Phantom Launches MCP Server That Lets AI Agents Sign and Swap

527 views
Phantom Wallet

Phantom introduced what it calls the Phantom MCP Server, positioning it as a bridge between MCP-compatible AI clients and Phantom wallet operations. The announcement frames the product as a way for agents to “swap, sign, and manage addresses” across Phantom’s supported networks, with compatibility aimed at Claude and other MCP clients.

In practice, the MCP server is published as the npm package @phantom/mcp-server and is presented as a preview release. The package description and setup flow focus on giving an AI interface direct access to wallet primitives via a small set of tools that an agent can call during a conversation The Capabilities That Matter

The most important change is not that an AI model can “understand” a wallet. It is that an MCP client can now request wallet operations as tool calls, and the server can route those requests through Phantom’s embedded wallet stack.

According to the @phantom/mcp-server README, the server supports Solana, Ethereum, Bitcoin, and Sui and exposes five tools: get_wallet_addresses, sign_transaction, transfer_tokens, buy_token, and sign_message. Two of those tools matter for risk, not just convenience.

transfer_tokens builds, signs, and submits a Solana transfer, and it submits immediately. buy_token fetches a Solana swap quote from Phantom’s quotes API and can submit the first quote transaction immediately when execute is enabled. That design pulls wallets closer to being an “agent execution layer,” where the same interface that fetches information can also move assets.

How Authentication and Sessions Work

Phantom’s approach leans on SSO and session persistence. The README describes a first-run login flow that opens a browser session at connect.phantom.app for Google or Apple sign-in, then receives a callback through a local server on a configurable port. It also emphasizes that the Phantom Portal app identity used for setup must match the email used for authentication.

Session persistence is implemented through a local session file stored at ~/.phantom-mcp/session.json with restrictive permissions, and the server uses stamper keys for signing API requests and maintaining access across runs. That is a usability win for developers, but it also means the security model becomes partly about local machine hygiene, not only on-chain transaction safety.

Why This Changes the Wallet Narrative

Wallets already serve as routing hubs for swaps, bridges, and dApp connections. The MCP server makes a wallet callable by an agent, which shifts the product surface from “UI that a human drives” to “capability set that software can invoke.”

This creates a new distribution path for wallet features. If a developer installs the MCP server and wires it into an MCP client, the agent becomes the interface layer. That can make routine actions feel faster, such as fetching addresses, preparing a swap quote, or generating a signed message for authentication. It can also make complex flows easier to orchestrate, such as moving funds, then signing a follow-up transaction, then verifying balances.

In the near term, the likely winners are automation-heavy workflows: power users who rebalance portfolios, teams that need repeatable signing flows, and builders prototyping agentic apps that can execute predefined actions on a schedule or in response to triggers.

Security and Permissioning Become the Product

Agent execution puts permissioning and approval semantics in the spotlight. The README includes an explicit execution warning: transfer_tokens always submits immediately, and buy_token can submit immediately when execute is true. It also includes a preview disclaimer urging early adopters to use a separate Phantom account for testing and to avoid accounts containing significant assets.

That framing signals the main risk vector: the agent and its tool environment can become the attack surface. A compromised MCP client, a malicious prompt injection, or an overly permissive automation setup can turn “assistant” into “transaction originator.”

For teams experimenting with this stack, the first line of defense is operational. Keep a dedicated low-balance account for agent testing, separate it from day-to-day funds, and assume that any unattended execution pathway needs hard limits. If the workflow requires swaps or transfers, consider using sign_transaction for reviewable signing flows instead of immediate execution tools, and ensure the calling client supports clear confirmation prompts.

What to Watch Next

The near-term signal to track is how Phantom evolves the guardrails. Spending caps, allowlists, transaction simulations, and delays are the difference between a novelty integration and something institutions can adopt.

Another signal is developer uptake. MCP server adoption tends to be driven by quick-start friction, stable auth, and clear tool semantics. Phantom’s choice to ship as an npm package with npx support and a defined Claude Desktop configuration suggests the team is targeting rapid experimentation.

Solana coin symbol
Sol
Solana
$73,91
price
green chart
increase symbol0.2%
price change
TRADE NOW

If agent-driven wallet operations become common, the market will likely split into two camps: wallets optimized for human-first UX and wallets optimized for programmable execution. Phantom’s MCP server is an early move toward the second category, where “wallet” starts to look like an API surface that can be governed, monitored, and constrained like any other production system.

Previous

Strategy’s Average BTC Cost Basis Slips After $168M Buy

Next

Whale Deposits $30M USDC on Hyperliquid and Opens 3x BTC Long

Written by

1619 posts

Born and raised in Romania, currently living in Spain. Iulian discovered a knack for writing from a tender age, won some minor awards for fiction that didn't pay much.

VIEW AUTHOR

Publish your own article

Guest post article. Guaranteed publishing with just a few clicks

START PUBLISHING ADVERTISE WITH US

Browse categories

Explore trending topics in the crypto community right now.

Bitcoin

Strategy Sells 1,638 BTC As Saylor Defends “Never Sell” Message

Strategy sold 1,638 BTC for $104.7 million between July 27 and August 2, completing its third disclosed Bitcoin sale of 2026 and reducing its holdings to 842,138 BTC. The sale was completed at an average price of $63,957 per coin. Strategy’s remaining Bitcoin was acquired for $63.51 billion at an average price of $75,419, leaving the company with more than 4% of Bitcoin’s maximum supply. Bitcoin Proceeds Fund Dividends And STRC Buybacks Strategy allocated $52.4 million from the latest Bitcoin...

Coldcard Drain Reaches 1,367 BTC As Galaxy Finds Third Suspected Wave

Galaxy Research identified a third suspected attack wave involving Bitcoin addresses believed to have been generated by vulnerable Coldcard firmware. The latest wave drained 207.7294 BTC, lifting the estimated observed total to 1,367.05 BTC across 4,585 addresses. Galaxy valued the combined transfers at approximately $88.6 million when it published the update. Third Wave Uses Different Transaction Pattern The first two suspected waves followed similar onchain patterns, including a funnel structure that moved funds into a small group of shared collector...

Strategy Opens Door To Roughly $5B In Bitcoin Sales For Reserves And Buybacks

Strategy has opened the door to roughly $5 billion in potential Bitcoin sales under a balance-sheet programme covering cash reserves, preferred dividends, debt interest and securities repurchases. The figure combines up to $1.25 billion for the USD reserve, approximately $1.76 billion in current annual dividend and interest obligations and as much as $2 billion across common and preferred-stock repurchase programmes. The BTC Monetization Program has no expiration date and does not require Strategy to sell any specific amount. Bitcoin Sales...

Coinkite Warns Coldcard Mk3 Users As Block Traces Up To 1,083 BTC In Drains

Coinkite has warned every user who generated a seed on a Coldcard Mk3 running firmware 4.0.1 through 5.0.3 to treat the wallet as potentially exposed and migrate its bitcoin. The security advisory followed research by Block’s Bitcoin engineering and security teams, which identified weak seed-generation behavior while investigating remotely drained wallets. Coinkite’s immediate warning covers Mk3 firmware released from March 2021 onward. The company’s early analysis says Mk4, Q and Mk5 devices are not affected by the issue behind its...

MORE ARTICLES

Ethereum

Triple-A-Linked Wallets Drained Of More Than $9.7M Across Four Chains

Wallets attributed to stablecoin payments firm Triple-A were drained of more than $9.7 million across TRON, Ethereum, Polygon and Arbitrum before the assets were routed to Ethereum. Onchain analyst Specter traced the multichain outflows and linked the affected wallets to Triple-A. The stolen assets were moved through cross-chain bridges and consolidated into 5,227 ETH at an Ethereum address beginning with 0x01F8 and ending with 53b1. The transfers converged on the address after funds moved out of wallets on all four...

Arthur Hayes Wallet Adds $2.53 Million In Ether As Recent Buying Tops $5 Million

A wallet tracked as belonging to BitMEX co-founder Arthur Hayes purchased 1,332.5 ETH worth about $2.53 million early Tuesday, extending a fresh accumulation run as ether traded near $1,900. Lookonchain flagged the purchase roughly three hours after the transaction. The implied acquisition price was about $1,899 per ETH. Hayes had not publicly confirmed the trade at publication. The same tracker recorded a 1,293 ETH purchase worth $2.48 million on July 15. The two transactions added 2,625.5 ETH for approximately $5.01...

BitMine Repurchases 5.5 Million Shares As Weekly ETH Buying Slows

BitMine Immersion Technologies repurchased approximately 5.5 million common shares over the past week as the company shifted capital away from its usual pace of Ethereum accumulation. The shares were acquired at an average price of $15.6156, implying a total outlay of roughly $85.9 million. The purchases were completed under BitMine’s previously authorized $4 billion share-repurchase program. Chairman Tom Lee called the repurchases accretive to shareholder value. BMNR traded near $15.97 on Monday, slightly above the average price paid by the...

BitMine Buys 27,801 ETH As Holdings Reach 5.77M

BitMine Immersion Technologies acquired 27,801 ETH over the past week, lifting its total holdings to 5,770,038 ETH as of July 12. The position represents about 4.8% of Ethereum’s 120.7 million circulating supply, placing the company 96% of the way toward its stated goal of controlling 5% of all ETH. The latest treasury update valued the ETH position at roughly $10.5 billion using a reference price of $1,820. BitMine also held 206 BTC, $482 million in cash and marketable securities, a...

MORE ARTICLES

Trading

How to Get a Funded Crypto Trading Account in 2026 Step by Step

A funded crypto trading account gives a trader access to more notional capital after they prove they can follow a firm’s risk rules. The usual route starts with a paid crypto prop firm challenge that requires a profit target without breaching daily or overall loss limits. Passing is not only about making money. Drawdown control, minimum trading days and rule compliance determine whether the account survives. The evaluation fee can be lost, and crypto prop firms use different account models,...

How To Trade Tokenized Stock Perps: Leverage, Funding And Risks

Tokenized stock perps allow traders to take long or short exposure to companies, ETFs and equity indexes through crypto-native derivatives markets. Positions can use stablecoin collateral, remain open without an expiry date and continue trading when the main stock exchange is closed. The trader receives price exposure, not ownership of the referenced shares. The interface often looks identical to a crypto perpetual futures market. The risk does not. A stock-linked contract can remain active overnight, through weekends and during holidays...

What Is Agentic Trading? AI Trading Agents, Crypto Automation And Risk Controls

Agentic trading is a form of market automation where an AI agent can analyze data, reason through a goal, use tools, prepare trades, and sometimes execute orders through an exchange API, wallet, smart account, broker connection, or onchain protocol. It moves the conversation beyond simple trading bots because the agent is not only following a fixed trigger. It can combine market data, user instructions, portfolio context, and approved tools before deciding what action fits the rules it has been given....

What Are Crypto Data Aggregators? Price, Volume, Token Data, And Market Tracking Explained

Crypto data aggregators turn scattered market information into one usable research layer. Instead of checking separate exchanges, DEX pools, block explorers, wallet dashboards, token pages, protocol analytics, and portfolio apps, users can compare price, market capitalization, trading volume, liquidity, supply, exchange pairs, contract addresses, DeFi activity, and on-chain movement from one place. Crypto markets are fragmented across venues, chains, and token versions, so the same asset can trade on centralized exchanges, several decentralized exchanges, multiple networks, and wrapped or bridged...

MORE ARTICLES

Tech

Strategy Posts $8.22B Q2 Loss As Capital Plan Expands Beyond Bitcoin Purchases

Strategy reported an $8.22 billion net loss for the second quarter after Bitcoin’s decline generated a large unrealized loss across the company’s digital-asset holdings. The company recorded an $8.33 billion operating loss, including an $8.32 billion unrealized Bitcoin loss. Diluted losses reached $24.45 per common share, while net losses attributable to common shareholders totaled $8.62 billion after $400.7 million of preferred-stock dividends. Bitcoin Decline Reverses Strategy’s 2025 Gain Strategy’s second-quarter financial results marked a sharp reversal from the same period...

KOSPI Surges 15% As Korea Unveils $13.9B Strategic Fund

South Korea’s KOSPI surged about 15% to 6,376.68 by midday Friday, recovering a large portion of the losses recorded during a three-day semiconductor selloff. The index climbed as much as 16.8% to 6,531.71 earlier in the session before giving back part of the advance. Samsung Electronics rose about 21%, while SK Hynix gained 24.6%. Both stocks had climbed even further shortly after the opening bell, with Samsung reaching a 22.5% gain and SK Hynix advancing 27.7%. The rebound followed stronger...

KOSPI Falls 8% As July Loss Reaches 35% In Deepening Chip Rout

South Korea’s KOSPI fell 8% on Wednesday, extending its July decline to roughly 35% as another wave of selling hit the country’s largest semiconductor stocks. The benchmark dropped to 5,547.77 by midday in Seoul, its lowest level since April. The Korea Exchange activated a market-wide circuit breaker at 12:33 p.m. after an earlier sell-side sidecar suspended programme trading for five minutes. The circuit breaker requires the index to remain down at least 8% for one minute and halts trading for...

KOSPI Plunges Nearly 10% As Chip Rout Triggers Trading Halt

South Korea’s KOSPI plunged nearly 10% on Tuesday as investors accelerated their exit from the semiconductor stocks that powered the market’s artificial intelligence rally. The benchmark traded near 6,089, down 666 points, after falling as low as 6,031.38. The intraday low placed the index more than 35% below its June record of 9,385.59. The Korea Exchange halted trading in KOSPI-listed shares for 20 minutes at about 10:14 a.m. Korea Standard Time after the decline remained above the 8% circuit-breaker threshold....

MORE ARTICLES