@0xmonaco/mcp-server 1.0.38 → 1.0.39-develop.71e039b

package/README.md

@@ -17,6 +17,7 @@ supplying a key does **not** blindly unlock the entire tool set.
 | `MONACO_TOOL_ALLOWLIST`| No                           | Comma-separated tool names to enable on top of the profile (explicit per-tool opt-in, e.g. a single fund-movement tool). |
 | `MONACO_TOOL_DENYLIST` | No                           | Comma-separated tool names to disable. Wins over the profile and the allowlist. |
 | `MONACO_RPC_URL`       | No                           | Sei RPC URL (defaults per network)                                |
+| `MONACO_DELEGATED_OWNER_USER_ID` | No                 | Run on behalf of a delegated **owner** account. The `MONACO_PRIVATE_KEY` wallet is the agent; on startup it authenticates as itself, then adopts an owner-scoped session so every tool call acts on the owner (agent preserved as the audit actor). Requires `MONACO_PRIVATE_KEY` + `MONACO_CLIENT_ID`. See [delegated owner mode](#delegated-owner-mode). |
 
 ## Capability profiles
 
@@ -37,6 +38,23 @@ tools additionally require `full`; enable them with `MONACO_CAPABILITY=full`, or
 single tool in with `MONACO_TOOL_ALLOWLIST` (e.g. `MONACO_TOOL_ALLOWLIST=vault_withdraw`).
 Grant `full` only when you intend an agent to move funds — especially on `mainnet`.
 
+### Delegated owner mode
+
+Set `MONACO_DELEGATED_OWNER_USER_ID` to act on behalf of a delegated owner account instead of
+the configured wallet's own account. The wallet in `MONACO_PRIVATE_KEY` is the **agent**: on
+startup it authenticates as itself, then adopts an owner-scoped delegated session
+(`loginAsDelegatedOwner`). Every subsequent tool call — reads and trades — acts on the owner
+account, with the agent wallet preserved as the actor for audit. The owner must have registered
+this agent wallet with an active delegation policy; the server cannot self-assert ownership, and
+adoption fails if the agent is not authorized for that owner.
+
+This is fail-closed: `MONACO_DELEGATED_OWNER_USER_ID` requires `MONACO_PRIVATE_KEY` and
+`MONACO_CLIENT_ID`, a blank value is rejected, and if owner adoption fails the server does not
+fall back to trading as the agent's own account. Fund-movement tools still require the `full`
+capability, and delegated sessions cannot withdraw owner collateral. Raw delegated-session
+creation is intentionally not exposed as a tool — owner adoption is a startup option, not an
+autonomous agent action.
+
 ### Networks
 
 For public endpoints, set `MONACO_NETWORK` to one of the following documented values:
@@ -175,8 +193,6 @@ Position reads are available under `read`; `close_position` requires `market-mak
 | `get_position_history` | `read` | List historical (closed/reduced) perpetual position records with optional filters. |
 | `get_position_pnl_history` | `read` | Get the PnL history time series for a perpetual position over an interval. |
 | `close_position` | `market-maker` | Close a perpetual position with a market, limit, or IOC reduce order. |
-| `add_position_margin` | `full` | Add isolated margin collateral to a perpetual position. |
-| `reduce_position_margin` | `full` | Withdraw isolated margin collateral from a perpetual position back to the account. |
 
 ### Portfolio