Cofferline

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs in the cloud
• Transport: Streamable HTTP
• Category: Online shops & payments
• You need to fill in: Authorization

Install

Pick the AI app you use, then copy the settings.

You need

• Runs in the cloudNothing to install; it connects over the internet

Which app do you use?

claude mcp add --transport http treasury https://mcp.cofferline.com --header 'Authorization: your-value'

{
  "mcpServers": {
    "treasury": {
      "url": "https://mcp.cofferline.com",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

{
  "servers": {
    "treasury": {
      "type": "http",
      "url": "https://mcp.cofferline.com",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your choice stays on this device in a cookie; no account needed.

Values you fill in

• Authorization secret HTTP header
  Bearer cl_key_… API key or cl_sess_… SIWE session; obtain via POST https://api.cofferline.com/v1/auth/challenge then /verify. Public tools (quotes, benchmarks, screening, tokens, feedback list, login…

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 10, 2026. The maker wrote them, not us; we show them as plain text.

• get_quotes

  Live venue quote comparison for a token conversion (CoW + ParaSwap on Base). Free, no auth.

• get_benchmarks

  Measured execution benchmarks: median savings vs arrival quote by USD size bucket, from real completed intents only. Free, no auth.

• screen_address

  OFAC SDN counterparty screening for an address. Free, no auth.

• list_tokens

  Tokens the platform accepts on an intent, per chain — what create_intent will admit. Free, no auth.

• list_feedback

  Every feature request ever submitted, public and unauthenticated. Free.

• submit_feedback

  Submit a feature request ($1 anti-spam fee, charged to the prepaid balance when funded). Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization

• start_siwe_login

  Start wallet sign-in: returns a single-use SIWE message. Sign it with the wallet outside MCP (this server cannot sign), then call complete_siwe_login. Free, no auth.

• complete_siwe_login

  Finish wallet sign-in: exchanges the signed SIWE message for a cl_sess_… session token — use it as the Authorization bearer on every authenticated tool. Free, no auth.

• get_me

  Identify the authenticated account: address, kind, scopes. Auth required.

• export_account

  Export all of this account's data in one document. Auth required.

• offboard_account

  Close this account for good: revokes every credential, scrubs personal data, retires the account. Irreversible; confirm_wallet_address must be the account's own wallet address, typed exactly. Auth required.

• put_policy

  Create or update the wallet's treasury policy (immutable versioning; PUT creates the next version). Auth required. Body must match /schemas/policy-v1.json — only version, wallet and chain_id are required; omitted fields take the platform defaults published in the manifest and are

• get_policy

  List policy versions, newest first (the first entry is active). Auth required.

• check_spend

  Pre-flight policy check: would this spend be allowed under the wallet's policy right now? Auth required.

• check_pm_order

  Pre-flight policy check for a prediction-market order: would this cost be allowed right now? Auth required.

• poll_events

  Poll typed treasury events with a monotonic cursor (intent lifecycle, budget thresholds, reconciliation, security alerts). Auth required.

• get_statement

  Deterministic monthly statement derived from the append-only ledger — same period, same bytes. Auth required.

• create_intent

  Create a conversion or gas_topup intent; the executor pipeline plans and fills it under policy. Auth required.

• get_intent

  Fetch an intent, including fills and the post-trade report once filled. Auth required.

• list_intents

  List intents, newest first. Auth required.

• cancel_intent

  Cancel a planned intent (a few-second window before execution claims it). Auth required.

• prepare_delegation

  Prepare a scoped session-key grant for a Kernel smart account: exact call allowlist, expiry, optional rate limit. Returns the ONE EIP-712 digest the account owner signs outside MCP (this server cannot sign) — then call confirm_delegation with the signature. Auth required.

• confirm_delegation

  Activate a prepared delegation by supplying the owner's signature over its enable digest. Auth required.

• renew_delegation

  Renew an active delegation: same scope, fresh expiry, no authority gap. Returns a NEW digest to sign and confirm exactly like prepare_delegation. Auth required.

• revoke_delegation

  Revoke a delegation. The reply includes calldata the owner can send on-chain for hard finality. Auth required.

• get_delegation

  Fetch one delegation. Auth required.

• list_delegations

  List delegations, newest first. Auth required.

• panic

  Emergency stop, one call: suspends the account, revokes every API key, session, delegation and venue credential, and returns all unwind calldata for the owner. Auth required.

• get_balance

  Prepaid fee balance: settled credits minus fee debits. Auth required.

• topup_balance

  Top up the prepaid balance with USDC. Auth required. Payment flow: call once without x_payment — a 402 reply lists the exact EIP-3009 requirements (amount, USDC asset, recipient, EIP-712 domain). Sign a transferWithAuthorization for them outside MCP (this server cannot sign), the

• set_auto_topup

  Configure auto-topup: when the prepaid balance falls below threshold_usd, the platform settles one of the pre-signed EIP-3009 authorizations you supply (signed outside MCP — this server cannot sign). Auth required.

• get_auto_topup

  The auto-topup rule and how many pre-signed authorizations remain. Auth required.

• remove_auto_topup

  Remove the auto-topup rule and its unused authorizations. Auth required.

• store_pm_credential

  Store a prediction-market venue credential (verified live against the venue, sealed at rest, material never returned). Polymarket, either shape: signer_private_key + maker (derives API creds), or api_key + secret + passphrase + maker + signer. Auth required.

• list_pm_credentials

  List stored venue credentials — metadata only, never material. Auth required.

• revoke_pm_credential

  Revoke a venue credential; its sealed ciphertext is destroyed. Auth required.

• get_pm_signer_rotation

  Calldata to swap the Polymarket funder Safe's owner to a new EOA — the owner executes it outside MCP (this server cannot sign). Auth required.

• create_pm_order

  Place a prediction-market limit order under policy, signed server-side with the stored credential. Polymarket: condition_id, token_id, action, price_usd (e.g. '0.55'), size_shares. Auth required.

• list_pm_orders

  The credential's resting orders straight from the venue — recover state after a disconnect. Auth required.

• cancel_pm_order

  Cancel one resting prediction-market order. Auth required.

• cancel_all_pm_orders

  Cancel every resting order for the credential, optionally within one market. Auth required.

• prepare_pm_order

  Prepare a client-signed Polymarket order: policy-checked, then returns the exact EIP-712 payload to sign outside MCP (this server cannot sign) plus a prepare_id — submit both via submit_pm_order. Auth required.

• submit_pm_order

  Submit a prepared Polymarket order with the maker's EIP-712 signature from prepare_pm_order. Auth required.

• get_pm_onboarding

  Polymarket trade-readiness for an address: live approval status plus the calldata for anything missing (executed outside MCP — this server cannot sign). Auth required.

• resolve_pm_funder

  Resolve an owner EOA to its Polymarket funder Safe candidates. Auth required.

• sync_pm_fills

  Pull the venue's fills for a credential into the wallet's ledger. Idempotent — safe to repeat. Auth required.

• wrap_pm_usdc

  Wrap the funder Safe's USDC.e into Polymarket's pUSD, platform-relayed so the user pays no gas. Omit amount_base_units to wrap the full balance. Auth required.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 10, 2026

• ! Caution

  Maker matches the repo

  The registry lists no source repo, so we cannot match the publisher (cofferline.com) to the code

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 137 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 47 tool descriptions and found no hidden instructions to the AI

Compared with others in Online shops & paymentsi

• More stars than 0% of the other 2632 servers in this category
• Published to the registry more recently than 26% of the other 2632 servers in this category
• Basic checks equal to or better than 53% of the other 2632 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker

No README found in the repo