agentwallet-mcp 1.10.7 → 1.10.9

package/README.md

@@ -76,7 +76,7 @@ Local signing uses [viem](https://viem.sh) for EVM and `@solana/web3.js` for Sol
 - **31 MCP tools**: create wallets, send transactions, approve tokens, wrap ETH, transfer SPL tokens, pay and accept x402 payments, verify custody mode, and more
 - **EVM + Solana**: Ethereum, Base, Polygon, BSC, Arbitrum, Optimism, Avalanche, Zora, PulseChain, Solana, and any other EVM-compatible chain
 - **SOL + SPL tokens**: native SOL transfers and SPL token transfers (USDC, USDT, etc.) with automatic account creation
-- **Built-in guards**: daily spending limits, gas price protection, emergency pause, rate limiting, replay protection, and on-chain verification, all active by default
+- **Built-in guards**: in hosted mode, daily spending limits, gas price protection, emergency pause and rate limiting are enforced server-side by default. In local mode your protection is the per-transaction caps you set (`AGENTWALLET_MAX_TX_NATIVE`, `AGENTWALLET_MAX_TX_TOKEN`, `AGENTWALLET_MAX_TX_SOL`, `AGENTWALLET_MAX_AUTOPAY`). x402 replay protection and on-chain verification apply either way
 - **x402 payments**: pay for x402-enabled APIs automatically, or accept x402 payments on your own endpoints (EVM and Solana)
 - **Self-custody option**: run local mode and the key never leaves your machine. In hosted mode, keys are encrypted at rest, decrypted only during signing, and zeroed from memory immediately after. Either way you can export and walk away.
 - **Permissionless**: No KYC. No KYT. No identity verification. No approval process. No compliance gatekeeping. Sign up, get an API key, and start transacting immediately.
@@ -274,7 +274,7 @@ On-chain verification ensures every payment is real. Replay protection prevents
 | KYC Required | Yes | **No** |
 | KYT / Transaction Monitoring | Yes | **No** |
 | Can Block Your Wallet | Yes | **No** |
-| Built-in Guards | Yes (requires setup) | **Yes (active by default)** |
+| Built-in Guards | Yes (requires setup) | **Yes (hosted: active by default; local: env caps you set)** |
 | Free Operations / Month | 5,000 | **6,000** |
 | Cost Per Operation | $0.005 | **$0.00345** |
 | x402 Verification Cost | $0.001 | **$0.0005** |
@@ -295,17 +295,30 @@ You can also pre-purchase x402 verification credits with USDC using the `buy_ver
 
 ## Built-in Guards
 
-All guards are active by default, no configuration required.
+Which guards apply depends on who holds the key.
+
+**Hosted mode** (the server holds the key): every guard below is active by default, no configuration required.
 
 - **Encrypted at rest**: private keys encrypted before storage and never leave the server
 - **Memory zeroing**: keys wiped from memory immediately after every signing operation
-- **Daily spending limits**: set a per-wallet daily cap in USD, enforced automatically on every transaction
+- **Daily spending limits**: set a per-wallet daily cap in USD, enforced by the server on every transaction
 - **Gas price protection**: transactions blocked when gas prices spike above safe thresholds
 - **Emergency pause**: instantly freeze any wallet or all wallets with one click
 - **Rate limiting**: API requests capped per minute to prevent abuse and brute force attacks
+
+**Local mode** (you hold the key): there is no server in the signing path, so the server-side limits and pause above cannot see or stop a locally signed transaction, and nobody (including us) can freeze a local wallet. Your protection is the per-transaction caps enforced inside your own process before anything is signed. Set them before you fund the wallet; an unset cap means no limit.
+
+- `AGENTWALLET_MAX_TX_NATIVE`: ceiling per transaction in native units (ETH, MATIC, and so on)
+- `AGENTWALLET_MAX_TX_TOKEN`: ceiling per ERC-20 transfer, in human units of the token
+- `AGENTWALLET_MAX_TX_SOL`: ceiling per SOL or SPL transfer
+- `AGENTWALLET_MAX_AUTOPAY`: ceiling per x402 auto-payment (default `1`)
+
+**Either mode**, for x402 paywalls you run through the hosted API:
+
 - **Replay protection**: every x402 payment verified on-chain with unique transaction tracking
 - **On-chain verification**: x402 payments verified directly on the blockchain with finalized commitment
-- Bug bounty program: $50,$500 for responsible disclosure ([details](https://hifriendbot.com/wallet))
+
+Bug bounty program: $50 to $500 for responsible disclosure ([details](https://hifriendbot.com/wallet)).
 
 ## Links
 

package/build/index.js

@@ -13,7 +13,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
 import { assertPublicUrl, safeFetch } from './ssrf-guard.js';
-import { deriveX402Payment, isWithinCap, lookupTrustedDecimals, assertDeclaredDecimals, } from './x402-payment.js';
+import { deriveX402Payment, isWithinCap, lookupTrustedDecimals, assertDeclaredDecimals, nativeDecimals, SOLANA_CHAIN_IDS, } from './x402-payment.js';
 import { isLocalMode, getLocalAddress, localWalletRecord, localSend, localNativeBalance, localTokenBalance, localSignMessage, resolveRpcUrl, } from './local-wallet.js';
 import { isSolanaLocalMode, getSolanaAddress, solanaWalletRecord, localSolBalance, localSplBalance, localSolTransfer, localSplTransfer, resolveSolanaRpc, } from './local-solana.js';
 /** True when either chain family is running non-custodially. */
@@ -258,7 +258,7 @@ async function handleX402Payment(x402Data, originalPath, originalMethod, origina
     const assetForDecimals = accept.asset || accept.extra?.token || '';
     const trustedDecimals = assetForDecimals
         ? await resolveTrustedDecimals(chainId, assetForDecimals)
-        : 18; // native asset: value is already in wei-equivalent base units
+        : nativeDecimals(chainId); // native asset: 18 on EVM (wei), 9 on Solana (lamports)
     const { tokenAddress, rawAmount, decimals } = deriveX402Payment(accept, maxAutopay, trustedDecimals);
     // Send payment using our wallet (with X-AGW-SKIP-X402 to prevent recursion)
     let txHash;
@@ -310,7 +310,6 @@ function jsonResponse(data) {
     return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
 }
 // ─── Solana Helpers ───────────────────────────────────────────────
-const SOLANA_CHAIN_IDS = new Set([900, 901, 902]);
 function isSolanaChain(chainId) {
     return SOLANA_CHAIN_IDS.has(chainId);
 }
@@ -424,7 +423,7 @@ function resolveChainId(network) {
 const AddressSchema = z.string().regex(/^(0x[a-fA-F0-9]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})$/, 'Must be a 0x-prefixed 40-hex EVM address or a base58 Solana address');
 const server = new McpServer({
     name: 'agentwallet',
-    version: '1.10.7',
+    version: '1.10.9',
 }, {
     instructions: `AgentWallet gives AI agents their own blockchain wallets. Private keys are encrypted server-side and never exposed — agents sign and broadcast transactions without ever touching raw keys.
 
@@ -1032,7 +1031,7 @@ server.tool('pay_x402', 'Handle an x402 payment flow. Fetches a URL, and if the
     const assetForDecimals = option.asset || option.extra?.token || '';
     const trustedDecimals = assetForDecimals
         ? await resolveTrustedDecimals(chainId, assetForDecimals)
-        : 18;
+        : nativeDecimals(chainId); // 18 on EVM (wei), 9 on Solana (lamports)
     assertDeclaredDecimals(option.requiredDecimals, trustedDecimals);
     // Human-readable amount, computed with trusted decimals so what the agent
     // is told matches what will actually leave the wallet.

package/build/x402-payment.d.ts

@@ -81,4 +81,15 @@ export declare function deriveX402Payment(accept: X402AcceptLike, maxAutopayHuma
  * @param trustedDecimals   token decimals from a trusted source, NOT the 402 body
  * @param capHuman          cap in human-readable units of the asset (e.g. "1")
  */
+/**
+ * Chain IDs this server treats as Solana (mainnet, devnet, testnet).
+ */
+export declare const SOLANA_CHAIN_IDS: ReadonlySet<number>;
+/**
+ * Decimals of a chain's NATIVE asset. EVM natives are 18 (wei); native SOL is
+ * 9 (lamports). The x402 cap and the human-readable amount must use this when
+ * a requirement names no token, otherwise a native-SOL requirement is measured
+ * against a cap inflated by 10**9 (AW-002, reported 2026-09-22).
+ */
+export declare function nativeDecimals(chainId: number): number;
 export declare function isWithinCap(rawAmountRequired: string, trustedDecimals: number, capHuman: string): boolean;

package/build/x402-payment.js

@@ -146,6 +146,19 @@ export function deriveX402Payment(accept, maxAutopayHuman, trustedDecimals) {
  * @param trustedDecimals   token decimals from a trusted source, NOT the 402 body
  * @param capHuman          cap in human-readable units of the asset (e.g. "1")
  */
+/**
+ * Chain IDs this server treats as Solana (mainnet, devnet, testnet).
+ */
+export const SOLANA_CHAIN_IDS = new Set([900, 901, 902]);
+/**
+ * Decimals of a chain's NATIVE asset. EVM natives are 18 (wei); native SOL is
+ * 9 (lamports). The x402 cap and the human-readable amount must use this when
+ * a requirement names no token, otherwise a native-SOL requirement is measured
+ * against a cap inflated by 10**9 (AW-002, reported 2026-09-22).
+ */
+export function nativeDecimals(chainId) {
+    return SOLANA_CHAIN_IDS.has(chainId) ? 9 : 18;
+}
 export function isWithinCap(rawAmountRequired, trustedDecimals, capHuman) {
     if (!/^\d+$/.test(rawAmountRequired)) {
         throw new Error(`Invalid maxAmountRequired "${rawAmountRequired}" (expected an integer base-unit amount).`);

package/package.json

@@ -1,69 +1,69 @@
-{
-  "name": "agentwallet-mcp",
-  "mcpName": "io.github.hifriendbot/agentwallet",
-  "version": "1.10.7",
-  "description": "MCP server for AgentWallet: self-custody local signing on EVM and Solana, or hosted wallets. Sign, broadcast, pay x402 invoices, and accept x402 payments.",
-  "type": "module",
-  "main": "build/index.js",
-  "bin": {
-    "agentwallet-mcp": "build/index.js"
-  },
-  "files": [
-    "build",
-    "README.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "start": "node build/index.js",
-    "test": "node test/x402-payment.test.mjs && node test/token-cap.test.mjs && node test/spl-cap.test.mjs && node test/unknown-decimals-cap.test.mjs && node test/local-mode.test.mjs && node test/ssrf-guard.test.mjs",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [
-    "mcp",
-    "model-context-protocol",
-    "wallet",
-    "ai-agent",
-    "blockchain",
-    "evm",
-    "ethereum",
-    "base",
-    "arbitrum",
-    "optimism",
-    "polygon",
-    "avalanche",
-    "bsc",
-    "zora",
-    "pulsechain",
-    "solana",
-    "spl-token",
-    "erc20",
-    "token-transfer",
-    "transaction-signing",
-    "x402",
-    "http-402",
-    "agent-payments",
-    "agentwallet",
-    "self-custody",
-    "non-custodial",
-    "local-signing"
-  ],
-  "author": "HiFriendbot (https://hifriendbot.com)",
-  "license": "MIT",
-  "homepage": "https://hifriendbot.com/wallet/",
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.11.4",
-    "@solana/web3.js": "^1.98.4",
-    "bs58": "^6.0.0",
-    "undici": "^8.9.0",
-    "viem": "^2.55.10",
-    "zod": "^3.24.0"
-  },
-  "devDependencies": {
-    "@types/node": "^20.0.0",
-    "typescript": "^5.3.0"
-  }
-}
+{
+  "name": "agentwallet-mcp",
+  "mcpName": "io.github.hifriendbot/agentwallet",
+  "version": "1.10.9",
+  "description": "MCP server for AgentWallet: self-custody local signing on EVM and Solana, or hosted wallets. Sign, broadcast, pay x402 invoices, and accept x402 payments.",
+  "type": "module",
+  "main": "build/index.js",
+  "bin": {
+    "agentwallet-mcp": "build/index.js"
+  },
+  "files": [
+    "build",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "start": "node build/index.js",
+    "test": "node test/x402-payment.test.mjs && node test/token-cap.test.mjs && node test/spl-cap.test.mjs && node test/unknown-decimals-cap.test.mjs && node test/local-mode.test.mjs && node test/ssrf-guard.test.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "wallet",
+    "ai-agent",
+    "blockchain",
+    "evm",
+    "ethereum",
+    "base",
+    "arbitrum",
+    "optimism",
+    "polygon",
+    "avalanche",
+    "bsc",
+    "zora",
+    "pulsechain",
+    "solana",
+    "spl-token",
+    "erc20",
+    "token-transfer",
+    "transaction-signing",
+    "x402",
+    "http-402",
+    "agent-payments",
+    "agentwallet",
+    "self-custody",
+    "non-custodial",
+    "local-signing"
+  ],
+  "author": "HiFriendbot (https://hifriendbot.com)",
+  "license": "MIT",
+  "homepage": "https://hifriendbot.com/wallet/",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.11.4",
+    "@solana/web3.js": "^1.98.4",
+    "bs58": "^6.0.0",
+    "undici": "^8.9.0",
+    "viem": "^2.55.10",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.3.0"
+  }
+}