Mcp Coinbase Cdp

io.github.codesparPublished by GitHub account codesparv0.1.1Updated Oct 24, 2026

MCP server for Coinbase Developer Platform (CDP) — Trading, Wallets, Payments under one CDP key

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

A local MCP server for Coinbase Developer Platform that lets an assistant manage swaps, wallets and onchain payments under one CDP key.

What you can do
List, create, inspect and cancel onchain swaps, including status, executed amounts, gas and transaction hash. Create and list wallets, fetch a wallet by id, and list asset balances across addresses and networks. Send transfers from a wallet and look up single or historical transactions. Create, list, inspect and cancel outbound onchain payments to a payee.
When to use it
Use it when you want an assistant to work with Coinbase Developer Platform trading, wallet or payment operations from a desktop MCP client, rather than the separate Advanced Trade or Commerce servers.
Requirements
Runs locally as an npm package (Node.js) over stdio, or over HTTP when MCP_HTTP is set. Needs a CDP account and two environment variables: COINBASE_CDP_KEY_NAME (key id) and COINBASE_CDP_PRIVATE_KEY (full PEM block, including BEGIN/END lines). Network access to the CDP API host.
Before you install
The private key is a secret that signs every request; keep it out of logs and shared configs, and note the PEM is downloadable only once. Tools can create wallets, send transfers, create payments and swaps, and cancel pending ones, which moves real funds onchain. Review any write or send action before approving it.

Installation

In SourceWeft

  1. Open Mcp Coinbase Cdp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-coinbase-cdp

MCP server for the Coinbase Developer Platform (CDP) — single npm package covering three CDP product surfaces under one key:

  • Trading — onchain swap / trade API
  • Wallets — Smart / Embedded / MPC wallet primitives
  • Payments — onchain outbound payment infrastructure

All three live on the same CDP account, share one ES256 JWT-signed key, and share one base URL (https://api.cdp.coinbase.com) — so they ship as one package, not three.

Positioning vs the rest of the catalog

ServerCoinbase surfaceAuth
@codespar/mcp-coinbaseAdvanced Trade exchange (legacy retail)HMAC API keys (CB-ACCESS-*)
@codespar/mcp-coinbase-commerceCommerce merchant gateway (accept BTC/ETH/USDC at checkout)API key (X-CC-Api-Key)
@codespar/mcp-coinbase-cdpDeveloper Platform (Trading + Wallets + Payments)ES256 JWT (this package)

Each surface has a separate API host, a separate key type, and a separate dashboard — they do not share credentials. Mint the right key for the surface you want.

Tools (15)

Trading (4)

ToolPurpose
list_quotesList recent swap quotes minted under the authenticated CDP account.
create_swapCreate an onchain swap between two assets.
get_swapGet a single swap by id — full status, executed amounts, gas, tx hash.
cancel_swapCancel a pending swap before it lands onchain.

Wallets (7)

ToolPurpose
create_walletCreate a new wallet (smart / embedded / MPC).
list_walletsList wallets under the authenticated CDP account.
get_walletGet a single wallet by id.
list_balancesList asset balances across all addresses + networks.
transferSend a transfer from a wallet to a destination address.
get_transactionGet a single transaction by id.
list_transactionsList historical transactions for a wallet.

Payments (4)

ToolPurpose
create_paymentCreate an onchain payment (outbound transfer to a payee).
list_paymentsList historical payments.
get_paymentGet a single payment by id.
cancel_paymentCancel a pending payment before it lands onchain.

Install

bash
npm install -g @codespar/mcp-coinbase-cdp

Environment

bash
COINBASE_CDP_KEY_NAME="organizations/<org>/apiKeys/<id>"COINBASE_CDP_PRIVATE_KEY="-----BEGIN EC PRIVATE KEY-----...-----END EC PRIVATE KEY-----"

Mint the key (and download the PEM once — it is not recoverable later) at https://portal.cdp.coinbase.com. The same key authenticates Trading, Wallets, and Payments.

Important — the PEM must be the full multi-line block including BEGIN/END lines. When supplying via shell env, wrap in double quotes and preserve newlines (or use $'...' / a .env file).

Authentication

CDP signs every request with a fresh ES256 JWT in the Authorization: Bearer … header.

JWT claims (per request):

ClaimValue
subCOINBASE_CDP_KEY_NAME
iss"cdp"
aud["cdp_service"]
nbfnow (unix seconds)
expnow + 120
uri"<METHOD> api.cdp.coinbase.com<path>" (path includes any query string)

JWT header:

FieldValue
alg"ES256"
typ"JWT"
kidCOINBASE_CDP_KEY_NAME
noncerandom 16-byte hex (per request)

Signed with the ECDSA P-256 private key from COINBASE_CDP_PRIVATE_KEY. The PEM is imported once at startup and cached — only the JWT is minted per request.

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc.)npx @codespar/mcp-coinbase-cdp
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-coinbase-cdp

Enterprise

Need governance, budget limits, and audit trails for agent-driven onchain transactions? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

Source: packages/crypto/coinbase-cdp/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts