@moonpay/cli 0.3.3 → 0.3.5

package/dist/mcp-R3YBYDRT.js

@@ -0,0 +1,208 @@
+import { createRequire as __createRequire } from "module"; const require = __createRequire(import.meta.url);
+import {
+  callTool,
+  createTool,
+  defineToolSchema,
+  loadWallet,
+  messageSign,
+  resolveBaseUrl,
+  schemas_default,
+  transactionSign,
+  walletCreate,
+  walletDelete,
+  walletImport,
+  walletList,
+  walletRetrieve
+} from "./chunk-SQTD2GMD.js";
+
+// src/mcp.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+// src/tools/x402/request/tool.ts
+import { Keypair, VersionedTransaction, VersionedMessage } from "@solana/web3.js";
+import bs58 from "bs58";
+import axios from "axios";
+import { wrapAxiosWithPayment } from "@x402/axios";
+import { x402Client } from "@x402/core/client";
+import { ExactSvmScheme } from "@x402/svm";
+
+// src/tools/x402/request/schema.ts
+import { z } from "zod";
+var x402RequestSchema = defineToolSchema({
+  name: "x402_request",
+  description: "Make an HTTP request to an x402-protected endpoint. Automatically handles payment when a 402 Payment Required response is received, signing the payment transaction with the local wallet.",
+  input: z.object({
+    method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).describe("HTTP method"),
+    url: z.string().url().describe(
+      "Full URL of the x402-protected endpoint (e.g., 'https://agents.moonpay.com/api/x402/tools/market_digest_retrieve')"
+    ),
+    body: z.record(z.any()).nullable().describe("Request body (for POST, PUT, PATCH)"),
+    params: z.record(z.any()).nullable().describe("Query parameters"),
+    wallet: z.string().describe("Wallet name or address to pay with")
+  }),
+  output: z.object({
+    status: z.number().describe("HTTP status code"),
+    data: z.any().describe("Response data"),
+    headers: z.record(z.string()).describe("Response headers")
+  })
+});
+
+// src/tools/x402/request/tool.ts
+var SOLANA_NETWORK = "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp";
+function createLocalX402Client(walletAddress, secretKey) {
+  const keypair = Keypair.fromSecretKey(bs58.decode(secretKey));
+  const signer = {
+    address: walletAddress,
+    signTransactions: async (transactions) => {
+      return transactions.map((transaction) => {
+        const messageBytes = new Uint8Array(transaction.messageBytes);
+        const message = VersionedMessage.deserialize(messageBytes);
+        const numSigs = Object.keys(transaction.signatures).length;
+        const tx = new VersionedTransaction(
+          message,
+          new Array(numSigs).fill(new Uint8Array(64))
+        );
+        tx.sign([keypair]);
+        const signerIndex = message.staticAccountKeys.findIndex(
+          (key) => key.toBase58() === walletAddress
+        );
+        if (signerIndex === -1) {
+          throw new Error(
+            `Wallet ${walletAddress} is not a signer for this transaction`
+          );
+        }
+        return {
+          [walletAddress]: tx.signatures[signerIndex]
+        };
+      });
+    }
+  };
+  const client = new x402Client();
+  const svmScheme = new ExactSvmScheme(signer);
+  client.register(SOLANA_NETWORK, svmScheme);
+  client.registerV1("solana", svmScheme);
+  return wrapAxiosWithPayment(axios.create(), client);
+}
+var x402Request = createTool(
+  x402RequestSchema,
+  async ({ method, url, body, params, wallet: walletNameOrAddress }) => {
+    const storedWallet = loadWallet(walletNameOrAddress);
+    const client = createLocalX402Client(
+      storedWallet.address,
+      storedWallet.secretKey
+    );
+    let response;
+    switch (method) {
+      case "GET":
+        response = await client.get(url, { params });
+        break;
+      case "POST":
+        response = await client.post(url, body || {}, { params });
+        break;
+      case "PUT":
+        response = await client.put(url, body || {}, { params });
+        break;
+      case "PATCH":
+        response = await client.patch(url, body || {}, { params });
+        break;
+      case "DELETE":
+        response = await client.delete(url, { params });
+        break;
+      default:
+        throw new Error(`Unsupported HTTP method: ${method}`);
+    }
+    return {
+      status: response.status,
+      data: response.data,
+      headers: response.headers
+    };
+  }
+);
+
+// src/mcp.ts
+var LOCAL_TOOLS = [
+  walletCreate,
+  walletImport,
+  walletList,
+  walletRetrieve,
+  walletDelete,
+  transactionSign,
+  messageSign,
+  x402Request
+];
+var localToolMap = new Map(LOCAL_TOOLS.map((t) => [t.schema.name, t]));
+function resolveRemoteSchema(schema) {
+  const input = schema.inputSchema;
+  if (input.$ref && input.definitions) {
+    const defName = input.$ref.replace("#/definitions/", "");
+    return input.definitions[defName] ?? input;
+  }
+  return input;
+}
+async function startMcpServer() {
+  const server = new McpServer({
+    name: "moonpay",
+    version: "1.0.0"
+  });
+  for (const tool of LOCAL_TOOLS) {
+    const shape = tool.schema.input.shape ?? {};
+    server.registerTool(
+      tool.schema.name,
+      { description: tool.schema.description, inputSchema: shape },
+      async (params) => {
+        const result = await tool.handler(params);
+        return {
+          content: [
+            { type: "text", text: JSON.stringify(result, null, 2) }
+          ]
+        };
+      }
+    );
+  }
+  for (const schema of schemas_default) {
+    if (localToolMap.has(schema.name)) continue;
+    const resolved = resolveRemoteSchema(schema);
+    server.registerTool(
+      schema.name,
+      {
+        description: schema.description,
+        inputSchema: {
+          type: "object",
+          properties: resolved.properties ?? {},
+          required: resolved.required ?? []
+        }
+      },
+      async (params) => {
+        const props = resolved.properties ?? {};
+        for (const [key, prop] of Object.entries(props)) {
+          if (params[key] === void 0) {
+            const nullable = Array.isArray(prop.type) ? prop.type.includes("null") : prop.anyOf?.some((t) => t.type === "null");
+            if (nullable) params[key] = null;
+          }
+          const isNum = prop.type === "number" || prop.type === "integer" || Array.isArray(prop.type) && prop.type.some(
+            (t) => t === "number" || t === "integer"
+          ) || prop.anyOf?.some(
+            (t) => t.type === "number" || t.type === "integer"
+          );
+          if (isNum && typeof params[key] === "string") {
+            params[key] = Number(params[key]);
+          }
+        }
+        const baseUrl = resolveBaseUrl();
+        const result = await callTool(baseUrl, schema.name, params);
+        return {
+          content: [
+            { type: "text", text: JSON.stringify(result, null, 2) }
+          ]
+        };
+      }
+    );
+  }
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+export {
+  startMcpServer
+};
+//# sourceMappingURL=mcp-R3YBYDRT.js.map

package/dist/mcp-R3YBYDRT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp.ts","../src/tools/x402/request/tool.ts","../src/tools/x402/request/schema.ts"],"sourcesContent":["import { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { callTool } from \"./client\";\nimport { resolveBaseUrl } from \"./auth\";\nimport type { Tool } from \"./tools/shared\";\nimport { walletCreate } from \"./tools/wallet/create/tool\";\nimport { walletImport } from \"./tools/wallet/import/tool\";\nimport { walletList } from \"./tools/wallet/list/tool\";\nimport { walletRetrieve } from \"./tools/wallet/retrieve/tool\";\nimport { walletDelete } from \"./tools/wallet/delete/tool\";\nimport { transactionSign } from \"./tools/transaction/sign/tool\";\nimport { messageSign } from \"./tools/message/sign/tool\";\nimport { x402Request } from \"./tools/x402/request/tool\";\nimport schemas from \"./generated/schemas.json\";\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nconst LOCAL_TOOLS: Tool<any>[] = [\n  walletCreate,\n  walletImport,\n  walletList,\n  walletRetrieve,\n  walletDelete,\n  transactionSign,\n  messageSign,\n  x402Request,\n];\n\nconst localToolMap = new Map(LOCAL_TOOLS.map((t) => [t.schema.name, t]));\n\n/**\n * Resolve a remote schema's $ref to the actual properties object.\n */\nfunction resolveRemoteSchema(schema: (typeof schemas)[number]) {\n  const input = schema.inputSchema as any;\n  if (input.$ref && input.definitions) {\n    const defName = input.$ref.replace(\"#/definitions/\", \"\");\n    return input.definitions[defName] ?? input;\n  }\n  return input;\n}\n\nexport async function startMcpServer() {\n  const server = new McpServer({\n    name: \"moonpay\",\n    version: \"1.0.0\",\n  });\n\n  // Register local tools — pass Zod input shape directly\n  for (const tool of LOCAL_TOOLS) {\n    const shape = (tool.schema.input as any).shape ?? {};\n\n    server.registerTool(\n      tool.schema.name,\n      { description: tool.schema.description, inputSchema: shape },\n      async (params: Record<string, unknown>) => {\n        const result = await tool.handler(params);\n        return {\n          content: [\n            { type: \"text\" as const, text: JSON.stringify(result, null, 2) },\n          ],\n        };\n      },\n    );\n  }\n\n  // Register remote tools (skip if already registered as local)\n  for (const schema of schemas) {\n    if (localToolMap.has(schema.name)) continue;\n\n    const resolved = resolveRemoteSchema(schema);\n\n    server.registerTool(\n      schema.name,\n      {\n        description: schema.description,\n        inputSchema: {\n          type: \"object\",\n          properties: resolved.properties ?? {},\n          required: resolved.required ?? [],\n        } as any,\n      },\n      async (params: Record<string, unknown>) => {\n        // Coerce types for remote tools\n        const props = (resolved.properties ?? {}) as Record<string, any>;\n        for (const [key, prop] of Object.entries(props)) {\n          if (params[key] === undefined) {\n            const nullable = Array.isArray(prop.type)\n              ? prop.type.includes(\"null\")\n              : prop.anyOf?.some((t: any) => t.type === \"null\");\n            if (nullable) params[key] = null;\n          }\n          const isNum =\n            prop.type === \"number\" ||\n            prop.type === \"integer\" ||\n            (Array.isArray(prop.type) &&\n              prop.type.some(\n                (t: string) => t === \"number\" || t === \"integer\",\n              )) ||\n            prop.anyOf?.some(\n              (t: any) => t.type === \"number\" || t.type === \"integer\",\n            );\n          if (isNum && typeof params[key] === \"string\") {\n            params[key] = Number(params[key]);\n          }\n        }\n\n        const baseUrl = resolveBaseUrl();\n        const result = await callTool(baseUrl, schema.name, params);\n        return {\n          content: [\n            { type: \"text\" as const, text: JSON.stringify(result, null, 2) },\n          ],\n        };\n      },\n    );\n  }\n\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n}\n","import { Keypair, VersionedTransaction, VersionedMessage } from \"@solana/web3.js\";\nimport bs58 from \"bs58\";\nimport axios from \"axios\";\nimport { wrapAxiosWithPayment } from \"@x402/axios\";\nimport { x402Client } from \"@x402/core/client\";\nimport { ExactSvmScheme } from \"@x402/svm\";\nimport type { Address } from \"@solana/addresses\";\nimport type { SignatureDictionary } from \"@solana/signers\";\nimport type { Transaction } from \"@solana/transactions\";\nimport { createTool } from \"../../shared\";\nimport { loadWallet } from \"../../wallet/server\";\nimport { x402RequestSchema } from \"./schema\";\n\nconst SOLANA_NETWORK = \"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp\" as const;\n\nfunction createLocalX402Client(walletAddress: string, secretKey: string) {\n  const keypair = Keypair.fromSecretKey(bs58.decode(secretKey));\n\n  const signer = {\n    address: walletAddress as Address,\n    signTransactions: async (\n      transactions: readonly Transaction[],\n    ): Promise<readonly SignatureDictionary[]> => {\n      return transactions.map((transaction) => {\n        const messageBytes = new Uint8Array(transaction.messageBytes);\n        const message = VersionedMessage.deserialize(messageBytes);\n        const numSigs = Object.keys(transaction.signatures).length;\n        const tx = new VersionedTransaction(\n          message,\n          new Array(numSigs).fill(new Uint8Array(64)),\n        );\n\n        tx.sign([keypair]);\n\n        const signerIndex = message.staticAccountKeys.findIndex(\n          (key) => key.toBase58() === walletAddress,\n        );\n        if (signerIndex === -1) {\n          throw new Error(\n            `Wallet ${walletAddress} is not a signer for this transaction`,\n          );\n        }\n\n        return {\n          [walletAddress]: tx.signatures[signerIndex],\n        } as SignatureDictionary;\n      });\n    },\n  };\n\n  const client = new x402Client();\n  const svmScheme = new ExactSvmScheme(signer);\n  client.register(SOLANA_NETWORK, svmScheme);\n  client.registerV1(\"solana\", svmScheme);\n\n  return wrapAxiosWithPayment(axios.create(), client);\n}\n\nexport const x402Request = createTool(\n  x402RequestSchema,\n  async ({ method, url, body, params, wallet: walletNameOrAddress }) => {\n    const storedWallet = loadWallet(walletNameOrAddress);\n    const client = createLocalX402Client(\n      storedWallet.address,\n      storedWallet.secretKey,\n    );\n\n    let response;\n    switch (method) {\n      case \"GET\":\n        response = await client.get(url, { params });\n        break;\n      case \"POST\":\n        response = await client.post(url, body || {}, { params });\n        break;\n      case \"PUT\":\n        response = await client.put(url, body || {}, { params });\n        break;\n      case \"PATCH\":\n        response = await client.patch(url, body || {}, { params });\n        break;\n      case \"DELETE\":\n        response = await client.delete(url, { params });\n        break;\n      default:\n        throw new Error(`Unsupported HTTP method: ${method}`);\n    }\n\n    return {\n      status: response.status,\n      data: response.data,\n      headers: response.headers as Record<string, string>,\n    };\n  },\n);\n","import { z } from \"zod\";\nimport { defineToolSchema } from \"../../shared\";\n\nexport const x402RequestSchema = defineToolSchema({\n  name: \"x402_request\",\n  description:\n    \"Make an HTTP request to an x402-protected endpoint. Automatically handles payment when a 402 Payment Required response is received, signing the payment transaction with the local wallet.\",\n  input: z.object({\n    method: z\n      .enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"])\n      .describe(\"HTTP method\"),\n    url: z\n      .string()\n      .url()\n      .describe(\n        \"Full URL of the x402-protected endpoint (e.g., 'https://agents.moonpay.com/api/x402/tools/market_digest_retrieve')\",\n      ),\n    body: z\n      .record(z.any())\n      .nullable()\n      .describe(\"Request body (for POST, PUT, PATCH)\"),\n    params: z.record(z.any()).nullable().describe(\"Query parameters\"),\n    wallet: z.string().describe(\"Wallet name or address to pay with\"),\n  }),\n  output: z.object({\n    status: z.number().describe(\"HTTP status code\"),\n    data: z.any().describe(\"Response data\"),\n    headers: z.record(z.string()).describe(\"Response headers\"),\n  }),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;;;ACDrC,SAAS,SAAS,sBAAsB,wBAAwB;AAChE,OAAO,UAAU;AACjB,OAAO,WAAW;AAClB,SAAS,4BAA4B;AACrC,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;;;ACL/B,SAAS,SAAS;AAGX,IAAM,oBAAoB,iBAAiB;AAAA,EAChD,MAAM;AAAA,EACN,aACE;AAAA,EACF,OAAO,EAAE,OAAO;AAAA,IACd,QAAQ,EACL,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC,EAC9C,SAAS,aAAa;AAAA,IACzB,KAAK,EACF,OAAO,EACP,IAAI,EACJ;AAAA,MACC;AAAA,IACF;AAAA,IACF,MAAM,EACH,OAAO,EAAE,IAAI,CAAC,EACd,SAAS,EACT,SAAS,qCAAqC;AAAA,IACjD,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,kBAAkB;AAAA,IAChE,QAAQ,EAAE,OAAO,EAAE,SAAS,oCAAoC;AAAA,EAClE,CAAC;AAAA,EACD,QAAQ,EAAE,OAAO;AAAA,IACf,QAAQ,EAAE,OAAO,EAAE,SAAS,kBAAkB;AAAA,IAC9C,MAAM,EAAE,IAAI,EAAE,SAAS,eAAe;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS,kBAAkB;AAAA,EAC3D,CAAC;AACH,CAAC;;;ADhBD,IAAM,iBAAiB;AAEvB,SAAS,sBAAsB,eAAuB,WAAmB;AACvE,QAAM,UAAU,QAAQ,cAAc,KAAK,OAAO,SAAS,CAAC;AAE5D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IACT,kBAAkB,OAChB,iBAC4C;AAC5C,aAAO,aAAa,IAAI,CAAC,gBAAgB;AACvC,cAAM,eAAe,IAAI,WAAW,YAAY,YAAY;AAC5D,cAAM,UAAU,iBAAiB,YAAY,YAAY;AACzD,cAAM,UAAU,OAAO,KAAK,YAAY,UAAU,EAAE;AACpD,cAAM,KAAK,IAAI;AAAA,UACb;AAAA,UACA,IAAI,MAAM,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,CAAC;AAAA,QAC5C;AAEA,WAAG,KAAK,CAAC,OAAO,CAAC;AAEjB,cAAM,cAAc,QAAQ,kBAAkB;AAAA,UAC5C,CAAC,QAAQ,IAAI,SAAS,MAAM;AAAA,QAC9B;AACA,YAAI,gBAAgB,IAAI;AACtB,gBAAM,IAAI;AAAA,YACR,UAAU,aAAa;AAAA,UACzB;AAAA,QACF;AAEA,eAAO;AAAA,UACL,CAAC,aAAa,GAAG,GAAG,WAAW,WAAW;AAAA,QAC5C;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,WAAW;AAC9B,QAAM,YAAY,IAAI,eAAe,MAAM;AAC3C,SAAO,SAAS,gBAAgB,SAAS;AACzC,SAAO,WAAW,UAAU,SAAS;AAErC,SAAO,qBAAqB,MAAM,OAAO,GAAG,MAAM;AACpD;AAEO,IAAM,cAAc;AAAA,EACzB;AAAA,EACA,OAAO,EAAE,QAAQ,KAAK,MAAM,QAAQ,QAAQ,oBAAoB,MAAM;AACpE,UAAM,eAAe,WAAW,mBAAmB;AACnD,UAAM,SAAS;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf;AAEA,QAAI;AACJ,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,mBAAW,MAAM,OAAO,IAAI,KAAK,EAAE,OAAO,CAAC;AAC3C;AAAA,MACF,KAAK;AACH,mBAAW,MAAM,OAAO,KAAK,KAAK,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;AACxD;AAAA,MACF,KAAK;AACH,mBAAW,MAAM,OAAO,IAAI,KAAK,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;AACvD;AAAA,MACF,KAAK;AACH,mBAAW,MAAM,OAAO,MAAM,KAAK,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;AACzD;AAAA,MACF,KAAK;AACH,mBAAW,MAAM,OAAO,OAAO,KAAK,EAAE,OAAO,CAAC;AAC9C;AAAA,MACF;AACE,cAAM,IAAI,MAAM,4BAA4B,MAAM,EAAE;AAAA,IACxD;AAEA,WAAO;AAAA,MACL,QAAQ,SAAS;AAAA,MACjB,MAAM,SAAS;AAAA,MACf,SAAS,SAAS;AAAA,IACpB;AAAA,EACF;AACF;;;AD9EA,IAAM,cAA2B;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,eAAe,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,MAAM,CAAC,CAAC,CAAC;AAKvE,SAAS,oBAAoB,QAAkC;AAC7D,QAAM,QAAQ,OAAO;AACrB,MAAI,MAAM,QAAQ,MAAM,aAAa;AACnC,UAAM,UAAU,MAAM,KAAK,QAAQ,kBAAkB,EAAE;AACvD,WAAO,MAAM,YAAY,OAAO,KAAK;AAAA,EACvC;AACA,SAAO;AACT;AAEA,eAAsB,iBAAiB;AACrC,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAGD,aAAW,QAAQ,aAAa;AAC9B,UAAM,QAAS,KAAK,OAAO,MAAc,SAAS,CAAC;AAEnD,WAAO;AAAA,MACL,KAAK,OAAO;AAAA,MACZ,EAAE,aAAa,KAAK,OAAO,aAAa,aAAa,MAAM;AAAA,MAC3D,OAAO,WAAoC;AACzC,cAAM,SAAS,MAAM,KAAK,QAAQ,MAAM;AACxC,eAAO;AAAA,UACL,SAAS;AAAA,YACP,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE;AAAA,UACjE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,aAAW,UAAU,iBAAS;AAC5B,QAAI,aAAa,IAAI,OAAO,IAAI,EAAG;AAEnC,UAAM,WAAW,oBAAoB,MAAM;AAE3C,WAAO;AAAA,MACL,OAAO;AAAA,MACP;AAAA,QACE,aAAa,OAAO;AAAA,QACpB,aAAa;AAAA,UACX,MAAM;AAAA,UACN,YAAY,SAAS,cAAc,CAAC;AAAA,UACpC,UAAU,SAAS,YAAY,CAAC;AAAA,QAClC;AAAA,MACF;AAAA,MACA,OAAO,WAAoC;AAEzC,cAAM,QAAS,SAAS,cAAc,CAAC;AACvC,mBAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC/C,cAAI,OAAO,GAAG,MAAM,QAAW;AAC7B,kBAAM,WAAW,MAAM,QAAQ,KAAK,IAAI,IACpC,KAAK,KAAK,SAAS,MAAM,IACzB,KAAK,OAAO,KAAK,CAAC,MAAW,EAAE,SAAS,MAAM;AAClD,gBAAI,SAAU,QAAO,GAAG,IAAI;AAAA,UAC9B;AACA,gBAAM,QACJ,KAAK,SAAS,YACd,KAAK,SAAS,aACb,MAAM,QAAQ,KAAK,IAAI,KACtB,KAAK,KAAK;AAAA,YACR,CAAC,MAAc,MAAM,YAAY,MAAM;AAAA,UACzC,KACF,KAAK,OAAO;AAAA,YACV,CAAC,MAAW,EAAE,SAAS,YAAY,EAAE,SAAS;AAAA,UAChD;AACF,cAAI,SAAS,OAAO,OAAO,GAAG,MAAM,UAAU;AAC5C,mBAAO,GAAG,IAAI,OAAO,OAAO,GAAG,CAAC;AAAA,UAClC;AAAA,QACF;AAEA,cAAM,UAAU,eAAe;AAC/B,cAAM,SAAS,MAAM,SAAS,SAAS,OAAO,MAAM,MAAM;AAC1D,eAAO;AAAA,UACL,SAAS;AAAA,YACP,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,EAAE;AAAA,UACjE;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAChC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moonpay/cli",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "publishConfig": {
     "access": "public"
   },
@@ -20,9 +20,15 @@
     "test": "jest"
   },
   "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0",
     "@solana/web3.js": "^1.98.4",
+    "@x402/axios": "^2.4.0",
+    "@x402/core": "^2.4.0",
+    "@x402/svm": "^2.4.0",
+    "axios": "^1.13.5",
     "bs58": "^6.0.0",
     "commander": "^12.1.0",
+    "tweetnacl": "^1.0.3",
     "zod": "^3.25.76"
   },
   "devDependencies": {

package/skills/moonpay-auth/SKILL.md

@@ -1,14 +1,25 @@
 ---
 name: moonpay-auth
-description: Authenticate and manage local wallets with MoonPay CLI. Use when you need to log in, check auth state, or manage wallets for signing transactions.
+description: Set up the MoonPay CLI, authenticate, and manage local wallets. Use when commands fail, for login, or to create/import wallets.
 tags: [setup]
 ---
 
-# MoonPay auth
+# MoonPay auth and setup
 
-## Goal
+## Install
 
-Set up authentication and local wallet management for the MoonPay CLI (`mp`).
+```bash
+npm i -g @moonpay/cli
+```
+
+This installs the `mp` (and `moonpay`) binary globally.
+
+## Verify installation
+
+```bash
+mp --version
+mp --help
+```
 
 ## Auth commands
 
@@ -39,7 +50,6 @@ mp wallet list
 
 # Get wallet details (by name or address)
 mp wallet retrieve --wallet "my-wallet"
-mp wallet retrieve --wallet <address>
 
 # Delete a wallet (irreversible)
 mp wallet delete --wallet "my-wallet" --confirm
@@ -52,13 +62,37 @@ mp wallet delete --wallet "my-wallet" --confirm
 3. Run `mp wallet list` to see local wallets.
 4. If no wallets, create one: `mp wallet create --name "default"`.
 
-## Notes
+## Config locations
+
+- **Credentials:** `~/.config/moonpay/credentials.json` (OAuth tokens)
+- **Config:** `~/.config/moonpay/config.json` (base URL, client ID)
+- **Wallets:** `~/.config/moonpay/wallets/` (local keypairs, 0600 permissions)
+
+## Output formats
+
+```bash
+mp -f json wallet list    # Pretty JSON (default)
+mp -f compact wallet list # Single-line JSON
+mp -f table wallet list   # ASCII table
+```
+
+## Environment for scripts/agents
+
+If running `mp` from a script or agent subprocess, ensure PATH includes the npm global bin:
+
+```bash
+export PATH="$(npm config get prefix)/bin:$PATH"
+mp --version
+```
+
+## Troubleshooting
 
-- Credentials: `~/.config/moonpay/credentials.json`
-- Wallets: `~/.config/moonpay/wallets/`
+- **"command not found"** — `npm i -g @moonpay/cli` and check PATH.
+- **401 / auth errors** — Run `mp login`.
+- **"fetch failed"** — Check network connectivity to agents.moonpay.com.
 - Tokens auto-refresh on expiry. If refresh fails, run `mp login` again.
 
 ## Related skills
 
-- **moonpay-env** — Environment and PATH setup.
 - **moonpay-swap-tokens** — Swap tokens using local wallets.
+- **moonpay-check-wallet** — Check wallet balances.

package/skills/moonpay-check-wallet/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: moonpay-check-wallet
-description: Check wallet balances and holdings. Use for "what's in my wallet", portfolio breakdown, token balances, and USD values.
+description: Check wallet balances and holdings. Use for "what's in my wallet", portfolio breakdown, token balances, allocation percentages, and USD values.
 tags: [portfolio]
 ---
 
@@ -8,7 +8,7 @@ tags: [portfolio]
 
 ## Goal
 
-List all token balances held in a wallet with current USD values.
+List all token balances in a wallet with USD values, allocation breakdown, and total portfolio value.
 
 ## Commands
 
@@ -19,27 +19,39 @@ mp token balance list --wallet <address> --chain solana
 # List balances for an EVM wallet
 mp token balance list --wallet 0x... --chain ethereum
 mp token balance list --wallet 0x... --chain base
+
+# Find wallet address
+mp wallet list
 ```
 
 ## Supported chains
 
 `solana`, `ethereum`, `base`, `polygon`, `arbitrum`, `optimism`
 
-## Output handling
+## Workflow
 
-- Summarize top holdings by USD value.
-- Call out small dust balances separately.
-- Sum `balance.value` across items for total portfolio value.
+1. Run `mp wallet list` to find the user's wallet address.
+2. Run `mp token balance list --wallet <address> --chain solana`.
+3. Sort holdings by USD value descending.
+4. Calculate allocation percentages (each holding's USD / total USD).
+5. Present: top holdings, dust balances, total value.
 
 ## Example flow
 
-1. User: "What's in my wallet?"
-2. Run `mp wallet list` to find the user's wallet address.
-3. Run `mp token balance list --wallet <address> --chain solana`.
-4. Present holdings sorted by value.
+1. User: "What's in my wallet?" or "Generate a portfolio report."
+2. Run: `mp token balance list --wallet <address> --chain solana`
+3. Present:
+   - **Total value:** $168.05
+   - **SOL** — 0.61 ($51.87) — 30.9%
+   - **WBTC** — 0.00127 ($85.48) — 50.9%
+   - **USDC** — 29.81 ($29.81) — 17.7%
+   - **Dust:** none
+
+## Output formats
+
+Use `mp -f table token balance list ...` for a quick table view, or `mp -f json ...` for programmatic processing.
 
 ## Related skills
 
 - **moonpay-auth** — Set up wallets if none exist.
-- **moonpay-portfolio-report** — Full report with allocation percentages.
-- **moonpay-rug-check** — Risk-check a token before buying.
+- **moonpay-discover-tokens** — Research specific tokens in the portfolio.

package/skills/moonpay-discover-tokens/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: moonpay-discover-tokens
-description: Search for tokens and retrieve detailed market data. Use to find token addresses, check prices, volume, liquidity, and trading activity.
+description: Search for tokens, check prices, get trading briefs, and evaluate risk. Use for token research, "is this token safe?", price checks, and market analysis.
 tags: [research]
 ---
 
@@ -8,26 +8,20 @@ tags: [research]
 
 ## Goal
 
-Search for tokens by name/symbol and retrieve detailed market data including price, volume, liquidity, and trading activity.
+Search for tokens, retrieve market data, generate trading briefs, and assess risk — all from one skill.
 
 ## Commands
 
-### Search for tokens
-
 ```bash
-mp token search --query "SOL" --chain solana
-mp token search --query "BONK" --chain solana --limit 3
-```
-
-Returns matching tokens with market data (price, volume, liquidity, trades, buys/sells, unique wallets).
+# Search by name or symbol
+mp token search --query "BONK" --chain solana
 
-### Retrieve token details
-
-```bash
+# Get full details for a specific token
 mp token retrieve --token <mint-address> --chain solana
-```
 
-Returns token metadata (name, symbol, decimals, image) and market data.
+# See what's trending
+mp token trending list --chain solana
+```
 
 ## Supported chains
 
@@ -37,18 +31,46 @@ Returns token metadata (name, symbol, decimals, image) and market data.
 
 1. Search by name/symbol with `mp token search`.
 2. Use the returned address to get details with `mp token retrieve`.
-3. Evaluate risk with **moonpay-rug-check** for unknown tokens.
-4. Proceed to buy/swap if desired.
+3. Assess risk and generate a brief from the market data.
 
-## Example flow
+## Trading brief format
 
+When the user wants a brief or analysis, format the output like:
+
+```
+BONK (DezX...pump) — mcap $850M, liq $12M, vol24 $45M
+  momentum: 1h +2.3%, 4h -0.5%, 24h +8.1%
+  activity: trades24 12,500, wallets24 3,200
+  note: healthy volume, broad wallet distribution
+```
+
+## Risk assessment
+
+When the user asks "is this safe?" or wants to evaluate an unknown token, check these indicators from the market data:
+
+1. **Liquidity** — Under $10K is a red flag.
+2. **Volume pattern** — Sudden spikes with no context = suspicious.
+3. **Buy/sell ratio** — Extremely one-sided trading = dump risk.
+4. **Unique wallets** — Very few unique wallets = concentrated activity.
+5. **Market cap vs liquidity** — Huge mcap with tiny liquidity = inflated, hard to exit.
+6. **Price volatility** — Extreme short-term swings (>50% in 1h) = high risk.
+
+Present a risk summary with traffic-light ratings. This is a heuristic check based on market data, not a smart contract audit — always recommend caution with unknown tokens.
+
+## Example flows
+
+**Price check:**
 1. User: "What's the price of BONK?"
 2. Run: `mp token search --query "BONK" --chain solana`
 3. Present: name, symbol, price, 24h change, volume, liquidity.
 
+**Risk check:**
+1. User: "Is BONK safe to buy?"
+2. Run: `mp token search --query "BONK" --chain solana` then `mp token retrieve --token <address> --chain solana`
+3. Present risk indicators with ratings.
+
 ## Related skills
 
-- **moonpay-token-brief** — Detailed trading brief for a specific token.
-- **moonpay-rug-check** — Risk assessment for unknown tokens.
-- **moonpay-swap-tokens** — Swap after research.
+- **moonpay-swap-tokens** — Trade after research.
 - **moonpay-buy-crypto** — Buy with fiat after research.
+- **moonpay-check-wallet** — Check your current holdings.

package/skills/moonpay-mcp/SKILL.md

@@ -0,0 +1,67 @@
+---
+name: moonpay-mcp
+description: Set up MoonPay as an MCP server for Claude Desktop or Claude Code. Provides all MoonPay CLI tools via the Model Context Protocol.
+tags: [setup]
+---
+
+# MoonPay MCP Setup
+
+## Goal
+
+Configure the MoonPay CLI as an MCP server so Claude Desktop, Claude Code, or any MCP-compatible client can use all MoonPay tools directly.
+
+## Prerequisites
+
+```bash
+npm i -g @moonpay/cli
+mp login
+```
+
+## Claude Code setup
+
+```bash
+claude mcp add moonpay -- mp mcp
+```
+
+## Claude Desktop setup
+
+Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "moonpay": {
+      "command": "mp",
+      "args": ["mcp"]
+    }
+  }
+}
+```
+
+Then restart Claude Desktop.
+
+## What it provides
+
+All MoonPay CLI tools are available as MCP tools:
+
+- **Wallet management** — create, import, list, retrieve, delete wallets
+- **Token operations** — search, retrieve, swap, buy, sell, limit orders, recurring orders
+- **Market data** — token prices, trending, top traders, liquidity, holder data
+- **DeFi** — lending deposits/withdrawals, yield recommendations
+- **Fiat on/off-ramp** — buy crypto, virtual accounts, bank accounts
+- **x402 payments** — paid API requests with automatic payment handling
+- **Transaction signing** — sign transactions with local wallets
+
+## Verification
+
+After setup, ask Claude: "What MoonPay tools do you have?" — it should list all available tools.
+
+## Auth
+
+The MCP server uses the same credentials as the CLI (`~/.config/moonpay/credentials.json`). Run `mp login` to authenticate.
+
+## Related skills
+
+- **moonpay-auth** — Login and wallet setup.
+- **moonpay-discover-tokens** — Search and analyze tokens.
+- **moonpay-swap-tokens** — Swap tokens.

package/skills/moonpay-x402/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: moonpay-x402
+description: Make paid API requests to x402-protected endpoints. Automatically handles payment with your local wallet.
+tags: [payments, api]
+---
+
+# x402 paid API requests
+
+## Goal
+
+Make HTTP requests to x402-protected endpoints. The CLI automatically detects 402 Payment Required responses, builds and signs a Solana payment transaction with your local wallet, and retries the request with the payment proof.
+
+## Command
+
+```bash
+mp x402 request \
+  --method POST \
+  --url <x402-endpoint-url> \
+  --body '<json-body>' \
+  --wallet <wallet-name-or-address>
+```
+
+## Available x402 endpoints
+
+| Endpoint | Cost | Input |
+|----------|------|-------|
+| `https://agents.moonpay.com/api/x402/tools/market_digest_retrieve` | $0.01 | `{"chain": "solana"}` |
+| `https://agents.moonpay.com/api/x402/tools/token_digest_retrieve` | $0.01 | `{"token": "<mint>", "chain": "solana"}` |
+| `https://agents.moonpay.com/api/x402/tools/wallet_digest_retrieve` | $0.01 | `{"wallet": "<address>", "chain": "solana"}` |
+
+## Example flow
+
+1. User: "Get me a market digest for Solana."
+2. Run: `mp x402 request --method POST --url "https://agents.moonpay.com/api/x402/tools/market_digest_retrieve" --body '{"chain": "solana"}' --wallet my-wallet`
+3. The CLI handles the 402 payment flow automatically and returns the digest.
+
+## Notes
+
+- Requires a local wallet with USDC to pay for requests.
+- Payments are on Solana mainnet.
+- If the tool request fails (status >= 400), the payment is not settled — you don't pay for errors.
+- Use **moonpay-auth** to set up a local wallet first.
+
+## Related skills
+
+- **moonpay-auth** — Create or import a local wallet.
+- **moonpay-check-wallet** — Check your wallet balance before making paid requests.

package/skills/moonpay-env/SKILL.md

@@ -1,57 +0,0 @@
----
-name: moonpay-env
-description: Ensure the MoonPay CLI environment is set up correctly. Use when commands fail due to PATH or config issues.
-tags: [setup]
----
-
-# MoonPay environment setup
-
-## Install
-
-```bash
-npm i -g @moonpay/cli
-```
-
-This installs the `mp` (and `moonpay`) binary globally.
-
-## Verify installation
-
-```bash
-mp --version
-mp --help
-```
-
-## Config locations
-
-- **Credentials:** `~/.config/moonpay/credentials.json` (OAuth tokens)
-- **Config:** `~/.config/moonpay/config.json` (base URL, client ID)
-- **Wallets:** `~/.config/moonpay/wallets/` (local keypairs, 0600 permissions)
-
-## Environment for scripts/agents
-
-If running `mp` from a script or agent subprocess, ensure PATH includes the npm global bin:
-
-```bash
-export PATH="$(npm config get prefix)/bin:$PATH"
-mp --version
-```
-
-## Output formats
-
-The CLI supports three output formats via `-f`:
-
-```bash
-mp -f json wallet list    # Pretty JSON (default)
-mp -f compact wallet list # Single-line JSON
-mp -f table wallet list   # ASCII table
-```
-
-## Troubleshooting
-
-- **"command not found"** — `npm i -g @moonpay/cli` and check PATH.
-- **401 / auth errors** — Run `mp login`.
-- **"fetch failed"** — Check network connectivity to agents.moonpay.com.
-
-## Related skills
-
-- **moonpay-auth** — Login, logout, wallet management.