@codespar/mcp-bitso 0.1.0 → 0.2.0

package/README.md

@@ -110,6 +110,10 @@ Want to contribute? [Open a PR](https://github.com/codespar/mcp-dev-brasil) or [
 - [MCP Dev Brasil](https://github.com/codespar/mcp-dev-brasil)
 - [Landing Page](https://codespar.dev/mcp)
 
+## Enterprise
+
+Need governance, budget limits, and audit trails for agent payments? [CodeSpar Enterprise](https://codespar.dev/enterprise) adds policy engine, payment routing, and compliance templates on top of these MCP servers.
+
 ## License
 
 MIT

package/dist/index.js

@@ -13,6 +13,16 @@
  * - list_trades: List executed trades
  * - list_funding_sources: List available funding sources
  * - create_withdrawal: Create a withdrawal request
+ * - list_ledger: List account ledger entries (trades, fees, fundings, withdrawals)
+ * - list_open_orders: List currently open orders
+ * - lookup_order: Look up an order by origin_id / client_id
+ * - cancel_all_orders: Cancel all open orders
+ * - list_fundings: List account fundings (deposits)
+ * - list_withdrawals: List account withdrawals
+ * - get_withdrawal: Retrieve a specific withdrawal by ID
+ * - list_fees: List applicable fees for the authenticated user
+ * - get_account_status: Retrieve account KYC and verification status
+ * - list_funding_destinations: Get funding destination info for a currency
  *
  * Environment:
  *   BITSO_API_KEY — API key from https://bitso.com/
@@ -20,6 +30,8 @@
  */
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
 import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import * as crypto from "node:crypto";
 const API_KEY = process.env.BITSO_API_KEY || "";
@@ -47,7 +59,7 @@ async function bitsoRequest(method, path, body) {
     }
     return res.json();
 }
-const server = new Server({ name: "mcp-bitso", version: "0.1.0" }, { capabilities: { tools: {} } });
+const server = new Server({ name: "mcp-bitso", version: "0.2.0" }, { capabilities: { tools: {} } });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: [
         {
@@ -164,6 +176,110 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
                 required: ["currency", "amount"],
             },
         },
+        {
+            name: "list_ledger",
+            description: "List account ledger entries (trades, fees, fundings, withdrawals)",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    operation: { type: "string", enum: ["trade", "fee", "funding", "withdrawal"], description: "Filter by operation type" },
+                    limit: { type: "number", description: "Number of results (default 25, max 100)" },
+                    marker: { type: "string", description: "Pagination marker" },
+                    sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+                },
+            },
+        },
+        {
+            name: "list_open_orders",
+            description: "List currently open orders for the authenticated user",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    book: { type: "string", description: "Filter by order book symbol (e.g. btc_mxn)" },
+                    marker: { type: "string", description: "Pagination marker" },
+                    sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+                    limit: { type: "number", description: "Number of results (default 25, max 100)" },
+                },
+            },
+        },
+        {
+            name: "lookup_order",
+            description: "Look up one or more orders by origin_id (client_id)",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    origin_ids: { type: "string", description: "Comma-separated origin_id values (client IDs)" },
+                },
+                required: ["origin_ids"],
+            },
+        },
+        {
+            name: "cancel_all_orders",
+            description: "Cancel all open orders for the authenticated user",
+            inputSchema: { type: "object", properties: {} },
+        },
+        {
+            name: "list_fundings",
+            description: "List account fundings (deposits)",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    fids: { type: "string", description: "Comma-separated funding IDs to filter" },
+                    status: { type: "string", enum: ["pending", "complete", "cancelled"], description: "Filter by status" },
+                    method: { type: "string", description: "Funding method (e.g. spei, bitcoin)" },
+                    limit: { type: "number", description: "Number of results (default 25, max 100)" },
+                    marker: { type: "string", description: "Pagination marker" },
+                    sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+                },
+            },
+        },
+        {
+            name: "list_withdrawals",
+            description: "List account withdrawals",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    wids: { type: "string", description: "Comma-separated withdrawal IDs to filter" },
+                    status: { type: "string", enum: ["pending", "processing", "complete", "failed"], description: "Filter by status" },
+                    method: { type: "string", description: "Withdrawal method (e.g. spei, bitcoin)" },
+                    limit: { type: "number", description: "Number of results (default 25, max 100)" },
+                    marker: { type: "string", description: "Pagination marker" },
+                    sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+                },
+            },
+        },
+        {
+            name: "get_withdrawal",
+            description: "Retrieve a specific withdrawal by its ID",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    wid: { type: "string", description: "Withdrawal ID" },
+                },
+                required: ["wid"],
+            },
+        },
+        {
+            name: "list_fees",
+            description: "List applicable fees for the authenticated user across trading pairs",
+            inputSchema: { type: "object", properties: {} },
+        },
+        {
+            name: "get_account_status",
+            description: "Retrieve account KYC and verification status (tier, limits, required docs)",
+            inputSchema: { type: "object", properties: {} },
+        },
+        {
+            name: "list_funding_destinations",
+            description: "Get funding destination details (address/CLABE) for a given currency",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    fund_currency: { type: "string", description: "Currency code (e.g. btc, mxn, ars)" },
+                },
+                required: ["fund_currency"],
+            },
+        },
     ],
 }));
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
@@ -216,6 +332,78 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
                 return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", "/funding_destination"), null, 2) }] };
             case "create_withdrawal":
                 return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("POST", "/withdrawals", args), null, 2) }] };
+            case "list_ledger": {
+                const params = new URLSearchParams();
+                if (args?.limit)
+                    params.set("limit", String(args.limit));
+                if (args?.marker)
+                    params.set("marker", String(args.marker));
+                if (args?.sort)
+                    params.set("sort", String(args.sort));
+                const op = args?.operation ? `/${args.operation}s` : "";
+                const qs = params.toString();
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/ledger${op}${qs ? `?${qs}` : ""}`), null, 2) }] };
+            }
+            case "list_open_orders": {
+                const params = new URLSearchParams();
+                if (args?.book)
+                    params.set("book", String(args.book));
+                if (args?.limit)
+                    params.set("limit", String(args.limit));
+                if (args?.marker)
+                    params.set("marker", String(args.marker));
+                if (args?.sort)
+                    params.set("sort", String(args.sort));
+                const qs = params.toString();
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/open_orders${qs ? `?${qs}` : ""}`), null, 2) }] };
+            }
+            case "lookup_order":
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/orders/${args?.origin_ids}`), null, 2) }] };
+            case "cancel_all_orders":
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("DELETE", "/orders/all"), null, 2) }] };
+            case "list_fundings": {
+                const params = new URLSearchParams();
+                if (args?.status)
+                    params.set("status", String(args.status));
+                if (args?.method)
+                    params.set("method", String(args.method));
+                if (args?.limit)
+                    params.set("limit", String(args.limit));
+                if (args?.marker)
+                    params.set("marker", String(args.marker));
+                if (args?.sort)
+                    params.set("sort", String(args.sort));
+                const suffix = args?.fids ? `/${args.fids}` : "";
+                const qs = params.toString();
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/fundings${suffix}${qs ? `?${qs}` : ""}`), null, 2) }] };
+            }
+            case "list_withdrawals": {
+                const params = new URLSearchParams();
+                if (args?.status)
+                    params.set("status", String(args.status));
+                if (args?.method)
+                    params.set("method", String(args.method));
+                if (args?.limit)
+                    params.set("limit", String(args.limit));
+                if (args?.marker)
+                    params.set("marker", String(args.marker));
+                if (args?.sort)
+                    params.set("sort", String(args.sort));
+                const suffix = args?.wids ? `/${args.wids}` : "";
+                const qs = params.toString();
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/withdrawals${suffix}${qs ? `?${qs}` : ""}`), null, 2) }] };
+            }
+            case "get_withdrawal":
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/withdrawals/${args?.wid}`), null, 2) }] };
+            case "list_fees":
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", "/fees"), null, 2) }] };
+            case "get_account_status":
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", "/account_status"), null, 2) }] };
+            case "list_funding_destinations": {
+                const params = new URLSearchParams();
+                params.set("fund_currency", String(args?.fund_currency));
+                return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/funding_destination?${params}`), null, 2) }] };
+            }
             default:
                 return { content: [{ type: "text", text: `Unknown tool: ${name}` }], isError: true };
         }
@@ -225,15 +413,46 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     }
 });
 async function main() {
-    if (!API_KEY) {
-        console.error("BITSO_API_KEY environment variable is required");
-        process.exit(1);
+    if (process.argv.includes("--http") || process.env.MCP_HTTP === "true") {
+        const { default: express } = await import("express");
+        const { randomUUID } = await import("node:crypto");
+        const app = express();
+        app.use(express.json());
+        const transports = new Map();
+        app.get("/health", (_req, res) => res.json({ status: "ok", sessions: transports.size }));
+        app.post("/mcp", async (req, res) => {
+            const sid = req.headers["mcp-session-id"];
+            if (sid && transports.has(sid)) {
+                await transports.get(sid).handleRequest(req, res, req.body);
+                return;
+            }
+            if (!sid && isInitializeRequest(req.body)) {
+                const t = new StreamableHTTPServerTransport({ sessionIdGenerator: () => randomUUID(), onsessioninitialized: (id) => { transports.set(id, t); } });
+                t.onclose = () => { if (t.sessionId)
+                    transports.delete(t.sessionId); };
+                const s = new Server({ name: "mcp-bitso", version: "0.2.0" }, { capabilities: { tools: {} } });
+                server._requestHandlers.forEach((v, k) => s._requestHandlers.set(k, v));
+                server._notificationHandlers?.forEach((v, k) => s._notificationHandlers.set(k, v));
+                await s.connect(t);
+                await t.handleRequest(req, res, req.body);
+                return;
+            }
+            res.status(400).json({ jsonrpc: "2.0", error: { code: -32000, message: "Bad Request" }, id: null });
+        });
+        app.get("/mcp", async (req, res) => { const sid = req.headers["mcp-session-id"]; if (sid && transports.has(sid))
+            await transports.get(sid).handleRequest(req, res);
+        else
+            res.status(400).send("Invalid session"); });
+        app.delete("/mcp", async (req, res) => { const sid = req.headers["mcp-session-id"]; if (sid && transports.has(sid))
+            await transports.get(sid).handleRequest(req, res);
+        else
+            res.status(400).send("Invalid session"); });
+        const port = Number(process.env.MCP_PORT) || 3000;
+        app.listen(port, () => { console.error(`MCP HTTP server on http://localhost:${port}/mcp`); });
     }
-    if (!API_SECRET) {
-        console.error("BITSO_API_SECRET environment variable is required");
-        process.exit(1);
+    else {
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
     }
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
 }
 main().catch(console.error);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/mcp-bitso",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "MCP server for Bitso — Latin American crypto exchange, trading, funding, withdrawals",
   "type": "module",
   "main": "./dist/index.js",
@@ -26,5 +26,6 @@
     "exchange",
     "trading",
     "latam"
-  ]
+  ],
+  "mcpName": "io.github.codespar/mcp-bitso"
 }

package/server.json

@@ -0,0 +1,30 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.codespar/mcp-bitso",
+  "description": "MCP server for Bitso — Latin American crypto exchange, trading, funding, withdrawals",
+  "repository": {
+    "url": "https://github.com/codespar/mcp-dev-brasil",
+    "source": "github",
+    "subfolder": "packages/crypto/bitso"
+  },
+  "version": "0.2.0",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "@codespar/mcp-bitso",
+      "version": "0.2.0",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "BITSO_API_KEY",
+          "description": "API key for bitso",
+          "isRequired": true,
+          "format": "string",
+          "isSecret": true
+        }
+      ]
+    }
+  ]
+}

package/src/__tests__/index.test.ts

@@ -0,0 +1,50 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+
+let listToolsHandler: Function;
+let callToolHandler: Function;
+
+vi.mock("@modelcontextprotocol/sdk/server/index.js", () => {
+  class FakeServer {
+    constructor() {}
+    setRequestHandler(schema: any, handler: Function) {
+      if (JSON.stringify(schema).includes("tools/list")) listToolsHandler = handler;
+      if (JSON.stringify(schema).includes("tools/call")) callToolHandler = handler;
+    }
+    connect() { return Promise.resolve(); }
+  }
+  return { Server: FakeServer };
+});
+
+vi.mock("@modelcontextprotocol/sdk/server/stdio.js", () => ({ StdioServerTransport: class {} }));
+
+process.env.BITSO_API_KEY = "test-key";
+process.env.BITSO_API_SECRET = "test-secret";
+
+const mockFetch = vi.fn();
+global.fetch = mockFetch as any;
+
+beforeEach(async () => {
+  vi.resetModules();
+  listToolsHandler = undefined as any;
+  callToolHandler = undefined as any;
+  mockFetch.mockReset();
+  global.fetch = mockFetch as any;
+  await import("../index.js");
+});
+
+describe("mcp-bitso", () => {
+  it("should register 10 tools", async () => {
+    const result = await listToolsHandler();
+    expect(result.tools).toHaveLength(10);
+  });
+
+  it("should call correct API endpoint for get_ticker", async () => {
+    mockFetch.mockResolvedValueOnce({ ok: true, json: () => Promise.resolve({ success: true, payload: { last: "100000" } }) });
+
+    await callToolHandler({ params: { name: "get_ticker", arguments: { book: "btc_brl" } } });
+
+    const [url] = mockFetch.mock.calls[0];
+    expect(url).toContain("api.bitso.com/v3/ticker");
+    expect(url).toContain("book=btc_brl");
+  });
+});

package/src/index.ts

@@ -14,6 +14,16 @@
  * - list_trades: List executed trades
  * - list_funding_sources: List available funding sources
  * - create_withdrawal: Create a withdrawal request
+ * - list_ledger: List account ledger entries (trades, fees, fundings, withdrawals)
+ * - list_open_orders: List currently open orders
+ * - lookup_order: Look up an order by origin_id / client_id
+ * - cancel_all_orders: Cancel all open orders
+ * - list_fundings: List account fundings (deposits)
+ * - list_withdrawals: List account withdrawals
+ * - get_withdrawal: Retrieve a specific withdrawal by ID
+ * - list_fees: List applicable fees for the authenticated user
+ * - get_account_status: Retrieve account KYC and verification status
+ * - list_funding_destinations: Get funding destination info for a currency
  *
  * Environment:
  *   BITSO_API_KEY — API key from https://bitso.com/
@@ -22,6 +32,8 @@
 
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
 import {
   CallToolRequestSchema,
   ListToolsRequestSchema,
@@ -57,7 +69,7 @@ async function bitsoRequest(method: string, path: string, body?: unknown): Promi
 }
 
 const server = new Server(
-  { name: "mcp-bitso", version: "0.1.0" },
+  { name: "mcp-bitso", version: "0.2.0" },
   { capabilities: { tools: {} } }
 );
 
@@ -177,6 +189,110 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
         required: ["currency", "amount"],
       },
     },
+    {
+      name: "list_ledger",
+      description: "List account ledger entries (trades, fees, fundings, withdrawals)",
+      inputSchema: {
+        type: "object",
+        properties: {
+          operation: { type: "string", enum: ["trade", "fee", "funding", "withdrawal"], description: "Filter by operation type" },
+          limit: { type: "number", description: "Number of results (default 25, max 100)" },
+          marker: { type: "string", description: "Pagination marker" },
+          sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+        },
+      },
+    },
+    {
+      name: "list_open_orders",
+      description: "List currently open orders for the authenticated user",
+      inputSchema: {
+        type: "object",
+        properties: {
+          book: { type: "string", description: "Filter by order book symbol (e.g. btc_mxn)" },
+          marker: { type: "string", description: "Pagination marker" },
+          sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+          limit: { type: "number", description: "Number of results (default 25, max 100)" },
+        },
+      },
+    },
+    {
+      name: "lookup_order",
+      description: "Look up one or more orders by origin_id (client_id)",
+      inputSchema: {
+        type: "object",
+        properties: {
+          origin_ids: { type: "string", description: "Comma-separated origin_id values (client IDs)" },
+        },
+        required: ["origin_ids"],
+      },
+    },
+    {
+      name: "cancel_all_orders",
+      description: "Cancel all open orders for the authenticated user",
+      inputSchema: { type: "object", properties: {} },
+    },
+    {
+      name: "list_fundings",
+      description: "List account fundings (deposits)",
+      inputSchema: {
+        type: "object",
+        properties: {
+          fids: { type: "string", description: "Comma-separated funding IDs to filter" },
+          status: { type: "string", enum: ["pending", "complete", "cancelled"], description: "Filter by status" },
+          method: { type: "string", description: "Funding method (e.g. spei, bitcoin)" },
+          limit: { type: "number", description: "Number of results (default 25, max 100)" },
+          marker: { type: "string", description: "Pagination marker" },
+          sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+        },
+      },
+    },
+    {
+      name: "list_withdrawals",
+      description: "List account withdrawals",
+      inputSchema: {
+        type: "object",
+        properties: {
+          wids: { type: "string", description: "Comma-separated withdrawal IDs to filter" },
+          status: { type: "string", enum: ["pending", "processing", "complete", "failed"], description: "Filter by status" },
+          method: { type: "string", description: "Withdrawal method (e.g. spei, bitcoin)" },
+          limit: { type: "number", description: "Number of results (default 25, max 100)" },
+          marker: { type: "string", description: "Pagination marker" },
+          sort: { type: "string", enum: ["asc", "desc"], description: "Sort direction" },
+        },
+      },
+    },
+    {
+      name: "get_withdrawal",
+      description: "Retrieve a specific withdrawal by its ID",
+      inputSchema: {
+        type: "object",
+        properties: {
+          wid: { type: "string", description: "Withdrawal ID" },
+        },
+        required: ["wid"],
+      },
+    },
+    {
+      name: "list_fees",
+      description: "List applicable fees for the authenticated user across trading pairs",
+      inputSchema: { type: "object", properties: {} },
+    },
+    {
+      name: "get_account_status",
+      description: "Retrieve account KYC and verification status (tier, limits, required docs)",
+      inputSchema: { type: "object", properties: {} },
+    },
+    {
+      name: "list_funding_destinations",
+      description: "Get funding destination details (address/CLABE) for a given currency",
+      inputSchema: {
+        type: "object",
+        properties: {
+          fund_currency: { type: "string", description: "Currency code (e.g. btc, mxn, ars)" },
+        },
+        required: ["fund_currency"],
+      },
+    },
   ],
 }));
 
@@ -222,6 +338,61 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
         return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", "/funding_destination"), null, 2) }] };
       case "create_withdrawal":
         return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("POST", "/withdrawals", args), null, 2) }] };
+      case "list_ledger": {
+        const params = new URLSearchParams();
+        if (args?.limit) params.set("limit", String(args.limit));
+        if (args?.marker) params.set("marker", String(args.marker));
+        if (args?.sort) params.set("sort", String(args.sort));
+        const op = args?.operation ? `/${args.operation}s` : "";
+        const qs = params.toString();
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/ledger${op}${qs ? `?${qs}` : ""}`), null, 2) }] };
+      }
+      case "list_open_orders": {
+        const params = new URLSearchParams();
+        if (args?.book) params.set("book", String(args.book));
+        if (args?.limit) params.set("limit", String(args.limit));
+        if (args?.marker) params.set("marker", String(args.marker));
+        if (args?.sort) params.set("sort", String(args.sort));
+        const qs = params.toString();
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/open_orders${qs ? `?${qs}` : ""}`), null, 2) }] };
+      }
+      case "lookup_order":
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/orders/${args?.origin_ids}`), null, 2) }] };
+      case "cancel_all_orders":
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("DELETE", "/orders/all"), null, 2) }] };
+      case "list_fundings": {
+        const params = new URLSearchParams();
+        if (args?.status) params.set("status", String(args.status));
+        if (args?.method) params.set("method", String(args.method));
+        if (args?.limit) params.set("limit", String(args.limit));
+        if (args?.marker) params.set("marker", String(args.marker));
+        if (args?.sort) params.set("sort", String(args.sort));
+        const suffix = args?.fids ? `/${args.fids}` : "";
+        const qs = params.toString();
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/fundings${suffix}${qs ? `?${qs}` : ""}`), null, 2) }] };
+      }
+      case "list_withdrawals": {
+        const params = new URLSearchParams();
+        if (args?.status) params.set("status", String(args.status));
+        if (args?.method) params.set("method", String(args.method));
+        if (args?.limit) params.set("limit", String(args.limit));
+        if (args?.marker) params.set("marker", String(args.marker));
+        if (args?.sort) params.set("sort", String(args.sort));
+        const suffix = args?.wids ? `/${args.wids}` : "";
+        const qs = params.toString();
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/withdrawals${suffix}${qs ? `?${qs}` : ""}`), null, 2) }] };
+      }
+      case "get_withdrawal":
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/withdrawals/${args?.wid}`), null, 2) }] };
+      case "list_fees":
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", "/fees"), null, 2) }] };
+      case "get_account_status":
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", "/account_status"), null, 2) }] };
+      case "list_funding_destinations": {
+        const params = new URLSearchParams();
+        params.set("fund_currency", String(args?.fund_currency));
+        return { content: [{ type: "text", text: JSON.stringify(await bitsoRequest("GET", `/funding_destination?${params}`), null, 2) }] };
+      }
       default:
         return { content: [{ type: "text", text: `Unknown tool: ${name}` }], isError: true };
     }
@@ -231,16 +402,32 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 });
 
 async function main() {
-  if (!API_KEY) {
-    console.error("BITSO_API_KEY environment variable is required");
-    process.exit(1);
-  }
-  if (!API_SECRET) {
-    console.error("BITSO_API_SECRET environment variable is required");
-    process.exit(1);
+  if (process.argv.includes("--http") || process.env.MCP_HTTP === "true") {
+    const { default: express } = await import("express");
+    const { randomUUID } = await import("node:crypto");
+    const app = express();
+    app.use(express.json());
+    const transports = new Map<string, StreamableHTTPServerTransport>();
+    app.get("/health", (_req: any, res: any) => res.json({ status: "ok", sessions: transports.size }));
+    app.post("/mcp", async (req: any, res: any) => {
+      const sid = req.headers["mcp-session-id"] as string | undefined;
+      if (sid && transports.has(sid)) { await transports.get(sid)!.handleRequest(req, res, req.body); return; }
+      if (!sid && isInitializeRequest(req.body)) {
+        const t = new StreamableHTTPServerTransport({ sessionIdGenerator: () => randomUUID(), onsessioninitialized: (id) => { transports.set(id, t); } });
+        t.onclose = () => { if (t.sessionId) transports.delete(t.sessionId); };
+        const s = new Server({ name: "mcp-bitso", version: "0.2.0" }, { capabilities: { tools: {} } }); (server as any)._requestHandlers.forEach((v: any, k: any) => (s as any)._requestHandlers.set(k, v)); (server as any)._notificationHandlers?.forEach((v: any, k: any) => (s as any)._notificationHandlers.set(k, v)); await s.connect(t);
+        await t.handleRequest(req, res, req.body); return;
+      }
+      res.status(400).json({ jsonrpc: "2.0", error: { code: -32000, message: "Bad Request" }, id: null });
+    });
+    app.get("/mcp", async (req: any, res: any) => { const sid = req.headers["mcp-session-id"] as string; if (sid && transports.has(sid)) await transports.get(sid)!.handleRequest(req, res); else res.status(400).send("Invalid session"); });
+    app.delete("/mcp", async (req: any, res: any) => { const sid = req.headers["mcp-session-id"] as string; if (sid && transports.has(sid)) await transports.get(sid)!.handleRequest(req, res); else res.status(400).send("Invalid session"); });
+    const port = Number(process.env.MCP_PORT) || 3000;
+    app.listen(port, () => { console.error(`MCP HTTP server on http://localhost:${port}/mcp`); });
+  } else {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
   }
-  const transport = new StdioServerTransport();
-  await server.connect(transport);
 }
 
 main().catch(console.error);