8004swap MCP server

8004Swap

Non-custodial RFQ exchange built only for autonomous agents (not humans). Every trade is a direct match between two agents (maker/taker), settled atomically on-chain — no pre-funded liquidity pool, following the 0x Protocol / CoW Swap pattern.

Differentiator: no-KYC access + on-chain reputation via ERC-8004, not just another exchange with a bot layer bolted onto infra that still requires human KYC.

Status: testnet (Base Sepolia). No real funds at risk. No formal audit yet.

Architecture

Maker agent   ──┐                                    ┌── Taker agent
                │   WebSocket (RFQ, off-chain          │
                ▼    EIP-712 signature, gasless)        ▼
           ┌─────────────────────────────────────────────┐
           │                 Relay (relay/)               │
           │  RFQ matching, best-price ranking            │
           └─────────────────────┬─────────────────────────┘
                                  │ signed quote
                                  ▼
                     ┌───────────────────────────┐
                     │   Settlement.sol           │  ← atomic settlement,
                     │   (contracts/Settlement.sol)│    Chainlink oracle,
                     └─────────────┬───────────────┘    risk caps
                                   │ isActive() / recordFill()
                                   ▼
                     ┌───────────────────────────┐
                     │   Registry.sol             │  ← who's allowed to trade
                     │   (contracts/Registry.sol) │
                     └───────────────────────────┘

proves key control). Owner can pause globally.

• Registry.sol — registry of authorized agents (self-registration, msg.sender

registered per pair (deny-by-default), checks staleness, applies risk caps (maxTradeAmount, maxVolumePerWindow) and an optional anti-sybil fee (feeBps).

• Settlement.sol — settles an EIP-712-signed Quote. Requires a Chainlink oracle

RFQs by token pair, and returns the best signed quote to the taker, who settles on-chain by calling fillQuote directly.

• relay/ — WebSocket server that authenticates agents (login signature), matches

EIP-712 signing and on-chain settlement, for anyone integrating an agent without reimplementing the protocol from scratch. See sdk/README.md.

• sdk/ (@stakemate/8004swap-agent-sdk) — TypeScript client that wraps the WS handshake,

websockets + web3.py). See sdk-python/README.md.

• sdk-python/ (8004swap-agent-sdk) — same thing, in Python (eth_account +

tools (requestquote, fillquote, checkagentstatus, register_agent), so any MCP-capable agent can trade directly without a human in the loop. See mcp-server/README.md.

• mcp-server/ (@stakemate/8004swap-mcp-server) — exposes the protocol as MCP

See PROTOCOL.md for the exact Relay message format.

Running locally

Contracts (Foundry)

forge build
forge test

Relay

cd relay
npm install
cp .env.example .env   # fill in BASE_RPC_URL, REGISTRY_ADDRESS
npm run dev

Agent examples (maker/taker) live in relay/examples/ — they run against the local or hosted Relay. To integrate a new agent, prefer sdk/ (@stakemate/8004swap-agent-sdk), which wraps the same flow as those examples as a library.

Contract deployment

forge script script/DeploySepolia.s.sol --rpc-url <sepolia_rpc> --private-key <key> --broadcast

script/Deploy.s.sol is the mainnet version (4 pairs against USDC) — do not run without an explicit decision, contracts have not gone through a formal audit yet.

Current network (Base Sepolia)

Shortened. The full README is on GitHub.