io.github.gblinproject/gblin-treasury-risk-regime

Est-ce que io.github.gblinproject/gblin-treasury-risk-regime est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.gblinproject/gblin-treasury-risk-regime » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 24 outils

• actions.prepare≈ 578 tokens

  Builds the unsigned transactions for an operation on the GBLIN vault, in the order they are sent. Actions: mint_with_eth (amount in ETH), mint_with_weth (amount in WETH), mint_with_usdc (amount in USDC, through the Zap), redeem_in_kind (amount in shares; pro rata basket tokens, no fee, no price feed), exit_to_eth (amount in shares, through the Zap, all or nothing), exit_to_usdc (amount = the USDC needed), bid (trade with the rebalancing auction; row optional, the largest gap by default). Every output bound is non-zero and every step through the vault or the Zap carries its gas limit. Nothing is signed or sent: the steps are returned to the caller.

  Paramètres, retour & exemple (4)

  Paramètres

  • row · integer · optionnel
    bid only: the basket row to bid on. Default: the row with the largest gap.
  • action · string · requis · mint_with_eth | mint_with_weth | mint_with_usdc | redeem_in_kind | exit_to_eth | exit_to_usdc | bid
    The operation to prepare.
  • amount · string · optionnel
    Decimal amount. Unit depends on the action (see the description). Not used by bid.
  • wallet_address · string · requis
    The wallet that will sign and receive.

  Exemple d'appel

  {"name": "actions.prepare", "arguments": {"action": "mint_with_eth", "wallet_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"next": "texte", "steps": [], "action": "texte", "wallet": "texte", "expected": {}, "warnings": []}}

• actions.preview≈ 631 tokens

  Simulates a list of transactions in sequence against the latest Base block, as if the wallet sent them one after the other, before anything is signed. Each step sees the state the previous ones left (an approval before a mint works). Accepts steps with target or to, calldata or data, and optional value and gas. Returns, per step, whether it would succeed, the gas it uses, whether the gas limit it carries is enough, and the decoded revert reason when it fails; and the net token and ETH movements for the wallet. State can change before transactions land: a successful preview is evidence, not a guarantee.

  Paramètres, retour & exemple (2)

  Paramètres

  • from · string · requis
    The wallet that will send the steps.
  • steps · array · requis
    The steps, in order: target and calldata (or their send_calls spellings, to and data), value in wei (optional), gas (optional).

  Exemple d'appel

  {"name": "actions.preview", "arguments": {"from": "texte", "steps": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"from": "texte", "note": "texte", "block": 1, "steps": [], "would_succeed": true, "balance_changes": [], "first_failing_step": 1}}

• actions.status≈ 325 tokens

  Reports what a sent Base transaction did: pending, succeeded, reverted or not found; its block and confirmations; the fee paid; the net token movements for the sender (GBLIN shares minted or redeemed, USDC, basket tokens); and, when it reverted, the decoded reason.

  Paramètres, retour & exemple (1)

  Paramètres

  • hash · string · requis
    The transaction hash.

  Exemple d'appel

  {"name": "actions.status", "arguments": {"hash": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"to": "texte", "from": "texte", "hash": "texte", "note": "texte", "block": 1, "revert": {}, "status": "pending", "fee_eth": "texte", "explorer": "texte", "gas_used": 1, "gas_limit": 1, "confirmations": 1}}

• attestation.verify≈ 432 tokens

  Verifies a GBLIN Risk Attestation, the object returned by GBLIN's /api/x402/attestation, or a proof-of-diligence attached by a peer agent. Free. Runs four checks: (1) integrity, by recomputing the EIP-712 attestation_id; (2) authenticity, by recovering the signer when a signature is present and comparing it with GBLIN's published attestor; (3) freshness, against on-chain time (10-minute validity); (4) live drift, by comparing the attested regime with the current on-chain regime.

  Paramètres, retour & exemple (2)

  Paramètres

  • attestation · object · requis
    The full attestation object from /api/x402/attestation (must include `eip712`; `attestation_id`, `signature`, `attestor` are used when present). A JSON string of that object is also accepted.
  • expected_attestor · string · optionnel
    Optional 0x address to check the signature against. Defaults to the GBLIN attestor address baked into this MCP build (GBLIN_ATTESTOR_ADDRESS env).

  Exemple d'appel

  {"name": "attestation.verify", "arguments": {"attestation": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"live": {}, "valid": true, "checks": {}, "source": "texte", "attested": {}, "guidance": "texte", "recomputed_attestation_id": "texte"}}

• auction.state≈ 450 tokens

  Read the GBLIN rebalancing auction on Base. The vault does not rebalance itself and pays nobody to do it: when a basket row drifts past its band it holds a Dutch auction, and whoever trades with it toward the target weights is the counterparty, at the oracle price adjusted by a premium that starts at a discount and rises to a cap over one ramp. Returns, per row, the side the vault takes, the gap in ETH, the token and amount the bidder hands over, and unsigned calldata (approval + bid). The premium is the whole reward; nothing is paid out of the vault.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "auction.state", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"best": {}, "lens": "texte", "note": "texte", "rows": [], "curve": {}, "vault": "texte", "howToBid": "texte", "openedAt": 1, "premiumBps": 1, "auctionOpen": true, "navReliable": true, "worstGapEth": "texte"}}

• coherence.report≈ 354 tokens

  Kept/violated tallies for GBLIN's pre-registered, hash-pinned promises (attestation uptime, counter honesty), probed every 10 minutes; each closed UTC day is sealed on Base as an EAS attestation (schema 0x9f433a96…). Self-observation only in v0. Free.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "coherence.report", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"method": "texte", "subject": "texte", "promises": [], "observing_since": "texte"}}

• fetch≈ 204 tokens

  Returns the full text of one GBLIN document by its id: {id, title, text, url, metadata}. Documents are the protocol's public documentation, the tool cards and the live vault state. Read-only and free.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · requis
    A GBLIN document id, such as protocol-readme.

  Exemple d'appel

  {"name": "fetch", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "url": "texte", "text": "texte", "title": "texte", "metadata": {}}}

• governance.state≈ 385 tokens

  Reads GBLIN protocol governance: whether the GBLIN vault is owned by the 48-hour timelock, the timelock's minimum delay and grace period, role member counts, and any pending asset-addition proposal on the vault. With an operation_id it also reports the status of that timelock operation. Read-only.

  Paramètres, retour & exemple (1)

  Paramètres

  • operation_id · string · optionnel
    Optional 0x-prefixed 32-byte hex id of a specific timelock operation to inspect.

  Exemple d'appel

  {"name": "governance.state", "arguments": {"operation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"lens": "texte", "owner": "texte", "vault": "texte", "timelock": {}, "verification": {}, "fee_recipient": "texte", "trust_summary": "texte", "pending_handover": {}, "owner_is_timelock": true, "owner_is_renounced": true, "pending_timelock_operation": {}}}

• payments.prepare≈ 756 tokens

  Builds a gasless GBLIN payment. The vault's share token implements EIP-3009, so the holder signs an authorization and anybody can carry it on chain: the payer needs no ETH. Returns the EIP-712 message to sign (its domain is read from the token, not assumed), the calldata that carries the signed authorization, and the x402 'exact' payload for paying an HTTP endpoint in GBLIN. Method 'receive' lets only the named recipient submit the authorization, so nobody can front-run the transfer; method 'transfer' suits an x402 facilitator, which submits on the seller's behalf. With relay: true it also returns a second authorization that pays a relayer's fee in GBLIN. No private key is requested, held or transmitted: the signature is produced by the caller's own wallet.

  Paramètres, retour & exemple (7)

  Paramètres

  • to · string · requis
    The recipient's address.
  • from · string · requis
    The payer's address: the wallet that will sign.
  • relay · boolean · optionnel
    true when nobody else will carry the payment on chain: also prepares a second authorization that pays GBLIN's relay fee in GBLIN at the live NAV. Forces method 'transfer'.
  • method · string · optionnel · receive | transfer
    'receive' (default) can be submitted only by the recipient; 'transfer' by anyone.
  • amount_usd · string · optionnel
    Amount in USD, converted at the live NAV. Give this or amount_gblin.
  • amount_gblin · string · optionnel
    Amount in GBLIN shares, e.g. '0.25'. Give this or amount_usd.
  • valid_for_seconds · number · optionnel
    How long the authorization stays valid. Default 600, maximum 86400.

  Exemple d'appel

  {"name": "payments.prepare", "arguments": {"to": "texte", "from": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"relay": {}, "amount": {}, "digest": "texte", "method": "receive", "submit": {}, "warnings": [], "next_steps": [], "typed_data": {}, "x402_payload": {}, "authorization": {}, "payer_balance": {}, "x402_accepts_for_sellers": {}}}

• payments.relay≈ 477 tokens

  GBLIN's relay carries a signed GBLIN payment on chain for a payer that holds no ETH. Takes the payment and the relay fee, each as { authorization, signature }, both signed by the payer's wallet. The relay checks both against the chain, simulates them and submits them in one transaction through Multicall3: either both settle or neither does. The fee is paid in GBLIN at the live NAV. Returns the transaction hash and its outcome. This tool moves funds: it carries the authorizations exactly as signed.

  Paramètres, retour & exemple (2)

  Paramètres

  • fee · object · requis
    { authorization, signature } of the relay fee, as prepared with relay: true and signed by the payer.
  • payment · object · requis
    { authorization, signature } of the payment, method 'transfer'.

  Exemple d'appel

  {"name": "payments.relay", "arguments": {"fee": {}, "payment": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"fee": {}, "note": "texte", "block": 1, "relay": "texte", "status": "settled", "payment": {}, "explorer": "texte", "transaction": "texte"}}

• payments.verify≈ 502 tokens

  Checks a signed GBLIN authorization against the chain before any gas is spent on it. Recovers the signer from the EIP-712 digest (and asks the wallet itself through ERC-1271 when the payer is a contract), then checks the validity window against on-chain time, whether the nonce has already been used or cancelled, and whether the payer still holds the amount. Returns a verdict and the ready calldata when it would settle, the failing reason when it would not. These are the checks an x402 facilitator runs, so a 'would_settle' verdict means the payment can be carried.

  Paramètres, retour & exemple (3)

  Paramètres

  • method · string · optionnel · receive | transfer
    Which method the signature was produced for. Default 'receive'.
  • signature · string · requis
    The signature produced by the payer's wallet, 0x-prefixed.
  • authorization · object · requis
    The authorization object: from, to, value, validAfter, validBefore, nonce.

  Exemple d'appel

  {"name": "payments.verify", "arguments": {"signature": "texte", "authorization": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"amount": {}, "checks": {}, "digest": "texte", "method": "receive", "source": "texte", "submit": {}, "failures": [], "would_settle": true}}

• protocol.info≈ 146 tokens

  GBLIN llms.txt as plain text: contract addresses, endpoints, prices, payment flow, field contract of the attestation.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "protocol.info", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"llms_txt": "texte"}}

• protocol.stats≈ 292 tokens

  Cumulative public counters of GBLIN's x402 endpoints: paid calls, unique payer wallets, USDC earned, with methodology disclosure. Cached 5 min.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "protocol.stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"_source": {}, "total_paid_calls": 1, "total_usdc_earned": 1, "total_unique_agents": 1}}

• receipts.get≈ 1005 tokens

  Receipt #index from GBLIN's receipts log, re-signed (Ed25519 is deterministic) with a fresh inclusion proof, the current signed checkpoint and the latest on-chain anchor. Free.

  Paramètres, retour & exemple (1)

  Paramètres

  • index · integer · requis
    Receipt index in the log (0-based; current size at GET /log/checkpoint)

  Exemple d'appel

  {"name": "receipts.get", "arguments": {"index": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"leaf": "texte", "root": "texte", "index": 1, "anchor": {}, "format": "texte", "payload": {}, "signature": "texte", "tree_size": 1, "checkpoint": "texte", "provenance": {}, "verifier_key": "texte", "inclusion_proof": []}}

• receipts.seal≈ 1332 tokens

  Appends the hashes of an AI action to GBLIN's public RFC 6962 transparency log and returns a portable receipt: Ed25519 signature, inclusion proof, operator-signed C2SP checkpoint, and the latest on-chain anchor (EAS on Base, daily). Demo mode only over MCP: 5 seals per day per IP, receipts marked demo: true; unlimited sealing is a separate paid x402 HTTP endpoint. Provenance is self-reported: a receipt proves that the record existed at that time, not that the action happened. The action, agent_id, tool and meta strings are published in the log exactly as given. Fields not listed in the schema are ignored and not recorded.

  Paramètres, retour & exemple (7)

  Paramètres

  • meta · string · optionnel
    Extra JSON object as a string (optional). PUBLISHED.
  • mode · string · optionnel · demo
    Only 'demo' is available over MCP (5/day/IP). Paid seals go through x402 HTTP.
  • tool · string · optionnel
    Tool/model used (optional). PUBLISHED.
  • action · string · requis
    What the AI did, short label. PUBLISHED in the log.
  • agent_id · string · optionnel
    Your agent identifier (optional). PUBLISHED.
  • input_hash · string · requis
    sha256 of the input/prompt, 64 hex chars (0x prefix optional)
  • output_hash · string · optionnel
    sha256 of the output, 64 hex chars (optional; empty or blank = omitted)

  Exemple d'appel

  {"name": "receipts.seal", "arguments": {"action": "texte", "input_hash": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"leaf": "texte", "root": "texte", "index": 1, "anchor": {}, "format": "texte", "payload": {}, "signature": "texte", "tree_size": 1, "checkpoint": "texte", "provenance": {}, "verifier_key": "texte", "inclusion_proof": []}}

• receipts.verify≈ 344 tokens

  Verifies a gblin-receipt/v1 JSON with pure math, without a log lookup and without trusting this server: leaf hash, Ed25519 signature, RFC 6962 inclusion proof, C2SP checkpoint signature and verifier-key hash. These are the same checks as the zero-dependency verify-receipt.mjs script that runs offline; the consistency check against the on-chain anchor is available separately at GET /v1/verify/:index.

  Paramètres, retour & exemple (1)

  Paramètres

  • receipt · object · requis
    A gblin-receipt/v1 JSON, bare or wrapped in {receipt}, as issued by the receipts log (also served at GET /v1/receipt/:i)

  Exemple d'appel

  {"name": "receipts.verify", "arguments": {"receipt": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"index": 1, "valid": true, "checks": [], "errors": [], "format": "texte", "reminder": "texte", "tree_size": 1}}

• risk.attestation_sample≈ 312 tokens

  Static, permanently expired sample of the signed Risk Attestation (sample: true), with the same fields and EIP-712 schema as the signed one, for building and testing parsers and verifiers.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "risk.attestation_sample", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"meta": {}, "eip712": {}, "sample": true, "signed": true, "verify": {}, "attestor": "texte", "signature": "texte", "attestation": {}, "attestation_id": "texte"}}

• risk.regime≈ 469 tokens

  Current BTC/ETH risk regime (calm | elevated | crash) and the matching risk posture, read live from GBLIN's on-chain Crash Shield on Base (60-second cache). Free and unsigned; a signed version that verifies offline is a separate paid x402 HTTP endpoint.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "risk.regime", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "assets": [], "regime": "calm", "source": "texte", "chain_id": 1, "contract": "texte", "regime_code": 1, "risk_posture": "risk_on", "severity_pct": 1, "shield_active": true, "defensive_cash_pct": 1}}

• search≈ 260 tokens

  Searches GBLIN's documentation and live state and returns matching documents: the agent API summary, the protocol's README and documents (governance, deployments, review record), the MCP server and library READMEs, the public pages, one card per MCP tool, and a snapshot of the live vault state. Returns {results: [{id, title, url}]}, where each id identifies a full document. Read-only and free.

  Paramètres, retour & exemple (1)

  Paramètres

  • query · string · requis
    What to look for, in plain words.

  Exemple d'appel

  {"name": "search", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"results": []}}

• treasury.health≈ 411 tokens

  Analyzes an agent wallet's treasury: GBLIN, USDC and ETH balances, whether the ETH covers an exit at the live gas price, and the redemption cooldown. When daily_burn_usd is given it adds days of USDC runway and a split that keeps seven days of spend in USDC and treats only the surplus as a candidate for GBLIN. Free by default; a 0.003 USDC charge applies only when the server operator sets MCP_PAYWALL=true.

  Paramètres, retour & exemple (3)

  Paramètres

  • _payment · string · optionnel
    Base64-encoded x402 PaymentProof JSON. Omit on first call to receive the 402 payment manifest.
  • daily_burn_usd · number · optionnel
    Optional. Average daily spend in USD (e.g. 1.5).
  • wallet_address · string · requis
    Agent's 0x address.

  Exemple d'appel

  {"name": "treasury.health", "arguments": {"wallet_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ratios": {}, "wallet": "texte", "balances": {}, "cooldown": {}, "gas_health": {}, "recommendation": {}}}

• treasury.nav_history≈ 352 tokens

  NAV per GBLIN share over time, read from the chain at past blocks, beside the ETH/USD and BTC/USD oracle prices the vault itself uses, with the change of each over the window and the NAV's largest drawdown. The series starts at the deployment of the vault in service and can be compared with holding ETH or BTC over the same span.

  Paramètres, retour & exemple (2)

  Paramètres

  • points · integer · optionnel
    How many points, newest last. Default 30.
  • interval · string · optionnel · hour | day
    Spacing of the points. Default day.

  Exemple d'appel

  {"name": "treasury.nav_history", "arguments": {"points": 1, "interval": "hour"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"note": "texte", "method": "texte", "points": 1, "series": [], "summary": {}, "interval": "hour"}}

• treasury.plan≈ 722 tokens

  Turns idle USDC into a reviewable plan in one call: operating cash = max(reserve_usd, daily_burn_usd x days), the surplus above it, a simulation of minting that surplus into GBLIN at NAV (fees read live from the vault, estimated exit value today, round-trip cost), the same simulation for a trial amount (100 USDC by default), and the blockers (Crash Shield, redemption cooldown, ETH for the exit). Read-only: nothing is executed and nothing is advised. GBLIN is crypto exposure (cbBTC, WETH, USDC), not cash and not yield.

  Paramètres, retour & exemple (5)

  Paramètres

  • days · number · optionnel
    Days of spend to keep liquid (default 7, max 365).
  • trial_usdc · number · optionnel
    Trial amount to simulate beside the surplus (default 100).
  • reserve_usd · number · optionnel
    USD to keep liquid regardless of the burn rate; the larger of the two rules wins.
  • daily_burn_usd · number · optionnel
    Average daily spend in USD. Operating cash = daily_burn_usd × days.
  • wallet_address · string · requis
    Agent's 0x address.

  Exemple d'appel

  {"name": "treasury.plan", "arguments": {"wallet_address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"next": {}, "as_of": {}, "notes": [], "trial": {}, "inputs": {}, "market": {}, "wallet": "texte", "surplus": {}, "blockers": [], "simulation": {}, "wallet_state": {}, "operating_cash": {}}}

• treasury.quote≈ 390 tokens

  Preview a buy (ETH→GBLIN) or sell (GBLIN→ETH) without executing. Returns expected output, safe minOut with dynamic slippage buffer (2.5% normal / 4% during Crash Shield), and fee breakdown. Read-only.

  Paramètres, retour & exemple (2)

  Paramètres

  • amount_in · string · requis
    Positive decimal. ETH for buy, GBLIN for sell.
  • direction · string · requis · buy | sell

  Exemple d'appel

  {"name": "treasury.quote", "arguments": {"amount_in": "texte", "direction": "buy"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"fees": {}, "direction": "buy", "next_step": "texte", "amount_in_eth": "texte", "cooldown_note": "texte", "amount_in_gblin": "texte", "slippage_reason": "texte", "expected_eth_out": "texte", "safe_min_eth_out": "texte", "expected_gblin_out": "texte", "safe_min_gblin_out": "texte", "slippage_buffer_bps": 1}}

• treasury.state≈ 403 tokens

  Reads the current GBLIN protocol state on Base mainnet: NAV in USD, basket composition with dynamic weights, Crash Shield status and whether the NAV is reliable.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "treasury.state", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"meta": {}, "basket": [], "nav_usd": 1, "auction_open": true, "nav_reliable": true, "eth_price_usd": 1, "slippage_reason": "texte", "crash_shield_active": true, "slippage_buffer_pct": 1, "management_fee_bps_per_year": 1}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.gblin.digital/mcp