PR #21 proved the model: thin MCP wrappers over StarkZap SDK calls with strong validation and write gating.
Now SDK surface has grown, and MCP/CLI are behind.
This epic closes that gap and makes StarkZap the canonical execution surface for both developers and agents.
Current status
MCP baseline shipped in feat: add MCP server for AI agent integration #21 : account, balance, transfer, execute (gated), deploy, staking, estimate-fee.
Additional hardening/improvements landed in feat: support read-only address queries for balance and staking position #61 (read-only address queries).
This epic is parity expansion, not a fresh MCP start.
In review: starkzap_get_balances, starkzap_get_quote, starkzap_swap, starkzap_build_swap_calls in feat(mcp): add swap + batched balances tools with hardening #81 .
In review: starkzap_build_calls in feat(mcp): add hardened starkzap_build_calls tool #83 .
Next MCP slice: lending read tools first, then lending writes after the read path is reviewed and smoke-tested.
Decision boundary
starkzap owns execution (SDK + MCP + CLI).
starknet-agentic owns policy/safety and agent-runtime context (session lifecycle, ERC-8004 identity/metadata, attestation/provenance, x402 policy/preflight, plus Cairo coding skills/knowledge packs for agent development workflows).
Scope (parity targets)
P0 MCP parity
P1 MCP parity
CLI parity (same core, no duplicate logic)
PR slicing policy
Keep reviewable PRs small.
MCP read tools can land separately from write tools.
Write tools require extra review for amount caps, write gating, tx tracking, sponsored mode, and retry/reconciliation behavior.
Avoid broad CLI/action-layer refactors in the same PR as new state-changing tools unless the refactor is required for safety.
Implementation rules
No business logic in MCP/CLI adapters.
Shared action layer: parse/validate -> SDK call -> normalized output.
MCP tool names must use the starkzap_ namespace prefix to avoid collisions with other MCP servers.
Keep existing safety rails:
--enable-write
--enable-execute
amount caps
batch caps
rate limits
strict address/token validation
Read-only tools must still validate provider ids, token ids, addresses, and SDK response shape before returning output to the agent.
Drift prevention (required)
Migration note
During migration window, starknet-agentic can keep compatibility aliases for moved execution tools.
New execution capability should land in StarkZap first.
Acceptance criteria
All P0 tools implemented in MCP with tests.
Matching CLI commands implemented with tests.
Conformance test active in CI and failing on parity drift.
README/docs updated with tool/command matrix and examples.
No breaking changes to existing MCP tool names in starkzap-mcp.
PR #21 proved the model: thin MCP wrappers over StarkZap SDK calls with strong validation and write gating.
Now SDK surface has grown, and MCP/CLI are behind.
This epic closes that gap and makes StarkZap the canonical execution surface for both developers and agents.
Current status
starkzap_get_balances,starkzap_get_quote,starkzap_swap,starkzap_build_swap_callsin feat(mcp): add swap + batched balances tools with hardening #81.starkzap_build_callsin feat(mcp): add hardened starkzap_build_calls tool #83.Decision boundary
starkzapowns execution (SDK + MCP + CLI).starknet-agenticowns policy/safety and agent-runtime context (session lifecycle, ERC-8004 identity/metadata, attestation/provenance, x402 policy/preflight, plus Cairo coding skills/knowledge packs for agent development workflows).Scope (parity targets)
P0 MCP parity
starkzap_get_balances(in review: feat(mcp): add swap + batched balances tools with hardening #81)starkzap_get_quote(in review: feat(mcp): add swap + batched balances tools with hardening #81)starkzap_swap(in review: feat(mcp): add swap + batched balances tools with hardening #81)starkzap_build_swap_calls(in review: feat(mcp): add swap + batched balances tools with hardening #81)starkzap_build_calls(in review: feat(mcp): add hardened starkzap_build_calls tool #83)starkzap_lending_marketsstarkzap_lending_positionsstarkzap_lending_positionstarkzap_lending_healthstarkzap_lending_max_borrowstarkzap_lending_quote_healthstarkzap_lending_depositstarkzap_lending_withdrawstarkzap_lending_withdraw_maxstarkzap_lending_borrowstarkzap_lending_repayP1 MCP parity
starkzap_get_allowancestarkzap_approve_exactstarkzap_approve_if_neededstarkzap_revoke_approvalstarkzap_bridge_quotestarkzap_bridge_executestarkzap_bridge_statusstarkzap_bridge_routesCLI parity (same core, no duplicate logic)
starkzap-clicommands for all P0 MCP tools.PR slicing policy
Implementation rules
starkzap_namespace prefix to avoid collisions with other MCP servers.--enable-write--enable-executeDrift prevention (required)
Migration note
starknet-agenticcan keep compatibility aliases for moved execution tools.Acceptance criteria
starkzap-mcp.