Cofferline
by cofferline.com in Markets & finance
Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.
https://mcp.cofferline.com- Tools
- 47
- open to any client
- Uptime
- 100%
- last 30 days
- Response time
- 238 ms
- 350 ms slowest 5%
- Last check
- Passed
- 9 h ago, next any minute now
Reliability
Status and outage history · Atom feed · Watch with other listings
How to connect
Add it to any MCP client that supports remote servers.
{
"mcpServers": {
"cofferline": {
"type": "http",
"url": "https://mcp.cofferline.com"
}
}
}47 tools
- get_quotes
Live venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth.
- get_benchmarks
Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.
- screen_address
OFAC SDN counterparty screening for an address. Free, no auth.
- list_tokens
Tokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth.
- list_feedback
Every feature request ever submitted, public and unauthenticated. Free.
- submit_feedback
Submit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization…
- start_siwe_login
Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth.
- complete_siwe_login
Finish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.
- get_me
Identify the authenticated account: address, kind, scopes. Auth required.
- export_account
Export all of this account's data in one document. Auth required.
- offboard_account
Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required.
- put_policy
Create or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and…
- get_policy
List policy versions, newest first (the first entry is active). Auth required.
- check_spend
Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.
- check_pm_order
Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.
- poll_events
Poll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required.
- get_statement
Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.
- create_intent
Create a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required.
- get_intent
Fetch an intent, including fills and the post-trade report once filled. Auth required.
- list_intents
List intents, newest first. Auth required.
- cancel_intent
Cancel a planned intent (a few-second window before execution claims it). Auth required.
- prepare_delegation
Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required.
- confirm_delegation
Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.
- renew_delegation
Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required.
- revoke_delegation
Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.
- get_delegation
Fetch one delegation. Auth required.
- list_delegations
List delegations, newest first. Auth required.
- panic
Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.
- get_balance
Prepaid fee balance: settled credits minus fee debits. Auth required.
- topup_balance
Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign)…
- set_auto_topup
Configure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required.
- get_auto_topup
The auto-topup rule and how many pre-signed authorizations remain. Auth required.
- remove_auto_topup
Remove the auto-topup rule and its unused authorizations. Auth required.
- store_pm_credential
Store a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required.
- list_pm_credentials
List stored venue credentials — metadata only, never material. Auth required.
- revoke_pm_credential
Revoke a venue credential; its sealed ciphertext is destroyed. Auth required.
- get_pm_signer_rotation
Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required.
- create_pm_order
Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required.
- list_pm_orders
The credential's resting orders straight from the venue — recover state after a disconnect. Auth required.
- cancel_pm_order
Cancel one resting prediction-market order. Auth required.
Security scan
No findings
We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time |
|---|---|---|---|
| 9 h ago | Passed | 200 | 142 ms |
| 19 h ago | Passed | 200 | 155 ms |
| 29 h ago | Passed | 200 | 177 ms |
| 39 h ago | Passed | 200 | 255 ms |
| 2 days ago | Passed | 200 | 96 ms |
Show 10 older checks
| 2 days ago | Passed | 200 | 224 ms |
| 3 days ago | Passed | 200 | 159 ms |
| 3 days ago | Passed | 200 | 208 ms |
| 4 days ago | Passed | 200 | 268 ms |
| 4 days ago | Passed | 200 | 197 ms |
| 4 days ago | Passed | 200 | 249 ms |
| 5 days ago | Passed | 200 | 177 ms |
| 5 days ago | Passed | 200 | 170 ms |
| 6 days ago | Passed | 200 | 238 ms |
| 6 days ago | Passed | 200 | 222 ms |