prepare_morpho_supply

SERVERVaultPilot MCP SOURCEvaultpilot-mcp

Critical RISK CLASS

Category Financial

Parameters 53 required

Recommended Approval-gatedsee the rule below

Registry record Grade F, identity unverified Pull the record →

This record as markdown: /tools/io-github-szhygulin-vaultpilot-mcp/prepare-morpho-supply.md

WHAT IT DOES

What prepare_morpho_supply does on VaultPilot MCP

AI agents use prepare_morpho_supply to commit financial operations through VaultPilot MCP, usually the final step of a payment, billing, or trading workflow. A call moves real money.

Parameter	Type	Required	Description
`chain`	string	—	EVM chain Morpho Blue is deployed on. Currently only ethereum is enabled.
`amount`	string	Yes	Human-readable decimal amount, NOT raw wei/base units. Example: "10" for 10 USDC. Pass "max" for full-balance withdraw/repay.
`wallet`	string	Yes	0x-prefixed EVM wallet address (40 hex chars) that will execute this action.
`marketId`	string	Yes	Morpho Blue market id — 32-byte hex (0x + 64 hex chars). Identifies the market's (loanToken, collateralToken, oracle, irm, lltv) tuple. Discover via get_morpho_
`approvalCap`	string	—	Cap on the ERC-20 approval preceding this action. Omit for "unlimited" (standard DeFi UX — fewer follow-up approvals). Pass "exact" to approve only what this ac

Parameters from the server's own tool schema.

RISK

Why prepare_morpho_supply is rated Critical

This tool constructs a DeFi lending supply transaction that commits crypto assets to a Morpho Blue market to earn yield. It also potentially emits an ERC-20 approval transaction, granting a smart contract access to spend tokens.

From the tool's definition 'deposits the market's loan token to earn lending yield', 'Build an unsigned Morpho Blue supply transaction', 'ERC-20 approve tx is emitted first', 'Returns a handle + preview for Ledger signing'

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs prepare_morpho_supply safely

PolicyLayer is an MCP gateway: it sits between your AI agents and VaultPilot MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For prepare_morpho_supply, this is the rule to start with:

prepare_morpho_supply Approval-gated

Any call to prepare_morpho_supply is blocked until a human approves it. The rest of the server keeps working.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "prepare_morpho_supply": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

GATE THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect VaultPilot MCP, apply this rule, and every prepare_morpho_supply call is checked against it from then on.

FAQ

Questions about prepare_morpho_supply

What does the prepare_morpho_supply tool do? +

Build an unsigned Morpho Blue supply transaction — deposits the market's loan token to earn lending yield. Market params (loan/collateral tokens, oracle, IRM, LLTV) are resolved on-chain from the market id, so only wallet/marketId/amount are required. If the wallet's current allowance is insufficient, an ERC-20 approve tx is emitted first (chainable via .next); control the cap with approvalCap (defaults to unlimited for UX, pass 'exact' or a decimal ceiling to scope it). Returns a handle + preview for Ledger signing. It is categorised as a Financial tool in the VaultPilot MCP MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

What parameters does prepare_morpho_supply accept? +

prepare_morpho_supply accepts 5 parameters: chain, amount, wallet, marketId, approvalCap. Required: amount, wallet, marketId. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on prepare_morpho_supply? +

Register the VaultPilot MCP server in PolicyLayer and add a rule for prepare_morpho_supply: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches VaultPilot MCP. Nothing to install.

What risk level is prepare_morpho_supply? +

prepare_morpho_supply is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit prepare_morpho_supply? +

Yes. Add a rate_limit block to the prepare_morpho_supply rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block prepare_morpho_supply completely? +

Set action: deny in the PolicyLayer policy for prepare_morpho_supply. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides prepare_morpho_supply? +

prepare_morpho_supply is provided by the VaultPilot MCP server (vaultpilot-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on VaultPilot, and thousands of servers like it.

This server

All 189 VaultPilot tools → Critical-risk tools on this server →

Across the catalogue

All critical-risk MCP tools → The MCP Attack Database →

Guides

Govern MCP payment tools →Human-in-the-loop →Tool call approval →