https://harness.chance.cc/api/mcp. It accepts API keys and OAuth tokens. Use Connectors for connection details.
Call MCP tools/list after authenticating for the current names, input schemas and annotations available to that credential. The hosted server and a Desk’s local tools are different surfaces; do not assume a tool name from a Desk chat is a public MCP endpoint.
Hosted tool groups
Wallet tools require wallet access. Availability also depends on server configuration and the wallet’s signing method. A wallet that signs on a user’s device cannot be spent from just by calling a hosted tool.
Quote, execute, track
Quote the exact amount and destination first. Preserve the returned minimum received amount, fee bound and request identifier when submitting. Reuse the same request identifier after a lost response; a new one means a new spend. Execution may return an approval link or a pending state. Poll its saved record. Bridge source confirmation is not destination arrival. A terminal failure may include structured recovery details; keep them available to the agent rather than reducing every failure to a generic error.Private actions
Private preparation returns a sealed server reference. The actual signature and proof stay on the server until the wallet decision allows submission. Preparing a proof does not move funds.escrow_execute consumes the prepared action under the wallet’s controls. The compatibility tool strk20_relay_private_action also resolves the stored preparation and follows the wallet decision; it is not a way around approvals or limits.
Do not persist private keys or proof inputs in public logs. Use the current schemas from tools/list rather than assembling private calldata from an old example.

