transfer_private_erc20

Handles credentials or secrets (private_key)

Part of the COTI MCP Server MCP server. Enforce policies on this tool with Intercept, the open-source MCP proxy.

// WHEN AI AGENTS USE THIS TOOL

AI agents use transfer_private_erc20 to initiate financial transactions through COTI MCP Server. Financial operations involve real money and are irreversible once processed. Intercept blocks financial tools by default, requiring explicit human approval with transaction-level limits to prevent unauthorised spending.

// WHY ENFORCE A POLICY ON TRANSFER_PRIVATE_ERC20

transfer_private_erc20 moves real money. Without a policy, an autonomous agent could initiate transactions that drain accounts or exceed budgets. Intercept blocks financial tools by default, requiring human-in-the-loop approval with configurable spending limits per transaction and per time window.

// RECOMMENDED POLICY

Financial tools involve real money. Block by default and require explicit human approval before enabling.

davibauer-coti-mcp.yaml

tools:
  transfer_private_erc20:
    rules:
      - action: deny
        reason: "Requires human approval"

See the full COTI MCP Server policy for all 44 tools.

// DETAILS

Tool Name transfer_private_erc20

Category Financial

MCP Server COTI MCP Server MCP Server

Risk Level Critical

// MORE COTI MCP SERVER TOOLS

Financial transfer_native Financial transfer_private_erc721 Execute compile_and_deploy_contract Execute compile_contract Execute deploy_private_erc20_contract Execute deploy_private_erc721_contract Execute deploy_private_message_contract Write approve_erc20_spender

View all 44 tools →

// RELATED READING

// FAQ

What does the transfer_private_erc20 tool do? +

Transfer private ERC20 tokens on the COTI blockchain. This is used for sending private tokens from your wallet to another address. Requires token contract address, recipient address, and amount as input. Returns the transaction hash upon successful transfer.. It is categorised as a Financial tool in the COTI MCP Server MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on transfer_private_erc20? +

Add a rule in your Intercept YAML policy under the tools section for transfer_private_erc20. You can allow, deny, rate-limit, or validate arguments. Then run Intercept as a proxy in front of the COTI MCP Server MCP server.

What risk level is transfer_private_erc20? +

transfer_private_erc20 is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit transfer_private_erc20? +

Yes. Add a rate_limit block to the transfer_private_erc20 rule in your Intercept policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block transfer_private_erc20 completely? +

Set action: deny in the Intercept policy for transfer_private_erc20. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides transfer_private_erc20? +

transfer_private_erc20 is provided by the COTI MCP Server MCP server (davibauer/coti-mcp). Intercept sits as a proxy in front of this server to enforce policies before tool calls reach the server.

transfer_private_erc20

Enforce policies on COTI MCP Server