The full upstream README, mirrored here for reference. Install config, tool schemas, adoption signals, and an original overview live on the IronWallet listing page.
The IronWallet MCP server gives AI agents secure access to a non-custodial wallet. Seed phrases stay encrypted on the host and never leave this machine. Agents can retrieve balances, sign locally, transfer tokens, and swap across 10+ networks.
Seed-compatible with the IronWallet app. There is no per-transaction confirmation UI.
Requirements: Node.js 20+ (npx). Use a dedicated wallet with limited balance.
Product page: ironwallet.io/ai. Machine-readable index: llms.txt.
Opening this repository in Claude Code starts the wallet MCP via .mcp.json. See CLAUDE.md.
Cursor: ironwallet.io/ai
Claude Code:
Codex:
Grok:
Reload so MCP picks up PATH. From a local clone, use . instead of the GitHub repo.
Manually installed MCP does not auto-update with the plugin.
| Skill | When to use |
|---|---|
| ironwallet-mcp | Non-custodial wallet: balances, local signing, transfers, swaps, deposit QR. Invoke as /ironwallet-mcp |
| Rule | What it enforces |
|---|---|
| wallet-transaction-safety | Hot wallet; no extra confirmation UI; poll status on timeout, never resubmit blindly |
| seed-phrase-handling | Recovery phrases and private keys never appear in chat, files, or logs |
| swap-asset-resolution | Networks and tokens come from catalog tools, not model memory |
| Agent | Purpose |
|---|---|
| ironwallet-operator | Operate the non-custodial wallet: balances, local signing, transfers, swaps, deposit QR |
@ironwallet/mcp-server over stdio. Networks: Ethereum, BSC, Polygon, Base, Arbitrum, Optimism, Avalanche, Tron, Bitcoin, Litecoin, Dogecoin, Solana, XRP, TON.
| Tool | Purpose | Moves funds? |
|---|---|---|
get_runtime_info | Running version vs published npm package | no |
prepare_update | Stage the npm update for the next restart | no |
list_wallets | Names, addresses, and policy | no |
accept_mcp_consent | Record chat acceptance of the MCP disclaimer | no |
create_wallets | New wallets; returns a browser backup_url | no |
open_wallet_manager | Local browser UI to import / create / back up / delete | no |
set_wallet_policy | Replace per-wallet limits (readOnly, maxPerTxUsd, allow-list) | no |
get_deposit_qr | PNG QR (try chat; else local qr_url) | no |
get_balance | Native or token balance | no |
get_transaction_history | Recent txs from public explorers (paged) | no |
estimate_transfer | Fee estimate, no broadcast | no |
send_transfer | Sign locally and send | yes |
get_operation_status | Poll a transfer | no |
list_swap_networks | Networks available for swap | no |
list_swap_assets | Sell / buy catalog | no |
estimate_swap | Quote (may expire) | no |
execute_swap | Fresh quote → sign → swap | yes |
get_swap_status | Poll a swap | no |
No tool accepts or returns a seed. Import, backup, and delete only in the local browser (open_wallet_manager / backup_url); deleting asks the user to retype the wallet name.
Nothing to paste into MCP config for normal use. On first launch the server writes a relay API key, keystore wrapping secret, and device id under ~/.ironwallet-mcp/ (mode 0600). Override with IW_RELAY_API_KEY / IW_PASSPHRASE / IW_DEVICE_ID only if you must.
The user-facing backup is the recovery phrase in the wallet manager, not those files.
readOnly, maxPerTxUsd, transfer recipient allow-list — set via set_wallet_policy) is off by default and applies to both sends and swaps.Details and private disclosure: SECURITY.md.
This public tree is a release snapshot. See CONTRIBUTING.md. Please follow the Code of Conduct.