# Numetal launch router — agent instructions

You are talking to a **pad aggregator**, not a launchpad.
Pick an existing pad. Build **that pad's** sign payload. **The user signs.**
You never hold keys. There is **no** `broadcast`, `send_transaction`, or `deploy` tool on this origin.

Humans (Mini App) and machines (MCP / REST / skill) get the **same** pads, knobs, payloads, and Sign steps.

coins.numetal.xyz is the register of tokens already launched. Do not edit it.

## Install (any MCP host)

stdio (Cursor, Claude Code, Claude Desktop, Grok, Codex, Amp, OpenCode, Devin, ChatGPT MCP, OpenRouter tool hosts, Hermes):

```json
{
  "mcpServers": {
    "launch-router": {
      "command": "npx",
      "args": ["tsx", "packages/mcp/src/stdio.ts"],
      "cwd": "<path-to-launch-router>"
    }
  }
}
```

HTTP (Telegram AI bots, Grok bot, remote Hermes, anything that speaks MCP-over-HTTP):

- `POST {origin}/mcp` — JSON-RPC 2.0 (`initialize`, `tools/list`, `tools/call`)
- `POST {origin}/api/v1/{tool}` — REST, body = tool arguments
- `GET {origin}/llms.txt` — this file
- `GET {origin}/.well-known/x402` — x402 Bazaar catalog, **amount 0**
- `GET {origin}/.well-known/mpp.json` — MPP descriptor, **price 0**
- `GET {origin}/.well-known/mcp.json` — MCP manifest
- `GET {origin}/openapi.json`

Skill file: `skills/launch-router/SKILL.md` (also copy into `~/.agents/skills/`, `.cursor/skills/`, `.claude/skills/`).

Aeon (https://www.aeon.fun): same file is a crypto-pack skill (`metadata.category: crypto`, `metadata.mode: read-only` exact). Pack manifest: `skills-pack.json`. Install into an instance with a copy, or `bin/add-skill <owner>/<repo> launch-router` / `bin/install-skill-pack <owner>/<repo>` once the repo is public. Lands disabled, on-demand (`workflow_dispatch`). Wire HTTP MCP: `./aeon mcp add launch-router {origin}/mcp` (no auth). Optional secret `LAUNCH_ROUTER_ORIGIN`. Unattended Actions **notify the sign payload and stop** — they never broadcast, even though Aeon can run with no human in the loop. Do not PR `aeonfun/aeon` unless asked.

## Always

1. `list_pads` then `get_capabilities` for the chosen pad. Each row includes `howToSign` — same steps as Mini App Sign.
2. Fill `LaunchIntent`: `name`, `symbol`, `chainId`, `pad`, `creator` (0x signer).
3. `chainId` MUST be in that pad's `chains`. Use `list_networks` for the union.
4. Forbidden knobs: tell the user. Do not coerce. Stock pairing (`RH_STOCK`) is **Pons only**.
5. Never ask for a CREATE2 salt. Clanker SDK fills it. pools.fun mines so the token sorts below WETH.
6. `simulate_launch` / `get_sign_payload`. This is the same JSON the Mini App shows. Then Sign — do not stop at "payload only" when a human (or their wallet / Bankr user key) is here.
7. Bankr: default split of the 1.2% swap is 57 / 36.1 / 1.9 / 5. After simulate, `check_bankr_split`. If anything else (including a partner share), refuse.
8. Sign is the user's wallet or the user's Bankr `bk_usr_` key, on any surface. Mini App at `{origin}/app.html` is one skin, not the only one. Human foyer: `https://launch.numetal.xyz/`. Never send a Bankr key to this origin.

## Wired pads (same Sign for humans and agents)

| Pad | Payload (`get_sign_payload`) | Sign (user, any surface) | Networks |
|---|---|---|---|
| clanker | `kind: clanker-deploy-config` — Clanker SDK `deploy()` config | User wallet + SDK. Mini App Sign does this; an agent with the user's wallet does the same. | Base 8453, Base Sepolia 84532, Ethereum 1, Arbitrum 42161, BSC 56, Unichain 130, Robinhood 4663, Monad 143, Monad testnet 10143, Abstract 2741. Monad = static fees only. |
| bankr | `kind: bankr-deploy-simulate` — `POST https://api.bankr.bot/token-launches/deploy` body + `liveBody` | User `X-API-Key: bk_usr_…` from **their** machine (Mini App, curl, or this agent process). Simulate → `check_bankr_split` → live. Never partner keys. Never POST the key to this origin. | Base 8453, Robinhood 4663 |
| poolsfun | `kind: partyfactory-launch-args` — `PartyFactory.launch` `tx` (salt auto-mined, live `startTickFor`) | User wallet `eth_sendTransaction(payload.tx)` on 4663. creator == msg.sender. Mini App Sign does this; an agent with the user's wallet does the same. Factory hard-codes 1B supply, 1% fee, LP locked. | Robinhood 4663 |

This origin never broadcasts. Unattended Aeon notifies the payload and stops.

## Unproven (matrix only — no fake tx)

pons (stock/ETH/USDG on Robinhood — no first-party encode path), feelcash / letscash.fun (SDK exists, not wired here), poolstrade (no public encode path), pumpfun (Solana — no EVM adapter), flap (no proven encode path).

## LaunchIntent knobs (optional)

image, description, metadataUri, pairedAsset (WETH / USDG / RH_STOCK / 0x), fees, pool, vault (% + lockup seconds), airdrop, sniperFees (uniBps), devBuy, vanity, tokenAdmin, feeRecipient, rewards, socials, expectedStartTick, deadline.

Do not send JSON blobs unless the user already has one. Prefer URLs and percentages; convert % → bps (×100), days → seconds (×86400).

## What the payload is

Not a public REST argument. It is the object the **user** signs, identical on Mini App Simulate and MCP:

- clanker → `kind: clanker-deploy-config` + `howToSign`
- bankr → `kind: bankr-deploy-simulate` + `liveBody` + `headers` + `howToSign`
- poolsfun → `kind: partyfactory-launch-args` + `tx` + `howToSign`

## Discovery

HTTP REST and `POST /mcp` are **x402 amount 0**. Bare POST → **402** with `PAYMENT-REQUIRED`. Retry with `PAYMENT-SIGNATURE` (or `X-Payment`) — **$0**, no on-chain transfer. Discovery files (`/.well-known/x402`, OpenAPI, llms.txt) stay GET-free. Stdio MCP has no HTTP 402. MPP `price` is `"0"`.