@openclawcash/mcp-server 0.1.1 → 0.1.3

package/README.md

@@ -58,6 +58,8 @@ Set one of these environment variables:
 - `OPENCLAWCASH_AGENT_KEY`
 - `AGENTWALLETAPI_KEY`
 
+All MCP tools require an OpenClawCash agent key because they call the authenticated agent API, including read tools such as `swap_quote` and `supported_tokens_list`.
+
 Optional base URL override:
 
 - `OPENCLAWCASH_BASE_URL`
@@ -217,8 +219,10 @@ The MCP server itself does not hold approval memory. The MCP client or agent run
 
 ## Notes
 
-- `swap_quote` is read-only.
+- `swap_quote` is read-only, but still requires an agent key.
+- `supported_tokens_list` is read-only, but still requires an agent key.
 - `transfer_send`, `swap_execute`, `approve_token`, `wallet_create`, and `wallet_import` are write tools.
+- For `wallet_get`, `transactions_list`, `supported_tokens_list`, and `swap_quote`, pass at most one wallet selector when using `walletId`, `walletLabel`, or `walletAddress`.
 - The server uses stdio transport and is intended for MCP-compatible desktop or agent clients.
 
 ## Standalone Packaging Notes

package/openclawcash-mcp.mjs

@@ -7,7 +7,7 @@ import { fileURLToPath } from "node:url";
 import { z } from "zod";
 
 const SERVER_NAME = "openclawcash";
-const SERVER_VERSION = "0.1.1";
+const SERVER_VERSION = "0.1.3";
 const PROTOCOL_VERSION = "2024-11-05";
 const DEFAULT_BASE_URL = "https://openclawcash.com";
 
@@ -130,13 +130,16 @@ const transferArgsSchema = walletSelectorBaseSchema
     message: "Provide exactly one of amount or value.",
   });
 
-const swapQuoteArgsSchema = z.object({
-  network: z.string().min(1),
-  tokenIn: z.string().min(1),
-  tokenOut: z.string().min(1),
-  amountIn: z.string().min(1),
-  chain: z.enum(["evm", "solana"]).optional(),
-});
+const swapQuoteArgsSchema = walletSelectorBaseSchema
+  .extend({
+    network: z.string().min(1),
+    tokenIn: z.string().min(1),
+    tokenOut: z.string().min(1),
+    amountIn: z.string().min(1),
+  })
+  .refine((data) => [data.walletId, data.walletLabel, data.walletAddress].filter((value) => value !== undefined).length <= 1, {
+    message: selectorDescription(),
+  });
 
 const swapExecuteArgsSchema = z
   .object({
@@ -165,15 +168,20 @@ const approveArgsSchema = z
     message: "Provide exactly one of walletId or walletAddress.",
   });
 
-const supportedTokensArgsSchema = z.object({
-  network: z.string().min(1).optional(),
-  chain: z.enum(["evm", "solana"]).optional(),
-});
+const supportedTokensArgsSchema = walletSelectorBaseSchema
+  .extend({
+    network: z.string().min(1).optional(),
+  })
+  .refine((data) => [data.walletId, data.walletLabel, data.walletAddress].filter((value) => value !== undefined).length <= 1, {
+    message: selectorDescription(),
+  });
 
 const createWalletArgsSchema = z.object({
   label: z.string().min(1),
   network: z.enum(["sepolia", "mainnet", "solana-devnet", "solana-testnet", "solana-mainnet"]).optional(),
   exportPassphrase: z.string().trim().min(12),
+  exportPassphraseStorageType: z.enum(["env", "secret_manager", "vault", "other"]),
+  exportPassphraseStorageRef: z.string().trim().min(3),
   confirmExportPassphraseSaved: z.literal(true),
 });
 
@@ -352,6 +360,9 @@ const tools = [
       properties: {
         network: { type: "string", description: "Example: mainnet, sepolia, solana-mainnet." },
         chain: { type: "string", enum: ["evm", "solana"] },
+        walletId: { oneOf: [{ type: "integer" }, { type: "string" }], description: "Optional wallet selector for history-linked activity." },
+        walletLabel: { type: "string", description: "Optional wallet selector for history-linked activity." },
+        walletAddress: { type: "string", description: "Optional wallet selector for history-linked activity." },
       },
       additionalProperties: false,
     },
@@ -361,7 +372,6 @@ const tools = [
         method: "GET",
         pathName: "/api/agent/supported-tokens",
         query: args,
-        requireAuth: false,
       }),
   },
   {
@@ -398,6 +408,9 @@ const tools = [
       type: "object",
       properties: {
         network: { type: "string" },
+        walletId: { oneOf: [{ type: "integer" }, { type: "string" }], description: "Optional wallet selector for history-linked activity." },
+        walletLabel: { type: "string", description: "Optional wallet selector for history-linked activity." },
+        walletAddress: { type: "string", description: "Optional wallet selector for history-linked activity." },
         tokenIn: { type: "string" },
         tokenOut: { type: "string" },
         amountIn: { type: "string" },
@@ -414,7 +427,6 @@ const tools = [
         pathName: "/api/agent/quote",
         query: { network },
         body,
-        requireAuth: false,
       });
     },
   },
@@ -479,12 +491,30 @@ const tools = [
           enum: ["sepolia", "mainnet", "solana-devnet", "solana-testnet", "solana-mainnet"],
         },
         exportPassphrase: { type: "string", minLength: 12 },
+        exportPassphraseStorageType: { type: "string", enum: ["env", "secret_manager", "vault", "other"] },
+        exportPassphraseStorageRef: { type: "string", minLength: 3 },
         confirmExportPassphraseSaved: { type: "boolean", const: true },
       },
-      required: ["label", "exportPassphrase", "confirmExportPassphraseSaved"],
+      required: ["label", "exportPassphrase", "exportPassphraseStorageType", "exportPassphraseStorageRef", "confirmExportPassphraseSaved"],
       additionalProperties: false,
     },
-    parse: (args) => createWalletArgsSchema.parse(args ?? {}),
+    parse: (args) => {
+      const parsed = createWalletArgsSchema.parse(args ?? {});
+      if (parsed.exportPassphraseStorageType === "env") {
+        const envValue = process.env[parsed.exportPassphraseStorageRef];
+        if (!envValue) {
+          throw new Error(
+            `Missing env-backed wallet export passphrase. Set ${parsed.exportPassphraseStorageRef} before calling wallet_create.`,
+          );
+        }
+        if (envValue.trim() !== parsed.exportPassphrase) {
+          throw new Error(
+            `Env verification failed for wallet_create. ${parsed.exportPassphraseStorageRef} does not match exportPassphrase.`,
+          );
+        }
+      }
+      return parsed;
+    },
     execute: async (args) =>
       callAgentApi({
         method: "POST",
@@ -646,7 +676,7 @@ async function runSelfTest() {
       capabilities: {},
       clientInfo: {
         name: "openclawcash-self-test",
-        version: "0.1.1",
+        version: SERVER_VERSION,
       },
     },
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclawcash/mcp-server",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "OpenClawCash MCP server for managed agent wallets, balances, transfers, swaps, and approvals.",
   "type": "module",
   "license": "Proprietary",