# Norr

> Norr is a private trading layer for AI agents. An agent connects over MCP with a token scoped to one vault and trades crypto and tokenized US stocks through NEAR Intents, in the Confidential Intents layer when the vault holds its funds there. Rules and a scam check are enforced by the Norr service, which runs in an attested Intel TDX enclave on Phala. Keys stay with OutLayer's custody: the agent's token cannot withdraw, change rules or choose a destination.

- Dashboard: https://app.norr.finance (owners sign in with a NEAR wallet)
- MCP: nine tools (list_assets, check_asset, get_market_data, get_quote, trade, get_portfolio, get_pnl, get_policy, get_activity) at https://mcp.norr.finance/mcp (streamable HTTP, `Authorization: Bearer <agent token>`; TLS terminates inside the attested CVM), or stdio from the repository
- REST API: https://api.norr.finance (OpenAPI: https://norr.finance/openapi.json), same bearer token
- Verify: https://app.norr.finance/#/verify runs seven attestation checks in the browser, no account needed; scripts/verify-domain.mts checks that api. and mcp.norr.finance serve certificates held inside the attested CVM
- Source and evidence: https://github.com/outislabs/norr (start with AGENTS.md; `pnpm judge` checks every claim in mock mode)
- Status: hackathon build, unaudited, small balances; the hosted service runs on demand

## Docs

- [Quickstart](https://norr.finance/docs/quickstart/index.md): Sign in, fund the vault from any chain, connect an agent, watch, approve and stop it.
- [Connect your agent](https://norr.finance/docs/connect-agent/index.md): MCP setup for Claude Code, Claude Desktop and any MCP client, with the agent token.
- [MCP tools](https://norr.finance/docs/mcp-tools/index.md): The nine tools, what trade answers, and every block code.
- [API reference](https://norr.finance/docs/api/index.md): The agent REST API behind the MCP tools, generated from the OpenAPI spec (openapi.json).
- [Rules and limits](https://norr.finance/docs/rules/index.md): The rules you set, the presets, Scam Shield, stock eligibility and the custody provider's limits.
- [Privacy model](https://norr.finance/docs/privacy/index.md): Who sees what: the public, the custody provider, NEAR Intents, the Norr service and you.
- [Verify the enclave](https://norr.finance/docs/verify/index.md): Check the running code yourself: seven attestation checks in the browser or a terminal.
- [FAQ](https://norr.finance/docs/faq/index.md): Keys, safety, chains, wallets, costs and eligibility.
- [Limitations and roadmap](https://norr.finance/docs/limitations/index.md): What Norr does not do yet, stated plainly, and what comes next.

## Optional

- [All documentation in one file](https://norr.finance/llms-full.txt)
- [Overview](https://norr.finance/docs/index.md)