@octogear/mcp-agent

Local, fail-closed AI agent runtime — an MCP server that lets an LLM autonomously operate a user's credit accounts across HyperEVM, Polygon, and Hyperliquid, under cryptographic policy limits and real-time owner approval gates.

Install

npm install -g @octogear/mcp-agent

Then in Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

{
  "mcpServers": {
    "octogear": {
      "command": "octogear-mcp",
      "args": []
    }
  }
}

Restart Claude Desktop. The wizard at https://octogear.crediolabs.ai/settings/agent walks you through onboarding.

What it does

• Self-verify at boot: fetches the canonical manifest from https://octogear.crediolabs.ai/.well-known/mcp-manifest.json, verifies its sigstore signature offline (no network for Fulcio/Rekor — bundled trusted root), and hard-fails on any mismatch.
• Per-surface pause/revoke: independent pause state for each surface (HL, HyperEVM, Polygon). Owner can revoke one without affecting others.
• HMAC-authenticated bridge: local WebSocket on ws://127.0.0.1:7491 carries signed owner verbs (handshake, policy-update, revoke-signal, oob-request, resume-request). HKDF-derived secret from the agent's K_bot key.
• Policy engine: daily caps (50 tx / $10k notional by default), pause state machine (NONE / WRITES_ONLY / FULL), OOB tiers (setup $100, runtime $5000, offplatform $100) with $100 red-line.
• 57 LLM tools: Hyperliquid perps (17), Gearbox HyperEVM (12), Gearbox Polygon (11), Pool LP (5 read-only), Portfolio (5), System (5), Util (1), Polymarket (4). The /earn write surface is intentionally excluded.

Trust model

• Fail-closed: if any self-verify step fails, the agent refuses to serve tools and exits 1.
• Identity-anchored: only Claude Desktop clients with the correct fingerprint can connect.
• Audit-logged: every action (writes + signed intents + OOB outcomes) is appended to the local audit log.
• Multi-sig-style provenance: each release is signed with sigstore-js keyless (Fulcio OIDC + Rekor), bound to the release workflow identity. Tampered builds are caught at boot.

Requirements

• Node.js >= 22
• A funded EVM wallet on at least one of: HyperEVM testnet (998), Polygon mainnet (137), Hyperliquid L1.

Source

Canonical source: https://github.com/untangledfinance/octogear-app

License

MIT — see LICENSE.