ctrl-mcp

the mcp for on-chain automation. sign once, agent does the rest, forever.

ctrl is workflow automation for on-chain actions on base. you compose trigger → action → condition graphs in plain english, sign one batch to deploy a vault + spending caps, and a keeper runs your workflow under those caps forever.

this is the mcp surface. agents talk to it. users sign in their wallet.

$ claude mcp add ctrl https://ctrl.build/api/mcp

or paste into your client's mcp config:

{
  "mcpServers": {
    "ctrl": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://ctrl.build/api/mcp",
               "--header", "Authorization:Bearer ${CTRL_API_KEY}"],
      "env": { "CTRL_API_KEY": "sk_ctrl_..." }
    }
  }
}

mint a key at ctrl.build/settings/api-keys.

prompt your agent. that's it.

Related MCP server: agentshield-mcp

what your agent gets

seven tools. that's it.

24 blocks under the hood

triggers — time.interval, trigger.manual, price.above/below/change, pool.created (clanker / flaunch / zora / bankr), watch.whale, event.transfer, event.balance, trending.token

actions — cypher.swap, read.balance, notify.telegram, notify.discord, util.webhook

conditions — cond.price, cond.balance, cond.allowed_weekdays, cond.time_window

utilities — util.delay, util.note, util.log, util.stop, util.snapshot

the agent calls ctrl_get_block_catalog first to see the live shape. every block id maps 1:1 to keeper execution.

example prompts

drop these into your agent and watch:

• "dca $50 eth into usdc every monday at 14:00 utc"

• "snipe new flaunch launches with milady in the name, 0.005 eth each, auto-sell at 2x"

• "watch wallet 0x6cc5...c01b. when they buy anything over $10k, copy with 0.01 eth"

• "sell 50% of my pepe if price drops 20% in an hour"

• "every monday noon, check moonwell usdc apy. if lower than morpho by 1%, move 80%"

security

vault-direct model. agent never holds keys.

• on-chain caps: every rule signs immutable maxPerSwap + maxPerDay. enforced by the vault contract.

• kill switches: pauseVault() halts everything; revokeRule(id) kills one workflow. both 1-tx, user-callable.

• safety primitives: pool.created runs goplus honeypot + tax + score checks before any swap.

• keeper bounded: the keeper fleet can only call methods the vault permits. compromised keeper costs at most one tick's per-swap cap.

verified contracts on base:

• v13 vault factory — 0x5Df25e79efd7f9dc86841b404b3EA6F4b7951DBB

• vault implementation — 0xc98137a6df7fb91ab91b568bf923490a278aa702

• timelock beacon — 0x5760A6D62743860F27843fA314E22166dBEF7d73

ecosystem

works with any mcp client. tested with:

• claude code · ~/.claude.json

• claude desktop · ~/Library/Application Support/Claude/claude_desktop_config.json

• cursor · ~/.cursor/mcp.json

• hermes (nousresearch/hermes-agent)

• aeon (aaronjmars/aeon)

• app · ctrl.build

• docs · ctrl.build/docs

• mcp hub · ctrl.build/mcp

• sibling repo · ctrl-skill

mit