Cofferline

com.cofferlinePublished by cofferline.comOfficial publisherv1.0.0Updated Oct 24, 2026

Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Remote treasury server for agent wallets: policy checks, token conversion intents, prediction-market orders, delegations and prepaid fees.

What you can do
  • Compare live venue quotes, execution benchmarks, screen addresses against OFAC lists and list accepted tokens
  • Create, inspect, list and cancel conversion or gas-topup intents, and poll treasury events and monthly statements
  • Create, read and version wallet treasury policies, run pre-flight spend and prediction-market order checks
  • Prepare, confirm, renew, revoke and list scoped session-key delegations for a smart account
  • Store, list and revoke prediction-market venue credentials; place, list and cancel limit orders
  • Sign in with a wallet via SIWE, identify the account, export its data, manage prepaid balance and auto-topup, submit feedback, or trigger an emergency stop
When to use it
Use it when an assistant operates or supervises a crypto wallet and needs guardrails: checking whether a spend or prediction-market order fits a policy, executing conversions under that policy, managing scoped delegations, or keeping an auditable ledger of treasury activity.
Requirements
Remote streamable HTTP endpoint; no local package. Public tools work unauthenticated; authenticated tools need an Authorization bearer token, either a cl_key_ API key or a cl_sess_ session obtained by signing a SIWE message with a wallet outside the server. Paid actions need a prepaid USDC balance funded with EIP-3009 authorizations signed outside the server.
Before you install
The server cannot sign; you sign SIWE messages, EIP-3009 payment authorizations, delegation digests and on-chain calldata in your own wallet. Authenticated tools move funds and place real orders, and several actions are irreversible: offboard_account closes the account, panic revokes all credentials and delegations, revoke_pm_credential destroys stored material. Venue credentials such as a signer private key are stored server-side. Feedback costs a $1 anti-spam fee; auto-topup can settle…

Installation

In SourceWeft

  1. Open Cofferline in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.cofferline%2Ftreasury/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "cofferline": {
      "type": "http",
      "url": "https://mcp.cofferline.com/"
    }
  }
}

Tools

47

get_quotes

Live venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth.

Parameterschain_idbuy_tokenrequiredsell_tokenrequiredsell_amountrequired

get_benchmarks

Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.

Takes no parameters.

screen_address

OFAC SDN counterparty screening for an address. Free, no auth.

Parametersaddressrequired

list_tokens

Tokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth.

Parameterschain_id

list_feedback

Every feature request ever submitted, public and unauthenticated. Free.

Parameterslimit

submit_feedback

Submit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, scheme:'exact', network, payload:{signature, authorization}}.

Parametersbodyrequiredtitlerequiredx_payment

start_siwe_login

Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth.

Parametersaddressrequiredchain_id

complete_siwe_login

Finish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.

Parametersmessagerequiredsignaturerequired

get_me

Identify the authenticated account: address, kind, scopes. Auth required.

Takes no parameters.

export_account

Export all of this account's data in one document. Auth required.

Takes no parameters.

offboard_account

Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required.

Parametersreasonconfirm_wallet_addressrequired

put_policy

Create or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and are stored into the document, and the response lists them in `defaulted`.

Parameterspolicyrequired

get_policy

List policy versions, newest first (the first entry is active). Auth required.

Parameterslimitwallet

check_spend

Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.

Parameterstokenrequiredwalletrequiredamount_usdrequiredcounterparty

check_pm_order

Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.

Parametersstatewalletrequiredcost_usdrequiredcondition_idrequired

poll_events

Poll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required.

Parameterstypelimitcursorwallet

get_statement

Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.

Parametersformatperiodrequiredwalletrequired

create_intent

Create a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required.

Parameterskindrequiredvenueswalletrequiredbuy_tokenrequiredsell_tokenrequiredsell_amountrequiredmax_slippage_bps

get_intent

Fetch an intent, including fills and the post-trade report once filled. Auth required.

Parametersidrequired

list_intents

List intents, newest first. Auth required.

Parameterslimitoffsetwallet

cancel_intent

Cancel a planned intent (a few-second window before execution claims it). Auth required.

Parametersidrequired

prepare_delegation

Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required.

Parameterscallsrequiredaccountrequiredchain_idrequiredrate_limitvalid_aftervalid_untilrequired

confirm_delegation

Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.

Parametersidrequiredownerenable_sigrequired

renew_delegation

Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required.

Parametersidrequiredvalid_until

revoke_delegation

Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.

Parametersidrequired

get_delegation

Fetch one delegation. Auth required.

Parametersidrequired

list_delegations

List delegations, newest first. Auth required.

Parameterslimitaccount

panic

Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.

Parametersreason

get_balance

Prepaid fee balance: settled credits minus fee debits. Auth required.

Takes no parameters.

topup_balance

Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), then call again with x_payment set to the base64 of {x402Version:1, scheme:'exact', network, payload:{signature, authorization}}.

Parametersx_paymentamount_usdrequired

set_auto_topup

Configure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required.

Parametersmax_per_monththreshold_usdrequiredauthorizationsrequired

get_auto_topup

The auto-topup rule and how many pre-signed authorizations remain. Auth required.

Takes no parameters.

remove_auto_topup

Remove the auto-topup rule and its unused authorizations. Auth required.

Takes no parameters.

store_pm_credential

Store a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required.

Parameterslabelmakervenuesecretsignerapi_keypassphrasesignature_typesigner_private_key

list_pm_credentials

List stored venue credentials — metadata only, never material. Auth required.

Takes no parameters.

revoke_pm_credential

Revoke a venue credential; its sealed ciphertext is destroyed. Auth required.

Parametersidrequired

get_pm_signer_rotation

Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required.

Parametersidrequirednew_ownerrequired

create_pm_order

Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required.

Parametersstatevenueactionrequiredwalletrequiredtoken_idprice_usdsize_sharescondition_idcredential_idrequiredclient_order_id

list_pm_orders

The credential's resting orders straight from the venue — recover state after a disconnect. Auth required.

Parametersmarketcredential_idrequired

cancel_pm_order

Cancel one resting prediction-market order. Auth required.

Parametersvenueorder_idrequiredcredential_idrequired

cancel_all_pm_orders

Cancel every resting order for the credential, optionally within one market. Auth required.

Parametersmarketcredential_idrequired

prepare_pm_order

Prepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth required.

Parametersstatevenuerequiredactionrequiredwalletrequiredtoken_idrequiredprice_usdrequiredsize_sharesrequiredcondition_idrequiredcredential_idrequiredclient_order_id

submit_pm_order

Submit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required.

Parameterssignaturerequiredprepare_idrequired

get_pm_onboarding

Polymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required.

Parametersaddressrequired

resolve_pm_funder

Resolve an owner EOA to its Polymarket funder Safe candidates. Auth required.

Parametersownerrequired

sync_pm_fills

Pull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required.

Parameterswalletrequiredcredential_idrequired

wrap_pm_usdc

Wrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required.

Parameterscredential_idrequiredamount_base_units

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.