v1.2.0

[1.2.0] - 2026-09-02

Added

• get_transaction_history tool: recent transactions of a wallet on one network, newest first, paged via cursor. Read from public explorers with per-network fallback, not from the IronWallet backend. Spam-looking token symbols carry an asset.warning.
• Server instructions cover the wallet manager and the update flow.
• Wallet manager: Delete button per wallet. A separate confirmation page requires retyping the wallet name; a wallet that was never backed up also needs an explicit acknowledgement that its recovery phrase is destroyed. Manager only — there is no MCP tool for deleting.

Changed

• Keystore writes are atomic (temp file + rename), so a crash mid-write cannot truncate keystore.json.

Fixed

• estimate_swap / execute_swap: to was published as a $ref to from; hosts that do not resolve $ref (Claude chat) rejected every swap. Both sides now have inline schemas.
• Wallet manager: Continue on the disclaimer redirects to the dashboard, so Refresh shows the current wallet list instead of a stale page or 404.

Artifacts

• Source tarball: https://github.com/ironwallet/ironwallet-agent-kit/archive/refs/tags/v1.2.0.tar.gz
• SHA256: 4773135fe479c127bb3145bf2b4f9573f1192510a1fb10d123e67a06712dce9b

v1.1.0

[1.1.0] - 2026-08-28

Changed

• MCP backend traffic uses the production URL (https://iwio.ai).

Artifacts

• Source tarball: https://github.com/ironwallet/ironwallet-agent-kit/archive/refs/tags/v1.1.0.tar.gz
• SHA256: d1568e067af6934f8c45f578805753bfa63a3cf21376815954aea3550afc6e22

v1.0.3

[1.0.3] - 2026-08-27

Added

• MCP consent before create/import: full English disclaimer in chat (accept_mcp_consent) or the local wallet manager.
• set_wallet_policy tool: per-wallet limits from chat (readOnly, maxPerTxUsd, transfer recipient allow-list; full replace).
• USD per-transaction limit (maxPerTxUsd): send/swap amounts are valued via the IronWallet rates backend at operation time and rejected when no rate is available (fail closed). Replaces the never-exposed asset-unit maxPerTx.

Changed

• Consent copy: limits are described as chat-configurable (set_wallet_policy), not as a pre-use setup step in the wallet manager.

Artifacts

• Source tarball: https://github.com/ironwallet/ironwallet-agent-kit/archive/refs/tags/v1.0.3.tar.gz
• SHA256: 077feeb117fd3e5c410d4c693f972316d6f05facc59007df069d25163102f900

v1.0.2

[1.0.2] - 2026-08-26

Added

• Register as io.ironwallet/mcp-server (mcpName + server.json) for the MCP registry.
• Export MCP tool schemas to tools.json so README and skill tables stay in sync.

Changed

• npm keywords include supported networks. User-facing copy no longer names the internal swap service.
• Brand spelling: IronWallet.

Artifacts

• Source tarball: https://github.com/ironwallet/ironwallet-agent-kit/archive/refs/tags/v1.0.2.tar.gz
• SHA256: f17c6a8bb1c1c591872e755f65eb1bd9615fed090b99294d299716c2a346df48

v1.0.1

[1.0.1] - 2026-08-25

Added

• Deposit QR (get_deposit_qr): PNG in chat when the host can render it, otherwise a local qr_url.

Changed

• Plugin id is ironwallet-mcp on Cursor, Claude, Codex, and Grok.

Security

• IW_READ_ONLY rejects send_transfer and execute_swap for the whole process.

Artifacts

• Source tarball: https://github.com/ironwallet/ironwallet-agent-kit/archive/refs/tags/v1.0.1.tar.gz
• SHA256: bf396d051d83fce82a0d4f9aef1672df2a292e771786e3c32705c43819d3f8ca

v1.0.0

[1.0.0] - 2026-08-20

Added

• Release of the IronWallet agent kit and @ironwallet/mcp-server.

Artifacts

• Source tarball: https://github.com/ironwallet/ironwallet-agent-kit/archive/refs/tags/v1.0.0.tar.gz
• SHA256: 6313f7146d1d96d895282bbcc3b2725ff0dcae2a9caa8a3d1da0c67050819009