Felix MCP

Open an encrypted two-way Felix support ticket. The ticket is account-scoped, idempotent, rate-limited, and readable only by this account and Felix support.

Create an HTTPS webhook for fills/positions/agent events. Returns signing_secret once.

Delete a webhook by id.

Deploy a compiled or hand-written strategy as a live agent by default. markets binds every open to one of 1-4 owner-selected instruments and should match the backtest. Stop loss and other server-monitored exits are optional on Hyperliquid and Derive; omit them to let the strategy manage exits. Polymarket does not support server exit plans, so omit those fields and let the strategy or market resolution close exposure. If a requested supported exit plan cannot be armed after a fill, Felix pauses and attempts a reduce-only unwind. Hyperliquid leverage is blocked unless allow_leverage:true is expl…

Deploy the caller-owned Polymarket deposit wallet without sending an owner key or signature to Felix.

Verify the owner's locally validated personal-sign challenge and activate the Safe policy wallet. Accepts a signature, never the owner key. Follow felix://getting-started.

Explicit paper-mode helper. Requires a registered local launcher identity plus paper:true, then creates an isolated zero-fund sandbox with a least-privilege paper key. For cold start read felix://getting-started; for real money use create_account.

Route funds from the client-owned main EOA to prediction markets, crypto, or Derive options. Native Polygon USDC is automatically converted to USDC.e only as needed, with hashes disclosed. Felix may cover required gas; the owner key signs locally and never reaches Felix.

Set up the caller's distinct venue-scoped autonomous Polymarket wallet, then locally sign one exact pUSD transfer to it. Felix cannot redirect the destination and never receives the owner key. Use this before deploying a live Polymarket agent; direct client-signed orders continue using the client-owned wallet.

Turn a plain-English idea into a runnable def think(ctx) strategy. This uses the account's generation budget; get_strategy_guide or felix://strategy/ctx-api always provides the complete manual authoring contract for free.

Read a caller-owned agent's durable decision log, including each decision, runtime outcome, block/error reason, market snapshot, and latency.

Read progress or the terminal result for a durable asynchronous backtest without starting another computation.

Fast venue collateral snapshot plus Polygon cash and paper position count. Provider gaps are returned explicitly instead of hidden behind retries; set wait_for_complete:true to wait through the bounded Derive refresh cycle. This intentionally excludes marked Polymarket positions and owner-wallet balances on other chains; use get_money_map for canonical account-value and money-tracking decisions.

Poll a caller-owned asynchronous close operation by its idempotency UUID. This never submits or retries an order.

Verify that guided onboarding created an encrypted local recovery file which authenticates to the currently installed owner and launcher identity. Returns status only; no key, recovery code, credential, or file contents are exposed.

Client-owned Polygon deposit address. It accepts native USDC or bridged USDC.e; fund_market automatically converts native USDC locally when needed.

Read the current owner-signed Derive onboarding state. Never returns a private session key.

Upcoming earnings dates and estimates from the delayed market-data feed.

Delayed consolidated equity-option chain for stocks and ETFs. This is distinct from tradeable Derive crypto options.

Read the encrypted exit plan attached to one owned position.

Read prepaid execution-fee credit. Live Polymarket and Derive opens reserve this credit before submission; withdrawals never collect trading fees.

Get one feedback report belonging to this Felix account.

Current fee schedule by market and tier.

Entry/exit fills with prices, fees, and realized PnL.

Period-labelled company fundamentals. Live/TTM snapshots and filed figures are returned separately, never silently blended.

Perp funding rate for an instrument.

Public liveness check. No key required.

Read and reconcile a caller-owned Hyperliquid API-wallet onboarding request.

Account/API insights exposed by Felix.

Show the public address of the client-held launcher or deterministically derived child owner key. The private key is never returned.

Return the bundled secure WebSocket protocol, subscription, reconnect, and backpressure contract without an API key or network request. The same guide is published as felix://market-data/websocket.

Authenticated guide to client-observable reliability fields: request ID, server latency, retry timing, and the public status URL. Process and platform diagnostics are not returned.

One call that answers 'where is my money': every wallet, venue, and open-position balance as one flat list, each entry saying what it is for and which call moves it. Defaults to a fast snapshot with explicit freshness; set wait_for_complete:true to wait through bounded venue refreshes. Sources that cannot be verified are listed as unavailable, never assumed zero. Prefer this over get_balances for money-tracking decisions.

Read durable progress or the terminal result for an asynchronous money operation without starting or repeating a transfer.

Inspect any active funding network-fee obligation, whether owner funds moved, and whether Felix can safely release it without payment.

Option chain for BTC, ETH, SOL, etc: expiries, strikes, greeks, IV, quotes, and tightest_round_trip candidates ranked by quoted spread. Always use preview_order for an exact executable cost check before trading.

Poll a caller-owned Hyperliquid or Derive live-order intent after an ambiguous venue response. Retry only when safe_to_retry is true.

Top-of-book/orderbook view for a tradeable instrument.

Realized/unrealized PnL, fees, net PnL, and open/closed counts.

Reconcile a client-signed Polymarket intent after an uncertain or delayed venue response.

Read the caller-owned Polymarket deposit wallet and setup state without deploying, approving, signing, or spending gas. Pass account_id to inspect an owned child account instead of the active one.

Portfolio summary: deployed paper capital and live balances.

Open paper and live positions, scoped to the key's account.

Price for one instrument. Listed equity tickers can resolve to a live equity-perpetual execution mark rather than the delayed cash share price; inspect product_type, price_role, venue, tradeable, and data_class before using it. research_market provides cash-equity historical context.

Get one canonical operating snapshot: agents, positions, marks, PnL, money, pending operations, recent decisions, and active risk blocks. Partial sources are explicitly unavailable, never silently zero.

Fast public platform, local MCP, and current-key status. Set deep:true before onboarding or diagnosing funding to include the sanitized readiness result.

Return the bundled think(ctx) API and hand-written strategy examples without an API key, network request, or generation quota. The same content is published as felix://strategy/ctx-api and felix://strategy/examples.

Current subscription/tier for the key's account.

Read one caller-owned support ticket and its complete two-way message thread.

Pricing tiers and included API limits.

Read a caller-owned Safe onboarding request status.

Prepare Hyperliquid approveAgent typed data for the caller-owned main wallet. Felix creates only a scoped API wallet that cannot withdraw or transfer funds.

Start advanced client-owned Safe onboarding. The owner key must be generated and retained outside Felix; only public addresses are sent. Read felix://getting-started before implementing the signing flow.

List isolated child accounts owned by the launcher account. Archived accounts are hidden unless requested. When next_cursor is non-null, call again with that cursor until it is null; page order is opaque and is not creation order.

List this account's agents, including paused/error recovery instructions. Results are owner-scoped, bounded, and omit strategy source and encrypted state.

List this account's exit plans and trigger state.

List feedback reports belonging to this Felix account.

Page deterministically through a venue's complete market catalog, including active, future, resolved, or inactive markets. Follow next_cursor until complete is true.

List durable local money operations for the active account, including progress, terminal results, and exact recovery instructions.

List encrypted support tickets for the active Felix account.

List active webhooks for this account.

List allowlisted withdrawal addresses and owner-authorization status. A launcher manage key may target one owned child with account_id.

Reserved two-sided quote tool. Live use is disabled until compensated two-leg execution ships.

Migrate a caller-owned legacy Safe to Felix V3 in one resumable local workflow: prove ownership, deploy only the V3 policy, locally execute enable/fallback/disable-V2, and confirm atomic account promotion.

Complete Hyperliquid approveAgent onboarding for a child account (needed after the account is funded before it can trade). The owner key signs the approval locally and never reaches Felix.

Emergency stop: block new exposure, cancel and flatten where possible, and revoke every active key for this account. Set confirm=true; there is no hidden phrase or waiting period.

Place orders in one explicit mode. mode:live executes real-money orders; mode:paper simulates every item. Mixed or implicit modes are rejected. The schema accepts up to 50 items, but the active tier's order-per-minute allowance applies to the entire batch (10 on free). Processing stops before later live items after the first failure.

Place a real-money order by default, optionally funding the selected venue first and attaching a server-monitored OCO exit plan. Set auto_fund:true for one-call local-signing fund-then-trade; it requires an idempotency_key and never exposes the owner key. Set paper:true explicitly to simulate. Leveraged Hyperliquid exposure is blocked unless allow_leverage:true is explicit.

Prepare exact Derive-chain transactions for the verified owner wallet to send. Felix never receives the owner key.

Build the exact fixed-home Polymarket withdrawal message for the client-owned wallet to sign. This never signs or moves funds.

Prepare an owner-signed Safe V3 pause, resume, renewal, or emergency lockdown. Lockdown atomically pauses the agent and revokes fixed Polymarket approvals.

Prepare an exact Safe withdrawal transaction after allowlist checks. USDC.e means bridged USDC.e on Polygon, which many centralized exchanges do not support; prefer a self-custody Polygon wallet and convert before an exchange deposit. Returns EIP-712 data for the owner to sign locally; no money moves yet.

Deprecated compatibility alias for preview_fee_top_up. It previews prepaid execution-fee credit and never exposes the collection address.

Preview an owner-signed execution-fee credit top-up without signing or exposing Felix's collection address. Nothing moves until top_up_fee_balance is called.

Preview an order before placing it. No money moves; returns estimated fill, fees, live minimum, collateral, selected venue, and projected Hyperliquid leverage. Set auto_fund:true to include the exact owner-to-venue funding plan without executing it.

Resume the side-effect-free Felix commit/reconciliation step when Polymarket returned an order hash but the API response was interrupted. This never posts a venue order.

Reload the current launcher API key and owner signer from macOS Keychain, validate their encrypted workflow journal, and explicitly leave any child account. No secret is returned.

Renew an expired or missing Derive session in one local, owner-signed workflow while preserving the existing subaccount and funds.

Add an encrypted message to an open caller-owned support ticket.

Report a Felix bug, product issue, or request. Content is encrypted at rest and never logged.

Real historical research cards and agent-ready market signals without using the strategy-generation token budget.

Resolve one exact funding-fee obligation. action=release is allowed only when Felix proves no owner funds moved; action=pay locally signs the fixed gas-wallet fee only after a verified owner-value funding transaction.

Resume a durable backtest only after its operation lease expired, typically after an API restart. The encrypted original request is reused.

Resume an interrupted asynchronous money operation with its original encrypted arguments and idempotency key. When a prior send may have happened, confirm_reconciled:true is required.

Revoke the stored Polymarket fixed-home withdrawal authorization for the account.

Route live funds from the owner wallet to one venue. The six source_market/destination_market RFQ pairs are discoverable now but execute only after router capabilities report cross_venue_execution_ready:true. Until then they fail before moving money and direct agents to bring_home then fund_market. Felix asks approved LPs first; only owner-wallet funding may use the approved protocol fallback. The owner key signs locally.

Scan delayed consolidated equity-option chains for unusual volume/open-interest and premium. This is decision support, not tape-level sweep data.

Screen a bounded liquid stock/crypto universe by momentum, trend, RSI, volatility, and dollar volume.

Search across stocks, crypto, perps, options, and prediction markets with one fuzzy query. Use list_markets for complete venue enumeration.

Set or replace the Felix API key for this running MCP session. The key is never echoed back.

Create or replace one encrypted, server-monitored OCO exit plan on an owned Hyperliquid or Derive position.

Deprecated compatibility alias for top_up_fee_balance. It adds prepaid credit; it does not settle debt and is never called by withdrawals.

Start a durable long-running backtest and return immediately with an operation_id. Poll get_backtest_operation; API restarts can be recovered with resume_backtest_operation.

Start a durable bring-home operation and return immediately with an operation_id. Use this for crypto and other routes that can take minutes; owner signing remains local and encrypted recovery state survives MCP restarts.

Start durable venue funding and return immediately with an operation_id. Prefer this for crypto and options bridges; poll get_money_operation while the owner-signed route settles.

Stop a caller-owned running agent.

Verify the owner's exact prepared Derive transactions after a browser wallet broadcasts them, or relay exact CLI-signed raw transactions.

Store an owner-signed, fixed-home Polymarket withdrawal grant for venue-scoped policy checks. Never accepts a private key.

Relay an exact owner-signed Safe V3 policy transaction. Accepts only the sealed policy token and canonical Safe signature.

Relay an owner-signed Safe withdrawal prepared by prepare_withdrawal. Accepts only the request id and 65-byte signature, never a private key.

Convert Polygon native USDC into USDC.e. This is owner-signed, same-chain, may receive gas assistance, and normally happens automatically inside fund_market.

Send a sample order.filled event to active webhooks.

Sign one bounded USDC.e transfer locally and credit it for live execution fees. By default this refuses to consume the recommended owner-wallet trading buffer. Orders reserve exact fees before submission; no fee debt is created.

Update a stopped/paused agent's name, cadence, risk limits, or server-monitored exits in place while retaining its UUID, positions, fills, and decision history. Set resume:true to restart after the atomic update.

Locally verify, sign, and relay a Safe V3 pause, resume, renewal, or emergency lockdown in one replay-safe workflow. Lockdown also revokes fixed Polymarket approvals.

Buy or renew 30 days of Felix Pro for exactly $20 in native Polygon USDC. The owner signs locally, auto-renew is off, and retries reconcile the original transaction instead of paying twice.

Activate a previously created child account for this session by minting and installing its owner-signed live key. After this, fund_market/place_order/etc. operate on the child. The child owner key is derived locally and never reaches Felix.

Verify this account's Safe owner, threshold, enabled V3 module, immutable bindings, and policy against Polygon chain state.

Long-poll durable account ledgers for agent decisions/errors and position opens/closes. One call replaces repeated polling and returns after an event or the bounded timeout.

Wait inside one MCP call for a money or backtest operation to finish, avoiding repeated LLM polling. Returns early on completion, failure, interruption, or reconciliation-required state.

Withdraw from the funded policy Safe or owner Polygon wallet. USDC.e withdrawals deliver bridged USDC.e on Polygon; many centralized exchanges do not support it, so prefer a self-custody Polygon wallet and convert to native USDC before an exchange deposit. Felix prepares one exact intent; the local owner key signs and the result is confirmed on-chain without exposing key material.