fi.ophis/mcp (Model Context Protocol) Server

The fi.ophis/mcp server is an agent-facing MCP server for the Ophis DEX. It provides gasless, MEV-protected onchain token swaps for AI agents on 14 EVM chains, built on CoW Protocol. Deployed as a Cloudflare Worker using Streamable-HTTP at https://mcp.ophis.fi/mcp, it exposes the Ophis trading surface to MCP clients and autonomous agents.

🛠️ Key Features

Agent-facing MCP server for Ophis DEX
Gasless token swaps with MEV protection
14 tools across 14 configured EVM chains (13 mainnets plus Sepolia)
Streamable-HTTP transport via Cloudflare Worker

🚀 Use Cases

Token swapping for AI agents on EVM networks
MCP client integration with an Ophis trading interface
Avoiding agent re-derivation of non-obvious Ophis-specific details

⚡ Developer Benefits

Includes release v0.1.1 tool coverage for 14 chains
Handles non-canonical settlement contract details for Ophis-operated chains
Encodes specific integration shapes (e.g., CIP-75 partner-fee appData) without client reimplementation

⚠️ Limitations

Described as version v0.1.1 with a fixed set of 14 tools and supported chains
Tool and interface scope is limited to the Ophis DEX trading surface

@ophis/mcp-server

Agent-facing MCP server for the Ophis DEX, deployed as a Cloudflare Worker with the Streamable-HTTP transport at https://mcp.ophis.fi/mcp.

Current server release: v0.1.1, with 14 tools across 14 configured EVM chains (13 mainnets plus Sepolia).

It exposes the Ophis trading surface to autonomous agents and MCP clients without making them re-derive the fork's non-obvious, easy-to-get-wrong details (non-canonical settlement contracts on the Ophis-operated chains, the self -hosted Optimism orderbook host, the CIP-75 partner-fee appData shape, and receiver pinning).

Security model

The server holds no private keys and never signs. build_order returns a bounded, ready-to-sign EIP-712 payload with the order receiver pinned to the owner (the #1 autonomous-agent drain vector); the agent signs with its own key and submits. This is the V1 "bounded capability" pattern — an off-chain misuse guard, not an on-chain authorization boundary. It is public and unauthenticated: every backing endpoint is already public, and the tools are read/build-only.

Tools

Tool	Purpose
`parse_intent`	Plain-English swap request → structured intent (LibertAI Qwen via `swap.ophis.fi/api/intent`).
`resolve_token`	Resolve a token symbol to its canonical address from the trusted Ophis list; fails closed (anti-spoof).
`list_chains`	Supported chains, orderbook hosts, settlement contracts, partner-fee config.
`get_quote`	Best-execution quote from the chain's Ophis orderbook (`/api/v1/quote`).
`expected_surplus`	Estimate price improvement versus a public aggregator (KyberSwap), in basis points.
`build_order`	A bounded, ready-to-sign CoW order: correct per-chain settlement + orderbook, CIP-75 partner fee in appData, receiver pinned to owner.
`submit_order`	Relay a pre-signed order to the orderbook (`/api/v1/orders`). No keys held here.
`lookup_tier`	A wallet's fee-rebate tier + live status (`rebates.ophis.fi/tier/:wallet`).
`get_integrator_earnings`	What an integrator's own-fee routing earned, by appCode: routed volume + own-fee + referral rebate paid-to-date across all served chains, with figures split sovereign (Optimism, Unichain: swept in full) vs CoW-hosted (gross, not guaranteed) (`rebates.ophis.fi/earnings/:appCode`).
`get_balances`	Native + ERC-20 balances for an address on one chain.
`get_portfolio`	Native + ERC-20 balances across multiple chains.
`get_gas`	Current gas price for a chain (informational; trades are gasless for the trader).
`get_token_chart`	OHLCV price history for a token.
`validate_order`	Offline preflight for an externally-built order (no network, no keys): catches wrong appCode, orderbook host, EIP-712 domain, appData hash mismatch, unpinned receiver, and expired or non-zero-fee orders.

Typical agent flow

code

parse_intent("swap 100 USDC for WETH on Optimism")
  → resolve_token({ chainId, symbol }) for BOTH the sell and buy symbols   // canonical addresses, fails closed (anti-spoof); for a native-coin request like ETH, resolve the wrapped symbol (WETH)
  → get_quote({ chainId, sellToken, buyToken, kind:'sell', amount, from })
  → build_order({ chainId, owner, sellToken, buyToken, sellAmount, buyAmount /* slippage-adjusted */, kind })
  → (agent confirms with the user, then signs `order` as EIP-712 using `signing`)
  → submit_order({ chainId, order, signature, from, fullAppData })

Develop

bash

pnpm --filter @ophis/mcp-server test         # unit tests (pure logic)
pnpm --filter @ophis/mcp-server typecheck
pnpm --filter @ophis/mcp-server dev          # wrangler dev (local Streamable HTTP)
npx @modelcontextprotocol/inspector@latest   # point at http://localhost:8787/mcp

dev / deploy / dry-run auto-build the workspace SDK first (pre* scripts), so a clean checkout works without a manual @ophis/sdk build.

Deploy

Auto-deploys on push to main via .github/workflows/mcp-deploy.yml, using the least-privilege CLOUDFLARE_WORKERS_TOKEN secret (Workers Scripts + Routes only). Manual:

bash

pnpm --filter @ophis/mcp-server deploy        # builds the SDK, then wrangler deploy → mcp.ophis.fi

Custom domain mcp.ophis.fi is provisioned from wrangler.jsonc (routes).

After the main deployment succeeds, an organization admin creates the matching mcp-v<x.y.z> tag. .github/workflows/mcp-registry-release.yml verifies that the live /health version matches, then publishes server.json to the official MCP Registry. See the release runbook.

chainId	integer	required	EVM chain id (use list_chains for supported chains).
sellToken	string	required	Sell token address (0x...).
buyToken	string	required	Buy token address (0x...).
isStablePair	boolean	optional	Optional assertion checked against the server-owned stablecoin registry; omit to auto-classify.
kind	string	required	'sell' = you specify the sell amount; 'buy' = you specify the buy amount.
amount	string	required	Amount in atoms (uint256 decimal string).
from	string	required	The trading account address (quotes are account-aware).
validForSeconds	integer	optional	Quote validity window in seconds (default 1200 = 20 min).

chainId	integer	required	EVM chain id (use a chainId from list_chains `tradeable`).
owner	string	required	The signer/owner address (receiver defaults to this).
sellToken	string	required	Sell token address (0x...).
buyToken	string	required	Buy token address (0x...).
isStablePair	boolean	optional	Optional assertion checked against the server-owned stablecoin registry; omit to auto-classify.
sellAmount	string	required	In atoms. kind 'sell': the EXACT amount you sell. kind 'buy': the MAXIMUM you'll spend (slippage-adjusted UP from the quote).
buyAmount	string	required	In atoms. kind 'sell': the MINIMUM you accept (slippage-adjusted DOWN from the quote). kind 'buy': the EXACT amount you want to receive.
kind	string	required	'sell' = sellAmount is exact and buyAmount is your minimum out; 'buy' = buyAmount is exact and sellAmount is your maximum in.
validForSeconds	integer	optional	Order lifetime in seconds (default 1200 = 20 min; minimum 60). The enforced live-quote fetch can consume several seconds, so very short lifetimes would return a near-expired order the orderbook rejects.
feeAmount	string	optional	Signed feeAmount in atoms. Must be omitted or "0" on this tool (the fee is taken from surplus + the appData partner fee).
partiallyFillable	boolean	optional	Allow partial fills (default false = fill-or-kill).
slippageBips	integer	optional	Max accepted slippage in bips; capped at 5000 (50%); when omitted, the enforced backstop defaults to 100 bps (1%). Recorded in appData. ENFORCED: build_order fetches a live quote and rejects a limit worse than this vs the quote. Fund safety: the receiver is always pinned to the owner.
referenceBuyAmount	any	optional
referenceSellAmount	any	optional
referrerCode	string	optional	Affiliate referral code to embed in appData (credits that code's owner for eligible settled trades, including Arc). Defaults to the server's OPHIS_DEFAULT_REFERRER_CODE. An empty string opts out. Grammar: 3-64 chars [a-z0-9_-]; an invalid code errors.

chainId	integer	required	EVM chain id the order was built for.
order	object	required	The order object returned by build_order.
signature	string	required	0x EIP-712 signature over the order by the owner.
signingScheme	string	optional	Signature scheme over the order (default 'eip712').
from	string	required	The owner address that signed.
fullAppData	string	required	The fullAppData string returned by build_order.

chainId	integer	required	EVM chain id (use list_chains for Ophis chains).
owner	string	required	Wallet address to read balances for (0x...).
tokens	array	optional	ERC-20 token addresses to read (0x...); max 50. Native balance is always returned.

owner	string	required	Wallet address to read (0x...).
chainIds	array	optional	Chains to read (max 13). Omit to scan all chains with a public RPC.
tokensByChain	object	optional	Map of chainId -> ERC-20 token addresses to read on that chain (native is always included).

Ophis MCP

fi.ophis/mcp (Model Context Protocol) Server

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

parse_intent

get_quote

build_order

submit_order

lookup_tier

get_integrator_earnings

list_chains

get_balances

get_portfolio

get_gas

get_token_chart

expected_surplus

resolve_token

validate_order

@ophis/mcp-server

Security model

Tools

Typical agent flow

Develop

Deploy

Install

Remote endpoint

Related servers