Cofferline
Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.
| Endpoint | https://mcp.cofferline.com (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 47 tools · grade D (64) · pin ts_b184a3b04608dc324d85874028aa31dd · protocol 2025-06-18 |
| First / last listed | 2026-10-24 21:58 UTC / 2026-10-24 21:58 UTC |
| Grade over time | 2026-10-24: D (64), 47 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: get_quotes get_benchmarks screen_address list_tokens list_feedback submit_feedback start_siwe_login complete_siwe_login get_me export_account offboard_account put_policy get_policy check_spend check_pm_order poll_events get_statement create_intent get_intent list_intents cancel_intent prepare_delegation confirm_delegation renew_delegation revoke_delegation get_delegation list_delegations panic get_balance topup_balance set_auto_topup get_auto_topup remove_auto_topup store_pm_credential list_pm_credentials revoke_pm_credential get_pm_signer_rotation create_pm_order list_pm_orders cancel_pm_order cancel_all_pm_orders prepare_pm_order submit_pm_order get_pm_onboarding resolve_pm_funder sync_pm_fills wrap_pm_usdc
get_quotes | Live venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth. params: sell_token*, buy_token*, sell_amount*, chain_id |
get_benchmarks | Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth. params: none |
screen_address | OFAC SDN counterparty screening for an address. Free, no auth. params: address* |
list_tokens | Tokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth. params: chain_id |
list_feedback | Every feature request ever submitted, public and unauthenticated. Free. params: limit |
submit_feedback | Submit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, sche params: title*, body*, x_payment |
start_siwe_login | Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth. params: address*, chain_id |
complete_siwe_login | Finish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth. params: message*, signature* |
get_me | Identify the authenticated account: address, kind, scopes. Auth required. params: none |
export_account | Export all of this account's data in one document. Auth required. params: none |
offboard_account | Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required. params: confirm_wallet_address*, reason |
put_policy | Create or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and are stored into the document, and the response lists them in `defaulted`. params: policy* |
get_policy | List policy versions, newest first (the first entry is active). Auth required. params: wallet, limit |
check_spend | Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required. params: wallet*, amount_usd*, token*, counterparty |
check_pm_order | Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required. params: wallet*, condition_id*, cost_usd*, state |
poll_events | Poll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required. params: wallet, cursor, limit, type |
get_statement | Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required. params: wallet*, period*, format |
create_intent | Create a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required. params: wallet*, kind*, sell_token*, buy_token*, sell_amount*, max_slippage_bps, venues |
get_intent | Fetch an intent, including fills and the post-trade report once filled. Auth required. params: id* |
list_intents | List intents, newest first. Auth required. params: wallet, limit, offset |
cancel_intent | Cancel a planned intent (a few-second window before execution claims it). Auth required. params: id* |
prepare_delegation | Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required. params: account*, chain_id*, calls*, valid_after, valid_until*, rate_limit |
confirm_delegation | Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required. params: id*, enable_sig*, owner |
renew_delegation | Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required. params: id*, valid_until |
revoke_delegation | Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required. params: id* |
get_delegation | Fetch one delegation. Auth required. params: id* |
list_delegations | List delegations, newest first. Auth required. params: account, limit |
panic | Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required. params: reason |
get_balance | Prepaid fee balance: settled credits minus fee debits. Auth required. params: none |
topup_balance | Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, scheme:'exact', network, payload:{signature, authorizat params: amount_usd*, x_payment |
set_auto_topup | Configure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required. params: threshold_usd*, max_per_month, authorizations* |
get_auto_topup | The auto-topup rule and how many pre-signed authorizations remain. Auth required. params: none |
remove_auto_topup | Remove the auto-topup rule and its unused authorizations. Auth required. params: none |
store_pm_credential | Store a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required. params: venue, label, signer_private_key, maker, signer, api_key, secret, passphrase, signature_type |
list_pm_credentials | List stored venue credentials — metadata only, never material. Auth required. params: none |
revoke_pm_credential | Revoke a venue credential; its sealed ciphertext is destroyed. Auth required. params: id* |
get_pm_signer_rotation | Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required. params: id*, new_owner* |
create_pm_order | Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required. params: venue, wallet*, credential_id*, action*, condition_id, token_id, price_usd, size_shares, client_order_id, state |
list_pm_orders | The credential's resting orders straight from the venue — recover state after a disconnect. Auth required. params: credential_id*, market |
cancel_pm_order | Cancel one resting prediction-market order. Auth required. params: venue, order_id*, credential_id* |
cancel_all_pm_orders | Cancel every resting order for the credential, optionally within one market. Auth required. params: credential_id*, market |
prepare_pm_order | Prepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth required. params: venue*, wallet*, credential_id*, condition_id*, token_id*, action*, price_usd*, size_shares*, client_order_id, state |
submit_pm_order | Submit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required. params: prepare_id*, signature* |
get_pm_onboarding | Polymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required. params: address* |
resolve_pm_funder | Resolve an owner EOA to its Polymarket funder Safe candidates. Auth required. params: owner* |
sync_pm_fills | Pull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required. params: wallet*, credential_id* |
wrap_pm_usdc | Wrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required. params: credential_id*, amount_base_units |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.