Rift Finance MCP Server

START HERE. Get step-by-step instructions for any Rift operation. Call this FIRST when a user asks to do something and you're not sure of the exact flow. Covers: send crypto, withdraw to M-Pesa, buy crypto, bridge, check balance, login, KYC, invoices, WalletConnect, auto-swap, and more.

Search Rift Finance SDK/API documentation. Returns method signatures, code examples, and auth requirements.

Get REST API endpoint details for a service group. Returns methods, paths, auth requirements, and request body schemas.

Get all supported blockchains (with chain IDs), tokens, and fiat currencies with payment methods.

Return a ready-to-paste embed snippet for the Rift sign-in widget. Use this when a developer asks 'how do I add Rift to my site/app'. The output is a fully runnable code block keyed by their framework (html/react/nextjs). Each snippet uses the project's actual API key.

Fetch the widget configuration for the currently-set project: display name, branding (colors / logo / font), and allowed origins. Useful for diagnosing why the widget shows defaults instead of project branding. Requires rift_set_api_key first.

Return the URL of the public Rift docs portal. Use this to point a developer at integration walkthroughs (client-side, server SDK, HTTP API, transaction signing) without requiring them to log in to the dashboard.

Set the Rift project API key. MUST be called before any other live tool if no key is configured. The key starts with 'sk_'. Ask the user for it if you don't have it.

Override the Rift API URL. Only needed if using a custom deployment (not the default).

Check current connection and auth status. Call this if you're unsure whether the user is logged in or the API key is set.

Create a new Rift user account. After signup, the user needs to login separately via rift_login.

Send a one-time password to user's email or phone. Call this BEFORE: (1) rift_login — to authenticate, (2) rift_send_crypto — to authorize a transaction, (3) rift_offramp — to authorize a withdrawal. The user receives the code via SMS or email and must tell you the code.

Verify an OTP code WITHOUT logging in. Rarely needed — for login, use rift_login directly (it verifies OTP internally). For transactions/offramp, pass otpCode directly to rift_send_crypto/rift_offramp. Only use this for standalone OTP checks.

Login to Rift. Stores the session so all authenticated tools work. Three methods: (1) email + otpCode — call rift_send_otp first, (2) phoneNumber + otpCode — call rift_send_otp first, (3) externalId + password — no OTP needed. After login, you do NOT need to login again for subsequent tool calls in …

Sign in (or sign up on first use) with a Google ID token. The frontend obtains the idToken from Google's identity flow — for example, the `credential` from Google One-Tap, or an ID token from `useGoogleLogin({ flow: 'implicit' })` exchanged via Google's OAuth2 endpoint. NOT something the agent can p…

Sign in (or sign up on first use) with an Apple identity token. The frontend obtains the idToken from 'Sign in with Apple' — `authorization.id_token` from `AppleID.auth.signIn()` on web, the identity token from `ASAuthorizationAppleIDCredential` on iOS, or expo-apple-authentication on RN. NOT someth…

Logout and clear the session. After this, user must login again to use authenticated tools.

Get the logged-in user's profile. Returns: email, phone, displayName, address (smart wallet), autoSwapEnabled, autoSwapTargetChain, and more. Requires login.

Update user profile. Can change display name, email, notification email, and auto-swap settings. Requires login.

PERMANENTLY delete user account and all data. DESTRUCTIVE — confirm with user TWICE before calling.

Set up account recovery methods (email and/or phone). User can later reset their password via these methods. Requires login + OTP.

Get available recovery options for a user. Shows masked email/phone. Does NOT require login — for users who are locked out.

Start password reset flow. Sends OTP to recovery email or phone. Does NOT require login.

Complete password reset with OTP from recovery method. Does NOT require login.

Update existing recovery methods. Requires login + externalId/password for verification (verifyOtp middleware).

Add a new recovery method (email or phone). Requires login + externalId/password for verification.

Remove a recovery method. Requires login + externalId/password for verification.

Update the value of an existing recovery method. Requires login + externalId/password.

Get the current user's recovery methods. Requires login + externalId/password for verification.

Delete ALL recovery methods. DESTRUCTIVE — confirm with user. Requires login + externalId/password.

Get wallet balance. Returns crypto balances (USDC, USDT, ETH, etc), NOT fiat amounts. Call with no params for all balances across all chains. To display in local fiat: call rift_preview_exchange_rate with type='offramp', then multiply USDC balance × buying_rate. Requires login.

Send crypto to an address. REAL TRANSACTION — always confirm with user first. Requires OTP or password: for email/phone users, call rift_send_otp FIRST to get a fresh OTP. For externalId users, ask for password. Requires login.

Get on-chain transaction history (sends/receives). For offramp order history, use rift_get_offramp_orders. For onramp order history, use rift_get_onramp_orders. Requires login.

Calculate the gas/network fee for sending crypto (rift_send_crypto). This is the on-chain transaction fee, NOT the offramp/exchange fee. For offramp fees, use rift_preview_exchange_rate with amount and type='offramp'. Requires login.

Preview exchange rate. IMPORTANT: offramp and onramp rates are DIFFERENT — always set type correctly. Rate fields explained: - buying_rate = OFFRAMP/withdrawal rate — fiat per USDC when cashing out. Multiply USDC × buying_rate to get fiat the user receives. - selling_rate = ONRAMP/deposit rate — fi…

Get supported banks and mobile money providers for a currency. Use the bankCode values from here in rift_offramp. E.g. for Kenya: MPESA for M-Pesa. Requires login.

Withdraw crypto to fiat. REAL PAYMENT — confirm with user. Requires: login + merchant approval + KYC (>$20) + OTP/password. WARNING: This call can take 30-60+ seconds (on-chain tx + fiat settlement). A timeout does NOT mean failure — always check rift_poll_offramp_status with the transactionCode to…

DO NOT USE — use rift_offramp instead. This is a legacy endpoint that does the same thing. REAL PAYMENT — confirm with user.

Send an existing payment link URL to someone via SMS and/or email. This does NOT create a payment — it just delivers an existing URL. You need to have a payment link URL already (e.g. from an invoice). At least one of recipientPhone or recipientEmail is required. Requires login.

DO NOT USE THIS to show users their withdrawal fee — it only returns the raw KES buy/sell spread, not the actual fee on a withdrawal. Instead, use rift_preview_exchange_rate with an amount and type='offramp' — that returns feeBreakdown with the real fee, feePercentage, userReceivesFiat, and totalUsd…

Check the status of an offramp order. Call after rift_offramp. Status: PENDING → COMPLETED or FAILED. Requires login.

Get all past offramp orders for the user. Requires login.

Buy crypto with mobile money (M-Pesa, etc). REAL PAYMENT — confirm with user. The 'amount' here is in LOCAL FIAT currency (e.g. 1000 = 1000 KES), NOT in USDC. Use rift_preview_exchange_rate with type='onramp' first to show how much USDC they'll get. Requires: login + merchant approval + KYC (for >$2…

Check status of a crypto purchase. Requires login.

Get onramp purchase history. Requires login.

Get available cross-chain bridge routes and supported tokens. No auth required.

Get fee and output amount for a bridge transfer. Call before rift_bridge_execute to show user what they'll receive. No auth required.

Execute cross-chain bridge. MOVES REAL FUNDS — confirm with user. Does NOT require OTP. Tokens arrive in 1-5 minutes. Call rift_bridge_quote first to show fees. Requires login.

Swap one token for another on a single chain via the user's smart wallet. SAME-CHAIN ONLY — for cross-chain use rift_bridge_execute. REAL TX — confirm with user. No OTP required. Use 'flow: gasless' (recommended) for sponsored gas via UserOperation; use 'normal' to pay gas yourself. For known token…

Start KYC verification — returns a verification URL the user must visit. No auth required.

Check if a user exists and their KYC status. No auth required.

Check KYC verification status. Returns: verified, pending, failed, or provisional. No auth required.

Verify a specific KYC job by ID. Requires login.

Check if the currently logged-in user is KYC verified. Requires login.

Poll the status of a KYC verification job. Requires login.

Pair with a DApp via WalletConnect. User provides a wc: URI (usually from a QR code). Requires login.

Get pending transaction requests from connected DApps. Show these to the user for approval. Requires login.

Approve a pending DApp request. Always show the request details to user first. Requires login.

Reject a pending DApp request. Requires login.

List active WalletConnect sessions. Requires login.

Disconnect from a DApp session. Requires login.

Create a payment invoice and get a payment URL. No OTP required. KYC required for >$20. Requires login.

List invoices. Filter by status, date range, and sort order. Requires login.

Check if the user's account has merchant (KYB) approval. Required for offramp/onramp operations. Requires login.

Register a device for push notifications. Requires login.

Send a push notification to all of the user's registered devices. Requires login.

Get or delete all notification subscriptions. Requires login.

Get wallet address and details for a specific chain. Requires login.

Sign a raw blockchain transaction WITHOUT broadcasting it (low-level). This is NOT for sending tokens — use rift_send_crypto for that. Returns signed tx data for manual submission. Requires login.

Execute a call through the user's SMART WALLET as an ERC-4337 UserOperation. For advanced use (contract calls, native transfers) — for simple token sends use rift_send_crypto instead. REAL TX — confirm with user. Semantics an AI MUST know: - The on-chain sender is the user's SMART WALLET, NOT their…

Sign an arbitrary message with the user's private key. Used for DApp authentication, off-chain signatures, etc. Requires login.

Get the list of supported token TYPES (metadata: name, contract address, chain). This is NOT balances — use rift_get_balance for balances. No auth required.

Get the list of token TYPES the user has interacted with (metadata, not balances). For actual balances, use rift_get_balance. Requires login.

Get supported chains or details for a specific chain. No auth required.

Suspend a user from the platform. Admin operation. Requires API key.

Unsuspend a previously suspended user. Admin operation.

List all suspended users. Admin operation.

Check if a specific user is suspended. Admin operation.

Get onchain deposit history for the user (queried live from The Graph). Shows inbound transfers to the user's smart wallets with USDC amounts, KES conversion, sender address, tx hash, and timestamp. This is NOT a balance check — use rift_get_balance for current balances. Requires login.

Get deposit statistics: totalDeposits (count), totalUsdcAmount, totalKesAmount, plus the full deposits list. Summary of all onchain deposits to the user's wallets. Requires login.