Cofferline

Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.

CommunityOnlineAPI key requiredGlobalFreeRead-only

What it can do

    What data it sees

    Do you need an account

    An API key from the service settings is required

    Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.

    How to connect

    How to connect Cofferline to Claude

    The server address to paste into Claude settings:

    https://mcp.cofferline.com

    1. Open Claude (claude.ai or the desktop app).
    2. Go to Settings → Connectors.
    3. Click Add custom connector.
    4. Paste the server address copied below into Remote MCP server URL and click Add.
    5. In a chat, click + → Connectors and switch the new connector on.

    Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

    Authorization

    After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

    How to connect Cofferline to ChatGPT

    The server address to paste into ChatGPT settings:

    https://mcp.cofferline.com

    1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
    2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
    3. Open Settings → Connectors and click Create.
    4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
    5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
    6. In a new chat open + → Apps/Connectors and enable the connector.

    OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

    Authorization

    On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

    How to connect Cofferline to Cursor

    The server address to paste into Cursor settings:

    https://mcp.cofferline.com

    Fastest: click Open in Cursor below and confirm the prompt.

    Manually:

    1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
    2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
    3. Save the file. The server appears in the MCP list; authorize it there if asked.

    Authorization

    If the service needs sign-in, an authorize button appears next to the server in the MCP list.

    Server tool list (47)

    Raw names from tools/list. Only developers need these.

    get_quotesLive venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth.
    get_benchmarksMeasured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.
    screen_addressOFAC SDN counterparty screening for an address. Free, no auth.
    list_tokensTokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth.
    list_feedbackEvery feature request ever submitted, public and unauthenticated. Free.
    submit_feedbackSubmit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, scheme:'exact', network, payload:{signature, authorization}}.
    start_siwe_loginStart wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth.
    complete_siwe_loginFinish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.
    get_meIdentify the authenticated account: address, kind, scopes. Auth required.
    export_accountExport all of this account's data in one document. Auth required.
    offboard_accountClose this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required.
    put_policyCreate or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and are stored into the document, and the response lists them in `defaulted`.
    get_policyList policy versions, newest first (the first entry is active). Auth required.
    check_spendPre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.
    check_pm_orderPre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.
    poll_eventsPoll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required.
    get_statementDeterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.
    create_intentCreate a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required.
    get_intentFetch an intent, including fills and the post-trade report once filled. Auth required.
    list_intentsList intents, newest first. Auth required.
    cancel_intentCancel a planned intent (a few-second window before execution claims it). Auth required.
    prepare_delegationPrepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required.
    confirm_delegationActivate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.
    renew_delegationRenew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required.
    revoke_delegationRevoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.
    get_delegationFetch one delegation. Auth required.
    list_delegationsList delegations, newest first. Auth required.
    panicEmergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.
    get_balancePrepaid fee balance: settled credits minus fee debits. Auth required.
    topup_balanceTop up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, scheme:'exact', network, payload:{signature, authorization}}.
    set_auto_topupConfigure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required.
    get_auto_topupThe auto-topup rule and how many pre-signed authorizations remain. Auth required.
    remove_auto_topupRemove the auto-topup rule and its unused authorizations. Auth required.
    store_pm_credentialStore a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required.
    list_pm_credentialsList stored venue credentials — metadata only, never material. Auth required.
    revoke_pm_credentialRevoke a venue credential; its sealed ciphertext is destroyed. Auth required.
    get_pm_signer_rotationCalldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required.
    create_pm_orderPlace a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required.
    list_pm_ordersThe credential's resting orders straight from the venue — recover state after a disconnect. Auth required.
    cancel_pm_orderCancel one resting prediction-market order. Auth required.
    cancel_all_pm_ordersCancel every resting order for the credential, optionally within one market. Auth required.
    prepare_pm_orderPrepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth required.
    submit_pm_orderSubmit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required.
    get_pm_onboardingPolymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required.
    resolve_pm_funderResolve an owner EOA to its Polymarket funder Safe candidates. Auth required.
    sync_pm_fillsPull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required.
    wrap_pm_usdcWrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required.