@axon402/cli (axon-op).
If you are wiring an IDE or agent host, start with MCP Server for the runtime surface and IDE Setup for the operator/manage surface. Teach
governed_fetch first; it is the default runtime spend path and the primary story for new integrations.Runtime Configuration
- stdio runtime (
axon-mcp-server, default surface) exposes the same current 17-tool runtime surface as HTTP - HTTP runtime (
/v1/mcp) exposes that runtime surface over Streamable HTTP
- wallet-bound tenant keys are the canonical credential for
/v1/mcp - org-wide tenant keys with no wallet binding receive a JSON-RPC
WALLET_BINDING_REQUIREDerror - static operator-key fallback on
/v1/mcpis demo-only; live worker agents should use wallet-bound tenant keys
Runtime Tool Categories
Default spend path
Runtime context
Approvals and budget requests
Forensics and outcomes
Provider-search tools
These tools are part of the runtime surface and are available on stdio runtime,/v1/mcp, and /v1/wallets/:wallet_id/mcp.
pay_402_challenge is no longer runtime-exposed. governed_fetch is
the supported runtime path for paying a 402 challenge; the raw signer is
still used internally for gated retry/test-buy flows after AXON policy
checks pass.Operator / manage actions
The following actions are control-plane responsibilities. They are available to operators via the dashboard,@axon402/cli (axon-op), or the explicit operator/manage MCP surface — not through the runtime MCP surface:
- Wallet lifecycle:
list_wallets,create_wallet,get_wallet_details - Treasury and emergency controls:
fund_pocket,emergency_stop - Offer operations:
list_offers,get_offer,create_offer,publish_offer,unpublish_offer,configure_origin,test_buy_offer,pause_offer,resume_offer,archive_offer - Org and key introspection:
whoami,get_organization,list_api_keys,inspect_api_key,list_transactions,get_earnings,get_ledger,list_mandates,update_mandate
Error Contract
MCP tools return structured errors withisError: true: