# OneDex > Non-custodial swap tools for AI agents on MultiversX: an MCP server that returns quotes and UNSIGNED swap transactions through the OneDex aggregator. A wallet you control signs and broadcasts. - MCP endpoint: https://aggregator.onedex.app/ai/mcp - Transport: MCP Streamable HTTP, stateless, POST only - Network: MultiversX mainnet (chain ID 1) - Auth: none, no API key - Fees: no server fee; route fees are in `costs` - Signing: never done by the server. It never receives, stores or asks for private keys or seed phrases, and never signs or broadcasts. - MCP registry name: io.github.onedex-x/onedex - Tools: list_tokens, get_wallet_balances, get_quote, build_swap_tx, simulate_swap_tx, tx_status (discover their input schemas live with `tools/list`) Key rules: 1. Never share private keys, seed phrases or keystores with any tool, server or chat. 2. A human confirms risk flags: set `confirmHighSlippage` / `confirmHighImpact` only after the user saw the reason and explicitly said yes. 3. Simulate before signing: call `simulate_swap_tx` with the unchanged transaction and `minOut.raw`; stop on `status: "fail"` or `meetsMinOut: false`; on `meetsMinOut: "—"` an autonomous agent stops and a person decides. ## Docs - [OneDex for AI agents](https://onedex.app/agents): connect, integration flow, tool reference, safety and limits, signing, autonomous agents - [Agent instructions](https://onedex.app/agents/agent-instructions.md): copy-pasteable operating rules, decision matrix, transaction data layouts, what is not supported - [Errors and recovery](https://onedex.app/agents/errors.md): every error code, what to do, whether to retry, rate limits ## Optional - [Health check](https://aggregator.onedex.app/ai/health)