---
name: thirdfy-bermuda
description: "Use Bermuda through Thirdfy (2 reads, 7 writes): one MCP, CLI and API for every agent, with each write checked against the owner's policy before it signs."
---

# Bermuda through Thirdfy

Base Sepolia shielded USDC account (Bermuda SDK 0.3.4). Deposit is sent from the execution wallet (approve first); transfer, withdraw, stealth earn and exit (private MetaMorpho vault entry and exit), stealth swap (private Uniswap v3 swap on a fresh burner) and burner sweep use the Bermuda relayer.

- Status: Testnet · Base Sepolia
- Chains: Base Sepolia
- Can touch: 7 write actions from the agent's managed wallet, each checked against the owner's mandate before it signs. It runs on Base Sepolia only: no real funds.
- Directory: https://v2-test.thirdfy.com/protocols/bermuda

## Connect

- MCP: `claude mcp add --transport http thirdfy https://mcp-test.thirdfy.com/mcp` (docs: https://docs.thirdfy.com/documentation/mcp)
- CLI: `npx @thirdfy/agent-cli login` (add `--trade` to allow writes), then `npx @thirdfy/agent-cli whoami`
- The owner allows Bermuda for the agent: https://v2-test.thirdfy.com/integrations/bermuda

## Actions

- `bermuda-deposit` (write): Shield USDC from the managed execution wallet into Bermuda notes.
- `bermuda-stealth-earn` (write): Relayer sandwich: unshield USDC, deposit into the pinned MetaMorpho vault on a burner, reshield vault shares into notes.
- `bermuda-stealth-exit` (write): Private vault exit: unshield MetaMorpho vault shares to a burner, redeem them for USDC, reshield the USDC into notes.
- `bermuda-stealth-swap` (write): Private swap: unshield tokenIn to a fresh burner, swap on the best route Thirdfy finds for that burner (its aggregator layer or Uniswap v3; route auto|aggregator|uniswap), reshield tokenOut into notes, in one relayed transaction.
- `bermuda-sweep-burners` (write): Return what private-swap burners kept (the surplus over each swap minimum) to the shielded account, up to maxBurners (default 3) relayed reshields per call.
- `bermuda-transfer` (write): Private transfer between Bermuda sub-accounts via the Bermuda relayer on Base Sepolia.
- `bermuda-withdraw` (write): Unshield USDC from Bermuda notes to a public address via the relayer on Base Sepolia.
- `get-bermuda-balance` (read): Read shielded note balances for the caller Bermuda account on Base Sepolia.
- `get-bermuda-setup-status` (read): Lookup-only Base Sepolia shielded-account readiness: pool, relayer, SDK install path.

## Rules

- Call these actions through Thirdfy, not with your own keys: Thirdfy builds each transaction and the owner's policy checks it before it signs.
- A write that the owner has not allowed, or that breaks a limit, is refused before signing and costs nothing.