Agent Integration

​

Overview

• Simulate a transfer to preview fees, duration, and route viability without executing
• Execute a transfer across 17 chains (EVM, Solana, Aptos, Sui)
• Query supported routes and CCTP versions programmatically

​

MCP Server

{
  "mcpServers": {
    "cashmere": {
      "command": "npx",
      "args": ["-y", "@cashmerelabs/[email protected]"],
      "env": {
        "CASHMERE_EVM_PRIVATE_KEY": "0x...",
        "CASHMERE_MCP_MAX_AMOUNT": "500",
        "npm_config_ignore_scripts": "true"
      }
    }
  }
}

/plugin install cashmere --marketplace cashmere-prod/cashmere-agent-sdk

claude mcp add --env CASHMERE_MCP_READ_ONLY=1 --env npm_config_ignore_scripts=true --transport stdio cashmere -- npx -y @cashmerelabs/[email protected]

mcp_servers:
  cashmere:
    command: "npx"
    args: ["-y", "@cashmerelabs/[email protected]"]
    env:
      CASHMERE_EVM_PRIVATE_KEY: "0x..."
      CASHMERE_MCP_MAX_AMOUNT: "500"
      npm_config_ignore_scripts: "true"

​

Environment

• It is listed only when a private key is set and CASHMERE_MCP_READ_ONLY is not.
• Its description tells the agent to confirm the amount, the chains and the recipient with the user before calling it, and not to retry a failed call on its own.
• It is annotated as destructive. In Claude Code it always needs the user’s own approval, never a one-tap one.
• Before signing, it refuses:
  • a recipient that is not in the destination chain’s address format. CCTP takes any 32 bytes as the recipient, so an EVM address sent to Sui or Aptos would otherwise mint to an account nobody controls;
  • a Gas API quote for another destination, or with a fee or deadline out of bounds;
  • an amount above CASHMERE_MCP_MAX_AMOUNT or past CASHMERE_MCP_MAX_TOTAL, or a recipient outside CASHMERE_MCP_ALLOWED_RECIPIENTS;
  • a transfer identical to one from the last 10 minutes, unless the agent passes allowDuplicate after asking the user;
  • a call that the client cancelled or timed out while it waited.
• It sends one transfer at a time and reports success only once the transaction is confirmed. Its errors never contain a private key.

​

Goat LP Tools

​

Plan, then execute

​

What the tools check

• The chain is Robinhood Chain (4663), checked again right before anything is signed.
• Every contract the tools send to, or give a permission to, matches the code hash pinned in the SDK, and the Uniswap position managers point at the pinned PoolManager and factory. None of the Goat LP contracts is upgradeable, and their source is published on the explorer.
• Each transaction is decoded and simulated right before it is signed. A revert refuses it, and the amounts must match the plan.
• A signed message for v4 auto-compound is checked before signing: only for GoatAutoCompoundV4, for a position the wallet owns, at most 30 runs at a time and at most 90 days.
• Never a permission for all positions, an unlimited token or Permit2 allowance, a transfer of a position, an output to anyone but the wallet, or an owner, guardian or keeper function. No swaps. Another app’s approval on a position is left alone.
• Automations only where the app offers them: listed pairs, reviewed hooks, and the keeper’s size limit per pair. A refusal gives the app’s reason. Nothing is turned on while that list cannot be read from api.cashmere.exchange; a stop still works.
• Deposits: Uniswap v3 pools and v4 pools without a hook; no token that copies an official stock ticker or takes a fee when it moves; the pool price within 5% of Chainlink where both tokens have a feed; balances that cover the deposit.

​

Fees

​

Settings

​

Not in this version

• Deposits into Uniswap v4 pools that have a hook are refused; use the app for those.
• Allow for all positions is not available to agents.

​

Agent Skill

​

Install

npm install @cashmerelabs/cashmere-agent-sdk

npm install @langchain/core @langchain/langgraph

​

Quick Setup

import { CashmereCCTP } from '@cashmerelabs/cashmere-agent-sdk';

const cctp = new CashmereCCTP({
  evm: { privateKey: process.env.EVM_PRIVATE_KEY! },
  solana: { privateKey: process.env.SOLANA_PRIVATE_KEY! },
  aptos: { privateKey: process.env.APTOS_PRIVATE_KEY! },
  sui: { privateKey: process.env.SUI_PRIVATE_KEY! },
});

​

Simulate Before Execute

const sim = await cctp.simulate({
  from: 'ethereum',
  to: 'arbitrum',
  amount: '100',
});

// {
//   supported: true,
//   version: 'v2-fast',
//   estimatedDuration: '~15 seconds',
//   estimatedFee: { cashmere: '343617201738094 wei (native)', circleBurnBps: 1.3 }
// }

​

Framework Integration

import {
  bridgeToolSchema,
  simulateToolSchema,
  supportedRoutesToolSchema,
  getSupportedRoutes,
} from '@cashmerelabs/cashmere-agent-sdk';

const tools = [
  { type: "function", function: bridgeToolSchema },
  { type: "function", function: simulateToolSchema },
  { type: "function", function: supportedRoutesToolSchema },
];

const response = await openai.chat.completions.create({
  model: "gpt-4",
  messages: [
    { role: "system", content: "You are a cross-chain treasury agent." },
    { role: "user", content: "Bridge 500 USDC from Ethereum to Solana" },
  ],
  tools,
});

// When the model calls a Cashmere tool, parse the arguments and call the SDK.
// Confirm a cashmere_bridge call with the user before running it.
const call = response.choices[0].message.tool_calls[0];
if (call.function.name === 'cashmere_simulate') {
  const result = await cctp.simulate(JSON.parse(call.function.arguments));
} else if (call.function.name === 'cashmere_supported_routes') {
  const result = getSupportedRoutes(JSON.parse(call.function.arguments));
} else if (call.function.name === 'cashmere_bridge') {
  const result = await cctp.transfer(JSON.parse(call.function.arguments));
}

import { CashmereCCTP } from '@cashmerelabs/cashmere-agent-sdk';
import {
  CashmereBridgeTool,
  CashmereSimulateTool,
} from '@cashmerelabs/cashmere-agent-sdk/tools/langchain';
import { createReactAgent } from '@langchain/langgraph/prebuilt';

const cctp = new CashmereCCTP({
  evm: { privateKey: process.env.EVM_PRIVATE_KEY! },
});

const tools = [
  new CashmereBridgeTool(cctp),
  new CashmereSimulateTool(cctp),
];

// Use with any LangChain chat model, e.g. new ChatAnthropic({ model: 'claude-sonnet-5-5' }) from @langchain/anthropic
const agent = createReactAgent({ llm: chatModel, tools });
const result = await agent.invoke({
  messages: [{ role: "user", content: "Send 200 USDC from Base to Polygon" }],
});

# Copy the description from bridgeToolSchema: it tells the model to confirm with the user first
cashmere_tool = {
    "name": "cashmere_bridge",
    "description": "Bridge USDC across chains via Cashmere CCTP...",
    "parameters": {
        "type": "object",
        "properties": {
            "from": {"type": "string", "description": "Source chain"},
            "to": {"type": "string", "description": "Destination chain"},
            "amount": {"type": "string", "description": "USDC amount"},
            "recipient": {"type": "string", "description": "Destination address"},
        },
        "required": ["from", "to", "amount", "recipient"],
    },
}

import {
  CashmereCCTP,
  getSupportedRoutes,
  hermesTools,
  hermesSystemPrompt,
  parseHermesToolCalls,
  hermesToolResponse,
} from '@cashmerelabs/cashmere-agent-sdk';

const cctp = new CashmereCCTP({ evm: { privateKey: process.env.EVM_PRIVATE_KEY! } });
const system = hermesSystemPrompt(hermesTools(), 'You move USDC between chains for the user.');
// Hermes 2 Pro and 3 read tool results as a `tool` message, Hermes 4 as a `user` message
const toolResultRole = 'user'; // Hermes 4

// After each model reply. Tool calls inside <think> are skipped.
for (const call of parseHermesToolCalls(reply)) {
  const args = call.arguments as any;
  let result: unknown;
  if (call.name === 'cashmere_simulate') result = await cctp.simulate(args);
  else if (call.name === 'cashmere_supported_routes') result = getSupportedRoutes(args);
  else if (call.name === 'cashmere_bridge') result = await confirmWithUserThenTransfer(args); // your own approval step
  messages.push({ role: toolResultRole, content: hermesToolResponse(call.name, result) });
}

import {
  bridgeToolSchema,
  simulateToolSchema,
  supportedRoutesToolSchema,
  getSupportedRoutes,
} from '@cashmerelabs/cashmere-agent-sdk';

// bridgeToolSchema, simulateToolSchema and supportedRoutesToolSchema are plain objects:
// {
//   name: "cashmere_bridge",
//   description: "...",
//   parameters: { type: "object", properties: {...}, required: [...] }
// }

// Register as tools in your framework, then dispatch:
async function handleToolCall(name: string, args: any) {
  if (name === 'cashmere_bridge') {
    // Moves funds: show the user the amount, chains and recipient, and wait for their yes
    if (!(await confirmWithUser(args))) return { error: 'The user did not confirm this transfer' };
    return await cctp.transfer(args);
  } else if (name === 'cashmere_simulate') {
    return await cctp.simulate(args);
  } else if (name === 'cashmere_supported_routes') {
    return getSupportedRoutes(args);
  }
}

​

Tool Schemas Reference

​

cashmere_bridge

​

cashmere_simulate

​

cashmere_supported_routes

​

Supported Chains

​

SKILL.md (Agent Context)

import { readFileSync } from 'node:fs';
import { createRequire } from 'node:module';

// In CommonJS, use the built-in require instead
const require = createRequire(import.meta.url);
const skillContext = readFileSync(
  require.resolve('@cashmerelabs/cashmere-agent-sdk/SKILL.md'),
  'utf8',
);

// Pass as system message to your LLM
const messages = [
  { role: "system", content: skillContext },
  { role: "user", content: "What's the fastest way to bridge 1000 USDC to Solana?" },
];

• All contract addresses and program IDs (public, on-chain data)
• Fee calculation formulas and gas API integration
• Per-chain transfer patterns and ABI details
• CCTP version routing rules and estimated durations

​

Security

• Keys come from environment variables or your own secret store, and are used only for in-memory signing
• The MCP server reads keys from its environment only, removes them from its environment once read, never logs them, and redacts them from tool errors
• The library never writes to the console; the MCP server prints one status line to stderr, without keys
• Every contract address in the SDK is public on-chain data
• .env.example ships with empty values: never commit .env

​

Next Steps

• Smart Contracts — per-chain contract details and ABI reference
• Backend APIs — Gas API and monitoring endpoints
• Contract Addresses — deployed addresses for all 17 chains
• GitHub — source code and issues