Skip to content
Hightop docs header art
Hightop
API and Integrations

Agent Prompt#

Want an AI agent (Claude, ChatGPT, Cursor, your own) to start using Hightop? Copy the prompt below, fill in your agent credentials, and paste it into your agent. It points the agent at Hightop's live, always-current skill and contract, so the agent pulls the authoritative details itself.

Tip

The heavy detail (every endpoint, scope, and error) lives in the live skill at https://api.hightop.com/v1/agent/skill.md, generated from the current API contract. This prompt stays short and stable because it tells the agent to read that skill — so it never goes out of date.

Copy this#

text
example
You can operate a Hightop wallet through the Hightop Agent API (v1). Real
production endpoints move REAL funds on Base — treat every write as a real
money movement, and stay within the wallet's configured permissions and limits.
 
API base URL: https://api.hightop.com
Base path:    /v1/agent
 
Before doing anything, fetch and follow these public resources (no auth needed):
- Skill (read this first): https://api.hightop.com/v1/agent/skill.md
- OpenAPI spec:            https://api.hightop.com/v1/agent/openapi.json
 
Authentication (use ONE):
- Header-key:  send headers  x-agent-id: <AGENT_ID>  and  x-api-key: <API_KEY>
- OAuth:       send  Authorization: Bearer <TOKEN>
My credentials:
  HIGHTOP_AGENT_ID = <PASTE_AGENT_ID>
  HIGHTOP_API_KEY  = <PASTE_API_KEY>
 
How to call it (pick what fits you):
- MCP server:   https://api.hightop.com/mcp   (tools exposed to MCP clients)
- TypeScript:   npm i @hightop/sdk
- CLI:          npm i -g @hightop/cli   then  hightop --help
- Raw HTTPS:    call /v1/agent/* directly
 
Golden rules:
1. Amounts are decimal strings, never numbers. Bare "amount" fields are
   asset-unit amounts ("1" = 1 USDC); fields named "amount_usd" are USD.
2. Most writes (POST/PATCH/DELETE) need a unique Idempotency-Key header (or
   idempotency_key argument); reuse the same key ONLY to retry the same request.
   Read-only POSTs (simulate, x402/quote, recipients/resolve) do not.
3. Operation-backed (money-movement) writes return an operation — poll it to a terminal status (executed,
   execution_failed, policy_rejected, cancelled) before reporting success.
4. Validate a request first with POST /v1/agent/simulate when unsure.
5. A 403 (e.g. permission_not_granted, asset_not_allowed, limit_exceeded) means
   my rules blocked the action — surface it, do not retry unchanged.
 
Start (with auth) by calling GET /v1/agent/self and GET /v1/agent/capabilities to
learn what this agent is allowed to do, then proceed with my instructions.

Connecting Claude or another MCP client#

If your client speaks MCP (like Claude Desktop), you don't need the prompt above — add a connector pointing at https://api.hightop.com/mcp and approve the OAuth scopes. Hightop exposes every endpoint as a tool automatically. See Connect with MCP.

Where the content comes from#

  • The skill (/v1/agent/skill.md) is generated from the live Agent API contract — it is the single source of truth for what an agent can do.
  • This page is the short, human-friendly wrapper you hand to an agent to get started.

Next#

Previous

Quickstart

Next

Authentication