Is tychi-mcp safe to install?

SaferSkills independently audited tychi-mcp (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md7.2 KB · Markdown

Tychi MCP (`@tychilabs/tyi-mcp`)

Give your AI agent a wallet — onboard, hold funds, send, and pay under policy.

Agent-native MCP server (stdio) for Cursor and other hosts. Nine tools: routing (tyi_route), readiness (tyi_status), onboarding, fast wallet lifecycle (create / import / switch), and tyi_chat for balances, sends, and policy-gated payments on Arbitrum One. Private keys encrypted in ~/.tyi on the operator machine; signing never leaves the device. Hosted Tychi brain parses intent and runs the LLM — configure TYCHI_BRAIN_URL (HTTPS recommended; see SECURITY.md).

Agents → @tychilabs/[email protected] · Humans → @tychilabs/tyi

Tychi agent wallet architecture

What it does

Agent routing — tyi_route maps intent → correct tool (avoids slow misuse of tyi_chat)
Readiness gate — tyi_status checks mode before any wallet action
Onboarding — tyi_onboard + tyi_onboard_schema for first-time setup (password, LLM provider, API key)
Wallet lifecycle — tyi_create_wallet, tyi_import_wallet, tyi_switch_wallet (fast, no brain loop)
Agent chat — tyi_chat for balances, sends, transfers, payments, policy, limits, history
Multi-wallet — create, import, switch active wallet from one keystore
Policy caps — spend limits enforced before signing
Local signing — private keys in memory on operator machine only
Gasless routing — UGF payment rails for cross-chain gas settlement
Audit log — local activity trail in ~/.tyi
Reset — tyi_reset wipes local data when operator confirms

Beta ships on Arbitrum One (chain id 42161) — EVM balances, sends, and UGF gasless payments. More chains in registry; Solana/Sui import supported.

Arbitrum One

Onchain agent wallet on Arbitrum One — self-custody, local signing, UGF gas routing today:

Roadmap	What it unlocks
Automation	Policy-gated agents — recurring sends, triggers, scheduled flows
Trading	Spot swaps across Arbitrum liquidity — agent quotes, operator confirms
Lending	Supply on Arbitrum money markets — yield without leaving keystore
Borrowing	Collateralized borrow — cap-enforced, fully self-custodial

Agent flow (mandatory)

tyi_route → tyi_status
  → direct tool (onboard / create / import / switch / reset)   ← FAST
  → tyi_chat (balance / send / pay / policy only)              ← SLOW

Never call tyi_chat when tyi_status.ready is false.

Import seed or private key → tyi_import_wallet only (never via tyi_chat).

Tools

Tool	Use when
`tyi_route`	First — intent → tool map
`tyi_status`	Session start — ready? what's missing?
`tyi_onboard_schema`	Field schema before onboard
`tyi_onboard`	First setup or LLM-only setup
`tyi_create_wallet`	New wallet by name
`tyi_import_wallet`	Import mnemonic or privkey (EVM / Solana / Sui)
`tyi_switch_wallet`	Change active wallet
`tyi_reset`	Wipe `~/.tyi` (`confirm: true`)
`tyi_chat`	Balance, send, pay, transfer, policy, limits

Install

Pin the release (do not use floating @beta in production):

npx @tychilabs/[email protected]
npx @tychilabs/[email protected] --tools

Security

See [SECURITY.md](./SECURITY.md) — trust model, brain transport (HTTP beta endpoint), sensitive tools, supply-chain pinning. No install scripts.

MCP host config

Repo includes .mcp.json (Open Plugins) for Cursor Directory. Set `TYI_PASSWORD` and `TYCHI_BRAIN_URL` in host env (HTTPS brain recommended).

{
  "mcpServers": {
    "tychi": {
      "command": "npx",
      "args": ["@tychilabs/[email protected]"],
      "env": {
        "TYI_PASSWORD": "<from tyi_onboard>",
        "TYCHI_BRAIN_URL": "<https brain URL — required>"
      }
    }
  }
}

Beta default if unset in code: http://hosted_brain.tychilabs.com — use HTTPS self-host or trusted network only.

OpenClaw:

openclaw mcp set tychi '{"command":"npx","args":["@tychilabs/[email protected]"],"env":{"TYI_PASSWORD":"<password>","TYCHI_BRAIN_URL":"<https brain URL>"}}'
openclaw mcp reload

Onboarding modes

Mode	Meaning
`fresh`	No wallet — run `tyi_onboard`
`llm_only`	Wallet exists, no LLM key — onboard LLM fields only
`ready`	OK for `tyi_chat`

Operator provides (never invent): keystore password, LLM provider + API key, optional mnemonic for import.

Prefer MCP env for TYI_PASSWORD over chat after onboard.

Field	Prompt
`password`	Keystore password for `~/.tyi` → later `TYI_PASSWORD` in MCP env
`agent_name`	Agent name (default `Tychi`)
`llm_provider`	`anthropic` \	`gemini` \	`openai` \	`groq`
`llm_api_key`	Provider API key (validated, stored encrypted on brain)
`mnemonic`	Optional import (fresh only)

Remove integration + data

tyi_reset with { "confirm": true } — wipes ~/.tyi
Remove TYI_PASSWORD from MCP env
OpenClaw: openclaw mcp unset tychi then openclaw mcp reload

Errors

Symptom	Action
`not_ready` on chat	Run onboard flow
`TYI_PASSWORD env required`	Set env after onboard; reload host
`no_llm_key` / missing `llm_key`	`tyi_onboard` llm_only
`partial install`	`tyi_reset` then fresh onboard
`fetch failed` on brain	Set `TYCHI_BRAIN_URL` explicitly; use HTTPS self-host or beta `http://hosted_brain.tychilabs.com`

Environment

Variable	Required	Default
`TYI_PASSWORD`	After onboard	—
`TYCHI_BRAIN_URL`	Recommended	`http://hosted_brain.tychilabs.com` (beta; prefer HTTPS override)
`TYI_DATA_DIR`	No	`~/.tyi`
`KEYSTORE_PASSWORD`	Alias	same as `TYI_PASSWORD`

License

Apache License 2.0 — see LICENSE. Runtime dependency: @tychilabs/tyi.

tychi-mcp— plugin

Is tychi-mcp safe to install?

Tychi MCP (`@tychilabs/tyi-mcp`)

What it does

Arbitrum One

Agent flow (mandatory)

Tools

Install

Security

MCP host config

Onboarding modes

Remove integration + data

Errors

Environment

Links

License

Audit the pieces. Scan the whole. Decide.

Is tychi-mcp safe to install?

Tychi MCP (@tychilabs/tyi-mcp)

What it does

Arbitrum One

Agent flow (mandatory)

Tools

Install

Security

MCP host config

Onboarding modes

Remove integration + data

Errors

Environment

Links

License

Audit the pieces. Scan the whole. Decide.

Tychi MCP (`@tychilabs/tyi-mcp`)