# io.github.toreva/kit (remote · gateway.toreva.com)

Non-custodial execution primitives for DeFi on Solana. 1 bps to open. Everything else is free.

- Trust score: 36/100 (low)
- Change this week: −17
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `gateway.toreva.com`: 36/100 (this document), [markdown](https://verifymcp.io/servers/toreva-kit/gateway.md), [page](https://verifymcp.io/servers/toreva-kit/gateway)
- npm · `@toreva/mcp`: 35/100, [markdown](https://verifymcp.io/servers/toreva-kit/toreva-mcp.md), [page](https://verifymcp.io/servers/toreva-kit/toreva-mcp)

## Channel facts

- Endpoint: `https://gateway.toreva.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.1.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 89/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents.
- **Transport & Reachability**: 0/100
  - Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
- **Schema Quality & AI Usability**: 0/100
  - Schema blocked by authentication: the endpoint requires auth we don't have to read it.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Capabilities**: 0/100
  - Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.

**Unverified: 5 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add --transport http toreva-kit https://gateway.toreva.com/mcp
```

### Codex

```toml
[mcp_servers.toreva-kit]
url = "https://gateway.toreva.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "toreva-kit": {
      "type": "remote",
      "url": "https://gateway.toreva.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add toreva-kit --url https://gateway.toreva.com/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  toreva-kit:
    url: "https://gateway.toreva.com/mcp"
```

### Other

```json
{
  "mcpServers": {
    "toreva-kit": {
      "type": "http",
      "url": "https://gateway.toreva.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 36, 0)

- [security] First check of Authorization: partial

### 2026-08-01 (score 36, +3)

- [security regression] Endpoint reachability: reachable → behind authorisation
- [security improvement] Authorization: fail → pass

### 2026-07-31 (score 33, −22)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 55, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 54, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 53, +1)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 52)

First indexed and scored.

## MCP tools (24)

### `toreva_strategies` (~224 tokens)

Browse toreva's locked Day 1 strategy delivery contract for Solana. T0 launch scope is Earn enabled; Stake and Balance remain deferred catalog contracts. Earn uses native SOL as the T0 funding rail and deploys USDC; when Earn is enabled, clients must disclose and record acceptance of the 60% SOL-to-USDC conversion / 40% SOL reserve policy before execution. The 40% reserve is split into human_wallet_residual, fuel, dry_powder, and agentic_commerce_spending at 10% each, with no combined commerce or dry-powder bucket exposed to the public surface. Returns each product with its runtime strategy id, fee semantics, venue status, health state, real-funds status, disclosures, as-of metadata, and locked defaults version. Balance is the Day 1 50% USDC / 50% MEW weekly rebalance basket. Hidden strategy toggles and stale variants are not exposed.

Input parameters:

- `product` (string): Filter to one Day 1 public product. Defaults to "all".

### `toreva_primitives` (~124 tokens)

Discover toreva's full evidence-gated Solana primitive universe, mapped by family, skill access point, readiness state, venue/provider plan, pricing class, and public executable status. This tool is discovery-only: candidate primitives are not execution tools until their readiness metadata says so.

Input parameters:

- `familyId` (string): Optional primitive family filter, e.g. "perps".
- `includePrimitives` (boolean): Include per-primitive dictionary entries. Defaults to true.
- `primitiveId` (string): Optional primitive id filter, e.g. "exec.perps_long".

### `toreva_earn` (~232 tokens)

Deploy idle USDC to the highest-yield DeFi lending strategy on Solana. Risk-ranked across verified Day 1 venues (Kamino, Save) — not just one protocol. Scan, simulate projected returns with fees, and execute via user-signable transaction. Returns structured receipt (what, why, cost, next). Non-custodial. User-approved. Data transactions are free; value transactions are 2 bps ($2 on $10K). Use when capital is idle or directional strategies underperform.

Input parameters:

- `amount` (number): Amount of token to deploy. Required for simulate and execute.
- `constraints` (object): Optional strategy parameters constraining venue selection
- `operation` (string, required): scan = discover and rank yield venues; simulate = preview projected returns, fees, and strategy details; execute = build a user-signable transaction for the best strategy
- `token` (string, required): Token to deploy into DeFi yield strategy. Currently USDC on Solana.
- `wallet` (string): Solana wallet address (base58). Required for execute — transaction is built for this wallet.

### `toreva_get_positions` (~167 tokens)

Scan a Solana wallet for all open DeFi positions and their current state. Returns position inventory across verified Day 1 venues (Kamino, Save, Marinade, etc.) — holdings, entry/current valuations, accrued yield/losses, and rebalancing opportunities. Non-custodial read-only. Use to discover idle capital, assess portfolio concentration, or find rebalancing targets.

Input parameters:

- `includeZeroBalance` (boolean): Include zero-balance or closed positions in results. Defaults to false (active positions only).
- `venues` (array): Optional filter: scan only specified DeFi venues (kamino, save, marinade, etc.). Defaults to all admitted venues.
- `wallet` (string, required): Solana wallet address (base58) to scan for open positions.

### `toreva_perps_long` (~379 tokens)

Open a long perpetual futures position on Solana. Routes to better execution across Jupiter Perps, Pacifica, Drift, and Flash Trade — compares fees, funding rate, and available liquidity, then routes to whichever venue offers a better fill. 2 bps execution fee on notional. Trades routed to Drift receive a 5% fee discount vs going direct. Your agent decides direction, size, and leverage. Toreva handles venue selection and transaction construction. Non-custodial. Every execution receipted. Execution only — not financial advice.

Input parameters:

- `agentWalletAddress`: Optional Pacifica API Agent Wallet public key. Signs on behalf of walletAddress.
- `builderCode` (string): Optional Pacifica Builder Program code, if the account has approved it.
- `clientRequestId` (string): Optional idempotency key for the venue order.
- `collateralAmount` (number, required): Amount of collateral token to post.
- `collateralToken` (string, required): Token used as collateral (e.g. USDC, SOL).
- `leverage` (number, required): Leverage multiplier (e.g. 5 for 5x).
- `marginMode` (string): Optional Pacifica margin mode for this market.
- `maxSlippageBps` (integer): Maximum acceptable slippage in basis points.
- `sizeUsd` (number, required): Position size in USD notional.
- `stopLoss` (number): Optional Pacifica stop-loss trigger price.
- `takeProfit` (number): Optional Pacifica take-profit trigger price.
- `token` (string, required): Token to take a position on (e.g. SOL, BTC, ETH).
- `venue` (string): Venue to use. Set pacifica explicitly for Pacifica execution. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_short` (~353 tokens)

Open a short perpetual futures position on Solana. Routes to better execution across Jupiter Perps, Pacifica, Drift, and Flash Trade. 2 bps execution fee on notional. Trades routed to Drift receive a 5% fee discount vs going direct. Your agent decides direction, size, and leverage. Toreva handles venue selection and transaction construction. Non-custodial. Execution only — not financial advice.

Input parameters:

- `agentWalletAddress`: Optional Pacifica API Agent Wallet public key. Signs on behalf of walletAddress.
- `builderCode` (string): Optional Pacifica Builder Program code, if the account has approved it.
- `clientRequestId` (string): Optional idempotency key for the venue order.
- `collateralAmount` (number, required): Amount of collateral token to post.
- `collateralToken` (string, required): Token used as collateral (e.g. USDC, SOL).
- `leverage` (number, required): Leverage multiplier (e.g. 5 for 5x).
- `marginMode` (string): Optional Pacifica margin mode for this market.
- `maxSlippageBps` (integer): Maximum acceptable slippage in basis points.
- `sizeUsd` (number, required): Position size in USD notional.
- `stopLoss` (number): Optional Pacifica stop-loss trigger price.
- `takeProfit` (number): Optional Pacifica take-profit trigger price.
- `token` (string, required): Token to take a position on (e.g. SOL, BTC, ETH).
- `venue` (string): Venue to use. Set pacifica explicitly for Pacifica execution. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_close` (~231 tokens)

Close a perpetual futures position. Executes at the position's venue. Value transaction; 2 bps fee applies on the closed notional when applicable. Non-custodial. Execution only.

Input parameters:

- `agentWalletAddress`: Optional Pacifica API Agent Wallet public key. Signs on behalf of walletAddress.
- `clientRequestId` (string): Optional idempotency key for the venue request.
- `expiryWindowMs` (integer): Optional Pacifica signature expiry window.
- `maxSlippageBps` (integer): Maximum acceptable slippage in basis points.
- `orderId` (string): Venue order identifier, required for cancel_order when different from positionId.
- `positionId` (string, required): Position identifier returned from open verb.
- `side` (string): Position side (required by Pacifica close).
- `token` (string): Token/market for the position (required by Pacifica, e.g. SOL).
- `venue` (string, required): Venue the position is on. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_add_margin` (~235 tokens)

Add margin to a perpetual futures position. Executes at the position's venue. Value transaction; 2 bps fee applies on the margin value when applicable. Non-custodial.

Input parameters:

- `agentWalletAddress`: Optional Pacifica API Agent Wallet public key. Signs on behalf of walletAddress.
- `amount` (number, required): Margin amount to add or remove.
- `clientRequestId` (string): Optional idempotency key for the venue request.
- `expiryWindowMs` (integer): Optional Pacifica signature expiry window.
- `maxSlippageBps` (integer): Maximum acceptable slippage in basis points.
- `orderId` (string): Venue order identifier, required for cancel_order when different from positionId.
- `positionId` (string, required): Position identifier returned from open verb.
- `side` (string): Position side (required by Pacifica close).
- `token` (string, required): Margin token (e.g. USDC).
- `venue` (string, required): Venue the position is on. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_remove_margin` (~235 tokens)

Remove margin from a perpetual futures position. Executes at the position's venue. Value transaction; 2 bps fee applies on the margin value when applicable. Non-custodial.

Input parameters:

- `agentWalletAddress`: Optional Pacifica API Agent Wallet public key. Signs on behalf of walletAddress.
- `amount` (number, required): Margin amount to add or remove.
- `clientRequestId` (string): Optional idempotency key for the venue request.
- `expiryWindowMs` (integer): Optional Pacifica signature expiry window.
- `maxSlippageBps` (integer): Maximum acceptable slippage in basis points.
- `orderId` (string): Venue order identifier, required for cancel_order when different from positionId.
- `positionId` (string, required): Position identifier returned from open verb.
- `side` (string): Position side (required by Pacifica close).
- `token` (string, required): Margin token (e.g. USDC).
- `venue` (string, required): Venue the position is on. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_cancel_order` (~227 tokens)

Cancel an open perpetual futures order. Executes at the position's venue. Control transaction; 0 bps Toreva fee unless value moves. Non-custodial.

Input parameters:

- `agentWalletAddress`: Optional Pacifica API Agent Wallet public key. Signs on behalf of walletAddress.
- `clientRequestId` (string): Optional idempotency key for the venue request.
- `expiryWindowMs` (integer): Optional Pacifica signature expiry window.
- `maxSlippageBps` (integer): Maximum acceptable slippage in basis points.
- `orderId` (string): Venue order identifier, required for cancel_order when different from positionId.
- `positionId` (string, required): Position identifier returned from open verb.
- `side` (string): Position side (required by Pacifica close).
- `token` (string): Token/market for the position (required by Pacifica, e.g. SOL).
- `venue` (string, required): Venue the position is on. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_funding_settle` (~233 tokens)

Settle funding payments on a perpetual futures position. Executes at the position's venue. Value transaction; 2 bps fee applies on settled value when applicable. Non-custodial.

Input parameters:

- `agentWalletAddress`: Optional Pacifica API Agent Wallet public key. Signs on behalf of walletAddress.
- `clientRequestId` (string): Optional idempotency key for the venue request.
- `expiryWindowMs` (integer): Optional Pacifica signature expiry window.
- `maxSlippageBps` (integer): Maximum acceptable slippage in basis points.
- `orderId` (string): Venue order identifier, required for cancel_order when different from positionId.
- `positionId` (string, required): Position identifier returned from open verb.
- `side` (string): Position side (required by Pacifica close).
- `token` (string): Token/market for the position (required by Pacifica, e.g. SOL).
- `venue` (string, required): Venue the position is on. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_query_position` (~74 tokens)

Query open perpetual futures positions for a wallet. Read-only. Data transaction at 0 bps.

Input parameters:

- `venue` (string): Venue to use. Set pacifica explicitly for Pacifica execution. Validated against admitted-venues cache.
- `walletAddress` (string, required): Solana wallet address (base58).

### `toreva_perps_query_funding` (~65 tokens)

Query current funding rates across Jupiter Perps, Pacifica, Drift, and Flash Trade for a token. Read-only. Data transaction at 0 bps.

Input parameters:

- `token` (string, required): Token to query funding rates for (e.g. SOL, BTC).

### `toreva_perps_query_venues` (~33 tokens)

List available perps venues with fee structures. Read-only. Data transaction at 0 bps.

### `toreva_perps_query_markets` (~57 tokens)

List available perpetual futures markets. Read-only. Data transaction at 0 bps.

Input parameters:

- `venue` (string): Venue to use. Set pacifica explicitly for Pacifica execution. Validated against admitted-venues cache.

### `toreva_perps_simulate` (~185 tokens)

Simulate opening a perpetual futures position without executing. Compares Jupiter Perps, Pacifica, Drift, and Flash Trade on fees, funding rate, and liquidity. Returns projected entry price, fees, funding cost, and venue comparison. Data transaction at 0 bps because no execution occurs. Use before perps_long or perps_short to preview what would happen.

Input parameters:

- `collateralAmount` (number, required): Amount of collateral.
- `collateralToken` (string, required): Collateral token (e.g. USDC, SOL).
- `direction` (string, required): Position direction.
- `leverage` (number, required): Leverage multiplier.
- `sizeUsd` (number, required): Position size in USD notional.
- `token` (string, required): Token for the simulated position (e.g. SOL, BTC, ETH).
- `walletAddress` (string): Solana wallet address (base58).

### `toreva_perps_explain` (~133 tokens)

Explain a perpetual futures position or trade. Returns venue used, entry price, fees paid, funding rate at entry, current P&L if open, and why the venue was selected. Data transaction at 0 bps. Use after execution to understand what happened and why.

Input parameters:

- `positionId` (string): Position ID to explain.
- `txSignature` (string): Transaction signature to explain.
- `venue` (string): Venue to use. Set pacifica explicitly for Pacifica execution. Validated against admitted-venues cache.
- `walletAddress` (string): Solana wallet address (base58).

### `toreva_establish` (~119 tokens)

Establish a Toreva delegated agent authority and onboarding state for a human Solana wallet. Uses the canonical intent.establish path so downstream services can create or resolve a provider-neutral authority graph. Non-custodial. The default delegation provider is swig, but provider-specific identifiers stay in provider_metadata.

Input parameters:

- `agent_authority` (object): Optional provider-neutral master authority request
- `capabilities` (array): Optional child capability requests under the master authority
- `walletAddress` (string, required): Human Solana wallet that owns withdrawal and revocation authority

### `toreva_perps_establish` (~108 tokens)

Perps-family alias for toreva_establish. Establishes a Toreva delegated agent authority and perps child capability, such as a Pacifica API agent wallet, for a human Solana wallet. Relay type: intent.establish.

Input parameters:

- `agent_authority` (object): Optional provider-neutral master authority request
- `capabilities` (array): Optional child capability requests under the master authority
- `walletAddress` (string, required): Human Solana wallet that owns withdrawal and revocation authority

### `toreva_execute` (~174 tokens)

Execute a Day 1 Toreva strategy on Solana. Public scope is exactly three products: Earn, Stake, and Balance. Runtime strategy ids are normalized behind public product ids and hidden strategy toggles are rejected. Non-custodial. Every action receipted.

Input parameters:

- `amount` (string): Amount in USD or token units
- `asset` (string): Optional token symbol. Day 1 public assets are USDC, SOL, and MEW.
- `constraints` (object): Optional execution constraints
- `description` (string, required): What you want to do, in natural language
- `strategyKeyword` (string): Optional public product id or runtime strategy id. Supported Day 1 values map to Earn, Stake, and Balance only.
- `walletAddress` (string, required): Solana wallet address to execute for

### `toreva_scan` (~52 tokens)

Scan a Solana wallet for Day 1 Toreva opportunities and risk flags across Earn, Stake, and Balance. Non-custodial.

Input parameters:

- `walletAddress` (string, required): Solana wallet address to scan

### `toreva_simulate` (~156 tokens)

Simulate a Day 1 Toreva strategy without committing funds. Public scope is exactly Earn, Stake, and Balance on Solana. Returns projected venue selection, fees, and routing details for the locked Day 1 contract.

Input parameters:

- `amount` (string): Amount in USD or token units
- `asset` (string): Optional token symbol. Day 1 public assets are USDC, SOL, and MEW.
- `description` (string, required): What you want to simulate, in natural language
- `strategyKeyword` (string): Optional public product id or runtime strategy id. Supported Day 1 values map to Earn, Stake, and Balance only.
- `walletAddress` (string): Solana wallet address (optional for simulation)

### `toreva_explain` (~79 tokens)

Explain an existing intent, receipt, or strategy in plain language. Provides breakdown of what happened, fees charged, and reasoning behind venue/strategy selection.

Input parameters:

- `description` (string): What you want explained, in natural language
- `intentId` (string): Intent ID to explain
- `receiptId` (string): Receipt ID to explain

### `toreva_configure` (~65 tokens)

Configure user preferences for Toreva strategy execution. Set default constraints, preferred protocols, risk tolerance, and notification preferences.

Input parameters:

- `configKey` (string, required): Configuration key to set
- `configValue`: Configuration value
- `walletAddress` (string): Solana wallet address

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/toreva-kit/gateway#diagnostics

## Score history

- 2026-08-03: 36
- 2026-08-02: 36
- 2026-08-01: 36
- 2026-07-31: 33
- 2026-07-30: 55
- 2026-07-29: 54
- 2026-07-28: 54
- 2026-07-27: 53
- 2026-07-26: 52

## Links

- Remote endpoint: https://gateway.toreva.com/mcp
- Repository: https://github.com/toreva/kit
- Changelog RSS feed: https://verifymcp.io/servers/toreva-kit/gateway/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/toreva-kit/gateway/changelog.json
- HTML version of this page: https://verifymcp.io/servers/toreva-kit/gateway