io.github.gblinproject/gblin-treasury-risk-regime

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

GBLIN on Base for AI agents: risk regime, treasury plan for idle USDC, mint and redeem at NAV. Free.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "gblin-treasury-risk-regime": {
      "url": "https://mcp.gblin.digital/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (24)

• risk.regime read-only

  Current BTC/ETH risk regime (calm | elevated | crash) and the matching risk posture, read live from GBLIN's on-chain Crash Shield on Base (60-second cache). Free and unsigned; a signed version that verifies offline is a separate paid x402 HTTP endpoint.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• risk.attestation_sample read-only

  Static, permanently expired sample of the signed Risk Attestation (sample: true), with the same fields and EIP-712 schema as the signed one, for building and testing parsers and verifiers.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• protocol.stats read-only

  Cumulative public counters of GBLIN's x402 endpoints: paid calls, unique payer wallets, USDC earned, with methodology disclosure. Cached 5 min.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• protocol.info read-only

  GBLIN llms.txt as plain text: contract addresses, endpoints, prices, payment flow, field contract of the attestation.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• receipts.seal

  Appends the hashes of an AI action to GBLIN's public RFC 6962 transparency log and returns a portable receipt: Ed25519 signature, inclusion proof, operator-signed C2SP checkpoint, and the latest on-chain anchor (EAS on Base, daily). Demo mode only over MCP: 5 seals per day per IP, receipts marked demo: true; unlimited sealing is a separate paid x402 HTTP endpoint. Provenance is self-reported: a receipt proves that the record existed at that time, not that the action happened. The action, agent_id, tool and meta strings are published in the log exactly as given. Fields not listed in the schema are ignored and not recorded.

  Parameters:

  • action (required) — string — What the AI did, short label. PUBLISHED in the log.
  • input_hash (required) — string — sha256 of the input/prompt, 64 hex chars (0x prefix optional)
  • meta — string — Extra JSON object as a string (optional). PUBLISHED.
  • mode — string — Only 'demo' is available over MCP (5/day/IP). Paid seals go through x402 HTTP.
  • tool — string — Tool/model used (optional). PUBLISHED.
  • agent_id — string — Your agent identifier (optional). PUBLISHED.
  • output_hash — string — sha256 of the output, 64 hex chars (optional; empty or blank = omitted)

  Hints: read-only no · destructive no · idempotent no · open-world yes

• receipts.get read-only

  Receipt #index from GBLIN's receipts log, re-signed (Ed25519 is deterministic) with a fresh inclusion proof, the current signed checkpoint and the latest on-chain anchor. Free.

  Parameters:

  • index (required) — integer — Receipt index in the log (0-based; current size at GET /log/checkpoint)

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• receipts.verify read-only

  Verifies a gblin-receipt/v1 JSON with pure math, without a log lookup and without trusting this server: leaf hash, Ed25519 signature, RFC 6962 inclusion proof, C2SP checkpoint signature and verifier-key hash. These are the same checks as the zero-dependency verify-receipt.mjs script that runs offline; the consistency check against the on-chain anchor is available separately at GET /v1/verify/:index.

  Parameters:

  • receipt (required) — object — A gblin-receipt/v1 JSON, bare or wrapped in {receipt}, as issued by the receipts log (also served at GET /v1/receipt/:i)

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• coherence.report read-only

  Kept/violated tallies for GBLIN's pre-registered, hash-pinned promises (attestation uptime, counter honesty), probed every 10 minutes; each closed UTC day is sealed on Base as an EAS attestation (schema 0x9f433a96…). Self-observation only in v0. Free.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• treasury.state read-only

  Reads the current GBLIN protocol state on Base mainnet: NAV in USD, basket composition with dynamic weights, Crash Shield status and whether the NAV is reliable.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• treasury.quote read-only

  Preview a buy (ETH→GBLIN) or sell (GBLIN→ETH) without executing. Returns expected output, safe minOut with dynamic slippage buffer (2.5% normal / 4% during Crash Shield), and fee breakdown. Read-only.

  Parameters:

  • direction (required) — string
  • amount_in (required) — string — Positive decimal. ETH for buy, GBLIN for sell.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• treasury.health read-only

  Analyzes an agent wallet's treasury: GBLIN, USDC and ETH balances, whether the ETH covers an exit at the live gas price, and the redemption cooldown. When daily_burn_usd is given it adds days of USDC runway and a split that keeps seven days of spend in USDC and treats only the surplus as a candidate for GBLIN. Free by default; a 0.003 USDC charge applies only when the server operator sets MCP_PAYWALL=true.

  Parameters:

  • wallet_address (required) — string — Agent's 0x address.
  • _payment — string — Base64-encoded x402 PaymentProof JSON. Omit on first call to receive the 402 payment manifest.
  • daily_burn_usd — number — Optional. Average daily spend in USD (e.g. 1.5).

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• treasury.plan read-only

  Turns idle USDC into a reviewable plan in one call: operating cash = max(reserve_usd, daily_burn_usd x days), the surplus above it, a simulation of minting that surplus into GBLIN at NAV (fees read live from the vault, estimated exit value today, round-trip cost), the same simulation for a trial amount (100 USDC by default), and the blockers (Crash Shield, redemption cooldown, ETH for the exit). Read-only: nothing is executed and nothing is advised. GBLIN is crypto exposure (cbBTC, WETH, USDC), not cash and not yield.

  Parameters:

  • wallet_address (required) — string — Agent's 0x address.
  • days — number — Days of spend to keep liquid (default 7, max 365).
  • trial_usdc — number — Trial amount to simulate beside the surplus (default 100).
  • reserve_usd — number — USD to keep liquid regardless of the burn rate; the larger of the two rules wins.
  • daily_burn_usd — number — Average daily spend in USD. Operating cash = daily_burn_usd × days.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• treasury.nav_history read-only

  NAV per GBLIN share over time, read from the chain at past blocks, beside the ETH/USD and BTC/USD oracle prices the vault itself uses, with the change of each over the window and the NAV's largest drawdown. The series starts at the deployment of the vault in service and can be compared with holding ETH or BTC over the same span.

  Parameters:

  • points — integer — How many points, newest last. Default 30.
  • interval — string — Spacing of the points. Default day.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• actions.prepare read-only

  Builds the unsigned transactions for an operation on the GBLIN vault, in the order they are sent. Actions: mint_with_eth (amount in ETH), mint_with_weth (amount in WETH), mint_with_usdc (amount in USDC, through the Zap), redeem_in_kind (amount in shares; pro rata basket tokens, no fee, no price feed), exit_to_eth (amount in shares, through the Zap, all or nothing), exit_to_usdc (amount = the USDC needed), bid (trade with the rebalancing auction; row optional, the largest gap by default). Every output bound is non-zero and every step through the vault or the Zap carries its gas limit. Nothing is signed or sent: the steps are returned to the caller.

  Parameters:

  • action (required) — string — The operation to prepare.
  • wallet_address (required) — string — The wallet that will sign and receive.
  • row — integer — bid only: the basket row to bid on. Default: the row with the largest gap.
  • amount — string — Decimal amount. Unit depends on the action (see the description). Not used by bid.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• actions.preview read-only

  Simulates a list of transactions in sequence against the latest Base block, as if the wallet sent them one after the other, before anything is signed. Each step sees the state the previous ones left (an approval before a mint works). Accepts steps with target or to, calldata or data, and optional value and gas. Returns, per step, whether it would succeed, the gas it uses, whether the gas limit it carries is enough, and the decoded revert reason when it fails; and the net token and ETH movements for the wallet. State can change before transactions land: a successful preview is evidence, not a guarantee.

  Parameters:

  • from (required) — string — The wallet that will send the steps.
  • steps (required) — array — The steps, in order: target and calldata (or their send_calls spellings, to and data), value in wei (optional), gas (optional).

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• actions.status read-only

  Reports what a sent Base transaction did: pending, succeeded, reverted or not found; its block and confirmations; the fee paid; the net token movements for the sender (GBLIN shares minted or redeemed, USDC, basket tokens); and, when it reverted, the decoded reason.

  Parameters:

  • hash (required) — string — The transaction hash.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• governance.state read-only

  Reads GBLIN protocol governance: whether the GBLIN vault is owned by the 48-hour timelock, the timelock's minimum delay and grace period, role member counts, and any pending asset-addition proposal on the vault. With an operation_id it also reports the status of that timelock operation. Read-only.

  Parameters:

  • operation_id — string — Optional 0x-prefixed 32-byte hex id of a specific timelock operation to inspect.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• auction.state read-only

  Read the GBLIN rebalancing auction on Base. The vault does not rebalance itself and pays nobody to do it: when a basket row drifts past its band it holds a Dutch auction, and whoever trades with it toward the target weights is the counterparty, at the oracle price adjusted by a premium that starts at a discount and rises to a cap over one ramp. Returns, per row, the side the vault takes, the gap in ETH, the token and amount the bidder hands over, and unsigned calldata (approval + bid). The premium is the whole reward; nothing is paid out of the vault.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• payments.prepare read-only

  Builds a gasless GBLIN payment. The vault's share token implements EIP-3009, so the holder signs an authorization and anybody can carry it on chain: the payer needs no ETH. Returns the EIP-712 message to sign (its domain is read from the token, not assumed), the calldata that carries the signed authorization, and the x402 'exact' payload for paying an HTTP endpoint in GBLIN. Method 'receive' lets only the named recipient submit the authorization, so nobody can front-run the transfer; method 'transfer' suits an x402 facilitator, which submits on the seller's behalf. With relay: true it also returns a second authorization that pays a relayer's fee in GBLIN. No private key is requested, held or transmitted: the signature is produced by the caller's own wallet.

  Parameters:

  • from (required) — string — The payer's address: the wallet that will sign.
  • to (required) — string — The recipient's address.
  • relay — boolean — true when nobody else will carry the payment on chain: also prepares a second authorization that pays GBLIN's relay fee in GBLIN at the live NAV. Forces method 'transfer'.
  • method — string — 'receive' (default) can be submitted only by the recipient; 'transfer' by anyone.
  • amount_usd — string — Amount in USD, converted at the live NAV. Give this or amount_gblin.
  • amount_gblin — string — Amount in GBLIN shares, e.g. '0.25'. Give this or amount_usd.
  • valid_for_seconds — number — How long the authorization stays valid. Default 600, maximum 86400.

  Hints: read-only yes · destructive no · idempotent no · open-world yes

• payments.verify read-only

  Checks a signed GBLIN authorization against the chain before any gas is spent on it. Recovers the signer from the EIP-712 digest (and asks the wallet itself through ERC-1271 when the payer is a contract), then checks the validity window against on-chain time, whether the nonce has already been used or cancelled, and whether the payer still holds the amount. Returns a verdict and the ready calldata when it would settle, the failing reason when it would not. These are the checks an x402 facilitator runs, so a 'would_settle' verdict means the payment can be carried.

  Parameters:

  • authorization (required) — object — The authorization object: from, to, value, validAfter, validBefore, nonce.
  • signature (required) — string — The signature produced by the payer's wallet, 0x-prefixed.
  • method — string — Which method the signature was produced for. Default 'receive'.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• payments.relay destructive

  GBLIN's relay carries a signed GBLIN payment on chain for a payer that holds no ETH. Takes the payment and the relay fee, each as { authorization, signature }, both signed by the payer's wallet. The relay checks both against the chain, simulates them and submits them in one transaction through Multicall3: either both settle or neither does. The fee is paid in GBLIN at the live NAV. Returns the transaction hash and its outcome. This tool moves funds: it carries the authorizations exactly as signed.

  Parameters:

  • payment (required) — object — { authorization, signature } of the payment, method 'transfer'.
  • fee (required) — object — { authorization, signature } of the relay fee, as prepared with relay: true and signed by the payer.

  Hints: read-only no · destructive yes · idempotent yes · open-world yes

• attestation.verify read-only

  Verifies a GBLIN Risk Attestation, the object returned by GBLIN's /api/x402/attestation, or a proof-of-diligence attached by a peer agent. Free. Runs four checks: (1) integrity, by recomputing the EIP-712 attestation_id; (2) authenticity, by recovering the signer when a signature is present and comparing it with GBLIN's published attestor; (3) freshness, against on-chain time (10-minute validity); (4) live drift, by comparing the attested regime with the current on-chain regime.

  Parameters:

  • attestation (required) — object — The full attestation object from /api/x402/attestation (must include `eip712`; `attestation_id`, `signature`, `attestor` are used when present). A JSON string of that object is also accepted.
  • expected_attestor — string — Optional 0x address to check the signature against. Defaults to the GBLIN attestor address baked into this MCP build (GBLIN_ATTESTOR_ADDRESS env).

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• search read-only

  Searches GBLIN's documentation and live state and returns matching documents: the agent API summary, the protocol's README and documents (governance, deployments, review record), the MCP server and library READMEs, the public pages, one card per MCP tool, and a snapshot of the live vault state. Returns {results: [{id, title, url}]}, where each id identifies a full document. Read-only and free.

  Parameters:

  • query (required) — string — What to look for, in plain words.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• fetch read-only

  Returns the full text of one GBLIN document by its id: {id, title, text, url, metadata}. Documents are the protocol's public documentation, the tool cards and the live vault state. Read-only and free.

  Parameters:

  • id (required) — string — A GBLIN document id, such as protocol-readme.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.