@tongateway/mcp 0.12.0 → 0.14.0

package/README.md

@@ -1,8 +1,10 @@
 # @tongateway/mcp
 
+[![smithery badge](https://smithery.ai/badge/tongateway/agent)](https://smithery.ai/servers/tongateway/agent)
+
 MCP server for [Agent Gateway](https://tongateway.ai) — gives AI agents full access to the TON blockchain via Model Context Protocol.
 
-**14 tools:** wallet info, jettons, NFTs, transactions, transfers, .ton DNS, prices, agent wallets, and more.
+**16 tools:** wallet info, jettons, NFTs, transactions, transfers, .ton DNS, prices, DEX orders, agent wallets, and more.
 
 ## Quick Start
 

package/dist/index.js

@@ -1,7 +1,9 @@
 #!/usr/bin/env node
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { z } from 'zod';
+import { createServer } from 'node:http';
 import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
@@ -67,9 +69,9 @@ const server = new McpServer({
     name: 'agent-gateway',
     version: '0.1.0',
 });
-server.tool('request_auth', 'Authenticate with TON blockchain. Call this FIRST if you get "No token configured" errors. Generates a one-time link — ask the user to open it and connect their wallet. Then call get_auth_token to complete. Token persists across restarts.', {
+server.tool('auth.request', 'Authenticate with TON blockchain. Call this FIRST if you get "No token configured" errors. Generates a one-time link — ask the user to open it and connect their wallet. Then call auth.get_token to complete. Token persists across restarts.', {
     label: z.string().optional().describe('Label for this agent session (e.g. "claude-agent")'),
-}, async ({ label }) => {
+}, { title: 'Request Authentication', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async ({ label }) => {
     try {
         const result = await fetch(`${API_URL}/v1/auth/request`, {
             method: 'POST',
@@ -92,7 +94,7 @@ server.tool('request_auth', 'Authenticate with TON blockchain. Call this FIRST i
                         `Auth ID: ${data.authId}`,
                         `Expires: ${new Date(data.expiresAt).toISOString()}`,
                         ``,
-                        `After the user connects their wallet, call get_auth_token with this authId to get the token.`,
+                        `After the user connects their wallet, call auth.get_token with this authId to get the token.`,
                     ].join('\n'),
                 },
             ],
@@ -105,9 +107,9 @@ server.tool('request_auth', 'Authenticate with TON blockchain. Call this FIRST i
         };
     }
 });
-server.tool('get_auth_token', 'Complete authentication after the user opened the link from request_auth. Pass the authId you received. Once successful, all other tools become available. You only need to authenticate once — the token is saved automatically.', {
-    authId: z.string().describe('The authId returned by request_auth'),
-}, async ({ authId }) => {
+server.tool('auth.get_token', 'Complete authentication after the user opened the link from auth.request. Pass the authId you received. Once successful, all other tools become available. You only need to authenticate once — the token is saved automatically.', {
+    authId: z.string().describe('The authId returned by auth.request'),
+}, { title: 'Get Auth Token', readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async ({ authId }) => {
     try {
         // Retry up to 3 times with 2s delay (KV eventual consistency)
         let data = null;
@@ -132,7 +134,7 @@ server.tool('get_auth_token', 'Complete authentication after the user opened the
                             `Authentication still pending.`,
                             `The user has not connected their wallet yet.`,
                             ``,
-                            `Wait a moment and call get_auth_token again.`,
+                            `Wait a moment and call auth.get_token again.`,
                         ].join('\n'),
                     },
                 ],
@@ -150,7 +152,7 @@ server.tool('get_auth_token', 'Complete authentication after the user opened the
                         `Token received and configured.`,
                         `Wallet: ${data.address}`,
                         ``,
-                        `You can now use request_transfer, get_request_status, and list_pending_requests.`,
+                        `You can now use transfer.request, transfer.status, and transfer.pending.`,
                     ].join('\n'),
                 },
             ],
@@ -163,15 +165,15 @@ server.tool('get_auth_token', 'Complete authentication after the user opened the
         };
     }
 });
-server.tool('request_transfer', 'Request a TON transfer. The user must approve it in their wallet app. Amount is in nanoTON (1 TON = 1000000000). Supports optional payload (BOC) and stateInit (for contract deployment). The transfer is queued — use get_request_status to check if approved.', {
+server.tool('transfer.request', 'Request a TON transfer. The user must approve it in their wallet app. Amount is in nanoTON (1 TON = 1000000000). Supports optional payload (BOC) and stateInit (for contract deployment). The transfer is queued — use transfer.status to check if approved.', {
     to: z.string().describe('Destination TON address'),
     amountNano: z.string().describe('Amount in nanoTON (1 TON = 1000000000)'),
     payload: z.string().optional().describe('Optional BOC-encoded payload for the transaction'),
     stateInit: z.string().optional().describe('Optional stateInit BOC for deploying new contracts'),
-}, async ({ to, amountNano, payload, stateInit }) => {
+}, { title: 'Request Transfer', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async ({ to, amountNano, payload, stateInit }) => {
     if (!TOKEN) {
         return {
-            content: [{ type: 'text', text: 'No token configured. Use request_auth first to authenticate.' }],
+            content: [{ type: 'text', text: 'No token configured. Use auth.request first to authenticate.' }],
             isError: true,
         };
     }
@@ -210,12 +212,12 @@ server.tool('request_transfer', 'Request a TON transfer. The user must approve i
         };
     }
 });
-server.tool('get_request_status', 'Check the status of a transfer request. Statuses: pending (waiting for approval), confirmed (signed and broadcast), rejected (user declined), expired (5 min timeout). Also shows broadcast result if available.', {
-    id: z.string().describe('The request ID returned by request_transfer'),
-}, async ({ id }) => {
+server.tool('transfer.status', 'Check the status of a transfer request. Statuses: pending (waiting for approval), confirmed (signed and broadcast), rejected (user declined), expired (5 min timeout). Also shows broadcast result if available.', {
+    id: z.string().describe('The request ID returned by transfer.request'),
+}, { title: 'Transfer Status', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async ({ id }) => {
     if (!TOKEN) {
         return {
-            content: [{ type: 'text', text: 'No token configured. Use request_auth first to authenticate.' }],
+            content: [{ type: 'text', text: 'No token configured. Use auth.request first to authenticate.' }],
             isError: true,
         };
     }
@@ -249,10 +251,10 @@ server.tool('get_request_status', 'Check the status of a transfer request. Statu
         };
     }
 });
-server.tool('list_pending_requests', 'List all transfer requests waiting for wallet owner approval. Use to check if there are unfinished transfers.', {}, async () => {
+server.tool('transfer.pending', 'List all transfer requests waiting for wallet owner approval. Use to check if there are unfinished transfers.', {}, { title: 'Pending Transfers', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => {
     if (!TOKEN) {
         return {
-            content: [{ type: 'text', text: 'No token configured. Use request_auth first to authenticate.' }],
+            content: [{ type: 'text', text: 'No token configured. Use auth.request first to authenticate.' }],
             isError: true,
         };
     }
@@ -281,9 +283,9 @@ server.tool('list_pending_requests', 'List all transfer requests waiting for wal
         };
     }
 });
-server.tool('get_wallet_info', 'Get the connected wallet address, TON balance (in nanoTON and TON), and account status. Use this to check how much TON the user has before sending transfers.', {}, async () => {
+server.tool('wallet.info', 'Get the connected wallet address, TON balance (in nanoTON and TON), and account status. Use this to check how much TON the user has before sending transfers.', {}, { title: 'Wallet Info', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         const result = await apiCall('/v1/wallet/balance');
@@ -304,9 +306,9 @@ server.tool('get_wallet_info', 'Get the connected wallet address, TON balance (i
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('get_jetton_balances', 'List all tokens (jettons) in the wallet — USDT, NOT, DOGS, and others. Shows symbol, name, balance, and decimals for each. Use this when the user asks about their tokens or wants to know what they hold.', {}, async () => {
+server.tool('wallet.jettons', 'List all tokens (jettons) in the wallet — USDT, NOT, DOGS, and others. Shows symbol, name, balance, and decimals for each. Use this when the user asks about their tokens or wants to know what they hold.', {}, { title: 'Jetton Balances', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         const result = await apiCall('/v1/wallet/jettons');
@@ -329,11 +331,11 @@ server.tool('get_jetton_balances', 'List all tokens (jettons) in the wallet —
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('get_transactions', 'Get recent transaction history. Shows timestamps, action types, and whether transactions were flagged as scam. Use when the user asks "what happened" or wants to review recent activity.', {
+server.tool('wallet.transactions', 'Get recent transaction history. Shows timestamps, action types, and whether transactions were flagged as scam. Use when the user asks "what happened" or wants to review recent activity.', {
     limit: z.number().optional().describe('Number of transactions to return (default 10)'),
-}, async ({ limit }) => {
+}, { title: 'Transaction History', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async ({ limit }) => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         const result = await apiCall(`/v1/wallet/transactions?limit=${limit ?? 10}`);
@@ -354,9 +356,9 @@ server.tool('get_transactions', 'Get recent transaction history. Shows timestamp
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('get_nft_items', 'List all NFTs owned by the wallet — name, collection, and address for each. Use when the user asks about their NFTs or collectibles.', {}, async () => {
+server.tool('wallet.nfts', 'List all NFTs owned by the wallet — name, collection, and address for each. Use when the user asks about their NFTs or collectibles.', {}, { title: 'NFT Items', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         const result = await apiCall('/v1/wallet/nfts');
@@ -373,9 +375,9 @@ server.tool('get_nft_items', 'List all NFTs owned by the wallet — name, collec
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('resolve_name', 'Resolve a .ton domain name (like "alice.ton") to a raw wallet address. ALWAYS use this before request_transfer when the user gives a .ton name instead of a raw address.', {
+server.tool('lookup.resolve_name', 'Resolve a .ton domain name (like "alice.ton") to a raw wallet address. ALWAYS use this before transfer.request when the user gives a .ton name instead of a raw address.', {
     domain: z.string().describe('The .ton domain name to resolve (e.g. "alice.ton")'),
-}, async ({ domain }) => {
+}, { title: 'Resolve .ton Name', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async ({ domain }) => {
     try {
         const result = await fetch(`${API_URL}/v1/dns/${encodeURIComponent(domain)}/resolve`);
         const data = await result.json();
@@ -392,9 +394,9 @@ server.tool('resolve_name', 'Resolve a .ton domain name (like "alice.ton") to a
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('get_ton_price', 'Get the current TON price in USD, EUR, or other currencies. Use when the user asks "how much is my TON worth" or before transfers to show USD equivalents.', {
+server.tool('lookup.price', 'Get the current TON price in USD, EUR, or other currencies. Use when the user asks "how much is my TON worth" or before transfers to show USD equivalents.', {
     currencies: z.string().optional().describe('Comma-separated currencies (default "USD")'),
-}, async ({ currencies }) => {
+}, { title: 'TON Price', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async ({ currencies }) => {
     try {
         const curr = currencies || 'USD';
         const result = await fetch(`${API_URL}/v1/market/price?tokens=TON&currencies=${curr}`);
@@ -411,14 +413,14 @@ server.tool('get_ton_price', 'Get the current TON price in USD, EUR, or other cu
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('create_dex_order', 'Place a limit order on the open4dev DEX order book. Provide the token pair, amount in smallest units, and price in human-readable format (e.g. price=20 means "1 fromToken = 20 toToken"). The API handles all decimal conversions and slippage automatically. The order requires wallet approval.', {
+server.tool('dex.create_order', 'Place a limit order on the open4dev DEX order book. Provide the token pair, amount in smallest units, and price in human-readable format (e.g. price=20 means "1 fromToken = 20 toToken"). The API handles all decimal conversions and slippage automatically. The order requires wallet approval.', {
     fromToken: z.string().describe('Token to sell, e.g. "NOT", "TON", "USDT"'),
     toToken: z.string().describe('Token to buy, e.g. "TON", "NOT", "AGNT"'),
     amount: z.string().describe('Amount to sell in smallest unit. TON/NOT/DOGS/BUILD/AGNT use 9 decimals (1 TON = 10^9). USDT/XAUT0 use 6 decimals (1 USDT = 10^6).'),
     price: z.number().describe('Human-readable price: how many toToken per 1 fromToken. E.g. price=20 means "1 USDT = 20 AGNT". price=0.05 means "1 AGNT = 0.05 USDT".'),
-}, async ({ fromToken, toToken, amount, price }) => {
+}, { title: 'Create DEX Order', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async ({ fromToken, toToken, amount, price }) => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         const result = await apiCall('/v1/dex/order', {
@@ -446,7 +448,7 @@ server.tool('create_dex_order', 'Place a limit order on the open4dev DEX order b
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('list_dex_pairs', 'List available trading pairs on the DEX. Shows which token swaps are configured and available.', {}, async () => {
+server.tool('dex.pairs', 'List available trading pairs on the DEX. Shows which token swaps are configured and available.', {}, { title: 'DEX Pairs', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => {
     try {
         const result = await fetch(`${API_URL}/v1/dex/pairs`);
         const data = await result.json();
@@ -462,9 +464,9 @@ server.tool('list_dex_pairs', 'List available trading pairs on the DEX. Shows wh
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('deploy_agent_wallet', 'Deploy an Agent Wallet smart contract — a dedicated sub-wallet for autonomous operations. WARNING: The agent can spend funds from this wallet WITHOUT user approval. Only deploy if the user explicitly wants autonomous transfers. After deployment, top up the wallet with funds.', {}, async () => {
+server.tool('agent_wallet.deploy', 'Deploy an Agent Wallet smart contract — a dedicated sub-wallet for autonomous operations. WARNING: The agent can spend funds from this wallet WITHOUT user approval. Only deploy if the user explicitly wants autonomous transfers. After deployment, top up the wallet with funds.', {}, { title: 'Deploy Agent Wallet', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async () => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         // Get owner's public key
@@ -545,13 +547,13 @@ server.tool('deploy_agent_wallet', 'Deploy an Agent Wallet smart contract — a
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('execute_agent_wallet_transfer', 'Send TON directly from an Agent Wallet — NO approval needed. The agent signs and broadcasts immediately. Only works with deployed agent wallets. Use for automated/autonomous transfers where speed matters and the user has opted in.', {
+server.tool('agent_wallet.transfer', 'Send TON directly from an Agent Wallet — NO approval needed. The agent signs and broadcasts immediately. Only works with deployed agent wallets. Use for automated/autonomous transfers where speed matters and the user has opted in.', {
     walletAddress: z.string().describe('The agent wallet contract address'),
     to: z.string().describe('Destination TON address'),
     amountNano: z.string().describe('Amount in nanoTON'),
-}, async ({ walletAddress, to, amountNano }) => {
+}, { title: 'Agent Wallet Transfer', readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true }, async ({ walletAddress, to, amountNano }) => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         const { Cell, beginCell, Address, SendMode, external, storeMessage } = await import('@ton/core');
@@ -642,11 +644,11 @@ server.tool('execute_agent_wallet_transfer', 'Send TON directly from an Agent Wa
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-server.tool('get_agent_wallet_info', 'Get info about Agent Wallets — balance, seqno, agent key status. Pass a wallet address for details, or omit to list all agent wallets.', {
+server.tool('agent_wallet.info', 'Get info about Agent Wallets — balance, seqno, agent key status. Pass a wallet address for details, or omit to list all agent wallets.', {
     walletAddress: z.string().optional().describe('Agent wallet address. If omitted, lists all your agent wallets.'),
-}, async ({ walletAddress }) => {
+}, { title: 'Agent Wallet Info', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async ({ walletAddress }) => {
     if (!TOKEN) {
-        return { content: [{ type: 'text', text: 'No token configured. Use request_auth first.' }], isError: true };
+        return { content: [{ type: 'text', text: 'No token configured. Use auth.request first.' }], isError: true };
     }
     try {
         if (!walletAddress) {
@@ -654,7 +656,7 @@ server.tool('get_agent_wallet_info', 'Get info about Agent Wallets — balance,
             const result = await apiCall('/v1/agent-wallet/list');
             const wallets = result.wallets || [];
             if (!wallets.length) {
-                return { content: [{ type: 'text', text: 'No agent wallets found. Use deploy_agent_wallet to create one.' }] };
+                return { content: [{ type: 'text', text: 'No agent wallets found. Use agent_wallet.deploy to create one.' }] };
             }
             const lines = wallets.map((w) => `- ${w.address} (created ${new Date(w.createdAt).toISOString()})`);
             return {
@@ -682,5 +684,42 @@ server.tool('get_agent_wallet_info', 'Get info about Agent Wallets — balance,
         return { content: [{ type: 'text', text: `Error: ${e.message}` }], isError: true };
     }
 });
-const transport = new StdioServerTransport();
-await server.connect(transport);
+const httpPort = process.env.MCP_HTTP_PORT || (process.argv.includes('--http') ? '3100' : '');
+if (httpPort) {
+    // HTTP transport for Smithery and remote clients
+    const httpServer = createServer(async (req, res) => {
+        // CORS
+        res.setHeader('Access-Control-Allow-Origin', '*');
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type');
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        // Health check
+        if (req.method === 'GET' && req.url === '/health') {
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ ok: true, version: '0.14.0' }));
+            return;
+        }
+        // MCP endpoint
+        if (req.url === '/mcp' || req.url === '/') {
+            const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+            res.on('close', () => { transport.close(); });
+            await server.connect(transport);
+            await transport.handleRequest(req, res);
+            return;
+        }
+        res.writeHead(404);
+        res.end('Not found');
+    });
+    httpServer.listen(Number(httpPort), () => {
+        console.error(`MCP HTTP server listening on port ${httpPort}`);
+    });
+}
+else {
+    // Default: stdio transport for local MCP clients
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}

package/dist/worker.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Cloudflare Worker — MCP HTTP transport for Smithery and remote clients.
+ * Mirrors all 16 tools from the stdio version with full descriptions and annotations.
+ */
+declare const _default: {
+    fetch(request: Request): Promise<Response>;
+};
+export default _default;

package/dist/worker.js

@@ -0,0 +1,138 @@
+/**
+ * Cloudflare Worker — MCP HTTP transport for Smithery and remote clients.
+ * Mirrors all 16 tools from the stdio version with full descriptions and annotations.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { z } from 'zod';
+const VERSION = '0.14.0';
+function createMcpServer() {
+    const server = new McpServer({
+        name: 'tongateway',
+        version: VERSION,
+    });
+    // --- Auth ---
+    server.tool('auth.request', 'Authenticate with TON blockchain. Generates a one-time link for the user to connect their wallet. After the user opens the link, call auth.get_token to complete authentication.', { label: z.string().optional().describe('Label for this agent session, e.g. "claude-agent"') }, { title: 'Request Authentication', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport (npx @tongateway/mcp) for full tool execution.' }] }));
+    server.tool('auth.get_token', 'Complete authentication after the user opened the link from auth.request. Returns the token which enables all other tools.', { authId: z.string().describe('The authId returned by auth.request') }, { title: 'Get Auth Token', readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    // --- Wallet ---
+    server.tool('wallet.info', 'Get the connected wallet address, TON balance in nanoTON and human-readable format, and account status (active/uninitialized).', {}, { title: 'Wallet Info', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('wallet.jettons', 'List all jetton (token) balances in the wallet — USDT, NOT, DOGS, BUILD, and others. Returns symbol, name, balance, and decimals for each token.', {}, { title: 'Jetton Balances', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('wallet.transactions', 'Get recent transaction history for the connected wallet. Shows timestamps, action types, and scam flags.', { limit: z.number().optional().describe('Number of transactions to return (default 10, max 100)') }, { title: 'Transaction History', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('wallet.nfts', 'List all NFTs owned by the connected wallet — name, collection name, and contract address for each.', {}, { title: 'NFT Items', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    // --- Transfers ---
+    server.tool('transfer.request', 'Request a TON transfer that the wallet owner must approve. Amount is in nanoTON (1 TON = 1000000000). Supports optional payload BOC and stateInit for contract deployment. Use transfer.status to check approval.', {
+        to: z.string().describe('Destination TON address (raw format 0:abc... or friendly EQ...)'),
+        amountNano: z.string().describe('Amount in nanoTON. 1 TON = 1000000000 nanoTON'),
+        payload: z.string().optional().describe('Optional BOC-encoded payload for the transaction'),
+        stateInit: z.string().optional().describe('Optional stateInit BOC for deploying new smart contracts'),
+    }, { title: 'Request Transfer', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('transfer.status', 'Check the status of a transfer request. Returns: pending (waiting for approval), confirmed (signed and broadcast), rejected (user declined), or expired (5 min timeout). Also shows broadcast result if available.', { id: z.string().describe('The request ID returned by transfer.request') }, { title: 'Transfer Status', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('transfer.pending', 'List all transfer requests currently waiting for wallet owner approval.', {}, { title: 'Pending Transfers', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    // --- Lookup ---
+    server.tool('lookup.resolve_name', 'Resolve a .ton domain name (e.g. "alice.ton") to a raw wallet address. Always use this before transfer.request when the user provides a .ton name.', { domain: z.string().describe('The .ton domain name to resolve, e.g. "alice.ton" or "foundation.ton"') }, { title: 'Resolve .ton Name', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('lookup.price', 'Get the current price of TON in USD, EUR, or other fiat currencies. Use to show users the value of their holdings.', { currencies: z.string().optional().describe('Comma-separated currency codes, e.g. "USD,EUR". Default: "USD"') }, { title: 'TON Price', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    // --- DEX ---
+    server.tool('dex.create_order', 'Place a limit order on the open4dev DEX order book. Provide token pair, amount in smallest units, and human-readable price. The API handles decimal conversion, slippage (4% including fees), and gas automatically.', {
+        fromToken: z.string().describe('Token to sell: TON, NOT, USDT, DOGS, BUILD, AGNT, CBBTC, PX, XAUT0'),
+        toToken: z.string().describe('Token to buy: TON, NOT, USDT, DOGS, BUILD, AGNT, CBBTC, PX, XAUT0'),
+        amount: z.string().describe('Amount to sell in smallest unit. TON/NOT/DOGS/BUILD/AGNT use 9 decimals. USDT/XAUT0 use 6 decimals.'),
+        price: z.number().describe('Human-readable price: how many toToken per 1 fromToken. E.g. price=20 means "1 USDT = 20 AGNT".'),
+    }, { title: 'Create DEX Order', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('dex.pairs', 'List all available trading pairs and tokens on the open4dev DEX. Returns supported tokens: TON, NOT, USDT, DOGS, BUILD, AGNT, CBBTC, PX, XAUT0.', {}, { title: 'DEX Pairs', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    // --- Agent Wallet ---
+    server.tool('agent_wallet.deploy', 'Deploy an Agent Wallet smart contract — a dedicated sub-wallet for autonomous transfers without approval. WARNING: The agent can spend all funds in this wallet without user confirmation. Only deploy when the user explicitly requests autonomous mode.', {}, { title: 'Deploy Agent Wallet', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('agent_wallet.transfer', 'Send TON directly from an Agent Wallet — NO approval needed. Signs and broadcasts the transaction immediately. Only works with deployed agent wallets where the agent key is authorized.', {
+        walletAddress: z.string().describe('The agent wallet contract address'),
+        to: z.string().describe('Destination TON address'),
+        amountNano: z.string().describe('Amount in nanoTON (1 TON = 1000000000)'),
+    }, { title: 'Agent Wallet Transfer', readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    server.tool('agent_wallet.info', 'Get info about Agent Wallets — balance, seqno, and agent key status. Pass a wallet address for details, or omit to list all your agent wallets.', { walletAddress: z.string().optional().describe('Agent wallet address. Omit to list all wallets.') }, { title: 'Agent Wallet Info', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true }, async () => ({ content: [{ type: 'text', text: 'Use stdio transport for full tool execution.' }] }));
+    // --- Prompts ---
+    server.prompt('quickstart', 'How to get started with Agent Gateway on TON blockchain', async () => ({
+        messages: [{
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: 'Install: npx -y @tongateway/mcp\n\nClaude Code: claude mcp add-json tongateway \'{"command":"npx","args":["-y","@tongateway/mcp"],"env":{"AGENT_GATEWAY_API_URL":"https://api.tongateway.ai"}}\' --scope user\n\nThen say: "Send 1 TON to alice.ton"',
+                },
+            }],
+    }));
+    server.prompt('token-reference', 'Amount conversion reference for TON blockchain', async () => ({
+        messages: [{
+                role: 'user',
+                content: {
+                    type: 'text',
+                    text: 'TON amounts are in nanoTON (1 TON = 10^9 nanoTON):\n0.1 TON = 100000000\n0.5 TON = 500000000\n1 TON = 1000000000\n10 TON = 10000000000\n\nUSDT/XAUT0 use 6 decimals. All other jettons use 9 decimals.',
+                },
+            }],
+    }));
+    // --- Resources ---
+    server.resource('docs', 'https://tongateway.ai/docs', async (uri) => ({
+        contents: [{
+                uri: uri.href,
+                mimeType: 'text/plain',
+                text: 'Agent Gateway documentation: https://tongateway.ai/docs\nAPI Swagger: https://api.tongateway.ai/docs\nSkill file: https://tongateway.ai/agent-gateway.md',
+            }],
+    }));
+    server.resource('skill', 'https://tongateway.ai/agent-gateway.md', async (uri) => ({
+        contents: [{
+                uri: uri.href,
+                mimeType: 'text/plain',
+                text: 'Skill file with all 16 tool descriptions, usage examples, and amount conversion: https://tongateway.ai/agent-gateway.md',
+            }],
+    }));
+    return server;
+}
+const CORS_HEADERS = {
+    'Access-Control-Allow-Origin': '*',
+    'Access-Control-Allow-Methods': 'GET, POST, DELETE, OPTIONS',
+    'Access-Control-Allow-Headers': 'Content-Type, Accept, Authorization, Mcp-Session-Id',
+    'Access-Control-Expose-Headers': 'Mcp-Session-Id',
+};
+export default {
+    async fetch(request) {
+        const url = new URL(request.url);
+        if (request.method === 'OPTIONS') {
+            return new Response(null, { status: 204, headers: CORS_HEADERS });
+        }
+        if (request.method === 'GET' && (url.pathname === '/' || url.pathname === '/health')) {
+            return new Response(JSON.stringify({
+                ok: true,
+                name: '@tongateway/mcp',
+                version: VERSION,
+                description: 'TON blockchain gateway for AI agents — 16 tools for wallet info, transfers, jettons, NFTs, DNS, prices, DEX orders, and agent wallets.',
+                tools: 16,
+                prompts: 2,
+                resources: 2,
+                transport: 'streamable-http',
+                endpoint: '/mcp',
+                install: 'npx -y @tongateway/mcp',
+                homepage: 'https://tongateway.ai',
+                docs: 'https://tongateway.ai/docs',
+                repository: 'https://github.com/tongateway/mcp',
+            }), { headers: { 'Content-Type': 'application/json', ...CORS_HEADERS } });
+        }
+        if (url.pathname === '/mcp') {
+            try {
+                const server = createMcpServer();
+                const transport = new WebStandardStreamableHTTPServerTransport({
+                    sessionIdGenerator: undefined,
+                });
+                await server.connect(transport);
+                const response = await transport.handleRequest(request);
+                const newHeaders = new Headers(response.headers);
+                for (const [k, v] of Object.entries(CORS_HEADERS)) {
+                    newHeaders.set(k, v);
+                }
+                return new Response(response.body, { status: response.status, headers: newHeaders });
+            }
+            catch (e) {
+                return new Response(JSON.stringify({ error: e.message }), {
+                    status: 500,
+                    headers: { 'Content-Type': 'application/json', ...CORS_HEADERS },
+                });
+            }
+        }
+        return new Response('Not found', { status: 404, headers: CORS_HEADERS });
+    },
+};

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@tongateway/mcp",
-  "version": "0.12.0",
-  "description": "MCP server for Agent Gateway — lets AI agents request TON blockchain transfers",
+  "version": "0.14.0",
+  "description": "TON blockchain gateway for AI agents — 16 MCP tools: wallet info, transfers, jettons, NFTs, DNS, prices, DEX orders, agent wallets",
+  "homepage": "https://tongateway.ai",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -33,8 +34,10 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
+    "@cloudflare/workers-types": "^4.20260317.1",
     "@types/node": "^22.17.2",
     "tsx": "^4.20.5",
-    "typescript": "^5.9.2"
+    "typescript": "^5.9.2",
+    "wrangler": "^4.77.0"
   }
 }