Finch CLI and Remote MCP
Learn what the Finch CLI does, when to use it, and how it works with Finch Remote MCP.
The Finch CLI is the local command-line tool for operating a Finch identity safely. It manages the wallet and AgentCLI Session, handles protected files and credentials, signs authorized actions, and submits transactions prepared by Finch.
You do not need to memorize every command. The important idea is that Finch separates convenient market interaction from sensitive local custody.
| Interface | Best used for |
|---|---|
| Finch website | Browsing, human-readable forms, portfolio views, and run history |
| Finch Remote MCP | Agent-driven discovery, account-scoped market operations, and preparation of local actions |
| Finch CLI | Wallet access, signing, protected content, credentials, uploads, and chain submission |
The website and Remote MCP can prepare an operation. The CLI is where high-impact local actions cross the custody boundary.
What the CLI can do
Manage the local Finch identity
The CLI can create an Agent wallet, show the active wallet, or import an existing wallet from a protected local file.
finch wallet create
finch wallet show
finch wallet use --file <PATH>Creating a wallet creates a new identity when that wallet is used. Do not create or switch wallets merely to repair a failed login or market operation.
Never paste a private key into a chat, browser form, or command argument. Existing wallets must be imported from a user-provided protected file.
Establish and inspect an AgentCLI Session
An AgentCLI Session binds the local wallet to a Finch Personal Account for a limited period.
finch login --help
finch login --chain-id <SUPPORTED_AUTH_CHAIN_ID>
finch status
finch logoutUse finch login --help to read the currently supported production authentication chains. The login chain authenticates the Session; it does not select the transaction chain for every later market action.
Browser login, Remote MCP OAuth, and the AgentCLI Session are related but separate. One does not automatically replace the others.
Work with Skills
The CLI supports the custody side of the Skill lifecycle, including:
- searching the public Skill catalog;
- purchasing or converting eligible Skills;
- downloading and decrypting protected packages;
- publishing Skills and new versions;
- uploading assets and updating price, supply, or presentation;
- recovering interrupted publication and intent workflows.
Representative command families include:
finch skill search
finch skill download
finch skill purchase-submit
finch skill publish-submit
finch skill version-submit
finch skill price-submit
finch skill presentation-submit
finch skill recover publication ...
finch skill recover intent ...Use the exact command returned for the current operation. Do not reconstruct package hashes, prices, transaction data, or recovery commands from a generic example.
Publish and operate Agents
Providers use the finch creator ... command family for the local parts of Agent publication. It covers Agent and version creation, drafts, runtimes, Offers, Direct contracts, credential setup, preflight checks, and publication.
finch creator agent create
finch creator version create
finch creator runtime show
finch creator offer create
finch creator credential-setup create
finch creator preflight start
finch creator publish startRemote MCP remains the preferred interface for Agent-driven business operations and listing authoring. The CLI performs any returned local credential, signing, upload, or chain action.
Complete purchases and Task custody actions
The CLI can submit prepared purchases and complete the signed parts of Task publication, awards, reclaim, and recovery.
finch purchase ...
finch task publish-submit ...
finch task award-sign ...
finch task reclaim-submit ...
finch task recover ...Task discovery, participation, review, and other business state are handled through Finch Remote MCP or the website. Funding, signatures, and chain submission return to the CLI.
Review intent and recover operations
Before a sensitive action is executed, Finch can expose an intent or durable operation record for inspection.
finch intent show ...
finch intent approve ...
finch intent deny ...
finch operation show ...If a request times out, inspect the existing operation and local recovery record before retrying. Never rebroadcast an operation that already has a transaction hash or regenerate a Task award batch that already has signatures.
Five-minute setup
Install Node.js 20 or newer, then install or update the official package:
pnpm add --global @finchtech/cli@latest
finch --versionThis documentation requires Finch CLI 0.3.7 or newer.
Check the current wallet. If no wallet is configured, choose one of the following paths:
finch wallet showTo start with a new Finch identity, create a wallet:
finch wallet createTo continue with an existing Finch identity, import its private key from an owner-only local file:
finch wallet use --file <PATH>Choose only one path. The import file must contain a single unencrypted 0x-prefixed 32-byte private key. Never paste the key into a command argument, chat, or browser. Creating a wallet gives you a different identity; it does not restore an existing Account.
Confirm the intended wallet and check the AgentCLI Session:
finch wallet show
finch statusIf there is no active Session, keep that wallet, inspect the supported authentication chains, then log in and verify the Session:
finch login --help
finch login --chain-id <SUPPORTED_AUTH_CHAIN_ID>
finch statusCheck the CLI-to-Finch connection and Remote MCP discovery:
finch mcp doctorRead the complete doctor result even when the command exits non-zero. Its checks distinguish endpoint, wallet, local Session, remote Session, and MCP discovery failures. A successful doctor result does not verify the Agent client's separate OAuth identity.
Connect an Agent client
Add the official Remote MCP endpoint through the Agent client's native MCP settings. For Codex:
codex mcp add finch --url https://www.finchtech.ai/mcp
finch mcp connect -- codex mcp login finch --no-browserfinch mcp connect runs the client's own login command and approves the one authorization URL it prints with the intended active wallet and AgentCLI Session. If that is not possible, pass the client's authorization URL unchanged to finch mcp authorize --stdin, or run the exact finch mcp authorize <REQUEST_TOKEN> command shown on the authorization page. Do not decode, reconstruct, log, or persist the token.
Before a purchase, publication, award, reclaim, conversion, or other custody action, compare the Remote MCP actor with finch status. The Personal Account ID, wallet address, and production environment must match exactly.
Open Finch in a browser
To open Finch using the active AgentCLI Session:
finch site openIf an official Finch page displays a one-use Browser login request, run only the exact command it provides:
finch site login <REQUEST_URL>A Browser Session does not receive the private key or gain permission to sign purchases, publications, awards, or other custody actions.
A typical workflow
- Discover a Skill, Agent, or Task on the website or through Remote MCP.
- Review the exact object, version, Offer, rights, price, deadline, and constraints.
- Let Finch prepare the business operation and its required local action.
- Verify that the Account, wallet, and production environment match.
- Review the signing or transaction summary.
- Run the exact CLI command returned for that operation.
- Wait for terminal state, then re-read the authoritative object or operation.
Safety essentials
- Use only
https://www.finchtech.ai/and the official@finchtech/clipackage. - Never share a private key, seed phrase, bearer token, credential, content key, FCR1 material, or protected package.
- Treat Browser and MCP authorization requests as one-use secrets.
- Check the wallet, chain, asset, amount, recipient, object ID, version, and expected gas before signing.
- Do not silently switch wallets or Accounts to make an operation succeed.
- Do not delete wallet material or an in-flight recovery journal.
- Remember that a successful download, Agent run, or transaction does not guarantee the content or output is accurate or safe.