Skip to content
Back to skills

Swapwallet

ASecurity

Use the SwapWallet MCP tools safely. Use when the user asks about their SwapWallet balance, profit and loss, transactions or deposit address, or wants to swap, transfer or withdraw crypto or toman through SwapWallet.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 15, 2026
ai-agentsgo

Works with

  • mcp

Security analysis

A100/100

Scanned October 15, 2026

npx -y skills add SwapWallet/swapwallet-mcp --skill swapwallet --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Swapwallet?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Swapwallet
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/swapwallet-swapwallet/badge)](https://www.skillsdirectory.com/skills/swapwallet-swapwallet)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: swapwallet
description: Use the SwapWallet MCP tools safely. Use when the user asks about their SwapWallet balance, profit and loss, transactions or deposit address, or wants to swap, transfer or withdraw crypto or toman through SwapWallet.
---

# Using SwapWallet

SwapWallet is a custodial crypto exchange and wallet. Its MCP server (`swapwallet`) reads the user's own account and files money-moving requests that the user approves in Telegram.

## Reading the account

- Call the tools for balances, prices, profit and loss and history; never answer from memory.
- `get_total_balance` gives the whole portfolio; `get_balance` only the tokens you name.
- Amounts are decimal strings. `token` and `network` are enums: use the exact values in the tool's input schema.

## Moving money (request_* tools)

- `request_swap`, `request_transfer`, `request_crypto_withdraw` and `request_fiat_withdraw` never move money themselves. Each one prices the action and sends it to the user's Telegram (the SwapWallet bot) with Approve and Cancel buttons, then returns at once with status `PENDING`.
- Before calling one, confirm the amount, token, destination and (for crypto) the network with the user. A wrong network or address can lose funds.
- After calling one, tell the user to open Telegram and approve or cancel it there, and that it expires in 15 minutes. Show the returned preview (amounts, fees, destination); do not invent prices or fees.
- Never say a swap, transfer or withdrawal has happened until `get_action_request` reports `EXECUTED`. `PENDING` only means "waiting for the user in Telegram". The other outcomes are `REJECTED`, `EXPIRED` and `FAILED` (with a `failureReason`).
- Transfers go only to the user's saved contacts (`get_contacts`); toman withdrawals only to a verified IBAN (`get_ibans`).

## Known errors

- `MCP_TELEGRAM_NOT_LINKED`: the account is not linked to Telegram, so no request can be approved. Ask the user to link it in the SwapWallet app.
- `MCP_TWO_FACTOR_ACTIVE`: with two-factor authentication on, crypto withdrawals and transfers must be made in the app. Swaps and toman withdrawals still work.
- A missing scope means the user did not grant it on the consent page; they can reconnect and grant it.

Reference: https://swapwallet.app/docs/mcp

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.