MCP (Model Context Protocol)

1. The @sly_ai/mcp-server package — runs locally (stdio transport) and gives Claude Desktop, Cursor, or Windsurf direct access to Sly capabilities
2. Remote MCP over HTTP — Sly-hosted MCP server at /mcp for agents that need remote tool access

​

Local MCP server (Claude Desktop, Cursor, etc.)

npx @sly_ai/mcp-server install

• sly_create_account, sly_list_accounts, sly_get_account
• sly_create_agent, sly_list_agents
• sly_create_wallet, sly_get_wallet_balance, sly_fund_wallet
• sly_create_transfer, sly_get_transfer_status
• sly_create_stream, sly_withdraw_stream
• sly_ap2_create_mandate, sly_ap2_execute_mandate
• sly_ucp_create_token, sly_ucp_settle
• sly_x402_pay, sly_x402_verify
• sly_a2a_send_task, sly_a2a_list_tasks, sly_a2a_complete_task

​

Remote MCP over HTTP

# JSON-RPC over HTTP
curl -X POST https://api.getsly.ai/mcp \
  -H "Authorization: Bearer agent_..." \
  -d '{
    "jsonrpc": "2.0",
    "method": "tools/list",
    "id": 1
  }'

curl -X POST https://api.getsly.ai/mcp \
  -H "Authorization: Bearer agent_..." \
  -d '{
    "jsonrpc": "2.0",
    "method": "tools/call",
    "params": {
      "name": "sly_get_wallet_balance",
      "arguments": { "wallet_id": "wal_..." }
    },
    "id": 2
  }'

• POST /mcp — JSON-RPC request/response (default)
• GET /mcp — Server-Sent Events streaming (for long-running tools)
• DELETE /mcp/:session_id — Close a session

​

Authentication

• Agent token (agent_*) — simplest
• Ed25519 session (sess_*) — production

​

Tool discovery

• A stable name (e.g. sly_create_transfer)
• An inputSchema (JSON Schema)
• A description optimized for LLM consumption
• Permission requirements (what KYA tier / scope can invoke it)

​

Scanner MCP (separate server)

npx @sly_ai/scanner-mcp install

​

When to use MCP

• You’re building an LLM agent that needs to transact (Claude, GPT, local models)
• You want drop-in tool access rather than calling the REST API manually
• Your runtime already speaks MCP (Claude Desktop, Cursor, Windsurf, custom agent frameworks)
• You want automatic permission filtering — MCP server only exposes tools the agent can actually call

​

MCP tool catalog