Server data from the Official MCP Registry
Agent-native self-custody wallet MCP: onboard, wallets, Arbitrum sends, policy-gated payments.
Agent-native self-custody wallet MCP: onboard, wallets, Arbitrum sends, policy-gated payments.
This MCP server implements a self-custodial wallet agent with reasonable security architecture. Private keys are stored locally and signing never leaves the device. However, the design depends critically on a remote "brain" service for intent parsing and LLM integration, which introduces dependency risk and requires HTTPS configuration. The server properly gates sensitive operations behind status checks and password validation, but the reliance on environment variable authentication and the remote brain service architecture present moderate risks that users should understand. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
7 files analyzed · 11 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: TYI_PASSWORD
Environment variable: TYCHI_BRAIN_URL
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-tychiwallet-tyi-mcp": {
"env": {
"TYI_PASSWORD": "your-tyi-password-here",
"TYCHI_BRAIN_URL": "your-tychi-brain-url-here"
},
"args": [
"-y",
"@tychilabs/tyi-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
@tychilabs/tyi-mcp)Give your AI agent a wallet — onboard, hold funds, send, and pay under policy.
Agent-native MCP server (stdio) for Cursor and other hosts. Nine tools: routing (tyi_route), readiness (tyi_status), onboarding, fast wallet lifecycle (create / import / switch), and tyi_chat for balances, sends, and policy-gated payments on Arbitrum One. Private keys encrypted in ~/.tyi on the operator machine; signing never leaves the device. Hosted Tychi brain parses intent and runs the LLM — configure TYCHI_BRAIN_URL (HTTPS recommended; see SECURITY.md).
Agents → @tychilabs/tyi-mcp@1.0.0-beta.8 · Humans → @tychilabs/tyi

tyi_route maps intent → correct tool (avoids slow misuse of tyi_chat)tyi_status checks mode before any wallet actiontyi_onboard + tyi_onboard_schema for first-time setup (password, LLM provider, API key)tyi_create_wallet, tyi_import_wallet, tyi_switch_wallet (fast, no brain loop)tyi_chat for balances, sends, transfers, payments, policy, limits, history~/.tyityi_reset wipes local data when operator confirmsBeta ships on Arbitrum One (chain id 42161) — EVM balances, sends, and UGF gasless payments. More chains in registry; Solana/Sui import supported.
Onchain agent wallet on Arbitrum One — self-custody, local signing, UGF gas routing today:
| Roadmap | What it unlocks |
|---|---|
| Automation | Policy-gated agents — recurring sends, triggers, scheduled flows |
| Trading | Spot swaps across Arbitrum liquidity — agent quotes, operator confirms |
| Lending | Supply on Arbitrum money markets — yield without leaving keystore |
| Borrowing | Collateralized borrow — cap-enforced, fully self-custodial |
tyi_route → tyi_status
→ direct tool (onboard / create / import / switch / reset) ← FAST
→ tyi_chat (balance / send / pay / policy only) ← SLOW
Never call tyi_chat when tyi_status.ready is false.
Import seed or private key → tyi_import_wallet only (never via tyi_chat).
| Tool | Use when |
|---|---|
tyi_route | First — intent → tool map |
tyi_status | Session start — ready? what's missing? |
tyi_onboard_schema | Field schema before onboard |
tyi_onboard | First setup or LLM-only setup |
tyi_create_wallet | New wallet by name |
tyi_import_wallet | Import mnemonic or privkey (EVM / Solana / Sui) |
tyi_switch_wallet | Change active wallet |
tyi_reset | Wipe ~/.tyi (confirm: true) |
tyi_chat | Balance, send, pay, transfer, policy, limits |
Pin the release (do not use floating @beta in production):
npx @tychilabs/tyi-mcp@1.0.0-beta.8
npx @tychilabs/tyi-mcp@1.0.0-beta.8 --tools
See SECURITY.md — trust model, brain transport (HTTP beta endpoint), sensitive tools, supply-chain pinning. No install scripts.
Repo includes .mcp.json (Open Plugins) for Cursor Directory. Set TYI_PASSWORD and TYCHI_BRAIN_URL in host env (HTTPS brain recommended).
{
"mcpServers": {
"tychi": {
"command": "npx",
"args": ["@tychilabs/tyi-mcp@1.0.0-beta.8"],
"env": {
"TYI_PASSWORD": "<from tyi_onboard>",
"TYCHI_BRAIN_URL": "<https brain URL — required>"
}
}
}
}
Beta default if unset in code: http://hosted_brain.tychilabs.com — use HTTPS self-host or trusted network only.
OpenClaw:
openclaw mcp set tychi '{"command":"npx","args":["@tychilabs/tyi-mcp@1.0.0-beta.8"],"env":{"TYI_PASSWORD":"<password>","TYCHI_BRAIN_URL":"<https brain URL>"}}'
openclaw mcp reload
| Mode | Meaning |
|---|---|
fresh | No wallet — run tyi_onboard |
llm_only | Wallet exists, no LLM key — onboard LLM fields only |
ready | OK for tyi_chat |
Operator provides (never invent): keystore password, LLM provider + API key, optional mnemonic for import.
Prefer MCP env for TYI_PASSWORD over chat after onboard.
| Field | Prompt |
|---|---|
password | Keystore password for ~/.tyi → later TYI_PASSWORD in MCP env |
agent_name | Agent name (default Tychi) |
llm_provider | anthropic | gemini | openai | groq |
llm_api_key | Provider API key (validated, stored encrypted on brain) |
mnemonic | Optional import (fresh only) |
tyi_reset with { "confirm": true } — wipes ~/.tyiTYI_PASSWORD from MCP envopenclaw mcp unset tychi then openclaw mcp reload| Symptom | Action |
|---|---|
not_ready on chat | Run onboard flow |
TYI_PASSWORD env required | Set env after onboard; reload host |
no_llm_key / missing llm_key | tyi_onboard llm_only |
partial install | tyi_reset then fresh onboard |
fetch failed on brain | Set TYCHI_BRAIN_URL explicitly; use HTTPS self-host or beta http://hosted_brain.tychilabs.com |
| Variable | Required | Default |
|---|---|---|
TYI_PASSWORD | After onboard | — |
TYCHI_BRAIN_URL | Recommended | http://hosted_brain.tychilabs.com (beta; prefer HTTPS override) |
TYI_DATA_DIR | No | ~/.tyi |
KEYSTORE_PASSWORD | Alias | same as TYI_PASSWORD |
Apache License 2.0 — see LICENSE. Runtime dependency: @tychilabs/tyi.
Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption