io.github.portdeveloper/gulltoppr

Est-ce que io.github.portdeveloper/gulltoppr est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.portdeveloper/gulltoppr » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• decode_tx≈ 898 tokens

  Decode what a transaction did: delegated heimdall decode plus `decoded_call` from the resolved target ABI when available. Prefer `decoded_call` for typed function/arg names, and read its provenance.

  Paramètres, retour & exemple (3)

  Paramètres

  • chain · ? · requis
    Chain alias from GET /v1/chains (for example "ethereum", "base", "monad", "bsc") or numeric EIP-155 chain id.
  • rpc_url · string · optionnel
    Override HTTP(S) RPC URL. Required for chains with no default (e.g. local/31337) or custom EVM chain ids.
  • tx_hash · string · requis
    0x transaction hash.

  Exemple d'appel

  {"name": "decode_tx", "arguments": {"chain": "texte", "tx_hash": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"chain": 1, "cached": true, "source": "texte", "decoded": "texte", "tx_hash": "texte", "provenance": {}, "decoded_call": "texte"}}

• encode_call≈ 422 tokens

  Encode a function call to calldata (0x…) without sending anything.

  Paramètres, retour & exemple (6)

  Paramètres

  • args · array · optionnel
    Function arguments, in order. Pass uint values as decimal strings.
  • chain · ? · requis
    Chain alias from GET /v1/chains (for example "ethereum", "base", "monad", "bsc") or numeric EIP-155 chain id.
  • value · string · optionnel
    Native value in wei (decimal string), for payable functions.
  • address · string · requis
    0x contract address.
  • rpc_url · string · optionnel
    Override HTTP(S) RPC URL. Required for chains with no default (e.g. local/31337) or custom EVM chain ids.
  • function · string · requis
    Function name, or full signature like "transfer(address,uint256)" if overloaded.

  Exemple d'appel

  {"name": "encode_call", "arguments": {"chain": "texte", "address": "texte", "function": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"data": "texte", "function_signature": "texte"}}

• export_registry≈ 91 tokens

  Return the CC0 selector commons as NDJSON. This can be large; prefer lookup_selector for normal agent workflows.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "export_registry", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_chains≈ 461 tokens

  List viem-backed chain aliases and ids. Use filters to find testnets, default-RPC chains, or a named chain before resolving contracts.

  Paramètres, retour & exemple (3)

  Paramètres

  • q · string · optionnel
    Search by chain id, name, alias, or native symbol; multi-word queries also match token-by-token and without whitespace.
  • testnets · boolean · optionnel
    When true, only testnets; when false, only mainnets.
  • has_default_rpc · boolean · optionnel
    When true, only chains gulltoppr can query without rpc_url.

  Exemple d'appel

  {"name": "list_chains", "arguments": {"q": "texte", "testnets": true, "has_default_rpc": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"chains": []}}

• lookup_selector≈ 396 tokens

  Lookup gulltoppr-proven signatures for a 4-byte function/error selector or 32-byte event topic0. Prefer these over public 4byte guesses.

  Paramètres, retour & exemple (1)

  Paramètres

  • selector · string · requis
    4-byte function/error selector or 32-byte event topic0.

  Exemple d'appel

  {"name": "lookup_selector", "arguments": {"selector": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"entries": [], "selector": "texte"}}

• prepare_tx≈ 983 tokens

  Prepare a contract WRITE for the user to sign. Returns an UNSIGNED transaction, its simulation, a human-readable summary, safety metadata, warnings, a configured signing deeplink, and an EIP-1193 wallet request when signing is recommended. IMPORTANT: this tool NEVER signs or broadcasts. Present the summary + simulation + warnings to the user. Only hand them the `deeplink` or `wallet_request` when `safety.signing_recommended` is true. If `safety.risk_level` is high or blocked, make that explicit; blocked means do not send.

  Paramètres, retour & exemple (7)

  Paramètres

  • args · array · optionnel
    Function arguments, in order. Pass uint values as decimal strings.
  • from · string · requis
    The sender address (the user's wallet). No key is needed — nothing is signed.
  • chain · ? · requis
    Chain alias from GET /v1/chains (for example "ethereum", "base", "monad", "bsc") or numeric EIP-155 chain id.
  • value · string · optionnel
    Native value in wei (decimal string), for payable functions.
  • address · string · requis
    0x contract address.
  • rpc_url · string · optionnel
    Override HTTP(S) RPC URL. Required for chains with no default (e.g. local/31337) or custom EVM chain ids.
  • function · string · requis
    Function name, or full signature like "transfer(address,uint256)" if overloaded.

  Exemple d'appel

  {"name": "prepare_tx", "arguments": {"from": "texte", "chain": "texte", "address": "texte", "function": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"safety": {}, "deeplink": "texte", "warnings": [], "simulation": {}, "unsigned_tx": {}, "human_summary": "texte", "wallet_request": "texte"}}

• read_contract≈ 412 tokens

  Call a view/pure function and get the decoded result. No wallet, no cost. Rejects state-mutating functions.

  Paramètres, retour & exemple (5)

  Paramètres

  • args · array · optionnel
    Function arguments, in order. Pass uint values as decimal strings.
  • chain · ? · requis
    Chain alias from GET /v1/chains (for example "ethereum", "base", "monad", "bsc") or numeric EIP-155 chain id.
  • address · string · requis
    0x contract address.
  • rpc_url · string · optionnel
    Override HTTP(S) RPC URL. Required for chains with no default (e.g. local/31337) or custom EVM chain ids.
  • function · string · requis
    Function name, or full signature like "transfer(address,uint256)" if overloaded.

  Exemple d'appel

  {"name": "read_contract", "arguments": {"chain": "texte", "address": "texte", "function": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "decoded": [], "function_signature": "texte"}}

• registry_stats≈ 158 tokens

  Read selector commons counts by proof grade and bytecode-match index size.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "registry_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"bytecodes": 1, "selectors": {}}}

• resolve_abi≈ 1374 tokens

  Resolve a contract's interface from chain + address via a fallback ladder (Etherscan → Sourcify → proxy → heimdall decompile → 4byte). Returns a compact capability manifest (read vs write functions, the 'buttons'), proxy chain, token metadata, and PROVENANCE. ALWAYS read `provenance`: a `decompiled` ABI has synthetic function names — treat it with care and confirm intent before writing. Partial, proxy, and bytecode-match results lead with a WARNING before the JSON. The compact manifest/provenance is also returned as structuredContent. Use method_q/method_kind/method_limit for large ABIs. Raw ABI is omitted from MCP output to save tokens; use REST/SDK resolve_abi with include_abi=true if needed.

  Paramètres, retour & exemple (6)

  Paramètres

  • chain · ? · requis
    Chain alias from GET /v1/chains (for example "ethereum", "base", "monad", "bsc") or numeric EIP-155 chain id.
  • address · string · requis
    0x contract address.
  • rpc_url · string · optionnel
    Override HTTP(S) RPC URL. Required for chains with no default (e.g. local/31337) or custom EVM chain ids.
  • method_q · string · optionnel
    Case-insensitive manifest method search across names, signatures, parameters, outputs, and hints.
  • method_kind · string · optionnel · read | write | all
    Restrict manifest methods to read, write, or all.
  • method_limit · integer · optionnel
    Maximum number of manifest methods to return after filtering.

  Exemple d'appel

  {"name": "resolve_abi", "arguments": {"chain": "texte", "address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"chain": 1, "proxy": {}, "token": {}, "cached": true, "abi_for": "texte", "address": "texte", "interface": {}, "provenance": {}, "abi_omitted": true}}

• resolve_name≈ 267 tokens

  Resolve an ENS/Basename to an address, or an address to its primary ENS/Basename. Pass chain=base for Basenames.

  Paramètres, retour & exemple (2)

  Paramètres

  • name · string · requis
    An ENS/Basename (vitalik.eth, name.base.eth) or a 0x address.
  • chain · ? · optionnel
    Chain alias from GET /v1/chains (for example "ethereum", "base", "monad", "bsc") or numeric EIP-155 chain id.

  Exemple d'appel

  {"name": "resolve_name", "arguments": {"name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "address": "texte"}}

• runtime_metrics≈ 316 tokens

  Read process-local resolver/rung/RPC counters for smoke checks and reliability dashboards.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "runtime_metrics", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"metrics": {}, "uptime_seconds": 1}}

• simulate≈ 910 tokens

  Simulate a call and return success, gas, decoded return, and best-effort state diff / asset changes / logs. Provide a high-level call (address + function + args) or raw (to + data), never both.

  Paramètres, retour & exemple (9)

  Paramètres

  • to · ? · optionnel
    Raw form: target address.
  • args · array · optionnel
    Function arguments, in order. Pass uint values as decimal strings.
  • data · string · optionnel
    Raw form: calldata (0x-prefixed hex bytes).
  • from · string · requis
    The sender address (the user's wallet). No key is needed — nothing is signed.
  • chain · ? · requis
    Chain alias from GET /v1/chains (for example "ethereum", "base", "monad", "bsc") or numeric EIP-155 chain id.
  • value · string · optionnel
    Native value in wei (decimal string), for payable functions.
  • address · string · optionnel
    0x contract address.
  • rpc_url · string · optionnel
    Override HTTP(S) RPC URL. Required for chains with no default (e.g. local/31337) or custom EVM chain ids.
  • function · string · optionnel
    Function name, or full signature like "transfer(address,uint256)" if overloaded.

  Exemple d'appel

  {"name": "simulate", "arguments": {"from": "texte", "chain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"logs": [], "revert": {}, "success": true, "gas_used": 1, "state_diff": [], "return_value": {}, "asset_changes": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.gulltoppr.dev/mcp