@0xmonaco/mcp-server 1.0.37 → 1.0.38-develop.ebf8e8c
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +18 -0
- package/dist/bin.js +87 -87
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -17,6 +17,7 @@ supplying a key does **not** blindly unlock the entire tool set.
|
|
|
17
17
|
| `MONACO_TOOL_ALLOWLIST`| No | Comma-separated tool names to enable on top of the profile (explicit per-tool opt-in, e.g. a single fund-movement tool). |
|
|
18
18
|
| `MONACO_TOOL_DENYLIST` | No | Comma-separated tool names to disable. Wins over the profile and the allowlist. |
|
|
19
19
|
| `MONACO_RPC_URL` | No | Sei RPC URL (defaults per network) |
|
|
20
|
+
| `MONACO_DELEGATED_OWNER_USER_ID` | No | Run on behalf of a delegated **owner** account. The `MONACO_PRIVATE_KEY` wallet is the agent; on startup it authenticates as itself, then adopts an owner-scoped session so every tool call acts on the owner (agent preserved as the audit actor). Requires `MONACO_PRIVATE_KEY` + `MONACO_CLIENT_ID`. See [delegated owner mode](#delegated-owner-mode). |
|
|
20
21
|
|
|
21
22
|
## Capability profiles
|
|
22
23
|
|
|
@@ -37,6 +38,23 @@ tools additionally require `full`; enable them with `MONACO_CAPABILITY=full`, or
|
|
|
37
38
|
single tool in with `MONACO_TOOL_ALLOWLIST` (e.g. `MONACO_TOOL_ALLOWLIST=vault_withdraw`).
|
|
38
39
|
Grant `full` only when you intend an agent to move funds — especially on `mainnet`.
|
|
39
40
|
|
|
41
|
+
### Delegated owner mode
|
|
42
|
+
|
|
43
|
+
Set `MONACO_DELEGATED_OWNER_USER_ID` to act on behalf of a delegated owner account instead of
|
|
44
|
+
the configured wallet's own account. The wallet in `MONACO_PRIVATE_KEY` is the **agent**: on
|
|
45
|
+
startup it authenticates as itself, then adopts an owner-scoped delegated session
|
|
46
|
+
(`loginAsDelegatedOwner`). Every subsequent tool call — reads and trades — acts on the owner
|
|
47
|
+
account, with the agent wallet preserved as the actor for audit. The owner must have registered
|
|
48
|
+
this agent wallet with an active delegation policy; the server cannot self-assert ownership, and
|
|
49
|
+
adoption fails if the agent is not authorized for that owner.
|
|
50
|
+
|
|
51
|
+
This is fail-closed: `MONACO_DELEGATED_OWNER_USER_ID` requires `MONACO_PRIVATE_KEY` and
|
|
52
|
+
`MONACO_CLIENT_ID`, a blank value is rejected, and if owner adoption fails the server does not
|
|
53
|
+
fall back to trading as the agent's own account. Fund-movement tools still require the `full`
|
|
54
|
+
capability, and delegated sessions cannot withdraw owner collateral. Raw delegated-session
|
|
55
|
+
creation is intentionally not exposed as a tool — owner adoption is a startup option, not an
|
|
56
|
+
autonomous agent action.
|
|
57
|
+
|
|
40
58
|
### Networks
|
|
41
59
|
|
|
42
60
|
For public endpoints, set `MONACO_NETWORK` to one of the following documented values:
|