Build SAP Escrow V2 Withdraw Transaction
sap_escrow_build_withdraw_transactionHosted-safe unsigned builder for withdraw_escrow_v2. The depositor signs locally and can only withdraw unlocked balance after pending amounts are excluded. SAP MCP context: Hosted-safe unsigned Escrow V2 builder. The output is not submitted and is not signed by hosted SAP MCP. Preview it, then call local sap_payments_finalize_transaction with submit:true and confirm:true. Never create temporary signing scripts or read keypair JSON.
SAP MCP execution guidance: Intent: hosted unsigned transaction builder. Pricing: paid builder; estimate first, then pay/build and finalize unsigned transactions locally when returned. Routing: hosted-safe builder. If a transaction is returned, preview/sign/submit with sap_payments_finalize_transaction; never create temporary signing scripts. Signer boundary: user-controlled local profile or external signer; OOBE hosted MCP remains non-custodial.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| nonce | No | Optional escrow nonce as a decimal string. Defaults to 0. | |
| amount | No | Withdrawal amount as a decimal string. Amount in the escrow token smallest unit: lamports for SOL, micro-USDC for USDC, or base units for the configured SPL token. | |
| agentWallet | No | Agent owner wallet public key (base58). The escrow PDA is derived from agentWallet, depositorWallet, and nonce. | |
| depositorWallet | No | Depositor wallet public key (base58). Only the depositor can locally sign a withdrawal from this escrow. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| content | Yes | MCP content blocks returned to the caller. | |
| isError | No | True when the tool result represents an application-level error. |