FortFi Treasury MCP Server

Propose a Fusion+ or deBridge cross-chain swap. FortFi resolves chain-specific verified token contracts from sellSymbol/buySymbol; optional token addresses are mismatch assertions, never routing overrides. Inline quote by default, or use previewQuoteId for two-step review. Agent wallets execute on confirm_proposal. API keys on a passkey account cannot bridge: this returns OWNER_PASSKEY_REQUIRED, and the owner bridges in the FortFi app with their passkey (preview_bridge_quote still works).

Create a new wallet on a supported chain. Optional metadata tags (e.g. customer_id). Then call confirm_proposal with the returned proposalId. Agent accounts execute server-side when no cosigners are configured.

Funding carry in one call: buy the coin on spot, then short the same size on its perp, so price moves cancel out and the short earns funding while funding is positive. Both legs run through the normal policy, grant, loss cap and audit checks (the key needs propose_hyperliquid_spot_order and propose_hyperliquid_perp_open). If either leg would need co-signer approval, nothing is placed. If funding is not positive, the prices are more than 2% apart, or the account runs a strategy, nothing is placed. If the short fails after the buy, FortFi sells the spot back at once (unwound=true); only if that also fails is the result hedged=false, unwound=false, and you should sell with propose_hyperliquid_spot_order size=all. No size cap beyond your policy and loss cap: keep spare money on the account so the short is not closed out by a jump. Use dryRun=true to see sizes and cash needed first. Unwind with propose_hyperliquid_perp_close and propose_hyperliquid_spot_order side=sell.

Propose moving HyperEVM USDC into Hyperliquid perp margin (top up). Set perpDex for HIP-3 desks (xyz, io, para). Returns proposalId; execute with confirm_proposal (server-side when Delegated Access or agent credential).

Propose a HIP-4 buy or sell on the Hyperliquid account. size is micro-USDC collateral (10000000 = $10). limitPrice is quote-micro. Runs outcome policy (no leverage, max notional) before any signature. Confirm with confirm_proposal.

Propose closing a Hyperliquid perp position (reduce-only). Omit size to close the whole position. Returns a proposalId for confirm_proposal.

Propose modifying an open Hyperliquid perp position: its stop-loss / take-profit and/or its leverage. Only the exit you pass is replaced: changing stopLoss keeps the resting take-profit(s), and vice versa. leverage changes the open position's leverage in place (keeps its cross / isolated mode, size unchanged). Raising leverage runs FortFi perp policy (max leverage) and the wallet loss cap; lowering it needs enough margin on Hyperliquid. Returns a proposalId for confirm_proposal.

Propose opening a Hyperliquid perp position. Runs FortFi perp policy (max leverage, max notional) and rejects non-hyperliquid-mainnet wallets. Optional marginMode picks cross or isolated margin. Returns a proposalId for confirm_proposal.

Move USDC between Hyperliquid margin desks without HyperEVM (any perp book: core, xyz, io, para, mkts, …, or spot → any perp desk). Use list_hyperliquid_balances perpDesks[].dex for valid dex ids.

Propose a Hyperliquid spot buy or sell on the same Hyperliquid account as perps. Buys spend the quote token (usually USDC), sells sell coins you hold. Give size (coins) or sizeUsd (dollars). size "all" sells everything free. Market orders cross the book by at most 1% and fill now or cancel. Minimum $10. Runs spot policy (no leverage, max trade size) and the wallet loss cap on buys. API keys cannot buy spot on an account a strategy runs (the cash would leave the perps account the strategy trades from); sells still work. Spot symbols: prefer the pair form (HYPE/USDC) or the wrapped name (UBTC, UETH); BTC maps to UBTC. Confirm with confirm_proposal. The key needs the propose_hyperliquid_spot_order grant.

Propose moving USDC from HL Spot into core perps margin (required after MoonPay HyperCore on-ramp). Returns proposalId; human confirms via Perps Deposit to tradable balance or confirm_proposal.

Propose moving Hyperliquid perp USDC to the owner's own HyperEVM wallet (same address; perp to HL Spot, then sendAsset to the USDC system address). Funds cannot go to any other recipient. Returns proposalId; human confirms with passkey via Perps Withdraw to HyperEVM or confirm_proposal.

Execute a validated payout manifest sequentially (one ActionIntent per line). Requires Delegated Access or agent wallet. Set dryRun:true to validate only.

Propose buying Polymarket outcome shares, then call confirm_proposal. Requires Polygon wallet.

Propose redeeming winning shares from a resolved Polymarket market (CTF on Polygon), then call confirm_proposal.

Propose selling Polymarket outcome shares (redeem collateral), then call confirm_proposal.

Apply a validated recipient manifest (human/developer key). Adds new allowlist rows with normal 24h cooldown. Agent keys: use add_recipient per row (GOVERN).

Rename a wallet (account nickname), then call confirm_proposal with the returned proposalId.

Propose a Solana Jupiter swap. Autonomous agents: inline quote by default, or previewQuoteId for two-step review. confirm signs the bound quote.

Propose an EVM CoW swap. Autonomous agents: fetches and binds a quote inline (default), or pass previewQuoteId from preview_swap_quote for a two-step review. confirm always signs the bound quote — same principle as FortFi Assist. Human session MCP: confirm requires passkey in the app.

Propose max ERC-20 approval for CoW or Fusion spenders. Returns proposalId: call confirm_proposal before swap/bridge. API keys on a passkey account cannot approve the Fusion (bridge) spender: fusion_bridge returns OWNER_PASSKEY_REQUIRED.

Transfer USDC to an allowlisted recipient, OR pay a FortFi invoice by public pid (paymentRequestPid + fromWalletId — amount optional for partial pay). Recipient path requires allowlist approval. Invoice path binds settlement to the pid (Delegated Access / agent accounts execute server-side when configured).

Propose Morpho vault deposit, then call confirm_proposal. With Delegated Access / agent key this executes server-side when policy permits. Use list_yield_markets for vaultAddress.

Propose Morpho vault withdraw, then call confirm_proposal. With Delegated Access this executes server-side when policy permits. Use list_yield_positions for vaultAddress.

Get Hyperliquid wallet balances: L1 perps margin (withdrawable), HL Spot USDC (MoonPay HyperCore lands here), and HyperEVM USDC/HYPE. Also returns a `perps` aggregate over open positions: openPositionCount, unrealizedPnlUsd, entryNotionalUsd, and unrealizedPnlPct (null when nothing is open).

Rank a Hyperliquid perp universe by trailing return in one call, for a dollar-neutral long/short book. Returns dex, assetClass, trailing returns, realized vol, funding, rank, percentile, and long/short/hold buckets. Default scope=core (validated trend desk); pass scope=all for HIP-3 cross-asset books. Read-only; never creates proposals.

Long price history for one Hyperliquid perp, with no gap up to now: FortFi's stored candles (years for most markets, synced daily) plus live candles since the last sync. Returns the latest `limit` candles in the window, oldest first, as {t,o,h,l,c,v}. When older candles exist, olderEndTime is set: pass it as endTime to page back. includeFunding adds hourly funding rates for the same window. Use get_hyperliquid_market for a quick recent look, this for research.

Get a Hyperliquid perp market by symbol with mark/funding context and optional candle history.

Hourly open interest for one Hyperliquid perp (core or HIP-3), in coins and dollars, with price and funding at each hour, plus the change over 1 hour, 24 hours and 7 days. Hyperliquid keeps no open interest history; FortFi records it every hour from 2026-11-05.

Live order book for one Hyperliquid perp (core or HIP-3, e.g. BTC or xyz:NVDA) or, with market=spot, one spot pair: up to 20 levels a side, mid, spread, and USD resting within 0.5%, 1% and 2% of mid. Pass sizeUsd to see the average fill and price impact of a market buy and sell of that size. Use it before sizing an order or to compare liquidity across coins.

One HIP-4 outcome market. id is the numeric outcome id. Optional walletId reads that Hyperliquid account's share balance.

Next funding rate per Hyperliquid perp, per hour and annualized, with Binance and Bybit for the same coin and the gap between them. Positive means longs pay shorts. Without symbols: core coins sorted by the size of the Hyperliquid rate. HIP-3 coins (xyz:, …) need symbols and return the current hourly rate. For past funding use get_hyperliquid_history with includeFunding=true.

Row counts and last ingest time for hl_research_* tables (candles, funding, symbols). Use before backtests to confirm data freshness.

One-shot Hyperliquid trading desk snapshot for agent loops: margin, balances, positions, open orders, recent fills, and a `performance` block with unrealizedPnlUsd, unrealizedPnlPct, entryNotionalUsd, openPositionCount, and realizedPnlUsdRecentFills. Prefer this over many separate reads every 30-60 minutes.

Recent Hyperliquid trade fills with closedPnl per fill. Use for P&L review and trade history (up to 2000 from HL).

Trailing and time stops FortFi manages: settings, best price so far, the stop it last placed, and a note when something stopped it. includeEnded=true adds finished ones.

List Hyperliquid perpetual markets with live mark/mid/oracle prices, funding, open interest, and 24h volume. Public data; no proposal.

List resting Hyperliquid orders including SL/TP triggers for a wallet.

List Hyperliquid HIP-4 outcome markets on the same account as perps. Prices are quote-micro (650000 = $0.65) from exchange mids. volumeUsd is 0 because outcomeMeta does not publish volume.

List open Hyperliquid perp positions and margin summary for a hyperliquid-mainnet wallet (its address is used on the L1 order book).

List Hyperliquid spot pairs (you own the coin, no leverage, no funding). Each row has price, 24h change, 24h volume, size decimals and, when the coin also has a perp, the perp's funding as carryAprPct (what a short earns per year at today's rate) and basisPct (spot vs perp price). sort=carry ranks carry pairs. tradeable=false means the pair is priced in a token FortFi does not support.

Security master for Hyperliquid perps: symbol, dex, desk label, short symbol, display name, asset class (crypto/equity/commodity/fx/index/pre_ipo), plus live volume and funding. Default scope=core; pass scope=all for HIP-3.

Run an out-of-sample backtest on Hyperliquid perp OHLCV stored in FortFi research Postgres (hl_research_candles). Returns IS/OOS metrics and a pass/fail verdict. Read-only; uses synced historical data, not live HL API for bars. Strategies: momentum_cross (default).

Run an out-of-sample backtest from a Strategy Spec JSON (universe + rank factor or named pattern + portfolio rules). Deterministic; reads hl_research_* Postgres. Agent should translate natural-language strategy ideas into the spec object before calling. Pass presetId instead of spec to get a FortFi house preset (crypto-majors, core-momentum, mag7, semis, memory, ai-compute, pre-ipo, ...) with its frozen spec and published OOS, walk-forward, drawdown and leverage scenarios; add rerun:true to recompute it live.

Trailing stop, break-even stop and/or time stop that FortFi keeps on an open perp position. Trailing: a stop trailingStopPct behind the best price since set, moved only toward the price, never away; a tighter stop already on the book (yours, or a copy-trade stop) is kept. With trailStartProfitPct, trailing starts only once the price is that % past your entry price. Break-even: once the price is breakEvenAtProfitPct past entry, the stop moves to the entry price. Time stop: closes the whole position after closeAfterHours; refused on accounts a strategy runs, since the strategy would reopen it. Checked every 5 minutes, so fast moves can pass the trail before it updates; the stop on the book is what protects you between checks. Each change runs through policy and the audit log. Stop moves that only tighten skip co-sign rules; if a co-sign rule would make a close wait for approval, the managed exit stops and says why. Calling again replaces the settings. Needs automated signing (Delegated Access) on human accounts.

Create a persistent product checkout link (/pay/p/{slug}). Each visit mints a fresh payment request. One webhook endpoint receives paid events for all products.

Create a shareable payment request for a vault. Returns pid, paymentUrl, and qrPayload for humans or agents.

Get a payment product by internal id or public slug.

Get a payment request by internal id or public pid, including settlement attempts.

List persistent product checkout links for the account.

Buyer view: FortFi checkouts your vaults paid (what you bought). Matches settlements by payer wallet address across your fleet.

List payment requests for the authenticated account.

Merchant view: paid and partially paid invoices on your collection vaults (what you sold). Includes payer, method, and settlement details.

Veto/cancel a pending governance challenge before it is signed and applied. Cancelling TIGHTENS security, so it needs only the agent key (no signature). Also cancels legacy scheduled rows from before immediate-apply parity.

Turn off the trailing or time stop FortFi manages on a position. Stops already on the book stay where they are.

Propose cancelling resting Hyperliquid orders (limit orders and SL/TP triggers) on one market. Pass oids from list_hyperliquid_open_orders, or omit oids to cancel every resting order on that symbol. Moves no money, but cancelling a stop loss removes protection, so it follows the normal confirm_proposal flow.

Cancel an open payment request with no verified settlement.

Cancel a pending approval that you (the account owner) initiated.

Amount-banded cosigner quorum rules for sends and swaps. Below-band amounts auto-execute; matching bands require N cosigner votes.

Active co-signers on this account.

Remove an active co-signer from this account. GOVERN action (it shrinks the approver set): via an agent key, sign a challenge with your funding wallet (challengeId + walletSignature); applies immediately once signed.

Set cosigner quorum rules (send + swap USD bands). Tightening rules works with the agent key alone. WEAKENING them (lower required cosigners / raise the amount floor) is a GOVERN action: sign a challenge with your funding wallet (challengeId + walletSignature); applies immediately once signed (same as passkey in the UI). Amounts use USDC micro-units (1 USDC = 1000000).

Get a Polymarket market by conditionId with optional outcome price history from the public CLOB API.

List active Polymarket prediction markets on Polygon with volume, liquidity, and outcome prices.

List Polymarket outcome token positions for a Polygon wallet. walletId is required.

Search Polymarket markets by question text.

Rank Hyperliquid perp markets by 24h volume, pctChange, or funding. Returns dex + assetClass tags. Default scope=core; pass scope=all for HIP-3. Cheap filter only — use screen_hyperliquid_markets for breakout TA.

Rank Polymarket markets by volume, liquidity, or 24h volume.

Two-stage token ranking: run the cheap screen, then concurrently fetch deterministic chart evidence only for the strongest candidates. Quick charts 5 candidates over month+3months; standard charts 10 over day+month+3months+year; deep charts 20 and requires explicit opt-in. Returns evidence for user review and never creates a proposal.

Batch-rank Morpho markets using current net APY, APY median/average/range/volatility, TVL trend/drawdown, vault age, curation, instant-withdrawal liquidity, warnings, and current-user execution eligibility. Results are ordered by current net APY, which is a spot rate that spikes: re-rank on evidence.apy.medianPercent before acting, since a vault printing 12% today commonly pays under 5% tomorrow. Runs evidence requests concurrently and never creates a proposal.

Read the loss cap on a Hyperliquid wallet: the max loss in percent, whether it is armed or tripped, the balance it was set at, and (live) how much the wallet has lost or made since. Deposits and withdrawals do not count as gains or losses. Returns lossCap null when none is set.

Scoreboard for a Hyperliquid wallet from Hyperliquid's public data: balance, P&L in dollars and percent, win rate (closed trades that beat their fees), trades, fees, volume, worst drop, the loss cap, and BTC buy-and-hold over the same window (no leverage) as the bar to beat. Same numbers anyone can check on the Hyperliquid explorer (explorerUrl). Use it to review how your trading is going before changing anything.

Add a loss cap to a Hyperliquid wallet, or lower the one it has. If the wallet loses maxLossPct from the balance at the moment the cap is set, FortFi cancels its open orders, closes its positions and blocks new trades on it until the owner resets the cap in the app. An API key can only add or tighten a cap: raising, removing or resetting it needs the owner's passkey in the app. The cap is also measured from when it is set, so set it before trading.

Propose updating wallet metadata tags (flat string key/value pairs; replaces existing tags on confirm). Returns proposalId; call confirm_proposal to apply. Not a money-moving action.

Deep dive on any Hyperliquid address: account value, leverage, open positions with share of book, PnL and volume for day, week, month and all time, and a copy preview per leverage cap (which positions would be copied, coverage, and the minimum account size so each copied position is at least $10).

What a Hyperliquid address traded recently: fills since N minutes ago, grouped per market (opens, closes, flips, dollars bought and sold, profit taken) plus the latest fills. Poll it to follow a leader between your runs.

Top Hyperliquid accounts to copy, from Hyperliquid's public leaderboard. Only accounts over $25k that traded this month and are profitable all-time. Each row has profit per window, turnoverPerDay (volume / account value per day, last 30 days) and a trackRecord (30- and 90-day return, worst drop, Calmar) once FortFi has computed it. Accounts trading over 20x their account a day (market makers, high-frequency bots) are hidden unless includeHighTurnover=true. Use get_copy_trade_wallet and backtest_copy_trade before copying one.

Register a webhook URL. FortFi generates a signing secret (returned once) for the merchant to verify HMAC on incoming POSTs. Not per-product — one endpoint receives all paid events.

List webhook delivery log. Use status=failed for dead-letter queue rows. Filter by paymentRequestId to find deliveries for one checkout.

List registered webhook endpoints (secrets are never returned).

Get one strategy with its last 20 runs (each run lists the orders it placed and their result).

List FortFi autonomous Hyperliquid strategies (house presets) with their published backtest: out-of-sample return, Sharpe and drawdown at 1x, walk-forward windows, every leverage scenario, tested leverage (start_strategy accepts these), high-risk leverage (owner passkey only), and the minimum account size per leverage. Read-only.

Resize a strategy or copy trade: raise or lower its leverage (offered levels only) or allocation cap. Moving into a high-risk level needs acceptHighRisk: true. The loss cap can be added or lowered, never raised or removed (OWNER_PASSKEY_REQUIRED).

Evidence for one Morpho vault: current net APY/TVL, historical APY and TVL series, period statistics, quality flags, allocation, instant-withdrawal liquidity, separated eligibility/readiness status, and timestamp. Rank on evidence.apy.medianPercent: the raw series contains upstream artifacts (points above 3000% APY) so averagePercent is filtered and medianPercent is the robust level. Check evidence.liquidity.redeemableUsd before sizing, since vaults typically run near 90% utilization and only unborrowed supply can be withdrawn on demand. Use before recommending or proposing a deposit.

Open Morpho yield discovery by chain with discovered, policyEligible, manuallyCurated, executionReady, and eligibilityReasons. Default minimum TVL is $500K everywhere (listing, policy, Turnkey). executionReady means TVL qualifies and you have a wallet on that chain; POLICY_SYNC_RECOMMENDED is advisory only.

Active Morpho yield positions with per-vault valueUsd, earnedUsd (Morpho pnlUsd), netApy, and a summary block. summary.cumulativeEarnedUsd matches Morpho pnl on the open vaults when the ledger cannot explain the balance. A deposit missing from the ledger is principal, not earnings. Use at the start of every yield desk run to report standing P&L.

Approve a pending action as co-signer. Use with list_pending_cosigner_approvals.

Approve a recipient still in cooldown (early release). Active cosigners may approve directly. Human passkey owners: use the FortFi app (passkey) or the approval email link; owner bearer keys cannot self-clear. Agent-owned accounts: owner self-approval is GOVERN (funding-wallet signature).

Invite a co-signer. Agents: pass cosignerUserId (GOVERN / funding-wallet sign when using an agent API key). Humans: pass email — opens instructions for Security UI passkey provision (Turnkey dual-control with MCP DA).

Alias of invite_agent_cosigner. Humans: email → Security UI. Agents: cosignerUserId.

Optional advanced step: fetch a cross-chain bridge quote (Fusion+ or deBridge) and return previewQuoteId. Omit previewQuoteId on propose_bridge to bundle quote+proposal in one call.

Optional advanced step: fetch a same-chain swap quote (CoW on EVM, Jupiter on Solana) and return previewQuoteId. Omit previewQuoteId on propose_* to bundle quote+proposal in one call. Does not execute or move funds.

Bulk-provision up to 20 customer vaults per job (treasury + keys:manage + wallets:write). Requires idempotencyKey in args. Poll get_provisioning_job until terminal; bearer secrets reveal once on first terminal GET.

Poll a bulk provisioning job (treasury + keys:manage + wallets:read). bearerKey appears once when secretsDelivery is revealed.

Add a payout address to the allowlist. Human developer key (frtfi_hu_* + DA): added with 24h cooldown (no Assist passkey). Agent key (frtfi_ag_*): GOVERN — funding-wallet signature required; then approved immediately.

Remove a recipient from the FortFi allowlist (tightening policy — no funding-wallet GOVERN). Human developer key, session, or agent treasury key. Re-sync Turnkey policies in the app so the enclave matches.

Revoke a pending outbound co-signer invite before it is accepted.

Revoke a vault-scoped credential (treasury + keys:manage). Idempotent if already revoked.

Breakout screener for Hyperliquid perps: min volume filter, rank, HL candle TA (RSI, MACD, Bollinger). Returns dex + assetClass tags and long/short/neutral bias. Default scope=core; scope=all for HIP-3. Never creates proposals.

Batch cheap-screen tokens across requested chains. Defaults to verified assets, $5M market cap, $50K daily volume, top 30-day performers plus volume leaders, stablecoin removal, and cross-chain deduplication. Returns no proposal.

Copy another Hyperliquid account on one of your wallets. Every hour FortFi reads their book, keeps their largest positions until 95% of their exposure is covered (at most 10 names), scales to your equity and leverage cap, and trades only when a position drifts more than 10% from target. Leverage cap 1 or 2; 3 and 5 are high risk and need acceptHighRisk: true. Same rails, caps and key re-checks as start_strategy.

Start a house preset on a hyperliquid-mainnet wallet and place its first orders. Leverage must be one of the preset's testedLeverage or highRiskLeverage levels; high-risk levels need acceptHighRisk: true. Requires the owner to have turned on autonomous trading and confirmed perps eligibility. One strategy per wallet. Every order is an ActionIntent under this key's caps and co-sign rules; the key is re-checked every run and the strategy pauses if it is revoked.

Fetch a compact Zerion chart summary plus deterministic EMA, RSI, MACD, Bollinger, return, max-drawdown, and data-quality analysis. Raw points are omitted by default; set includePoints:true only for visual charting or external analysis. Discontinuous pre-migration/launch samples are excluded from TA.

List active ERC-20 token approvals (spender grants) on this account. Useful before proposing a swap to confirm the CoW vault is approved.

Preview batch payroll/payout (max 50 lines). Each line: { recipientId, amountUsdc, memo? }. All recipients must be allowlisted, same chain as fromWalletId, and past cooldown.

Preview a batch recipient import (max 50 rows). Each row: { address, chainId, nickname? }. Returns ready_new, already_exists, or invalid per line. Read-only.

Mint a vault-scoped credential for an existing wallet (treasury + keys:manage). Returns bearerKey once when agentPublicKey is omitted. Requires FORTFI_VAULT_CREDENTIALS_ENABLED.

Atomically replace a vault credential's name, access mode, grants, and expiry (treasury + keys:manage). Revoked credentials cannot be updated.

Accept a pending co-signer invite. After accepting, you will be able to approve/reject pending actions for that account.

Token holdings for a specific wallet, with USD values and 24h change.

Treasury activity timeline (JSON) for reconciliation: normalized labels, USD hints, vault scope, and categories. Optional walletId narrows to one vault. Requires reporting:read (or account:read).

Recent account activity: one row per money move (sends, swaps, bridges), blocked attempt, or account change (keys, recipients). Money rows and blocked rows carry a confirmationNumber (FF-XXXX-XXXX) the owner can quote to FortFi support. Blocked rows carry the reasons. Pass view: 'full' for every internal step. Optional walletId filters to one vault's history. Pass cursor (from a previous page's nextCursor, even as an empty string on the first call) to switch the response to { items, nextCursor } and page back through full history instead of only the most recent entries.

Copy past test for any Hyperliquid address: replays the leader's own profit history over 7, 30 or 90 days at your leverage cap and account size, minus trading costs on their turnover. Returns end value, return, worst drop, costs, the leader's own numbers and an equity curve. An estimate from sampled history; read the assumptions.

Remove the registered backup governance wallet. GOVERN action: sign with your funding wallet (challengeId + walletSignature); applies immediately once signed. After removal, only the funding wallet may authorize governance.

Create a per-customer checkout session: resolves (or provisions) the customer's own vault from your externalCustomerId, mints a payment request that settles into it, and returns checkoutUrl + x402Url. The paid webhook then carries customer identity. Price from productSlug or ad-hoc amountUsd.

Confirm a pending proposal returned by a propose_* tool. Reuses the same policy, risk, allowlist, vault-grant, delegated-authority, and cosign checks as POST /api/mcp/confirm. Returns executed, pending-approval, or passkey-required status.

Parent-treasury key-centric credential search (treasury credential + keys:manage + wallets:read). Complements search_vaults. Never returns raw bearer keys.

Create or sync one customer vault synchronously (treasury + wallets:write). Idempotent on externalCustomerId + namespace + chain. Returns wallet address immediately; Turnkey wallet creation may take a few seconds on first call.

Market-wide token discovery on a FortFi chain (USD). Use for trending/gainers/losers/volume/mcap — NOT the browser Explore REST route. Sorts: gainers_1d, gainers_30d, gainers_90d, gainers_365d, losers_1d, losers_30d, losers_90d, losers_365d, market_cap, volume_1d. No 7d or 30d-volume sort exists upstream — closest available gainers granularity to '1 week' is gainers_1d or gainers_30d; say so explicitly rather than silently picking one. Returns contract addresses for propose_swap / propose_bridge.

Extend an open payment request expiry (default extension window in days).

List all FortFi agent accounts funded by the same payment wallet as this agent. Use to discover agentLabel / userId when renewing or spawning siblings (treasury multi-agent setups).

Track an owned Fusion+ cross-chain order by orderHash. Returns authoritative settlement/refund status, source and destination transactions, receiver, and the real destination token contract.

List open governance requests on this account: pending (awaiting signature) and legacy scheduled rows. Use to monitor for unexpected loosening attempts.

List pending co-signer invites sent TO this account (where this account is the invitee). Use to discover accounts you can become a co-signer for.

FortFi MCP capability guide: onboarding paths, pricing, limits, workflows, and full tool catalog. Call first when unsure which tool to use (e.g. market research → discover_tokens, not the Explore UI REST route).

Pause a strategy. Positions stay open; no more orders until resumed.

Pay an open FortFi invoice via x402 EIP-3009 from a governed Turnkey vault. Requires Delegated Access on human developer keys or an agent account. Base mainnet first.

Pending actions that require this account's co-signer approval. Use when this agent is a co-signer on another account.

Read-only rebalance planner toward target weights. Returns suggested legs (swap, yield_deposit, yield_withdraw) without executing. Use propose_* + confirm_proposal to act.

Current policy limits: per-tx/daily/monthly caps (USDC smallest units). Agent accounts also include agent cap tier limits, maxWallets, and credential access expiry.

Full portfolio summary across all wallets: token balances with USD values, 24h change, and total net worth.

Run a strategy's rebalance now instead of waiting for its schedule. Returns the run outcome.

List all allowlisted recipients. Includes cooldown status: `cooldownActive: true` means the recipient cannot yet receive funds (24-hour gate).

Register (or replace) a single backup governance wallet — the agentic equivalent of a backup passkey. Either the funding wallet or this backup can authorize future governance. GOVERN action: sign the challenge with your CURRENT funding wallet (challengeId + walletSignature); applies immediately once signed. Max one backup.

Reject a pending action as co-signer.

Replay a dead-lettered or failed webhook delivery after fixing your endpoint. Re-sends the same event id and body for idempotent handlers.

Resend the dashboard claim email to contactEmail (MCP agent API key only; keys:manage scope). Use when the original link expired (72h) or was lost. Rate limit: 3/hour.

Resume a paused strategy. An API key can only resume a strategy it started; others need the owner in the app.

Read-only treasury review: allocation buckets (cash, yield, tokens), top holdings, and optional drift vs target weights. Safe for cron — no proposals created.

Send a signed webhook.test event to an endpoint.

Stop a strategy and close every position it opened (cash out). Positions it did not open are left alone.

List strategies running on your Hyperliquid accounts (presets and copy trades): status, leverage, cap, next rebalance, and whether an API key started it. Stopped strategies are hidden unless includeStopped is true.

Returns which swap/bridge tool to use for a given from→to chain pair, with notes on protocols supported.

Check ERC-20 allowance for an upcoming CoW swap (cow_swap) or Fusion bridge (fusion_bridge). Call before propose_swap / propose_bridge; if insufficient, use propose_token_approve then confirm.

Who am I? Returns treasury email, user id, credential kind/scopes, vault summary, and policy limits for this API key. Call first to confirm you are on the correct account before money-moving tools.

Monthly UpTo product balance: cap, used, remaining, and period bounds. Billable writes consume this pool; unused budget is refunded at period end.

Parent-treasury vault inventory search (treasury credential + keys:manage + wallets:read). Matches nicknames, wallet IDs, addresses, external customer IDs, credential names, and prefixes. Never returns raw bearer keys.

List FortFi wallets for this account: chain, address, nickname, metadata tags, and default flag. Optional metadataKey/metadataValue filter (exact match). Pass cursor and/or limit to page through large fleets — response becomes { items, nextCursor } when either is set; omit both for the plain array of all wallets.