addrbookFor publishers
← The evidence ledger

Evidence row 291604

Observed , by probe.mcp/1.

Kind
mcp.tools
About
endpoint 18ef852b-fa71-4bee-827a-1a9c2a79ceec
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
bb957be16733756f3454838070c0fe12001712e4908313cc20f921d3d1e21295
Leaf
0xa88e6828109d691017737df01667149b4408eec35e20943f5c62368f39d5ad7b

What was observed

{
  "count": 15,
  "tools": [
    {
      "description": "Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust programs specifically for Cross-Program Invocation (CPI) signer/account vulnerabilities, use scan_solana_cpi_reentrancy instead. Read-only edge call (32 KB, 60 RPM): accepts 'code_or_address' ('chain' defaults to 'evm_solidity'), uses '?demo=true' or L402 (45 sats); HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "chain": {
            "description": "Target blockchain VM architecture; defaults to 'evm_solidity' when omitted.",
            "enum": [
              "evm_solidity",
              "sui_move",
              "base_evm",
              "arbitrum_evm"
            ],
            "type": "string"
          },
          "code_or_address": {
            "description": "Smart contract source code snippet, ABI, or contract address to audit.",
            "type": "string"
          }
        },
        "required": [
          "code_or_address"
        ],
        "type": "object"
      },
      "name": "audit_smart_contract_code"
    },
    {
      "description": "Calculates instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values across BTC, ETH, SOL, SUI, and USDC. Use when converting a token amount into USD or satoshis for invoice pricing or accounting; for quoting executable non-KYC cross-chain bridge routes with bridge fees and settlement times, use compare_crosschain_bridge_routes instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'currency' ('amount' defaults to 'standard'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "amount": {
            "description": "Quantity of the source asset to convert; defaults to 100 when omitted.",
            "type": "number"
          },
          "currency": {
            "description": "Source asset ticker symbol to convert from.",
            "enum": [
              "USDC",
              "BTC",
              "ETH",
              "SOL",
              "SUI"
            ],
            "type": "string"
          }
        },
        "required": [
          "currency"
        ],
        "type": "object"
      },
      "name": "calculate_spot_swap_rate"
    },
    {
      "description": "Compares non-custodial, non-KYC cross-chain swap routes (THORChain native L1 swaps, Maya Protocol, Blockstream Liquid) by basis-point fee, net output sats, and settlement time. Use when routing cross-chain treasury settlements (e.g. Solana USDC or Base ETH into native Bitcoin); for calculating mid-market spot exchange rates without bridge routing fees, use calculate_spot_swap_rate instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'from_asset' ('to_asset' defaults to 'BTC_NATIVE'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "amount": {
            "description": "Input asset amount to quote; defaults to 100.0 when omitted.",
            "type": "number"
          },
          "from_asset": {
            "description": "Origin chain asset identifier to bridge from.",
            "enum": [
              "USDC_SOL",
              "USDC_BASE",
              "ETH_BASE",
              "SOL_NATIVE",
              "BTC_NATIVE"
            ],
            "type": "string"
          },
          "to_asset": {
            "description": "Destination chain asset identifier; defaults to 'BTC_NATIVE' when omitted.",
            "enum": [
              "BTC_NATIVE",
              "USDC_SOL",
              "USDC_BASE",
              "ETH_BASE"
            ],
            "type": "string"
          }
        },
        "required": [
          "from_asset"
        ],
        "type": "object"
      },
      "name": "compare_crosschain_bridge_routes"
    },
    {
      "description": "Decodes EIP-712 and Uniswap Permit2 off-chain typed-data payloads to verify spender identity, detect unlimited (uint256.max) token approvals, and flag expired deadlines. Use when inspecting an off-chain eth_signTypedData_v4 or Permit2 payload before signing; for decoding raw on-chain hex transaction calldata (0x...) for eth_sendTransaction, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'typed_data_json' ('chain_id' defaults to '1'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "chain_id": {
            "description": "EVM chain ID used to verify canonical router spender addresses; defaults to '8453' (Base) when omitted.",
            "enum": [
              "1",
              "8453",
              "42161",
              "10"
            ],
            "type": "string"
          },
          "typed_data_json": {
            "description": "JSON string or object containing the EIP-712 / Permit2 message (spender, amount, deadline).",
            "type": "string"
          }
        },
        "required": [
          "typed_data_json"
        ],
        "type": "object"
      },
      "name": "decode_eip712_permit_signature"
    },
    {
      "description": "Compares a target recipient wallet address against recent transaction history to detect vanity prefix/suffix lookalike spoofing and zero-value dusting attacks. Use when verifying a recipient EVM or Solana wallet address before sending funds; for decoding hex smart contract calldata payloads, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'target_address' ('address_standard' defaults to 'auto_detect'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "address_standard": {
            "description": "Address encoding format; defaults to 'auto_detect' when omitted.",
            "enum": [
              "auto_detect",
              "evm_hex",
              "solana_base58"
            ],
            "type": "string"
          },
          "target_address": {
            "description": "Candidate recipient EVM (0x...) or Solana Base58 wallet address to verify.",
            "type": "string"
          }
        },
        "required": [
          "target_address"
        ],
        "type": "object"
      },
      "name": "detect_address_poisoning_scam"
    },
    {
      "description": "Fetches real-time Bitcoin mainnet mempool feerate recommendations in satoshis per virtual byte (sat/vB) across fastest, half-hour, hour, and economy confirmation tiers. Use when checking current Bitcoin L1 network congestion before broadcasting an on-chain BTC transaction; for calculating exact SegWit/Taproot UTXO batch consolidation vByte weights and dust thresholds, use plan_bitcoin_utxo_consolidation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'confirmation_target', supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "confirmation_target": {
            "description": "Target confirmation speed tier; defaults to 'half_hour' when omitted.",
            "enum": [
              "fastest_block",
              "half_hour",
              "one_hour",
              "economy"
            ],
            "type": "string"
          }
        },
        "required": [],
        "type": "object"
      },
      "name": "estimate_bitcoin_mempool_fees"
    },
    {
      "description": "Calculates optimal Solana compute-unit (CU) microlamport priority fees and Jito bundle tip lamports to achieve target block-inclusion probability. Use when setting SetComputeUnitPrice and Jito tips before broadcasting a Solana transaction; for querying Bitcoin L1 sat/vB mempool fee rates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'priority_level' ('tx_type' defaults to 'simple_transfer'), supports '?demo=true' or x402 (10 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "priority_level": {
            "description": "Target inclusion urgency tier on Solana mainnet-beta.",
            "enum": [
              "low",
              "medium",
              "high",
              "ultra"
            ],
            "type": "string"
          },
          "tx_type": {
            "description": "Transaction category used to estimate compute unit limit; defaults to 'dex_swap' when omitted.",
            "enum": [
              "simple_transfer",
              "dex_swap",
              "nft_mint",
              "arbitrary_cpi"
            ],
            "type": "string"
          }
        },
        "required": [
          "priority_level"
        ],
        "type": "object"
      },
      "name": "estimate_solana_priority_fees"
    },
    {
      "description": "Evaluates decentralized exchange (DEX) swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance in basis points. Use when configuring slippage tolerance and private-RPC routing before executing an on-chain DEX token swap; for comparing cross-chain bridge settlement routes across different L1 blockchains, use compare_crosschain_bridge_routes instead. Read-only edge call (32 KB, 60 RPM): accepts 'pair' ('execution_venue' defaults to 'uniswap_v3_public'), uses '?demo=true' or L402 (25 sats); HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "execution_venue": {
            "description": "Target DEX protocol or RPC relay; defaults to 'uniswap_v3_public' when omitted.",
            "enum": [
              "uniswap_v3_public",
              "flashbots_protect",
              "aerodrome_base",
              "jupiter_jito"
            ],
            "type": "string"
          },
          "pair": {
            "description": "Trading pair symbol or pool identifier (e.g. 'ETH/USDC' or 'SOL/USDC').",
            "type": "string"
          }
        },
        "required": [
          "pair"
        ],
        "type": "object"
      },
      "name": "evaluate_dex_mev_risk"
    },
    {
      "description": "Evaluates a Solana SPL token's rug-pull probability by checking active mint authority, freeze authority, mutable metadata, and top-holder concentration. Use when making a pre-trade security decision on whether a Solana SPL token is safe to buy; for retrieving SPL token symbol, decimals, and DEX liquidity pool metadata via x402, use inspect_solana_token_liquidity instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token_address' ('risk_profile' defaults to 'strict_decentralized'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "risk_profile": {
            "description": "Tolerance policy for centralized freeze authorities; defaults to 'strict_decentralized' when omitted.",
            "enum": [
              "strict_decentralized",
              "allow_regulated_stablecoins",
              "memecoin_sniping"
            ],
            "type": "string"
          },
          "token_address": {
            "description": "Base58-encoded Solana SPL token mint address (32–44 characters).",
            "type": "string"
          }
        },
        "required": [
          "token_address"
        ],
        "type": "object"
      },
      "name": "evaluate_solana_token_risk"
    },
    {
      "description": "Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and current mint/freeze authority addresses. Use when resolving SPL token decimals, ticker symbols, and registry metadata for portfolio or swap formatting; for computing a composite security risk score and binary should_transact verdict, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'mint' ('network' defaults to 'mainnet-beta'), supports '?demo=true' or x402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "mint": {
            "description": "Base58-encoded Solana SPL token mint address (e.g. 'EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v').",
            "type": "string"
          },
          "network": {
            "description": "Solana cluster to query; defaults to 'mainnet-beta' when omitted.",
            "enum": [
              "mainnet-beta",
              "devnet"
            ],
            "type": "string"
          }
        },
        "required": [
          "mint"
        ],
        "type": "object"
      },
      "name": "inspect_solana_token_liquidity"
    },
    {
      "description": "Analyzes a set of Bitcoin UTXO balances in satoshis to compute exact vByte transaction weight, identify uneconomical dust inputs, and recommend whether to consolidate now or hold. Use when optimizing on-chain Bitcoin treasury UTXO sets to minimize long-term miner fee drag; for fetching current live Bitcoin mempool sat/vB feerates alone, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'utxos_sats_json' ('script_type' defaults to 'p2wpkh_segwit'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "script_type": {
            "description": "Bitcoin input script type determining vByte weight per input; defaults to 'p2wpkh_segwit' when omitted.",
            "enum": [
              "p2wpkh_segwit",
              "p2tr_taproot",
              "p2sh_nested"
            ],
            "type": "string"
          },
          "utxos_sats_json": {
            "description": "JSON array or comma-separated list of UTXO values in satoshis (e.g. '[1200, 45000, 85000]').",
            "type": "string"
          }
        },
        "required": [
          "utxos_sats_json"
        ],
        "type": "object"
      },
      "name": "plan_bitcoin_utxo_consolidation"
    },
    {
      "description": "Scans Solana Anchor and native Rust program instructions for unverified Cross-Program Invocation (CPI) program IDs, missing signer checks, and PDA bump seed canonicalization bugs. Use when auditing Solana Rust/Anchor source code or instruction account structs for CPI privilege escalation; for checking live SPL token mint/freeze authorities and rug-pull risk by mint address, use evaluate_solana_token_risk instead. Read-only edge call (32 KB, 60 RPM): accepts 'rust_source_or_idl' ('framework' defaults to 'anchor'), uses '?demo=true' or L402 (30 sats); HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "framework": {
            "description": "Solana program framework used; defaults to 'anchor' when omitted.",
            "enum": [
              "anchor",
              "native_rust_solana",
              "pinocchio"
            ],
            "type": "string"
          },
          "rust_source_or_idl": {
            "description": "Solana Rust/Anchor source code or IDL JSON string to scan for CPI vulnerabilities.",
            "type": "string"
          }
        },
        "required": [
          "rust_source_or_idl"
        ],
        "type": "object"
      },
      "name": "scan_solana_cpi_reentrancy"
    },
    {
      "description": "Decodes raw EVM hexadecimal transaction calldata (0x...) by 4-byte function selector to expose hidden ERC-20 approve/transferFrom calls, setApprovalForAll drains, and multicall bundles. Use when auditing raw hex transaction data (to, value, data) before broadcasting an on-chain EVM transaction; for inspecting off-chain EIP-712 JSON typed-data signatures, use decode_eip712_permit_signature instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'calldata_hex' ('network' defaults to 'base_mainnet'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "calldata_hex": {
            "description": "Hexadecimal EVM transaction data string starting with '0x' (e.g. '0x095ea7b3000000000000000000000000...').",
            "type": "string"
          },
          "network": {
            "description": "Target EVM network for simulation context; defaults to 'base_mainnet' when omitted.",
            "enum": [
              "base_mainnet",
              "ethereum_mainnet",
              "arbitrum_one",
              "optimism"
            ],
            "type": "string"
          }
        },
        "required": [
          "calldata_hex"
        ],
        "type": "object"
      },
      "name": "simulate_evm_transaction_calldata"
    },
    {
      "description": "Tracks 24-hour net accumulation or distribution flows across top Solana whale wallets and flags coordinated insider wallet clusters for a given SPL token. Use when analyzing on-chain smart-money order flow and holder clustering on Solana; for checking static SPL contract mint/freeze authority permissions, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token' ('window' defaults to '1h'), supports '?demo=true' or x402 (50 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "token": {
            "description": "Base58 Solana SPL token mint address or ticker symbol to track whale flows for.",
            "type": "string"
          },
          "window": {
            "description": "Aggregation lookback window for net whale flow; defaults to '24h' when omitted.",
            "enum": [
              "1h",
              "6h",
              "24h",
              "7d"
            ],
            "type": "string"
          }
        },
        "required": [
          "token"
        ],
        "type": "object"
      },
      "name": "track_solana_whale_flows"
    },
    {
      "description": "Decodes inbound HTTP 402 Payment Required challenges (L402 BOLT11 + Macaroon, x402 Solana USDC, MPP Base intents) to verify cryptographic payment-hash binding and block overcharge fraud. Use when auditing a 402 challenge header before an autonomous agent pays a Lightning invoice or USDC transfer; for checking on-chain Bitcoin L1 mempool feerates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'www_authenticate' ('protocol_hint' defaults to 'L402'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.",
      "inputSchema": {
        "properties": {
          "protocol_hint": {
            "description": "Expected HTTP 402 payment protocol; defaults to 'L402' when omitted.",
            "enum": [
              "L402",
              "x402",
              "MPP"
            ],
            "type": "string"
          },
          "www_authenticate": {
            "description": "Raw WWW-Authenticate or Payment-Required HTTP header string from a 402 response.",
            "type": "string"
          }
        },
        "required": [
          "www_authenticate"
        ],
        "type": "object"
      },
      "name": "verify_http402_payment_challenge"
    }
  ]
}

What the leaf hashes

{"body":"bb957be16733756f3454838070c0fe12001712e4908313cc20f921d3d1e21295","id":291604,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793048200182023,"prev":null,"subject":"18ef852b-fa71-4bee-827a-1a9c2a79ceec","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).

  1. 0xa88ef28a0ec1e8fd2ca95962602681d310f997521362ee970085a0aec01ad384
  2. 0xb5fd36be2bcb81a116e44b3d5f2314bfa6906d3b7dacb251d7746e9ec499c79e
  3. 0x6e90e5bc0b6a342f031e511ff12419ccdc1fec476669087595978d63bae41b69
  4. 0x060d71dee6f98ae1cf2e0f6c828088c07d37c3148a85969e225b542a66ac8cd0
  5. 0x2a256e4060641d30442cf694dc0825609c701575d349ac7bad74814a83eacc30
  6. 0x03abedcbd864a36112b8ae12a3cab3ee86751f8136564e27de1019bad8f426dc
  7. 0x855b3279af93a6e0d37411225a81f0b2b621dd574d6b65716fabea10fc662e7b
  8. 0x04225a34cc282b0f4adbda41158adab81b49b55d0c8ad0dd26e37d1c1f12c138
  9. 0x53137a6629afc85f333af9fc977add7ac420c7563a978538d0126b6a5a86536d
  10. 0xfd8f2e7fe993511f65aa0968b5038659340f72883448aed02c2c9b4bb27c71f9
  11. 0xe5e83afe0ce08c2497f8492757a4767cf2409aaae2061487f80e1d45646872f8
  12. 0xb31654882cc5704ae07fa6a4ad12ef5516ea95a5ec8b5affdbdbec199402e29a
  13. 0x292ebdce6b8d3d7ef08ad646a0fd97dee9313ab55c1a350807d9f3013794c37a
  14. 0x428106f4ae4ec142f17aebf6fa50935242f8d3f1c211cf95d6351d03d11da2b7
  15. 0x62a900133713919f4eed33d8336876b7a6d538233b8a4f3ed03b29aa44f5bad0
  16. 0x1ac20d30773e1f4f2f811540e9a99b5cca9177c9e2e029acc0d80cf3f1d11f0f
  17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
  18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
  19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
Day root
0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained
0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published
On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON