthorization payloads: each {from, to, value, valid_after, valid_before, nonce, signature}
get_auto_topupThe auto-topup rule and how many pre-signed authorizations remain. Auth required.

The auto-topup rule and how many pre-signed authorizations remain. Auth required.

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

remove_auto_topupprivilegiertRemove the auto-topup rule and its unused authorizations. Auth required.

Remove the auto-topup rule and its unused authorizations. Auth required.

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

store_pm_credentialStore a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required.

Store a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required.

ParameterTypBeschreibung
venuestringprediction-market venue (default polymarket)
labelstringoptional display label
signer_private_keystringPolymarket: signer EOA private key, 0x…
makerstringPolymarket: funder (maker) address
signerstringPolymarket: signer address (explicit-creds shape)
api_keystringPolymarket: CLOB API key (explicit-creds shape)
secretstringPolymarket: CLOB API secret (explicit-creds shape)
passphrasestringPolymarket: CLOB API passphrase (explicit-creds shape)
signature_typenumberPolymarket: 0 EOA, 1 Magic/email, 2 browser proxy (default 1)
list_pm_credentialsList stored venue credentials — metadata only, never material. Auth required.

List stored venue credentials — metadata only, never material. Auth required.

Für dieses Tool wurde kein Eingabeschema veröffentlicht.

revoke_pm_credentialRevoke a venue credential; its sealed ciphertext is destroyed. Auth required.

Revoke a venue credential; its sealed ciphertext is destroyed. Auth required.

ParameterTypBeschreibung
id*stringcredential id (uuid)
get_pm_signer_rotationCalldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required.

Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required.

ParameterTypBeschreibung
id*stringcredential id (uuid)
new_owner*stringthe replacement owner address
create_pm_orderPlace a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required.

Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required.

ParameterTypBeschreibung
venuestringprediction-market venue (default polymarket)
wallet*stringtreasury wallet whose policy governs the order
credential_id*stringstored credential id (uuid)
action*string—
condition_idstringPolymarket: market condition id
token_idstringPolymarket: outcome token id, decimal string
price_usdstringPolymarket: limit price, '0.xx'
size_sharesstringPolymarket: share count, decimal string
client_order_idstringoptional idempotency uuid
stateobjectoptional current exposure: {market_exposure_usd, realized_loss_today_usd, total_open_exposure_usd} as decimal strings
list_pm_ordersThe credential's resting orders straight from the venue — recover state after a disconnect. Auth required.

The credential's resting orders straight from the venue — recover state after a disconnect. Auth required.

ParameterTypBeschreibung
credential_id*stringstored credential id (uuid)
marketstringoptional market filter
cancel_pm_orderCancel one resting prediction-market order. Auth required.

Cancel one resting prediction-market order. Auth required.

ParameterTypBeschreibung
venuestringprediction-market venue (default polymarket)
order_id*stringthe venue's order id
credential_id*stringstored credential id (uuid)
cancel_all_pm_ordersCancel every resting order for the credential, optionally within one market. Auth required.

Cancel every resting order for the credential, optionally within one market. Auth required.

ParameterTypBeschreibung
credential_id*stringstored credential id (uuid)
marketstringoptional market filter
prepare_pm_orderPrepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth required.

Prepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth required.

ParameterTypBeschreibung
venue*string—
wallet*stringtreasury wallet whose policy governs the order
credential_id*stringstored credential id (uuid)
condition_id*stringmarket condition id
token_id*stringoutcome token id, decimal string
action*string—
price_usd*stringlimit price, '0.xx'
size_shares*stringshare count, decimal string
client_order_idstringoptional idempotency uuid
stateobjectoptional current exposure: {market_exposure_usd, realized_loss_today_usd, total_open_exposure_usd} as decimal strings
submit_pm_orderSubmit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required.

Submit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required.

ParameterTypBeschreibung
prepare_id*stringprepare id (uuid) from prepare_pm_order
signature*stringthe maker's 65-byte EIP-712 signature, 0x…
get_pm_onboardingPolymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required.

Polymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required.

ParameterTypBeschreibung
address*stringthe trading address to check
resolve_pm_funderResolve an owner EOA to its Polymarket funder Safe candidates. Auth required.

Resolve an owner EOA to its Polymarket funder Safe candidates. Auth required.

ParameterTypBeschreibung
owner*stringowner EOA address
sync_pm_fillsPull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required.

Pull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required.

ParameterTypBeschreibung
wallet*stringtreasury wallet whose books receive the fills
credential_id*stringstored credential id (uuid)
wrap_pm_usdcWrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required.

Wrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required.

ParameterTypBeschreibung
credential_id*stringstored credential id (uuid)
amount_base_unitsstringoptional amount in base units, decimal string

47 von 47 Tools haben eine Beschreibung veröffentlicht.

Tool-Namen und -Beschreibungen stammen vom Publisher und werden wortgetreu als inerter Text angezeigt. Es sind die Zeichenketten, die ein MCP-Client an ein Modell übergibt, deshalb prüft Forge sie auf Prompt-Injection-Muster — jeder Befund erscheint oben beim Sicherheits-Scan. „Privilegiert“ ist ein Schlagwort-Treffer im Tool-Namen, keine Prüfung dessen, was das Tool tut: ein harmlos klingender Name kann trotzdem alles tun.

Über

Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.

Schlagwörter
mcp
Alternativen
Tool-Oberflächen werden verglichen…

Keine Abdeckung der Abhängigkeiten

Dieser Eintrag veröffentlicht kein npm-Paket, daher hat Forge keinen Abhängigkeitsbaum dafür. Das ist eine Lücke in der Abdeckung — keine Aussage, dass er keine Abhängigkeiten hat.