Cofferline
mcp remote · streamable-http · v1.0.0 · source: crawl
https://mcp.cofferline.com
Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.
Works
90
Verified Oct 31, 2026 · p50 444 ms · p95 617 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'Cofferline MCP' |
| tools_listed | 15 | pass | 47 tools |
| schema_complete | 15 | pass | 47 of 47 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 444 ms |
| latency_p95 | 5 | pass | p95 617 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | fail | submit_feedback: base64 payload; topup_balance: base64 payload |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (47)
| Name | Description | Schema |
|---|---|---|
panic | Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required. | typed |
get_balance | Prepaid fee balance: settled credits minus fee debits. Auth required. | typed |
get_delegation | Fetch one delegation. Auth required. | typed |
list_delegations | List delegations, newest first. Auth required. | typed |
get_quotes | Live venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth. | typed |
get_benchmarks | Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth. | typed |
screen_address | OFAC SDN counterparty screening for an address. Free, no auth. | typed |
list_tokens | Tokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth. | typed |
list_feedback | Every feature request ever submitted, public and unauthenticated. Free. | typed |
submit_feedback | Submit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (a | typed |
start_siwe_login | Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth. | typed |
complete_siwe_login | Finish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth. | typed |
get_me | Identify the authenticated account: address, kind, scopes. Auth required. | typed |
export_account | Export all of this account's data in one document. Auth required. | typed |
offboard_account | Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth req | typed |
put_policy | Create or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are requi | typed |
get_policy | List policy versions, newest first (the first entry is active). Auth required. | typed |
check_spend | Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required. | typed |
check_pm_order | Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required. | typed |
poll_events | Poll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required. | typed |
get_statement | Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required. | typed |
create_intent | Create a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required. | typed |
get_intent | Fetch an intent, including fills and the post-trade report once filled. Auth required. | typed |
list_intents | List intents, newest first. Auth required. | typed |
cancel_intent | Cancel a planned intent (a few-second window before execution claims it). Auth required. | typed |
prepare_delegation | Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot | typed |
confirm_delegation | Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required. | typed |
renew_delegation | Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required. | typed |
revoke_delegation | Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required. | typed |
topup_balance | Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign | typed |
set_auto_topup | Configure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). | typed |
get_auto_topup | The auto-topup rule and how many pre-signed authorizations remain. Auth required. | typed |
remove_auto_topup | Remove the auto-topup rule and its unused authorizations. Auth required. | typed |
store_pm_credential | Store a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_ | typed |
list_pm_credentials | List stored venue credentials — metadata only, never material. Auth required. | typed |
revoke_pm_credential | Revoke a venue credential; its sealed ciphertext is destroyed. Auth required. | typed |
get_pm_signer_rotation | Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required. | typed |
create_pm_order | Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required. | typed |
list_pm_orders | The credential's resting orders straight from the venue — recover state after a disconnect. Auth required. | typed |
cancel_pm_order | Cancel one resting prediction-market order. Auth required. | typed |
cancel_all_pm_orders | Cancel every resting order for the credential, optionally within one market. Auth required. | typed |
prepare_pm_order | Prepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth | typed |
submit_pm_order | Submit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required. | typed |
get_pm_onboarding | Polymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required. | typed |
resolve_pm_funder | Resolve an owner EOA to its Polymarket funder Safe candidates. Auth required. | typed |
sync_pm_fills | Pull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required. | typed |
wrap_pm_usdc | Wrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required. | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-cofferline-treasury)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.