io.github.ArtyKOMarkets/warda

Measured conclusion: Alive, not deep-tested. L2 outcome: not_attempted.

Economic authority for autonomous agents on Kaspa L1. Never holds a key.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "warda": {
      "url": "https://mcp.wardaprotocol.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (11)

• warda_grant_authority

  The agent's spending power right now: budget left, epoch headroom, per-transaction cap, and the largest single payment currently permitted. This is what an agent wallet's spending limit would tell you, except that it is not a setting — the covenant enforces these whether or not you ask. Use it before planning a purchase. NOT a chain balance: this server never reads the chain. It reports what the grant you passed says, so a stale descriptor gives a confident wrong number.

  Parameters:

  • grant (required) — object — The grant, as issued by the principal.
  • daaScore (required) — string — Current DAA score of the chain.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_check_spend

  Check a proposed payment against every rule the covenant enforces, and return the same verdict the chain would. Builds the recipient proof for you. ADVISORY: a 'permitted' answer is not permission — it means the covenant would accept this transaction. A 'refused' answer means no valid transaction exists, so broadcasting one would only waste a fee.

  Parameters:

  • grant (required) — object — The grant, as issued by the principal.
  • amountKas (required) — string — Amount to pay, in KAS.
  • recipient (required) — string — Payee public key, 32 bytes of hex.
  • daaScore (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_check_delegation

  Check whether a proposed child grant is a legal narrowing of this one. A child may only ever be more restrictive than its parent, and the parent must reserve exactly what the child receives — authority is subdivided, never created. Advisory.

  Parameters:

  • parent (required) — object — The grant, as issued by the principal.
  • childBudgetKas (required) — string
  • childMaxPerSpendKas (required) — string
  • childEpochLimitKas (required) — string
  • childAgentKey (required) — string
  • daaScore (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_build_spend

  Assemble an unsigned Kaspa transaction that spends from this grant, and return the digest to sign. THIS SERVER NEVER SEES YOUR KEY and never signs: it hands back bytes, and you sign the digest wherever your key lives. It also returns the advisory verdict, but it builds the transaction either way — a local rule that is too strict must not be able to block a payment the chain would accept. If the verdict says refused, broadcasting will cost a fee and fail.

  Parameters:

  • grant (required) — object — The grant, as issued by the principal.
  • amountKas (required) — string — Amount to pay, in KAS.
  • recipient (required) — string — Payee public key, 32 bytes of hex. Must be on the allowlist.
  • daaScore (required) — string — Current DAA score of the chain.
  • utxo (required) — object — The grant's CURRENT UTXO. Its address moves after every spend, so a stale one will not be found.
  • feeSompi — string — Defaults to 3000000. A covenant spend carries the whole redeem script in its signature script — about 7KB — so its mass is dominated by size and an ordinary transfer's fee is rejected as non-standard.
  • computeBudget — number — Defaults to 16. Charged as mass, so over-provisioning costs money and under-provisioning is rejected outright.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_wallet

  The whole wallet view in one call: the grant's current address, its spending limits, the largest payment permitted right now, and every address it is allowed to pay. This is the agent-wallet shape — address, limits, spending power — with one difference worth knowing: the limits are not settings this server or your code applies. They are in the script that unlocks the coin, so a payment outside them is not refused, it is a transaction that does not exist. NO CHAIN READ: this server never connects to a node. Every figure comes from the grant descriptor you passed, so an on-chain balance is deliberately absent — reporting one from a stale record is the failure this whole protocol keeps meeting.

  Parameters:

  • grant (required) — object — The grant, as issued by the principal.
  • daaScore (required) — string — Current DAA score of the chain.
  • prefix — string — Address prefix: kaspa, kaspatest, kaspasim or kaspadev. Defaults to kaspatest.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_grant_address

  Derive the on-chain address of a grant from its terms and current state. A grant's address is a HASH of its state, so it MOVES after every spend and every delegation — an address that worked yesterday holds nothing today. Use this to know which address to fund, watch, or look up.

  Parameters:

  • grant (required) — object — The grant, as issued by the principal.
  • prefix — string — Address prefix: kaspa, kaspatest, kaspasim or kaspadev. Defaults to kaspatest.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_recover_grant

  Read a grant's full state back out of any transaction that spent it, and work out where it went. Use this when a grant's recorded state is stale, wrong, or lost and its address turns up empty. Kaspa's P2SH requires the covenant script to travel in the clear inside every spending transaction, and the grant's state is spliced into that script — so every spend publishes the grant it spent. Pass the transaction as wire JSON, or just the redeem script hex if that is all you have.

  Parameters:

  • prefix — string — Address prefix: kaspa, kaspatest, kaspasim or kaspadev. Defaults to kaspatest.
  • transaction — A wire-format transaction that spent the grant.
  • redeemScriptHex — string — The covenant script alone, if you have only that.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_build_delegation

  Assemble an unsigned transaction that subdivides this grant into a child for a sub-agent, and return the digest to sign with the PARENT's agent key. THIS SERVER NEVER SEES YOUR KEY. A child can only ever be more restrictive than its parent, and the parent reserves exactly what the child receives — authority is subdivided, never created. Narrowing the child's allowlist needs the parent's full member list, because the witness is a path through the parent's tree and a root alone cannot produce one.

  Parameters:

  • parent (required) — object — The grant, as issued by the principal.
  • childAgentKey (required) — string — The sub-agent's x-only public key, 32 bytes of hex.
  • childBudgetKas (required) — string
  • childMaxPerSpendKas (required) — string
  • childEpochLimitKas (required) — string
  • childDelegationDepth (required) — number — Strictly less than the parent's, or the tree could not terminate.
  • utxo (required) — object — The grant's CURRENT UTXO. Its address moves after every spend, so a stale one will not be found.
  • prefix — string — Address prefix: kaspa, kaspatest, kaspasim or kaspadev. Defaults to kaspatest.
  • feeSompi — string
  • computeBudget — number
  • childExpiresAt — string — A short window is the only attenuation that ends BY ITSELF, with nobody online to revoke.
  • childNotBefore — string — Inherited from the parent when omitted.
  • childRecipients — array — A subset of the parent's allowlist. Omit to inherit all of it.
  • parentRecipients — array — The parent's FULL member list. Required only when childRecipients narrows it.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_build_settlement

  Assemble an unsigned transaction that ends a child grant and returns its UNSPENT remainder to the parent's budget, charging the parent only what the child actually spent. This is the other half of delegation: letting a child expire instead returns the money to the PRINCIPAL — to the human — which is no use to an agent mid-task. Returns TWO digests: the parent's half is signed by the parent's agent key, the child's by the revocation key. THIS SERVER NEVER SEES EITHER. prevRoot is the parent's reserve root from before this child was pushed; warda_build_delegation returns it as parentReserveRootBefore. It cannot be derived from anything on chain — a hash chain pops by preimage.

  Parameters:

  • parent (required) — object — The grant, as issued by the principal.
  • child (required)
  • prevRoot (required) — string — The parent's reserve root before this child was pushed.
  • parentUtxo (required) — object — The grant's CURRENT UTXO. Its address moves after every spend, so a stale one will not be found.
  • childUtxo (required)
  • prefix — string — Address prefix: kaspa, kaspatest, kaspasim or kaspadev. Defaults to kaspatest.
  • feeSompi — string — Defaults to 2000000 — two covenant inputs, so roughly twice a spend's mass.
  • computeBudget — number

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_build_exit

  Assemble an unsigned transaction that ENDS this grant and sweeps its balance to the principal. 'revoke' is the emergency stop, signed by the revocation key, effective the moment it confirms — the agent cannot stop it and cannot outrun it beyond the limits it already had. 'reclaim' is the same sweep after the window has closed, signed by the principal key; the covenant enforces the timing with a CLTV, so a reclaim built early simply will not run. THIS SERVER NEVER SEES A KEY. This is the tool a monitor calls when a grant is behaving badly and something has to act.

  Parameters:

  • grant (required) — object — The grant, as issued by the principal.
  • kind (required) — string
  • utxo (required) — object — The grant's CURRENT UTXO. Its address moves after every spend, so a stale one will not be found.
  • feeSompi — string
  • lockTime — string — Reclaim needs at least expiresAt, and still below the current DAA score. Revoke takes 0.
  • computeBudget — number

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• warda_find_service

  Search the Warda service registry for endpoints an agent holding a grant can pay. Filters are a conjunction: a service must offer EVERY capability asked for and be at or under maxPrice. WHAT IS VERIFIED: that the operator controls the key the service is paid at, and that the listing was served from the same host as the endpoint it names. WHAT IS NOT: that the price is real, that the service works, or that it is worth paying — those are the operator's claims about themselves and arrive labelled as such. There is no ranking; do not read the order as one. NETWORK: unlike every other tool on this server, this one makes one outbound request, to the registry and to nothing else. It will not fetch a URL you give it. NOT REQUIRED: discovery is never in the payment path. A listing is a signed manifest at /.well-known/warda-service.json on the operator's own domain — if you already know an endpoint, read that directly and pay it without asking anyone.

  Parameters:

  • q — string — Plain substring over name and description. Crude on purpose.
  • network — string — e.g. 'kaspa:testnet-10'. Omit for any.
  • maxPrice — string — Most you will pay per unit, as a decimal string in the asset's own units, e.g. '0.05'.
  • capability — array — Capabilities the service must offer, ALL of them. e.g. ['weather.current']

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.