Siphon MCP

Siphon is confidential execution for on-chain finance.
This package connects AI agents (Cursor, Claude Desktop, and any MCP client) to Siphon so they can shield assets, arm confidential limit orders, and settle on-chain — without cloning a monorepo.

Strategies run with fully homomorphic encryption (FHE) on price conditions and zero-knowledge proofs on vault spends. Your agent keeps the client key; Siphon’s execution network evaluates and settles when conditions are met.

Why agents use Siphon

| Capability | What it means | |------------|----------------| | Confidential limits | Arm USDC→ETH (and related) strategies without broadcasting your trigger logic in the clear | | Shielded balances | Move size into the vault; notes stay local to the agent | | Real settlement | Execution hits Siphon Entrypoint contracts on Base — not a simulation | | Zero-clone install | One npx line; FHE + proving artifacts ship in the package |

Requirements

• Node.js 20+ (npx included)
• A Siphon API key (sk_live_… / sk_test_…) from the dashboard — required to create strategies
• A funded agent wallet on Base (gas ETH + USDC for shield + arming fee)
• Siphon trade-executor URL and Entrypoint

Get a key + install in one step

1. Open Siphon dapp → UserDash → API Keys
2. Buy prepaid credit → copy the key (shown once)
3. Use Install Siphon MCP → Open in Cursor or Copy MCP config (embeds SIPHON_API_KEY as Bearer for the agent)

Without SIPHON_API_KEY, armLimitSwap / createStrategy are refused.

Install (Cursor)

Add to .cursor/mcp.json (or your MCP client’s config):

{
  "mcpServers": {
    "siphon": {
      "command": "npx",
      "args": ["-y", "siphon-money-mcp"],
      "env": {
        "SIPHON_API_KEY": "sk_live_YOUR_KEY",
        "TRADE_EXECUTOR_URL": "https://YOUR-EXECUTOR.example",
        "SIPHON_ENTRYPOINT_ADDRESS": "0x…",
        "NEXT_PUBLIC_ENTRYPOINT_ADDRESS": "0x…",
        "NEXT_PUBLIC_BASE_MAINNET_DEPLOY_BLOCK": "49118375",
        "BASE_RPC_URL": "https://base.publicnode.com",
        "NEXT_PUBLIC_BASE_EXECUTOR_ADDRESS": "0x…",
        "SIPHON_ALLOW_PLAINTEXT_CLIENTKEY": "true",
        "NEXT_PUBLIC_ALLOW_PLAINTEXT_CLIENTKEY": "true"
      }
    }
  }
}

On Windows, prefer "command": "npx.cmd". First run downloads this package (~9MB including FHE wasm and swap proving keys). Agent state defaults to ~/.siphon-agent (SIPHON_AGENT_DIR to override).

Reload MCP, then call getSetupStatus and follow nextSteps.

Agent workflow

getSetupStatus → generateWallet → fund Base → shield → armLimitSwap → getStrategy

Typical demo size: 0.4 USDC shielded notional, 0.25 USDC arming fee, ~0.001 ETH gas.

| Tool | Role | |------|------| | getSetupStatus | Environment and readiness checklist | | generateWallet / getAgentWallet | Agent EOA and balances | | shield / unshield | Enter / exit the vault | | armLimitSwap | Confidential LIMIT_SELL (FHE bounds + ZK spend + createStrategy) | | listStrategies / getStrategy | Track executor status through EXECUTED |

Hosted vs local

| Local (this package) | Hosted (Siphon) | |----------------------|-----------------| | FHE encrypt, ZK prove, wallet & notes | Key intake, strategy lifecycle, on-chain settle | | MCP tools over stdio | TRADE_EXECUTOR_URL + Entrypoint |

Links

• Product: siphon.money
• Docs: deeper guide in the Siphon repository (docs/mcp.md)

Maintainers

cd siphon_judge/packages/mcp
npm install && npm run build && npm pack
npm publish --access public

Monorepo MCP (dev only): cd ../sdk-ts && bun src/mcp.ts