Back to Browse

Tyi MCP Server

FinanceUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Agent-native self-custody wallet MCP: onboard, wallets, Arbitrum sends, policy-gated payments.

About

Agent-native self-custody wallet MCP: onboard, wallets, Arbitrum sends, policy-gated payments.

Security Report

4.2
Use Caution4.2High Risk

This MCP server implements a self-custodial wallet agent with reasonable security architecture. Private keys are stored locally and signing never leaves the device. However, the design depends critically on a remote "brain" service for intent parsing and LLM integration, which introduces dependency risk and requires HTTPS configuration. The server properly gates sensitive operations behind status checks and password validation, but the reliance on environment variable authentication and the remote brain service architecture present moderate risks that users should understand. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Keystore password for ~/.tyi (set after tyi_onboard)Required

Environment variable: TYI_PASSWORD

Tychi brain API URL (HTTPS recommended)Optional

Environment variable: TYCHI_BRAIN_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-tychiwallet-tyi-mcp": {
      "env": {
        "TYI_PASSWORD": "your-tyi-password-here",
        "TYCHI_BRAIN_URL": "your-tychi-brain-url-here"
      },
      "args": [
        "-y",
        "@tychilabs/tyi-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Tychi MCP (@tychilabs/tyi-mcp)

npm beta node mcp chain custody website license

Give your AI agent a wallet — onboard, hold funds, send, and pay under policy.

Agent-native MCP server (stdio) for Cursor and other hosts. Nine tools: routing (tyi_route), readiness (tyi_status), onboarding, fast wallet lifecycle (create / import / switch), and tyi_chat for balances, sends, and policy-gated payments on Arbitrum One. Private keys encrypted in ~/.tyi on the operator machine; signing never leaves the device. Hosted Tychi brain parses intent and runs the LLM — configure TYCHI_BRAIN_URL (HTTPS recommended; see SECURITY.md).

Agents → @tychilabs/tyi-mcp@1.0.0-beta.8 · Humans → @tychilabs/tyi

Tychi agent wallet architecture


What it does

  • Agent routingtyi_route maps intent → correct tool (avoids slow misuse of tyi_chat)
  • Readiness gatetyi_status checks mode before any wallet action
  • Onboardingtyi_onboard + tyi_onboard_schema for first-time setup (password, LLM provider, API key)
  • Wallet lifecycletyi_create_wallet, tyi_import_wallet, tyi_switch_wallet (fast, no brain loop)
  • Agent chattyi_chat for balances, sends, transfers, payments, policy, limits, history
  • Multi-wallet — create, import, switch active wallet from one keystore
  • Policy caps — spend limits enforced before signing
  • Local signing — private keys in memory on operator machine only
  • Gasless routing — UGF payment rails for cross-chain gas settlement
  • Audit log — local activity trail in ~/.tyi
  • Resettyi_reset wipes local data when operator confirms

Beta ships on Arbitrum One (chain id 42161) — EVM balances, sends, and UGF gasless payments. More chains in registry; Solana/Sui import supported.


Arbitrum One

Onchain agent wallet on Arbitrum One — self-custody, local signing, UGF gas routing today:

RoadmapWhat it unlocks
AutomationPolicy-gated agents — recurring sends, triggers, scheduled flows
TradingSpot swaps across Arbitrum liquidity — agent quotes, operator confirms
LendingSupply on Arbitrum money markets — yield without leaving keystore
BorrowingCollateralized borrow — cap-enforced, fully self-custodial

Agent flow (mandatory)

tyi_route → tyi_status
  → direct tool (onboard / create / import / switch / reset)   ← FAST
  → tyi_chat (balance / send / pay / policy only)              ← SLOW

Never call tyi_chat when tyi_status.ready is false.

Import seed or private key → tyi_import_wallet only (never via tyi_chat).


Tools

ToolUse when
tyi_routeFirst — intent → tool map
tyi_statusSession start — ready? what's missing?
tyi_onboard_schemaField schema before onboard
tyi_onboardFirst setup or LLM-only setup
tyi_create_walletNew wallet by name
tyi_import_walletImport mnemonic or privkey (EVM / Solana / Sui)
tyi_switch_walletChange active wallet
tyi_resetWipe ~/.tyi (confirm: true)
tyi_chatBalance, send, pay, transfer, policy, limits

Install

Pin the release (do not use floating @beta in production):

npx @tychilabs/tyi-mcp@1.0.0-beta.8
npx @tychilabs/tyi-mcp@1.0.0-beta.8 --tools

Security

See SECURITY.md — trust model, brain transport (HTTP beta endpoint), sensitive tools, supply-chain pinning. No install scripts.


MCP host config

Repo includes .mcp.json (Open Plugins) for Cursor Directory. Set TYI_PASSWORD and TYCHI_BRAIN_URL in host env (HTTPS brain recommended).

{
  "mcpServers": {
    "tychi": {
      "command": "npx",
      "args": ["@tychilabs/tyi-mcp@1.0.0-beta.8"],
      "env": {
        "TYI_PASSWORD": "<from tyi_onboard>",
        "TYCHI_BRAIN_URL": "<https brain URL — required>"
      }
    }
  }
}

Beta default if unset in code: http://hosted_brain.tychilabs.com — use HTTPS self-host or trusted network only.

OpenClaw:

openclaw mcp set tychi '{"command":"npx","args":["@tychilabs/tyi-mcp@1.0.0-beta.8"],"env":{"TYI_PASSWORD":"<password>","TYCHI_BRAIN_URL":"<https brain URL>"}}'
openclaw mcp reload

Onboarding modes

ModeMeaning
freshNo wallet — run tyi_onboard
llm_onlyWallet exists, no LLM key — onboard LLM fields only
readyOK for tyi_chat

Operator provides (never invent): keystore password, LLM provider + API key, optional mnemonic for import.

Prefer MCP env for TYI_PASSWORD over chat after onboard.

FieldPrompt
passwordKeystore password for ~/.tyi → later TYI_PASSWORD in MCP env
agent_nameAgent name (default Tychi)
llm_provideranthropic | gemini | openai | groq
llm_api_keyProvider API key (validated, stored encrypted on brain)
mnemonicOptional import (fresh only)

Remove integration + data

  1. tyi_reset with { "confirm": true } — wipes ~/.tyi
  2. Remove TYI_PASSWORD from MCP env
  3. OpenClaw: openclaw mcp unset tychi then openclaw mcp reload

Errors

SymptomAction
not_ready on chatRun onboard flow
TYI_PASSWORD env requiredSet env after onboard; reload host
no_llm_key / missing llm_keytyi_onboard llm_only
partial installtyi_reset then fresh onboard
fetch failed on brainSet TYCHI_BRAIN_URL explicitly; use HTTPS self-host or beta http://hosted_brain.tychilabs.com

Environment

VariableRequiredDefault
TYI_PASSWORDAfter onboard
TYCHI_BRAIN_URLRecommendedhttp://hosted_brain.tychilabs.com (beta; prefer HTTPS override)
TYI_DATA_DIRNo~/.tyi
KEYSTORE_PASSWORDAliassame as TYI_PASSWORD

Links


License

Apache License 2.0 — see LICENSE. Runtime dependency: @tychilabs/tyi.

Reviews

No reviews yet

Be the first to review this server!

Tyi MCP Server - Agent-native self-custody wallet MCP: onboard, wallets, | MCP Marketplace