Skip to main content
The AXON MCP toolset is split across two explicit surfaces. The runtime surface is the default worker-agent path. The operator/manage surface is an advanced control-plane path for trusted admin automation. The runtime surface exposes the tools a worker agent needs to use a prepared wallet safely: governed spend, policy and budget reads, approval loops, receipts, and outcome reporting. Wallet lifecycle, treasury, key rotation, mandate edits, and org-wide emergency actions are control-plane responsibilities and live in the dashboard and @axon402/cli (axon-op).
If you are wiring an IDE or agent host, start with MCP Server for the runtime surface and IDE Setup for the operator/manage surface. Teach governed_fetch first; it is the default runtime spend path and the primary story for new integrations.

Runtime Configuration

Transport split:
  • stdio runtime (axon-mcp-server, default surface) exposes the same current 17-tool runtime surface as HTTP
  • HTTP runtime (/v1/mcp) exposes that runtime surface over Streamable HTTP
HTTP runtime nuance:
  • wallet-bound tenant keys are the canonical credential for /v1/mcp
  • org-wide tenant keys with no wallet binding receive a JSON-RPC WALLET_BINDING_REQUIRED error
  • static operator-key fallback on /v1/mcp is demo-only; live worker agents should use wallet-bound tenant keys

Runtime Tool Categories

Default spend path

Runtime context

Approvals and budget requests

Forensics and outcomes

Provider-search tools

These tools are part of the runtime surface and are available on stdio runtime, /v1/mcp, and /v1/wallets/:wallet_id/mcp.
pay_402_challenge is no longer runtime-exposed. governed_fetch is the supported runtime path for paying a 402 challenge; the raw signer is still used internally for gated retry/test-buy flows after AXON policy checks pass.

Operator / manage actions

The following actions are control-plane responsibilities. They are available to operators via the dashboard, @axon402/cli (axon-op), or the explicit operator/manage MCP surface — not through the runtime MCP surface:
  • Wallet lifecycle: list_wallets, create_wallet, get_wallet_details
  • Treasury and emergency controls: fund_pocket, emergency_stop
  • Offer operations: list_offers, get_offer, create_offer, publish_offer, unpublish_offer, configure_origin, test_buy_offer, pause_offer, resume_offer, archive_offer
  • Org and key introspection: whoami, get_organization, list_api_keys, inspect_api_key, list_transactions, get_earnings, get_ledger, list_mandates, update_mandate

Error Contract

MCP tools return structured errors with isError: true:
See Error Codes for the complete reference.