@fidesbuild/mcp-server 0.6.0 → 0.8.1

package/README.md

@@ -38,7 +38,11 @@ Claude Code and other MCP apps need [Node](https://nodejs.org) 20.10 or later. C
 | --- | --- |
 | `fides_setup` | A link to the FIDES app with this agent filled in |
 | `fides_status` | The FIDES: active or not, budget spent and remaining, FIDES Account balance, allowed contracts, expiry, agent address |
-| `fides_plan` | Builds transfers and contract calls into one plan, checks each against the FIDES, groups them, simulates. Sends nothing |
+| `fides_plan` | Builds transfers and contract calls into one plan, checks each against the FIDES, groups them, simulates. Sends nothing. Calls any verified contract by function name and plain values, encoded from its verified source |
+| `fides_inspect_contract` | Reads any contract on the chain and lists what an agent could call, with risky functions flagged |
+| `fides_read_contract` | Reads a value from any verified contract by function name, such as a market or a balance. Free |
+| `fides_check_api` | Reads a paid API's price without paying, and says whether a FIDES can pay it |
+| `fides_swap` | Swaps on Uniswap inside the trading mandate the owner signed |
 | `fides_execute` | Executes a plan by its id. Only the actions inside the FIDES are sent |
 | `fides_pay_request` | Buys from a paid API over x402: checks the price against the service's cap in the FIDES, pays from the FIDES, returns the response |
 | `fides_receipts` | Every transaction executed under the FIDES, with explorer links |

package/dist/server.d.ts

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { type Hex } from 'viem';
+import { type Address, type Hex, type AbiFunction, type AbiParameter } from 'viem';
 import { type PrivateKeyAccount } from 'viem/accounts';
 import { type FidesAddresses } from '@fidesbuild/sdk';
 import { type SubAddresses } from '@fidesbuild/sub';
@@ -28,6 +28,10 @@ export declare function agentKey(cfg: Config): {
     file: string | null;
     created: boolean;
 };
+/** Turns plain JSON values into what viem encodes for each ABI type. "me" is the FIDES Account. */
+export declare function coerce(p: AbiParameter, v: unknown, me: Address | null, at: string): unknown;
+/** Encodes a call from one ABI function and plain JSON args. */
+export declare function encodeCall(abi: AbiFunction, args: unknown[], me: Address | null): Hex;
 export declare function createFidesMcpServer(cfg: Config): McpServer & {
     agent: `0x${string}`;
 };

package/dist/server.js

@@ -14,12 +14,13 @@ import { pathToFileURL } from 'node:url';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
-import { encodeFunctionData, erc20Abi, formatUnits, parseUnits, isAddress, getAddress } from 'viem';
+import { encodeFunctionData, decodeFunctionResult, erc20Abi, formatUnits, parseUnits, isAddress, getAddress } from 'viem';
 import { generatePrivateKey, privateKeyToAccount } from 'viem/accounts';
 import { Fides, FidesBuilder, Policy, Receipts, accountOf, createFidesClient, fromJson, toJson } from '@fidesbuild/sdk';
 import { createX402, decodePaymentRequired, exactEip3009 } from '@fidesbuild/x402';
 import { netObligations, settle, netRoots, PUBLISH_SELECTOR, NetError } from '@fidesbuild/net';
 import { createSubClient, SubFidesKit, SubAgent, SubFidesError, subDeployments } from '@fidesbuild/sub';
+import { quoteUniswap, checkMandate, swapActions, verifySwap, describeRoute, mandateOf, uniswap, NATIVE, SwapError } from '@fidesbuild/swap';
 export function configFromEnv(env = process.env) {
     const home = env.FIDES_HOME ?? path.join(os.homedir(), '.fides');
     return {
@@ -80,6 +81,52 @@ const KNOWN_SERVICES = [
     { id: 'spraay', name: 'Spraay', url: 'https://gateway.spraay.app/api/v1/models', price: '0.001 USDG', returns: 'The AI models the Spraay gateway offers, with providers and prices', run_by: 'Spraay, not FIDES' },
     { id: 'madeonsol', name: 'MadeOnSol', url: 'https://madeonsol.com/api/x402/rhc/kol/feed?limit=5', price: '0.04 USDG', returns: 'Recent trades on Robinhood Chain by tracked wallets', run_by: 'MadeOnSol, not FIDES' },
 ];
+/** Turns plain JSON values into what viem encodes for each ABI type. "me" is the FIDES Account. */
+export function coerce(p, v, me, at) {
+    const arr = p.type.match(/^(.*)\[(\d*)\]$/);
+    if (arr) {
+        if (!Array.isArray(v))
+            throw new Error(`${at} must be a list`);
+        return v.map((x, i) => coerce({ ...p, type: arr[1] }, x, me, `${at}[${i}]`));
+    }
+    if (p.type === 'tuple') {
+        const parts = p.components;
+        const get = (c, i) => (Array.isArray(v) ? v[i] : v?.[c.name ?? '']);
+        if (v === null || typeof v !== 'object')
+            throw new Error(`${at} must be an object with ${parts.map((c) => c.name).join(', ')}`);
+        const out = parts.map((c, i) => coerce(c, get(c, i), me, `${at}.${c.name ?? i}`));
+        return Array.isArray(v) || parts.some((c) => !c.name) ? out : Object.fromEntries(parts.map((c, i) => [c.name, out[i]]));
+    }
+    if (/^u?int\d*$/.test(p.type)) {
+        if (!/^-?\d+$/.test(String(v ?? '').trim()))
+            throw new Error(`${at} must be a whole number in the token's smallest unit, as a string (got ${JSON.stringify(v)})`);
+        return BigInt(String(v).trim());
+    }
+    if (p.type === 'address') {
+        if (typeof v === 'string' && /^me$/i.test(v)) {
+            if (!me)
+                throw new Error(`${at}: "me" needs a signed FIDES`);
+            return me;
+        }
+        if (typeof v !== 'string' || !isAddress(v))
+            throw new Error(`${at} must be an address`);
+        return getAddress(v);
+    }
+    if (p.type === 'bool')
+        return v === true || v === 'true';
+    if (/^bytes\d*$/.test(p.type)) {
+        const h = v === '' || v == null ? '0x' : String(v);
+        if (!/^0x([0-9a-fA-F]{2})*$/.test(h))
+            throw new Error(`${at} must be hex bytes, like "0x"`);
+        return h;
+    }
+    return v;
+}
+/** Encodes a call from one ABI function and plain JSON args. */
+export function encodeCall(abi, args, me) {
+    const values = abi.inputs.map((p, i) => coerce(p, args[i], me, p.name || `arg ${i + 1}`));
+    return encodeFunctionData({ abi: [abi], functionName: abi.name, args: values });
+}
 const ok = (value) => ({ content: [{ type: 'text', text: typeof value === 'string' ? value : JSON.stringify(value, null, 2) }] });
 const fail = (message) => ({ content: [{ type: 'text', text: message }], isError: true });
 export function createFidesMcpServer(cfg) {
@@ -175,7 +222,7 @@ export function createFidesMcpServer(cfg) {
             ...(outside > 0n ? { warning: `${amount(outside)} sits on the agent key ${agent.address} outside the FIDES: it was sent to the agent address directly instead of to the FIDES Account. FIDES never spends it. To get it back, the owner can import the agent key from ${path.join(cfg.home, 'agent.json')} into a wallet on this computer, add a little ETH for gas, and send it to themselves. Funds for the agent always go to the FIDES Account address.` } : {}),
         };
     }
-    const server = new McpServer({ name: 'fides', version: '0.6.0' }, {
+    const server = new McpServer({ name: 'fides', version: '0.8.0' }, {
         instructions: 'FIDES lets you act with the owner\'s funds only inside limits the owner signed (a FIDES): a budget, allowed contracts and functions, paid services, and an expiry. ' +
             'Funds move from the owner\'s FIDES Account, never from the owner\'s wallet. If no FIDES is set up yet, call fides_setup and give the user the link. Always call fides_plan first and show the user what is inside the FIDES, what is blocked and why, ' +
             'and ask before calling fides_execute. Actions outside the FIDES are blocked before anything is sent. Amounts are in whole token units, like "1.5". ' +
@@ -197,8 +244,10 @@ export function createFidesMcpServer(cfg) {
         return ok({
             can_do: [
                 'Send USDG from the FIDES Account, to one address or many, inside the budget. Several transfers go out as one transaction.',
-                'Call contracts the FIDES allows, with the functions it allows.',
+                'Use any verified contract on Robinhood Chain: read what it lets an agent do, risky functions flagged (fides_inspect_contract), allow the functions you choose (fides_setup with contracts), read values from it for free (fides_read_contract), and call it by function name and plain values (fides_plan with function and args). Example: supply USDG to a Morpho market and withdraw it, never borrow.',
+                'Use any paid API that charges on Robinhood Chain: read its price without paying (fides_check_api), allow it with a cap (fides_setup with services), then pay per request (fides_pay_request).',
                 'Buy from paid APIs that charge per request over x402, paying from the FIDES budget, each capped per service.',
+                'Swap on Uniswap inside a trading mandate the owner signed: tokens it may buy, worst price, most per swap; best route across Robinhood Chain including v4 hook pools, approval and swap as one transaction (fides_swap). The FIDES must allow swaps: fides_setup with swap.',
                 'Hand another agent a slice of the FIDES with its own budget and expiry (fides_delegate, SUB-FIDES); or, as the child, act inside a slice handed to you (fides_sub_plan). The FIDES must allow delegation: fides_setup with delegate: true.',
                 'Settle with FIDES NET: give the payments owed to and from the FIDES Account, and they are netted to final positions and settled in one transaction, with the round published onchain (fides_net). The FIDES must allow NET: fides_setup with net: true.',
                 'Show the budget spent and left, what is allowed, the expiry, and every transaction executed, with explorer links.',
@@ -238,23 +287,64 @@ export function createFidesMcpServer(cfg) {
     });
     server.registerTool('fides_setup', {
         title: 'Set up FIDES',
-        description: 'Use when the user wants to set up FIDES, connect their wallet or sign a new FIDES. Returns this computer\'s agent address and a link to the FIDES app with it filled in, where the user sets the limits and signs. The signed FIDES is then picked up automatically. To let the user buy from paid APIs (fides_pay_request), pass the services with a spending cap each. Paid APIs known to work use the ids "fides-demo", "spraay" and "madeonsol" (fides_help has their URLs and prices); for any other x402 API, the id is any name the user chooses.',
+        description: 'Use when the user wants to set up FIDES, connect their wallet or sign a new FIDES. Returns this computer\'s agent address and a link to the FIDES app with it filled in, where the user sets the limits and signs. The signed FIDES is then picked up automatically. To let the user buy from paid APIs (fides_pay_request), pass the services with a spending cap each. Paid APIs known to work use the ids "fides-demo", "spraay" and "madeonsol" (fides_help has their URLs and prices); for any other paid API, call fides_check_api with its URL and use the service_id it returns. To let the agent call any contract on the chain, pass contracts with the functions it may call by name (fides_inspect_contract lists them and flags the risky ones). When a function pulls tokens from the account (such as Morpho supply, or a vault deposit), also allow approve on that token, so the agent can approve exactly the amount in the same transaction.',
         inputSchema: {
-            services: z.array(z.object({ id: z.string().describe('A name for the paid service, chosen by the user, e.g. "fides-demo" or "spraay"'), max: z.string().describe('Most the agent may spend on it, in USDG, e.g. "0.1"') })).optional(),
+            services: z.array(z.object({ id: z.string().describe('The service id: "fides-demo", "spraay", "madeonsol", or for any other paid API the service_id fides_check_api returns (its host)'), max: z.string().describe('Most the agent may spend on it, in USDG, e.g. "0.1"') })).optional(),
+            contracts: z.array(z.object({
+                address: z.string().describe('The contract address'),
+                functions: z.array(z.string()).min(1).describe('Function names (e.g. "supply", "withdraw") or 4-byte selectors. fides_inspect_contract lists them'),
+            })).optional().describe('Any contracts on the chain the agent may call, and exactly which functions; everything else on them stays blocked'),
             net: z.boolean().optional().describe('true to allow FIDES NET: lets the FIDES publish netting roots on FidesNetRoots, which fides_net needs'),
             delegate: z.boolean().optional().describe('true to let this agent hand slices of the FIDES to other agents (SUB-FIDES), which fides_delegate needs'),
+            swap: z.object({
+                buy: z.array(z.string()).min(1).describe('Tokens the agent may buy: "ETH", "WETH" or addresses'),
+                max_slippage_percent: z.number().positive().max(50).optional().describe('The worst price it may accept against the quote, in percent. Default 1'),
+                max_per_swap: z.string().optional().describe('The most one swap may spend, in the budget token. Default "1"'),
+            }).optional().describe('Let the agent swap on Uniswap inside a trading mandate the owner signs; fides_swap needs it'),
         },
-    }, async ({ services, net, delegate }) => ok({
-        agent_address: agent.address,
-        link: setupLink + (services ?? []).map((x) => `&service=${encodeURIComponent(x.id)}:${encodeURIComponent(x.max)}`).join('') + (net && netRoots[cfg.chainId] ? `&target=${netRoots[cfg.chainId]}:${PUBLISH_SELECTOR}` : '') + (delegate ? '&delegate=1' : ''),
-        services: services?.length ? services.map((x) => `${x.id}: up to ${x.max} USDG`) : undefined,
-        steps: [
-            'Open the link. It opens the FIDES app with this agent already filled in.',
-            'Connect your wallet. Set the budget, the contracts allowed and the expiry. Start small.',
-            'Sign (free), click Create FIDES Account (a little gas), and send the budget to the FIDES Account address shown.',
-            'Come back and ask me for what you want. I pick up the signed FIDES by myself.',
-        ],
-    }));
+    }, async ({ services, net, delegate, swap, contracts }) => {
+        let targets = '';
+        const added = [];
+        for (const c of contracts ?? []) {
+            if (!isAddress(c.address))
+                return fail(`"${c.address}" is not a contract address.`);
+            const sels = c.functions.filter((x) => /^0x[0-9a-fA-F]{8}$/.test(x)).map((x) => x.toLowerCase());
+            const names = c.functions.filter((x) => !/^0x[0-9a-fA-F]{8}$/.test(x));
+            let label = c.address;
+            if (names.length) {
+                let info;
+                try {
+                    info = await inspect(c.address);
+                }
+                catch (err) {
+                    return fail(`Could not read ${c.address}: ${err?.message ?? err}`);
+                }
+                if (!info.verified)
+                    return fail(`${c.address} is not verified, so its functions cannot be found by name. Give their 4-byte selectors instead.`);
+                label = info.name ?? c.address;
+                for (const n of names) {
+                    const fn = info.functions.find((x) => x.name === n || x.signature.replace(/ \w+(?=[,)])/g, '') === n);
+                    if (!fn)
+                        return fail(`${label} has no function "${n}" that changes anything. It has: ${info.functions.map((x) => x.name).join(', ')}.`);
+                    sels.push(fn.selector);
+                }
+            }
+            targets += `&target=${getAddress(c.address)}:${[...new Set(sels)].join(',')}`;
+            added.push(`${label}: ${c.functions.join(', ')}`);
+        }
+        return ok({
+            agent_address: agent.address,
+            link: setupLink + targets + (services ?? []).map((x) => `&service=${encodeURIComponent(x.id)}:${encodeURIComponent(x.max)}`).join('') + (net && netRoots[cfg.chainId] ? `&target=${netRoots[cfg.chainId]}:${PUBLISH_SELECTOR}` : '') + (delegate ? '&delegate=1' : '') + (swap ? `&swap=${encodeURIComponent(swap.buy.map((t) => (/^weth$/i.test(t) ? uniswap[cfg.chainId]?.weth ?? t : t)).join('|'))}:${Math.round((swap.max_slippage_percent ?? 1) * 100)}:${encodeURIComponent(swap.max_per_swap ?? '1')}` : ''),
+            services: services?.length ? services.map((x) => `${x.id}: up to ${x.max} USDG`) : undefined,
+            contracts: added.length ? added : undefined,
+            steps: [
+                'Open the link. It opens the FIDES app with this agent already filled in.',
+                'Connect your wallet. Set the budget, the contracts allowed and the expiry. Start small.',
+                'Sign (free), click Create FIDES Account (a little gas), and send the budget to the FIDES Account address shown.',
+                'Come back and ask me for what you want. I pick up the signed FIDES by myself.',
+            ],
+        });
+    });
     server.registerTool('fides_use_file', {
         title: 'Use a FIDES file',
         description: 'Only needed if the user has a fides.json file: loads a signed FIDES from a path on this computer, checks that it is for this computer\'s agent key, and keeps a copy. FIDES signed in the app are picked up without this.',
@@ -286,18 +376,20 @@ export function createFidesMcpServer(cfg) {
         }
     });
     const actionSchema = z.object({
-        kind: z.enum(['transfer', 'call']).describe('"transfer" sends a token from the FIDES Account. "call" calls an allowed contract with raw calldata.'),
+        kind: z.enum(['transfer', 'call']).describe('"transfer" sends a token from the FIDES Account. "call" calls an allowed contract, by function name and args (encoded from its verified source), or with raw calldata.'),
         to: z.string().optional().describe('transfer: the recipient address'),
-        amount: z.string().optional().describe('transfer: how much, in whole token units, e.g. "1.5". call: how much of the budget token the call spends, if any'),
+        amount: z.string().optional().describe('transfer: how much, in whole token units, e.g. "1.5". call: how much of the budget token the call spends, if any, in whole units'),
         token: z.string().optional().describe('transfer: the token address. Defaults to the FIDES\'s budget token'),
         target: z.string().optional().describe('call: the contract address'),
-        data: z.string().optional().describe('call: hex calldata, starting with the 4-byte function selector'),
+        function: z.string().optional().describe('call: the function name, e.g. "supply", or its signature when the name is overloaded. FIDES encodes the call from the contract\'s verified source'),
+        args: z.array(z.any()).optional().describe('call with function: the arguments in order. Integers as strings in the token\'s smallest unit (USDG has 6 decimals: 0.05 USDG is "50000"). Structs as objects keyed by field name. "me" for an address means this FIDES Account. Empty bytes as "0x"'),
+        data: z.string().optional().describe('call: hex calldata, starting with the 4-byte function selector. Use function and args instead when you can'),
         label: z.string().optional().describe('A short description shown in the plan'),
     });
     /** The tool's actions as Builder actions, in the budget token unless a transfer names another. */
     async function buildActions(actions, budget) {
         const built = [];
-        for (const [i, a] of actions.entries()) {
+        for (let [i, a] of actions.entries()) {
             const n = i + 1;
             if (a.kind === 'transfer') {
                 if (!a.to || !isAddress(a.to))
@@ -321,8 +413,14 @@ export function createFidesMcpServer(cfg) {
             else {
                 if (!a.target || !isAddress(a.target))
                     return { error: `Action ${n}: "target" must be a contract address.` };
+                if (a.function && !a.data) {
+                    const enc = await encodeByName(getAddress(a.target), a.function, a.args ?? [], 'write');
+                    if ('error' in enc)
+                        return { error: `Action ${n}: ${enc.error}` };
+                    a = { ...a, data: enc.data, label: a.label ?? enc.label };
+                }
                 if (!a.data || !/^0x([0-9a-fA-F]{2}){4,}$/.test(a.data))
-                    return { error: `Action ${n}: "data" must be hex calldata starting with the 4-byte selector.` };
+                    return { error: `Action ${n}: give "function" and "args", or "data" as hex calldata starting with the 4-byte selector.` };
                 const t = await token(budget);
                 let spend = 0n;
                 if (a.amount) {
@@ -341,7 +439,7 @@ export function createFidesMcpServer(cfg) {
     }
     server.registerTool('fides_plan', {
         title: 'Plan actions under the FIDES',
-        description: 'Builds the actions into one execution plan: checks every action against the FIDES, groups what can go out together, and simulates it against the chain. Sends nothing. Returns a plan_id for fides_execute. Show the result to the user before executing.',
+        description: 'Builds the actions into one execution plan: checks every action against the FIDES, groups what can go out together, and simulates it against the chain. Sends nothing. Returns a plan_id for fides_execute. Show the result to the user before executing. Call contracts by function name and args; FIDES encodes them from the verified source. When a contract pulls tokens (e.g. Morpho supply), put an approve of exactly that amount first in the same plan, so nothing stays approved, and set amount on the call so it counts against the budget. Use "me" for addresses that should be the FIDES Account.',
         inputSchema: { actions: z.array(actionSchema).min(1).max(50) },
     }, async ({ actions }) => {
         try {
@@ -503,7 +601,13 @@ export function createFidesMcpServer(cfg) {
                 return fail(notLoaded());
             if (!fides.services.length)
                 return fail(`This FIDES allows no paid services. To buy from a paid API, the user signs a new FIDES that includes one: call fides_setup with services, for example [{ id: "fides-demo", max: "0.1" }].`);
-            const id = service ?? (fides.services.length === 1 ? fides.services[0].serviceId : undefined);
+            const host = (() => { try {
+                return new URL(url).host.toLowerCase().replace(/^www\./, '');
+            }
+            catch {
+                return '';
+            } })();
+            const id = service ?? (fides.services.some((x) => x.serviceId === host) ? host : fides.services.length === 1 ? fides.services[0].serviceId : undefined);
             if (!id)
                 return fail(`Say which service this is. The FIDES allows: ${fides.services.map((x) => x.serviceId).join(', ')}.`);
             const rule = fides.services.find((x) => x.serviceId === id);
@@ -600,6 +704,195 @@ export function createFidesMcpServer(cfg) {
         }
     });
     // ---- SUB-FIDES ----
+    // ---- Connect anything ----
+    const lookupBase = () => cfg.api ?? cfg.directory ?? 'https://api.fidesbuilder.xyz';
+    async function inspect(address) {
+        const res = await fetch(`${lookupBase()}/v1/contracts/${address}`);
+        const json = fromJson(await res.text());
+        if (!res.ok || json?.error)
+            throw new Error(json?.error?.message ?? `HTTP ${res.status}`);
+        return json;
+    }
+    /** Encodes a call to `fn` on `target` from the contract's verified ABI (standard ERC-20 functions work without one). */
+    async function encodeByName(target, fn, args, kind) {
+        let info = null;
+        try {
+            info = await inspect(target);
+        }
+        catch { /* fall back to ERC-20 below */ }
+        const list = (kind === 'write' ? info?.functions : info?.reads) ?? [];
+        const byName = (x) => x.abi.name === fn || `${x.abi.name}(${x.abi.inputs.map((i) => i.type).join(',')})` === fn.replace(/\s/g, '') || x.signature === fn;
+        let matches = list.filter((x) => x.abi && byName(x));
+        if (!matches.length) {
+            const std = erc20Abi.filter((x) => x.type === 'function' && x.name === fn && (kind === 'read') === (x.stateMutability === 'view'));
+            matches = std.map((abi) => ({ abi }));
+        }
+        if (matches.length > 1)
+            matches = matches.filter((x) => x.abi.inputs.length === args.length);
+        if (!matches.length) {
+            if (info && !info.verified)
+                return { error: `${target} is not verified on Sourcify, so "${fn}" cannot be encoded by name. Pass "data" as hex calldata instead.` };
+            const names = list.map((x) => x.name).filter(Boolean);
+            return { error: `${info?.name ?? target} has no ${kind === 'write' ? 'write' : 'read'} function "${fn}"${names.length ? `. It has: ${[...new Set(names)].join(', ')}` : ''}.` };
+        }
+        if (matches.length > 1)
+            return { error: `"${fn}" is overloaded; give its signature, one of: ${matches.map((x) => `${x.abi.name}(${x.abi.inputs.map((i) => i.type).join(',')})`).join(', ')}.` };
+        const abi = matches[0].abi;
+        if (args.length !== abi.inputs.length)
+            return { error: `${abi.name} takes ${abi.inputs.length} argument(s): ${abi.inputs.map((i) => `${i.type} ${i.name ?? ''}`.trim()).join(', ')}. Got ${args.length}.` };
+        const me = (await currentFides().catch(() => null))?.account ?? null;
+        try {
+            const data = encodeCall(abi, args, me);
+            return { data, label: `${info?.name ?? 'contract'}.${abi.name} on ${target}`, abi, name: info?.name ?? null };
+        }
+        catch (err) {
+            return { error: err?.shortMessage ?? err?.message ?? String(err) };
+        }
+    }
+    server.registerTool('fides_inspect_contract', {
+        title: 'What a contract lets an agent do',
+        description: 'Reads any contract on the chain from its verified source (proxies followed) and lists the functions that change something, in plain words, with risks flagged: "danger" (lasting approvals, handing control to another address, upgrades, debt), "warn" (the agent picks where funds go, or it sends ETH) and "admin" (operator-only; will fail for an agent). Use it before fides_setup with contracts, and recommend only the functions the user needs. Sends nothing.',
+        inputSchema: { address: z.string().describe('The contract address') },
+    }, async ({ address }) => {
+        try {
+            if (!isAddress(address))
+                return fail('That is not a contract address.');
+            const info = await inspect(address);
+            if (!info.verified)
+                return ok({ address: info.address, verified: false, note: 'Not verified on Sourcify, so its functions cannot be read. The user can still allow it by 4-byte selector.' });
+            return ok({
+                name: info.name, address: info.address, verified: true, proxy: info.proxy ?? undefined,
+                functions: info.functions.map((fn) => ({ name: fn.name, does: fn.about || undefined, signature: fn.signature, selector: fn.selector, risks: fn.risks.length ? fn.risks.map((r) => `${r.level}: ${r.why}`) : undefined })),
+                reads: info.reads?.length ? info.reads.map((fn) => fn.signature) : undefined,
+                next: 'To allow some of these, call fides_setup with contracts: [{ address, functions: [names] }] and give the user the link. Once signed, call them with fides_plan: { kind: "call", target, function, args }. Read functions are free: fides_read_contract.',
+            });
+        }
+        catch (err) {
+            return fail('Could not read the contract: ' + (err?.message ?? err));
+        }
+    });
+    server.registerTool('fides_read_contract', {
+        title: 'Read from a contract',
+        description: 'Calls a read-only (view) function on any verified contract on the chain, by name, and returns the result. Free: nothing is signed or sent, and it needs no permission in the FIDES. Use it to look up what a write needs, such as a market\'s parameters or a balance. Integers come back as strings in the smallest unit.',
+        inputSchema: {
+            address: z.string().describe('The contract address'),
+            function: z.string().describe('The view function name, or its signature when overloaded'),
+            args: z.array(z.any()).optional().describe('The arguments in order. Integers as strings. "me" for an address means this FIDES Account'),
+        },
+    }, async ({ address, function: fn, args }) => {
+        try {
+            if (!isAddress(address))
+                return fail('That is not a contract address.');
+            const enc = await encodeByName(getAddress(address), fn, args ?? [], 'read');
+            if ('error' in enc)
+                return fail(enc.error);
+            const { data } = await client.public.call({ to: getAddress(address), data: enc.data });
+            const result = decodeFunctionResult({ abi: [enc.abi], functionName: enc.abi.name, data: data ?? '0x' });
+            const named = enc.abi.outputs.length > 1 && enc.abi.outputs.every((o) => o.name) && Array.isArray(result) ? Object.fromEntries(enc.abi.outputs.map((o, i) => [o.name, result[i]])) : result;
+            return ok({ contract: enc.name ?? address, function: enc.abi.name, result: JSON.parse(JSON.stringify(named, (_k, x) => (typeof x === 'bigint' ? x.toString() : x))) });
+        }
+        catch (err) {
+            return fail('Could not read: ' + failure(err?.shortMessage ?? err?.message ?? err));
+        }
+    });
+    server.registerTool('fides_check_api', {
+        title: 'Can FIDES pay this API?',
+        description: 'Calls a paid API\'s URL once, without paying, and reads its x402 price: whether a FIDES on Robinhood Chain can pay it, the price, who is paid, and the service id and a suggested cap to use with fides_setup. Use it when the user wants the agent to use a paid API that is not one of the known ones. Pays nothing.',
+        inputSchema: { url: z.string().describe('The API URL, https') },
+    }, async ({ url }) => {
+        try {
+            const res = await fetch(`${lookupBase()}/v1/services/probe`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: toJson({ url, budgetToken: (await currentFides().catch(() => null))?.spendLimits[0].asset ?? '0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168' }) });
+            const p = fromJson(await res.text());
+            if (!res.ok || p?.error)
+                return fail(p?.error?.message ?? `HTTP ${res.status}`);
+            if (!p.payable)
+                return ok({ url: p.url, payable: false, why: p.reason, charges_on: p.networks?.length ? p.networks : undefined });
+            const dec = p.offer.decimals ?? 6, sym = p.offer.symbol ?? 'USDG';
+            return ok({
+                url: p.url, payable: true, price: `${formatUnits(BigInt(p.offer.amount), dec)} ${sym} a request`, paid_to: p.offer.payTo, what_it_is: p.description,
+                service_id: p.serviceId, suggested_cap: `${formatUnits(BigInt(p.suggestedCap), dec)} ${sym} (10 requests)`,
+                next: `To allow it, call fides_setup with services: [{ id: "${p.serviceId}", max: "${formatUnits(BigInt(p.suggestedCap), dec)}" }]. Then fides_pay_request with this URL.`,
+            });
+        }
+        catch (err) {
+            return fail('Could not check the API: ' + (err?.message ?? err));
+        }
+    });
+    // ---- Uniswap ----
+    const tokenArg = (t) => (/^eth$/i.test(t) ? 'ETH' : /^weth$/i.test(t) ? uniswap[cfg.chainId]?.weth : isAddress(t) ? getAddress(t) : null);
+    server.registerTool('fides_swap', {
+        title: 'Swap on Uniswap inside the FIDES',
+        description: 'Gets the best route from Uniswap on Robinhood Chain (v2, v3 and v4 pools, including v4 pools with hooks such as the aggregator hooks) for the FIDES Account, checks it against the trading mandate the owner signed (tokens it may buy, worst price, most per swap), and simulates it to measure what would actually arrive. Sends nothing. Returns a plan_id for fides_execute, which sends an exact approval and the swap as one transaction; gas is paid by the relayer. Show the route, the quoted amount and the worst accepted amount to the user before executing. Needs a FIDES that allows swaps: fides_setup with swap.',
+        inputSchema: {
+            token_out: z.string().describe('What to buy: "ETH", "WETH" or a token address'),
+            amount: z.string().describe('How much of the budget token to spend, e.g. "1"'),
+            max_slippage_percent: z.number().positive().optional().describe('Worst price against the quote, in percent. Defaults to the most the FIDES allows'),
+        },
+    }, async ({ token_out, amount, max_slippage_percent }) => {
+        try {
+            const fides = await currentFides();
+            if (!fides)
+                return fail(notLoaded());
+            if (fides.agent.toLowerCase() !== agent.address.toLowerCase())
+                return fail(`The loaded FIDES is for agent ${fides.agent}, not this computer's agent key ${agent.address}.`);
+            const m = mandateOf(fides);
+            if (!m)
+                return fail('This FIDES does not allow swaps. The user signs one that does: call fides_setup with swap, for example { buy: ["ETH"], max_slippage_percent: 1, max_per_swap: "1" }, and give them the link.');
+            const out = tokenArg(token_out);
+            if (!out)
+                return fail('"token_out" must be "ETH", "WETH" or a token address.');
+            const budgetToken = fides.spendLimits[0].asset, tIn = await token(budgetToken);
+            let value;
+            try {
+                value = parseUnits(amount, tIn.decimals);
+            }
+            catch {
+                return fail(`"amount" must be a number of ${tIn.symbol}, like "1".`);
+            }
+            const slippageBps = max_slippage_percent ? Math.round(max_slippage_percent * 100) : m.maxSlippageBps;
+            let q, blocked;
+            if (cfg.api) {
+                const r = await post('/v1/swap/quote', { fides, tokenOut: out, amount: value, slippageBps });
+                q = r.quote;
+                blocked = r.mandate?.allowed ? null : { code: r.mandate.code, message: r.mandate.message };
+            }
+            else {
+                if (!process.env.UNISWAP_API_KEY)
+                    return fail('Swaps need the FIDES API, or UNISWAP_API_KEY when running without it.');
+                q = await quoteUniswap({ apiKey: process.env.UNISWAP_API_KEY, fides, tokenOut: out, amount: value, slippageBps });
+                blocked = checkMandate(fides, q);
+            }
+            const outInfo = q.tokenOut === NATIVE ? { symbol: 'ETH', decimals: 18 } : await token(q.tokenOut);
+            const fmt = (v) => `${formatUnits(v, outInfo.decimals)} ${outInfo.symbol}`;
+            if (blocked)
+                return fail(`Blocked by the trading mandate: ${blocked.message} Nothing was sent.`);
+            const actions = swapActions(q, `swap ${amount} ${tIn.symbol} to ${outInfo.symbol} on Uniswap`);
+            const plan = await new FidesBuilder({ client, fides, agent }).add(actions).build();
+            if (plan.rejected().length) {
+                const r = plan.rejected()[0];
+                return fail(`Blocked by the FIDES: ${REASONS[r.reason ?? ''] ?? r.reason}. Nothing was sent.`);
+            }
+            const v = await verifySwap(client, fides, plan, q);
+            const id = plan.planHash.slice(0, 18);
+            if (v.ok)
+                plans.set(id, { plan, actions, fides, swap: { quote: q, outDecimals: outInfo.decimals, outSymbol: outInfo.symbol } });
+            return ok({
+                plan_id: v.ok ? id : null,
+                ready_to_execute: v.ok,
+                route: describeRoute(q),
+                spend: `${amount} ${tIn.symbol}`,
+                quoted: fmt(q.quotedOut),
+                worst_accepted: `${fmt(q.minOut)} (${q.slippageBps / 100}% below the quote)`,
+                simulated: v.ok ? `would receive ${fmt(v.received)}` : `refused: ${v.reason}`,
+                transactions: `${plan.estimatedSavings().baselineTransactions} onchain write(s) go out as ${plan.estimatedSavings().estimatedTransactions} transaction(s): an exact approval and the swap, nothing left approved`,
+                mandate: `may buy ${m.buy.join(', ')}; worst price ${m.maxSlippageBps / 100}%; most per swap ${formatUnits(m.maxPerSwap, tIn.decimals)} ${tIn.symbol}`,
+                sent: 'nothing has been sent',
+            });
+        }
+        catch (err) {
+            return fail(err instanceof SwapError ? `Uniswap: ${err.message}` : 'Could not get a swap: ' + (err?.shortMessage ?? err?.message ?? err));
+        }
+    });
     server.registerTool('fides_delegate', {
         title: 'Hand another agent a slice of the FIDES (SUB-FIDES)',
         description: 'This agent hands another agent a SUB-FIDES: its own budget, contracts and expiry, inside this FIDES. The child can never exceed it, and everything it spends also counts against this FIDES. This agent signs it; nothing is sent onchain and it costs nothing. The child agent (Claude or an SDK agent running FIDES) finds it by itself, or the user can hand it the file. Needs a FIDES that allows delegation: fides_setup with delegate: true. Confirm the amount and the agent with the user first.',
@@ -729,7 +1022,7 @@ export function createFidesMcpServer(cfg) {
             const given = fs.existsSync(subsDir) ? fs.readdirSync(subsDir).filter((n) => n.endsWith('.json')).map((n) => fromJson(fs.readFileSync(path.join(subsDir, n), 'utf8')).sub) : [];
             const now = BigInt(Math.floor(Date.now() / 1000));
             return ok({
-                handed_out: given.map((s) => ({ sub_fides: s.id, child_agent: s.agent, budget: s.spendLimits.map((l) => l.amount.toString()), expires: new Date(Number(s.validUntil) * 1000).toISOString(), expired: now >= s.validUntil })),
+                handed_out: await Promise.all(given.map(async (s) => ({ sub_fides: s.id, child_agent: s.agent, budget: (await Promise.all(s.spendLimits.map(async (l) => { const t = await token(l.asset); return `${formatUnits(l.amount, t.decimals)} ${t.symbol}`; }))).join(', '), expires: new Date(Number(s.validUntil) * 1000).toISOString(), expired: now >= s.validUntil }))),
                 received: (await receivedSubs()).map((x) => ({ sub_fides: x.sub.id, delegated_by: x.parent.agent, expires: new Date(Number(x.sub.validUntil) * 1000).toISOString() })),
             });
         }
@@ -762,9 +1055,12 @@ export function createFidesMcpServer(cfg) {
         if (!entry)
             return fail('No plan with that id. Make one with fides_plan first (plans are kept until they are executed or the server restarts).');
         plans.delete(plan_id); // a plan's bundles can be sent once
-        const { plan, actions, fides, net } = entry;
+        const { plan, actions, fides, net, swap } = entry;
         try {
+            const outBalance = () => !swap ? Promise.resolve(0n) : swap.quote.tokenOut === NATIVE ? client.public.getBalance({ address: fides.account }) : client.public.readContract({ address: swap.quote.tokenOut, abi: erc20Abi, functionName: 'balanceOf', args: [fides.account] });
+            const before = await outBalance();
             const bundles = await send(plan, actions, fides);
+            const received = swap ? (await outBalance()) - before : 0n;
             const [spend] = await Policy.remainingSpend(client, fides);
             const t = await token(fides.spendLimits[0].asset);
             const executed = bundles.filter((b) => b.status === 'EXECUTED').length;
@@ -772,6 +1068,12 @@ export function createFidesMcpServer(cfg) {
                 result: executed === bundles.length ? 'executed' : executed ? 'partly executed' : 'not executed',
                 transactions: bundles.map((b) => ({ status: b.status.toLowerCase(), transaction: txLink(b.txHash), ...(b.error ? { reason: failure(b.error) } : {}) })),
                 blocked_and_not_sent: plan.rejected().map((a) => `${a.label}: ${REASONS[a.reason ?? ''] ?? a.reason}`),
+                ...(swap && executed === bundles.length ? { best_execution: {
+                        quoted: `${formatUnits(swap.quote.quotedOut, swap.outDecimals)} ${swap.outSymbol}`,
+                        received: `${formatUnits(received, swap.outDecimals)} ${swap.outSymbol}`,
+                        versus_quote: received >= swap.quote.quotedOut ? 'at or better than the quote' : `${(Number(((swap.quote.quotedOut - received) * 10000n) / swap.quote.quotedOut) / 100).toFixed(2)}% below the quote, inside the ${swap.quote.slippageBps / 100}% allowed`,
+                        route: describeRoute(swap.quote),
+                    } } : {}),
                 ...(net && executed === bundles.length ? { netting_record: { contract: netRoots[cfg.chainId], operator: fides.account, epoch: net.epoch.toString(), obligations_root: net.obligationsRoot, settlement_root: net.settlementRoot, contract_link: explorer ? `${explorer}/address/${netRoots[cfg.chainId]}` : undefined } } : {}),
                 budget_remaining: `${formatUnits(spend.remaining, t.decimals)} of ${formatUnits(spend.limit, t.decimals)} ${t.symbol}`,
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fidesbuild/mcp-server",
-  "version": "0.6.0",
+  "version": "0.8.1",
   "description": "FIDES as tools for Claude and any MCP client: plan and execute actions inside a signed FIDES, gas paid by the hosted relayer.",
   "keywords": [
     "fides",
@@ -14,14 +14,9 @@
   "homepage": "https://fidesbuilder.xyz/docs",
   "license": "MIT",
   "type": "module",
-  "exports": {
-    ".": {
-      "types": "./dist/server.d.ts",
-      "default": "./dist/server.js"
-    }
-  },
+  "exports": "./src/server.ts",
   "bin": {
-    "fides-mcp": "./dist/server.js"
+    "fides-mcp": "./src/server.ts"
   },
   "files": [
     "dist",
@@ -32,7 +27,16 @@
     "node": ">=20.10"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/server.d.ts",
+        "default": "./dist/server.js"
+      }
+    },
+    "bin": {
+      "fides-mcp": "./dist/server.js"
+    }
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.32.1",
@@ -41,6 +45,7 @@
     "zod": "^4.6.5",
     "@fidesbuild/x402": "0.2.0",
     "@fidesbuild/net": "0.2.1",
-    "@fidesbuild/sub": "0.2.0"
+    "@fidesbuild/sub": "0.2.0",
+    "@fidesbuild/swap": "0.2.0"
   }
-}
+}