Skip to content

feat(wallet-mcp): add AgentForge plugin - #17

Open
acarchidi wants to merge 1 commit into
coinbase:mainfrom
acarchidi:add-agentforge
Open

acarchidi wants to merge 1 commit into
coinbase:mainfrom
acarchidi:add-agentforge

Conversation

@acarchidi

Copy link
Copy Markdown

Description

Adds the AgentForge Wallet MCP plugin (skills/wallet-mcp/plugins/agentforge.md, version 0.1.0, http-api).

AgentForge is a read-only pre-flight check. Before the agent calls send_calls, send, swap or sign (typed data), it sends the same calls, typed data, recipients or tokens to POST https://agentforge-taupe.vercel.app/v1/preflight and gets one proceed / caution / avoid verdict: transaction simulation (reverts, assets out, approvals granted), permit / Permit2 / Seaport phishing checks, OFAC sanctions and scam-list screening, and token rug checks. It returns no calldata and never signs or moves funds; the checked action is then submitted unchanged through Wallet MCP. Each check is paid per call in USDC on Base with the Wallet MCP x402 tools ($0.003 to $0.028 per check). Calls that fail with 4xx/5xx are not charged.

Chains: base, ethereum, arbitrum, optimism, polygon, bsc, avalanche (simulation is not available on Avalanche; the other checks run). The plugin tells the agent there is no coverage on robinhood-chain and base-sepolia.

The five tags (security, preflight, simulation, phishing, sanctions) are new, so they are appended to the tag vocabulary in references/plugin-spec.md, as the spec asks.

Contact: agentforge.api@gmail.com. Source (MIT): https://github.com/acarchidi/agentforge

Change type

  • Harness integration or metadata
  • Skill workflow
  • Bug fix
  • Documentation
  • Breaking change (describe migration)

Validation

  • Prices, payee, network and asset in the file were read from the live 402 PAYMENT-REQUIRED header (/v1/preflight amount 8000 = $0.008, 16000 with two tokens) and from GET /catalog. Request and response fields match the published JSON Schemas.
  • python3 -m unittest discover -s tests passes (38 tests). python3 scripts/build-distributions.py <dir> completes.
  • The plugin-review skill is not in this checkout (.claude/skills/plugin-review/ is absent), so the file was checked by hand against the spec's Required Body Sections, Canonical heading names and Authoring Checklist: all required frontmatter fields with valid enums; http-api with ## Endpoints; risk: [irreversible] with a matching ## Risks & Warnings bullet; sections in canonical order; ## Surface Routing states the chat-only behavior; ## Submission names the target tool and the mapping.
  • Not run: an authenticated Wallet MCP smoke test of initiate_x402_request / complete_x402_request against this host.
  • Diff is the plugin file plus the tag vocabulary line. The SKILL.md registry row and the conformance table are left to maintainers per the contribution scope.
  • Commit is signed (created through the GitHub API).

Release considerations

agentforge-taupe.vercel.app is not on the web_request allowlist yet; until it is, the free GET /catalog read on chat-only surfaces is unavailable, and the plugin says so. Maintainers to add the SKILL.md registry row on acceptance.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant