Add it
Wallet API tools
The Wallet API uses a separate key namespace, so it takes a second header. Add it only if you use that product.ms_live_ key will not work on the Wallet API, and a wsk_live_ key will not work anywhere else.
What your agent can do
Knowledge tools
These answer from data built into the server. No key, no network call, no rate limit.
They exist because these are the questions where a wrong answer produces a failed payout rather than a confused reader. Recipient fields differ by both currency and method, and mobile network names are case-sensitive exact strings.
You only see the tools your key can use
The server asks the API what your key is authorised for and lists tools accordingly. If your account does not have off-ramp access yet, no off-ramp tools appear, so your agent never burns a turn on a call that was always going to fail. Wallet tools appear only when you supply the wallet key header. If you expected payment tools and only see knowledge tools, ask your agent to runminisend_diagnose_key. The usual cause is a key that was truncated on the way into your config, or a placeholder that was never replaced.
After changing headers, restart your client. Tool lists are read once when the connection opens.
These tools move real money
MCP clients ask for approval before each tool call. Leave that on. Read what the agent is about to do, particularly the amount and the recipient, before approving. Two behaviours worth knowing, because they are the ones an agent can get wrong: Creating an off-ramp order does not pay anyone. The flow is non-custodial, so you send the USDC yourself, and for KES, GHS, and UGX you then report the transaction hash. The order response tells you which path applies. Creating an onramp order is one-shot. The prompt fires immediately, and if the customer cancels it, the order fails. Create a new order rather than retrying the same one, which is what stops a customer being charged twice.Your keys
Keys are read from the request headers, passed to the Minisend API, and discarded. Nothing is stored, cached, or written to logs. The server holds no credentials of its own. Standard rate limits apply and are counted against your account, not against the MCP server, so other users cannot consume your budget.MCP or the skill?
Both, if you like. They solve different problems. The agent skill teaches your agent the API offline so it writes correct integration code. Nothing is called, and it works with no key and no network. The MCP server lets your agent operate your account live. Use it to try a payout before writing any code, to check an order’s status while debugging, or to run one-off operations without building a script.API keys
Generate the key you will paste into the header.

