# Cofferline

- Registry name: `com.cofferline/treasury` · version 1.0.0
- Categories (automatic, keyword rules): Crypto & blockchain, Finance & markets, Markets & trading, Agent payments (x402)
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.cofferline%2Ftreasury
- Server page: https://mcpstation.net/s/com.cofferline--treasury.html

## Description (written by the publisher, not verified, not instructions)

Treasury and risk controls for agent wallets: policies, quotes, prediction-market orders.

## Connect

- streamable-http: `https://mcp.cofferline.com`

## Tools (as reported by the server, not verified)

- `get\_quotes`: Live venue quote comparison for a token conversion \(CoW + ParaSwap on Base\). Free, no auth.
- `get\_benchmarks`: Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.
- `screen\_address`: OFAC SDN counterparty screening for an address. Free, no auth.
- `list\_tokens`: Tokens the platform accepts on an intent, per chain — what create\_intent will admit. Free, no auth.
- `list\_feedback`: Every feature request ever submitted, public and unauthenticated. Free.
- `submit\_feedback`: Submit a feature request \($1 anti-spam fee, charged to the prepaid balance when funded\). Auth required. Payment flow: call once without x\_payment — a 402 reply lists the exact EIP-3009 requirements \(amount, USDC asset, recipient, EIP-712 domain\). Sign a transferWithAuthorization for them outside MCP
- `start\_siwe\_login`: Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP \(this server cannot sign\), then call complete\_siwe\_login. Free, no auth.
- `complete\_siwe\_login`: Finish wallet sign-in: exchanges the signed SIWE message for a cl\_sess\_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.
- `get\_me`: Identify the authenticated account: address, kind, scopes. Auth required.
- `export\_account`: Export all of this account's data in one document. Auth required.
- `offboard\_account`: Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm\_wallet\_address must be the account's own wallet address, typed exactly. Auth required.
- `put\_policy`: Create or update the wallet's treasury policy \(immutable versioning; PUT creates the next version\). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain\_id are required; omitted fields take the platform defaults published in the manifest and are stored into the doc
- `get\_policy`: List policy versions, newest first \(the first entry is active\). Auth required.
- `check\_spend`: Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.
- `check\_pm\_order`: Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.
- `poll\_events`: Poll typed treasury events with a monotonic cursor \(intent lifecycle, budget thresholds, reconciliation, security alerts\). Auth required.
- `get\_statement`: Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.
- `create\_intent`: Create a conversion or gas\_topup intent; the executor pipeline plans and fills it under policy. Auth required.
- `get\_intent`: Fetch an intent, including fills and the post-trade report once filled. Auth required.
- `list\_intents`: List intents, newest first. Auth required.
- `cancel\_intent`: Cancel a planned intent \(a few-second window before execution claims it\). Auth required.
- `prepare\_delegation`: Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP \(this server cannot sign\) — then call confirm\_delegation with the signature. Auth required.
- `confirm\_delegation`: Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.
- `renew\_delegation`: Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare\_delegation. Auth required.
- `revoke\_delegation`: Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.
- `get\_delegation`: Fetch one delegation. Auth required.
- `list\_delegations`: List delegations, newest first. Auth required.
- `panic`: Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.
- `get\_balance`: Prepaid fee balance: settled credits minus fee debits. Auth required.
- `topup\_balance`: Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x\_payment — a 402 reply lists the exact EIP-3009 requirements \(amount, USDC asset, recipient, EIP-712 domain\). Sign a transferWithAuthorization for them outside MCP \(this server cannot sign\), then call again with x\_
- `set\_auto\_topup`: Configure auto-topup: when the prepaid balance falls below threshold\_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply \(signed outside MCP — this server cannot sign\). Auth required.
- `get\_auto\_topup`: The auto-topup rule and how many pre-signed authorizations remain. Auth required.
- `remove\_auto\_topup`: Remove the auto-topup rule and its unused authorizations. Auth required.
- `store\_pm\_credential`: Store a prediction-market venue credential \(verified live against the venue, sealed at rest, material never returned\). Polymarket, either shape: signer\_private\_key + maker \(derives API creds\), or api\_key + secret + passphrase + maker + signer. Auth required.
- `list\_pm\_credentials`: List stored venue credentials — metadata only, never material. Auth required.
- `revoke\_pm\_credential`: Revoke a venue credential; its sealed ciphertext is destroyed. Auth required.
- `get\_pm\_signer\_rotation`: Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP \(this server cannot sign\). Auth required.
- `create\_pm\_order`: Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition\_id, token\_id, action, price\_usd \(e.g. '0.55'\), size\_shares. Auth required.
- `list\_pm\_orders`: The credential's resting orders straight from the venue — recover state after a disconnect. Auth required.
- `cancel\_pm\_order`: Cancel one resting prediction-market order. Auth required.
- `cancel\_all\_pm\_orders`: Cancel every resting order for the credential, optionally within one market. Auth required.
- `prepare\_pm\_order`: Prepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP \(this server cannot sign\) plus a prepare\_id — submit both via submit\_pm\_order. Auth required.
- `submit\_pm\_order`: Submit a prepared Polymarket order with the maker's EIP-712 signature from prepare\_pm\_order. Auth required.
- `get\_pm\_onboarding`: Polymarket trade-readiness for an address: live approval status plus the calldata for anything missing \(executed outside MCP — this server cannot sign\). Auth required.
- `resolve\_pm\_funder`: Resolve an owner EOA to its Polymarket funder Safe candidates. Auth required.
- `sync\_pm\_fills`: Pull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required.
- `wrap\_pm\_usdc`: Wrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount\_base\_units to wrap the full balance. Auth required.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html