Exact-amount top-two routing for six pilots; caller signs; AssetFare never signs or submits
Scored across 11 tools
The tools map to distinct lifecycle stages: manifest/capabilities, quoting and route selection, prepare, and session create/get/observe/refresh. The main overlap is among quote, route_selection, and quote_selected_candidate, plus prepare versus session_create, but the descriptions provide enough stage-specific guidance to limit misselection.
Almost all tools use snake_case with an assetfare_v2_ prefix and clear resource/action compounds, especially the session_* group. Minor deviations include assetfare_manifest lacking the v2 prefix and some noun-phrase names (quote, route_selection) mixed with verb-led names (prepare, session_create).
The set has 11 tools, well within the typical 3-15 range, and each appears to correspond to a distinct bridge workflow stage. The count is well scoped rather than redundant or thin.
The surface covers discovery, quoting, route selection, unsigned preparation, and the session workflow including source/output observation and action refresh. Minor gaps remain around abandoning/listing sessions, but core bridge lifecycle coverage is strong and signing/submission are intentionally out of scope.
Read the Ed25519-signed release manifest and safety-bundle binding before preparing an action. Example: call this once to verify the current release and contract pins; it never creates state, signs, or submits.
Inputs: no named parameters. Returns: service, execution, signature, safety_bundle, +1 more
Read the 65 curated public routes, live provider readiness, whole-route product classification, direct_route_summary, and continuation_v3 contracts before quoting. The offered routes comprise 3 core, 50 conditional, and 12 strategic/scarce routes; 35 additional researched routes are not public products. Example: call once before requesting an exact route quote, then confirm the fresh quote. Route classification never adds an execution gate. continuation_v3 separately binds execution selection, wallets, bounds, and mode. Read-only; creates no wallet login, session, or action.
Inputs: no named parameters. Returns: chains, status, server_signing, action_lifetime, +19 more
Return one deeply verified first unsigned bundle and caller-wallet handoff. Example: pass caller_approved=true, a one_shot approval_v3, and the quote-bound verification_context; multi-step routes reject one_shot. Economic guidance is advisory and adds no request field. Context is validated before the upstream request and never forwarded. AssetFare never signs or submits.
Inputs: wallets (required), to_chain (required), to_token (required), amount_usd (required), +6 more. Returns: bundle, action_verification, local_execution_gate, caller_wallet_handoff, +1 mo…
Get one fresh AssetFare quote with amount-specific economic_guidance, direct_route_summary, continuation_v3, and unsigned_prepare_requirements. Example: quote Solana USDC to Base USDC. price_recommended_for_amount is advisory; compare alternatives when price matters, but no economic acknowledgement field is required. The quote remains an unranked_candidate until separate explicit approval selects one mode. The adapter validates hashes, path, bounds, and TTL and never creates approval, prepares, signs, or submits.
Inputs: to_chain (required), to_token (required), amount_usd (required), from_chain (required), +1 more. Returns: eta, risk, as_of, offer, +11 more
Reuse the chosen exact request-time quote while valid; after expiry refresh only that candidate at the same amount and never reselect. Example: pass candidate_id and the selection receipt hash. An AssetFare result requires a caller-local proof check and fresh wallet simulation before verified_for_signing; remote verification is not signing authority. An external result is only its provider handoff and has no AssetFare transaction-verification claim. Never prepares, signs, submits, or grants transaction authority.
Inputs: to_chain (required), to_token (required), amount_usd (required), from_chain (required), +5 more. Returns: status, version, choice_binding, server_signing, +4 more
Quote the recent top two plus the best AssetFare graph at the exact amount; return up to two all-in choices labeled assetfare_verified_unsigned or external_provider_handoff. AssetFare cost, ETA and rank are always present; a recent winning range needs two supporting higher buckets and disappears on conflict. Example: compare Solana USDC to Base USDC at USD 347.25 with balanced (60s). Fast is 30s; balanced and explicit economy are 60s. The 60-second ceiling is absolute for recommendations; slower routes are reference-only. Never approves, prepares, signs, or submits.
Inputs: to_chain (required), to_token (required), amount_usd (required), from_chain (required), +3 more. Returns: as_of, intent, safety, status, +24 more
Create one receipt-driven workflow. Example: pass caller_approved=true, a session approval_v3, its idempotency_key, a caller-local session token, and the quote-bound verification_context. Economic guidance is advisory and adds no request field. The adapter validates approval and context before the upstream request. Every returned action is deeply verified and receives a caller-wallet handoff. AssetFare never signs or submits.
Inputs: wallets (required), to_chain (required), to_token (required), amount_usd (required), +8 more. Returns: signed, status, submitted, session_id, +5 more
Read an existing v2 workflow without advancing it. Example: pass session_id, session_token, and the original verification_context after restart. The adapter deeply verifies any current_action and emits a self-verifying wallet handoff, or fails closed. Read-only; never signs or submits.
Inputs: session_id (required), session_token (required), verification_context (required). Returns: signed, status, submitted, session_id, +5 more
Record an already-produced bridge or destination output, then advance the workflow. Example: pass the output hash, a new idempotency key, and the original verification_context. Any next current_action is deeply verified and receives a wallet handoff. AssetFare never signs or submits.
Inputs: session_id (required), session_token (required), idempotency_key (required), verification_context (required), +1 more. Returns: signed, status, submitted, session_id, +5 more
Record source hashes the caller already signed and submitted, then advance the workflow. Example: pass one finalized source hash, a new idempotency key, and the original verification_context. Any next current_action is deeply verified and receives a wallet handoff. AssetFare never signs or submits.
Inputs: session_id (required), session_token (required), idempotency_key (required), transaction_hashes (required), +1 more. Returns: signed, status, submitted, session_id, +5 more
Refresh an expired action only while it remains unsubmitted. Example: pass the existing session, a new idempotency key, and the original verification_context. The refreshed action is deeply verified and receives a wallet handoff. Never refresh a submitted step; AssetFare never signs or submits.
Inputs: session_id (required), session_token (required), idempotency_key (required), verification_context (required). Returns: signed, status, submitted, session_id, +5 more
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Exact-amount top-two routing for six pilots; caller signs; AssetFare never signs or submits
Non-custodial x402 payments between AI agents on Solana. Returns unsigned transactions.
Policy-gated Arc payment routing: hard caps, signed mandates, hash-chained proof.
Swap, bridge and get gas on 6 EVM chains. Each plan states its outcome before you sign. No API key.
Add one secure layer between your agents and this server.
