# withdraw

Withdraw from the Forge Treasury vault by redeeming shares. Returns calldata for the agent wallet. A 15% performance fee may apply on profits above the high water mark.

Agent View of the PolicyLayer registry record for `withdraw`. HTML page: https://policylayer.com/tools/com-forgetreasury-treasury/withdraw

## Facts

- Tool: `withdraw`
- Server: Forge Treasury (`https://mcp.forgetreasury.com/mcp`) — https://policylayer.com/tools/com-forgetreasury-treasury.md
- Homepage: https://github.com/forge-treasury/forge-cursor-plugin
- Risk category: Financial (Critical risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server CORS policy: *
- Server rate-limited: no
- Parameters: 2 (2 required)
- Recommended policy verdict: Approval-gated

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `shares` | string | yes | Vault share amount to redeem (raw uint256 string from get_balance) |
| `agentAddress` | string | yes | Agent wallet address (owner of shares) |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "withdraw",
    "arguments": {
      "shares": "<shares>",
      "agentAddress": "<agentAddress>"
    }
  }
}
```

## Why withdraw is rated Critical

This tool directly moves money (USDC withdrawals from a yield vault) and applies financial fees. Withdrawal of funds from a treasury vault that holds user assets constitutes a financial operation with direct economic impact. Combined with the 15% performance fee mechanism, this is the most severe category (Financial > Destructive > Execute > Write > Read).

From the tool's own definition: "Tool description explicitly states 'Withdraw from the Forge Treasury vault' and 'performance fee may apply', indicating movement of USDC funds and financial obligations. The tool operates on 'Forge Treasury vault' managing yield on USDC, a stablecoin."

## Use case

AI agents use withdraw to commit financial operations through Forge Treasury, usually the final step of a payment, billing, or trading workflow. A call moves real money.

## Recommended policy (PolicyLayer)

Verdict: **Approval-gated**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Forge Treasury:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "withdraw": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}
```

## Other tools on Forge Treasury (8)

- `claim_forge` — Financial — https://policylayer.com/tools/com-forgetreasury-treasury/claim-forge.md
- `deposit` — Financial — https://policylayer.com/tools/com-forgetreasury-treasury/deposit.md
- `get_balance` — Read — https://policylayer.com/tools/com-forgetreasury-treasury/get-balance.md
- `get_current_apy` — Read — https://policylayer.com/tools/com-forgetreasury-treasury/get-current-apy.md
- `get_forge_rewards` — Read — https://policylayer.com/tools/com-forgetreasury-treasury/get-forge-rewards.md
- `get_vault_stats` — Read — https://policylayer.com/tools/com-forgetreasury-treasury/get-vault-stats.md
- `list_profiles` — Read — https://policylayer.com/tools/com-forgetreasury-treasury/list-profiles.md
- `simulate_deposit` — Read — https://policylayer.com/tools/com-forgetreasury-treasury/simulate-deposit.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-forgetreasury-treasury · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-forgetreasury-treasury