Cofferline

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Cofferline": {
      "url": "https://mcp.cofferline.com",
      "transport": "streamable-http"
    }
  }
}

Measured tools (47)

• get_quotes

  Live venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth.

  Parameters:

  • sell_token (required) — string — ERC-20 address being sold
  • buy_token (required) — string — ERC-20 address being bought
  • sell_amount (required) — string — sell amount in base units, decimal string
  • chain_id — number — 8453 (Base)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_benchmarks

  Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• screen_address

  OFAC SDN counterparty screening for an address. Free, no auth.

  Parameters:

  • address (required) — string — EVM address to screen

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_tokens

  Tokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth.

  Parameters:

  • chain_id — number — limit to one chain; omit for every supported chain

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_feedback

  Every feature request ever submitted, public and unauthenticated. Free.

  Parameters:

  • limit — number — max results

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• submit_feedback

  Submit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, scheme:'exact', network, payload:{signature, authorization}}.

  Parameters:

  • title (required) — string — short title, 8-120 chars
  • body (required) — string — the request, 20-4000 chars
  • x_payment — string — base64 X-PAYMENT value from a previously answered 402 (see description)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• start_siwe_login

  Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth.

  Parameters:

  • address (required) — string — wallet address to authenticate
  • chain_id — number — 8453

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• complete_siwe_login

  Finish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.

  Parameters:

  • message (required) — string — the exact SIWE message from start_siwe_login
  • signature (required) — string — the wallet's signature over the message, 0x…

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_me

  Identify the authenticated account: address, kind, scopes. Auth required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• export_account

  Export all of this account's data in one document. Auth required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• offboard_account

  Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required.

  Parameters:

  • confirm_wallet_address (required) — string — the account's wallet address, typed to confirm
  • reason — string — optional reason, recorded

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• put_policy

  Create or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and are stored into the document, and the response lists them in `defaulted`.

  Parameters:

  • policy (required) — object — PolicyV1 document; {"version":1,"wallet":"0x…","chain_id":8453} is a complete one

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_policy

  List policy versions, newest first (the first entry is active). Auth required.

  Parameters:

  • limit — number — max results
  • wallet — string — optional wallet filter

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_spend

  Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.

  Parameters:

  • wallet (required) — string — wallet address
  • amount_usd (required) — string — spend amount in USD, decimal string
  • token (required) — string — token symbol, e.g. USDC
  • counterparty — string — optional counterparty address to screen

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• check_pm_order

  Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.

  Parameters:

  • wallet (required) — string — wallet address
  • condition_id (required) — string — market/condition identifier
  • cost_usd (required) — string — order cost in USD, decimal string
  • state — object — optional current exposure: {market_exposure_usd, realized_loss_today_usd, total_open_exposure_usd} as decimal strings

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• poll_events

  Poll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required.

  Parameters:

  • type — string — optional event-type filter, e.g. intent.filled
  • limit — number — max results
  • cursor — number — resume after this event id
  • wallet — string — optional wallet filter

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_statement

  Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.

  Parameters:

  • wallet (required) — string — wallet address
  • period (required) — string — calendar month, YYYY-MM
  • format — string — 'json' (default) or 'csv'

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_intent

  Create a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required.

  Parameters:

  • wallet (required) — string — wallet address
  • kind (required) — string
  • sell_token (required) — string — ERC-20 address being sold
  • buy_token (required) — string — ERC-20 address being bought
  • sell_amount (required) — string — base units, decimal string
  • venues — array — optional venue override
  • max_slippage_bps — number — optional per-intent slippage cap

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_intent

  Fetch an intent, including fills and the post-trade report once filled. Auth required.

  Parameters:

  • id (required) — string — intent id (uuid)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_intents

  List intents, newest first. Auth required.

  Parameters:

  • limit — number — max results
  • offset — number — skip this many
  • wallet — string — optional wallet filter

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cancel_intent

  Cancel a planned intent (a few-second window before execution claims it). Auth required.

  Parameters:

  • id (required) — string — intent id (uuid)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• prepare_delegation

  Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required.

  Parameters:

  • account (required) — string — the Kernel smart account granting scope
  • chain_id (required) — number — 8453 (Base) or 84532 (Base Sepolia)
  • calls (required) — array — allowed calls: each {target: contract address, selector: 0x + 4 bytes, value_limit: max native value in wei as decimal string}
  • valid_until (required) — number — expiry, unix seconds
  • rate_limit — object — optional {count, interval_secs}: max delegated calls per interval
  • valid_after — number — optional start, unix seconds

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• confirm_delegation

  Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.

  Parameters:

  • id (required) — string — delegation id (uuid)
  • enable_sig (required) — string — owner's 65-byte signature over the digest, 0x…
  • owner — string — optional owner address, when it differs from the caller

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• renew_delegation

  Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required.

  Parameters:

  • id (required) — string — delegation id (uuid)
  • valid_until — number — optional new expiry, unix seconds; defaults to the original duration

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• revoke_delegation

  Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.

  Parameters:

  • id (required) — string — delegation id (uuid)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_delegation

  Fetch one delegation. Auth required.

  Parameters:

  • id (required) — string — delegation id (uuid)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_delegations

  List delegations, newest first. Auth required.

  Parameters:

  • limit — number — max results
  • account — string — optional smart-account filter

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• panic

  Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.

  Parameters:

  • reason — string — optional reason, recorded

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_balance

  Prepaid fee balance: settled credits minus fee debits. Auth required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• topup_balance

  Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, scheme:'exact', network, payload:{signature, authorization}}.

  Parameters:

  • amount_usd (required) — string — top-up amount in USD, decimal string
  • x_payment — string — base64 X-PAYMENT value from a previously answered 402 (see description)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• set_auto_topup

  Configure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required.

  Parameters:

  • threshold_usd (required) — string — refill when balance drops below this, USD decimal string
  • authorizations (required) — array — pre-signed transferWithAuthorization payloads: each {from, to, value, valid_after, valid_before, nonce, signature}
  • max_per_month — number — cap on automatic top-ups per month (default 10)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_auto_topup

  The auto-topup rule and how many pre-signed authorizations remain. Auth required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• remove_auto_topup

  Remove the auto-topup rule and its unused authorizations. Auth required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• store_pm_credential

  Store a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required.

  Parameters:

  • label — string — optional display label
  • maker — string — Polymarket: funder (maker) address
  • venue — string — prediction-market venue (default polymarket)
  • secret — string — Polymarket: CLOB API secret (explicit-creds shape)
  • signer — string — Polymarket: signer address (explicit-creds shape)
  • api_key — string — Polymarket: CLOB API key (explicit-creds shape)
  • passphrase — string — Polymarket: CLOB API passphrase (explicit-creds shape)
  • signature_type — number — Polymarket: 0 EOA, 1 Magic/email, 2 browser proxy (default 1)
  • signer_private_key — string — Polymarket: signer EOA private key, 0x…

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_pm_credentials

  List stored venue credentials — metadata only, never material. Auth required.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• revoke_pm_credential

  Revoke a venue credential; its sealed ciphertext is destroyed. Auth required.

  Parameters:

  • id (required) — string — credential id (uuid)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_pm_signer_rotation

  Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required.

  Parameters:

  • id (required) — string — credential id (uuid)
  • new_owner (required) — string — the replacement owner address

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_pm_order

  Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required.

  Parameters:

  • wallet (required) — string — treasury wallet whose policy governs the order
  • credential_id (required) — string — stored credential id (uuid)
  • action (required) — string
  • state — object — optional current exposure: {market_exposure_usd, realized_loss_today_usd, total_open_exposure_usd} as decimal strings
  • venue — string — prediction-market venue (default polymarket)
  • token_id — string — Polymarket: outcome token id, decimal string
  • price_usd — string — Polymarket: limit price, '0.xx'
  • size_shares — string — Polymarket: share count, decimal string
  • condition_id — string — Polymarket: market condition id
  • client_order_id — string — optional idempotency uuid

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_pm_orders

  The credential's resting orders straight from the venue — recover state after a disconnect. Auth required.

  Parameters:

  • credential_id (required) — string — stored credential id (uuid)
  • market — string — optional market filter

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cancel_pm_order

  Cancel one resting prediction-market order. Auth required.

  Parameters:

  • order_id (required) — string — the venue's order id
  • credential_id (required) — string — stored credential id (uuid)
  • venue — string — prediction-market venue (default polymarket)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cancel_all_pm_orders

  Cancel every resting order for the credential, optionally within one market. Auth required.

  Parameters:

  • credential_id (required) — string — stored credential id (uuid)
  • market — string — optional market filter

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• prepare_pm_order

  Prepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth required.

  Parameters:

  • venue (required) — string
  • wallet (required) — string — treasury wallet whose policy governs the order
  • credential_id (required) — string — stored credential id (uuid)
  • condition_id (required) — string — market condition id
  • token_id (required) — string — outcome token id, decimal string
  • action (required) — string
  • price_usd (required) — string — limit price, '0.xx'
  • size_shares (required) — string — share count, decimal string
  • state — object — optional current exposure: {market_exposure_usd, realized_loss_today_usd, total_open_exposure_usd} as decimal strings
  • client_order_id — string — optional idempotency uuid

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• submit_pm_order

  Submit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required.

  Parameters:

  • prepare_id (required) — string — prepare id (uuid) from prepare_pm_order
  • signature (required) — string — the maker's 65-byte EIP-712 signature, 0x…

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_pm_onboarding

  Polymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required.

  Parameters:

  • address (required) — string — the trading address to check

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• resolve_pm_funder

  Resolve an owner EOA to its Polymarket funder Safe candidates. Auth required.

  Parameters:

  • owner (required) — string — owner EOA address

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sync_pm_fills

  Pull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required.

  Parameters:

  • wallet (required) — string — treasury wallet whose books receive the fills
  • credential_id (required) — string — stored credential id (uuid)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• wrap_pm_usdc

  Wrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required.

  Parameters:

  • credential_id (required) — string — stored credential id (uuid)
  • amount_base_units — string — optional amount in base units, decimal string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.