Model Context Protocol server for Claude Desktop and IDEs providing secure crypto runtime for autonomous agents with transaction building, policy enforcement, and human approval workflows
Server defines 6 tools with complete input schemas and descriptions. Naming follows verb_noun convention (clavion_transfer, clavion_balance). Descriptions are present (avg ~120 chars) and explain what each tool does and its risk level. However, descriptions lack actionable context for LLM selection (e.g., when to use transfer vs swap, prerequisites, recovery guidance). Parameter descriptions are minimal (1-2 words). No output schemas documented. Error handling and recovery guidance absent. Security-critical tools (transfer, approve, swap) lack confirmation/dry-run patterns despite being irreversible. No tool annotations (destructiveHint, idempotentHint) despite high-risk operations.
Approve an ERC-20 token spending allowance for a contract through Clavion. Policy-enforced with human approval for high-risk approvals.
Check the ERC-20 token balance of a wallet address. Read-only, no signing required.
Swap tokens via Uniswap V3 through Clavion with slippage protection, simulation, and human approval. Executes through the secure signing layer.
Transfer ERC-20 tokens securely through Clavion. Enforces policy checks, risk scoring, and requires human approval before signing. Private keys never leave the secure layer.
Transfer native ETH securely through Clavion. Enforces policy checks, risk scoring, and requires human approval before signing.
Look up a transaction receipt by hash. Returns status, block number, gas used, and more. Read-only.
No output schemas documented. LLMs cannot infer response structure, forcing them to guess what fields are returned and how to chain tools.
Irreversible operations (transfer, transfer_native, swap, approve) lack confirmation/dry-run patterns. Agents cannot preview consequences before executing high-risk blockchain transactions.
No tool annotations (destructiveHint, idempotentHint, readOnlyHint). LLMs cannot distinguish safe read-only tools from destructive ones without explicit hints.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 58 | 2026-07-28+ | v2 |
Parameter descriptions are minimal (1-2 words). LLMs need format hints, constraints, and examples to avoid invalid input. E.g., 'amount' lacks units, range, or decimal precision guidance.
No error handling or recovery guidance. Descriptions do not explain what errors are possible, whether they are retryable, or what the LLM should do next.