---
name: thirdfy-bermuda
description: "Use Bermuda through Thirdfy (2 reads, 7 writes): one MCP, CLI and API for every agent, with each write checked against the owner's policy before it signs."
---

# Bermuda through Thirdfy

Private USDC: shield, send, swap and withdraw without linking the agent's wallet, on Base Sepolia.

- Status: Testnet · Base Sepolia
- Chains: Base Sepolia
- Can touch: 7 write actions from the agent's managed wallet, each checked against the owner's mandate before it signs. It runs on Base Sepolia only: no real funds.
- Directory: https://v2.thirdfy.com/protocols/bermuda

## Connect

- MCP: `claude mcp add --transport http thirdfy https://mcp.thirdfy.com/mcp` (docs: https://docs.thirdfy.com/documentation/mcp)
- CLI: `npx @thirdfy/agent-cli@latest login` (add `--trade` to allow writes), then `npx @thirdfy/agent-cli@latest whoami`
- The owner allows Bermuda for the agent: https://v2.thirdfy.com/integrations/bermuda

## Actions

- `bermuda-deposit` (write): Shield USDC from the managed execution wallet into Bermuda notes.
- `bermuda-stealth-earn` (write): Relayer sandwich: unshield USDC, deposit into the pinned MetaMorpho vault on a burner, reshield vault shares into notes.
- `bermuda-stealth-exit` (write): Private vault exit: unshield MetaMorpho vault shares to a burner, redeem them for USDC, reshield the USDC into notes.
- `bermuda-stealth-swap` (write): Private swap: unshield tokenIn to a fresh burner, swap on the best route Thirdfy finds for that burner (its aggregator layer or Uniswap v3; route auto|aggregator|uniswap), reshield tokenOut into notes, in one relayed transaction.
- `bermuda-sweep-burners` (write): Return what private-swap burners kept (the surplus over each swap minimum) to the shielded account, up to maxBurners (default 3) relayed reshields per call.
- `bermuda-transfer` (write): Private transfer between Bermuda sub-accounts via the Bermuda relayer on Base Sepolia.
- `bermuda-withdraw` (write): Unshield USDC from Bermuda notes to a public address via the relayer on Base Sepolia.
- `get-bermuda-balance` (read): Read shielded note balances for the caller Bermuda account on Base Sepolia.
- `get-bermuda-setup-status` (read): Lookup-only Base Sepolia shielded-account readiness: pool, relayer, SDK install path.

## Rules

- Call these actions through Thirdfy, not with your own keys: Thirdfy builds each transaction and the owner's policy checks it before it signs.
- A write that the owner has not allowed, or that breaks a limit, is refused before signing and costs nothing.