tyi-sui-mcp

# Tychi Sui MCP (`@tychilabs/tyi-sui-mcp`) — Sui Agent Bridge [](https://www.npmjs.com/package/@tychilabs/tyi-sui-mcp) [](https://nodejs.org) [](https://modelcontextprotocol.io) [](https://sui.io) [](https://opensource.org/licenses/Apache-2.0)  **MCP server for Sui agent wallets.** Release: `@tychilabs/tyi-sui-mcp@1.0.0-beta.1` · Runtime: `@tychilabs/tyi-sui@1.0.0-beta.1` ``` Operator (human or AI agent) │ ▼ stdio · 9 tools ┌─────────────┐ Action[] ┌─────────────────┐ │ tyi-sui-mcp │ ────────────────────────▶ │ tyi executor │ └──────┬──────┘ (no keys on wire) │ ~/.tyi · sign │ │ └────────┬────────┘ │ HTTPS intent SUI · USDC ▼ ▼ ┌─────────────┐ ┌─────────────┐ │ Tychi brain │ │ Sui mainnet │ │ policy·LLM │ └─────────────┘ └─────────────┘ ``` --- ## Agent flow ``` tyi_route → tyi_status → tyi_onboard | tyi_create_wallet | tyi_import_wallet | tyi_switch_wallet FAST → tyi_chat (portfolio / send / policy / history) SLOW ``` Never `tyi_chat` when `tyi_status.ready` is false. Secrets → `tyi_import_wallet` only, never chat. --- ## Tools Nine stdio tools. Route and lifecycle operations are synchronous MCP calls; chat drives the full brain loop. | Tool | Role | |------|------| | `tyi_route` | Intent → tool routing map (call first) | | `tyi_status` | Readiness, `sui_address`, missing setup fields | | `tyi_onboard_schema` | Onboarding field schema | | `tyi_onboard` | First-time or LLM-only setup | | `tyi_create_wallet` | Add wallet to keystore | | `tyi_import_wallet` | Import mnemonic or `sui_privkey` | | `tyi_switch_wallet` | Set active wallet | | `tyi_reset` | Wipe local data (`confirm: true`) | | `tyi_chat` | Portfolio oversight, policy-governed sends, transaction audit trail | --- ## Install ```bash npx @tychilabs/tyi-sui-mcp@1.0.0-beta.1 npx @tychilabs/tyi-sui-mcp@1.0.0-beta.1 --tools npx @tychilabs/tyi-sui-mcp@1.0.0-beta.1 --help ``` --- ## MCP host config ```json { "mcpServers": { "tychi-sui": { "command": "npx", "args": ["@tychilabs/tyi-sui-mcp@1.0.0-beta.1"], "env": { "TYI_PASSWORD": "<from tyi_onboard>", "TYCHI_BRAIN_URL": "http://hosted_sui_brain.tychilabs.com" } } } } ``` See [`.mcp.json`](./.mcp.json) · [SECURITY.md](./SECURITY.md) --- ## Onboarding | Mode | When | |------|------| | `fresh` | No keystore — run full `tyi_onboard` | | `llm_only` | Wallet exists — supply LLM provider + API key | | `ready` | `tyi_chat` permitted | Password, LLM credentials, and import secrets must come from the operator — never from the host model. --- ## Environment | Variable | Required | Default | |----------|----------|---------| | `TYI_PASSWORD` | After onboard | — | | `TYCHI_BRAIN_URL` | Recommended | `http://hosted_sui_brain.tychilabs.com` · local: `http://localhost:8788` | | `TYI_DATA_DIR` | No | `~/.tyi` | --- ## Errors | Symptom | Fix | |---------|-----| | `not_ready` | Run onboard flow | | `TYI_PASSWORD env required` | Set in MCP env; reload host | | `no_llm_key` | `tyi_onboard` (llm_only) | | `partial install` | `tyi_reset` → fresh onboard | --- ## Roadmap Stdio MCP bridge for **agent wallets on Sui**. Agent hosts get routing, lifecycle, and chat tools; keystore, policy, and signatures stay on the operator device. Public release **July 2026** after internal custody audit. ### Why Sui (MCP lens) **Local custody + PTBs** — `tyi_chat` drives the full brain loop: portfolio queries, policy-governed sends, estimate → confirm → execute. Keys never cross the MCP wire. **Move objects** — On-chain spending caps and owner revoke (Phase 2). MCP tools surface readiness and policy state; enforcement moves from config to chain. **Agent surfaces** — Nine stdio tools today (route, status, onboard, wallet lifecycle, chat). Phase 3 adds trading and automation tools so hosts can orchestrate DeepBook and scheduled flows without new custody models. **zkLogin / identity** — Verifiable agent identity on Sui; MCP status and audit trails tie actions to a real principal. **DeepBook** — Agent-quoted trades: MCP chat loop → quote → operator confirm → local sign. Same pattern as portfolio sends. **Walrus + Seal** — Encrypted agent memory off-chain, refs on Sui objects. MCP hosts get durable agent context without holding secrets. ### Phase 1 — shipped - `tyi_route` + `tyi_status` — intent routing and readiness gate - Onboard + wallet lifecycle — create, import, switch, reset - `tyi_chat` — **portfolio command**, policy-governed transfers, transaction audit trail ### Phase 2 — on-chain agent core - Move spending caps and owner revoke exposed via MCP status/policy tools - On-chain activity log; zkLogin or on-chain agent identity ### Phase 3 — agent commerce & memory (July) - DeepBook + automation MCP tools - Walrus + Seal memory integration - Expanded tool catalog; pre-release security review --- ## Links - [tychilabs.com](https://tychilabs.com) - [npm @tychilabs/tyi-sui-mcp](https://www.npmjs.com/package/@tychilabs/tyi-sui-mcp) - [npm @tychilabs/tyi-sui](https://www.npmjs.com/package/@tychilabs/tyi-sui) Apache-2.0 · Runtime: `@tychilabs/tyi-sui`