Security & Testing

gblin.digital

MCP server exposing GBLIN's on-chain crypto risk regime, x402 protocol stats, and verifiable transparency-log receipts for AI actions.

x402 supported2 endpoints48 known toolsFirst detected October 1, 2026Last detected October 6, 2026

ENDPOINT 1

https://gblin-mcp.gblin-mcp-worker.workers.dev/mcp

No auth detected

MCP server metadata

Name: gblin-mcp-http
Version: 0.13.9

Capabilities

toolsresourcesprompts

Server instructions

GBLIN hosted MCP (stateless, no auth, 60 req/min/IP, everything here is free). THREE THINGS LIVE HERE. (1) AI ACTION RECEIPTS - a public append-only RFC 6962 transparency log for AI actions. receipts.seal appends the SHA-256 of your input (and optionally your output) plus a short public label, and returns a portable receipt: Ed25519 signature, inclusion proof, C2SP checkpoint, tree root anchored daily on Base. Minimal call: receipts.seal {action: "what you did", input_hash: "<sha256 hex>"} - demo mode, 5/day/IP, receipts marked demo:true. Then receipts.verify checks it with pure math, no trust in this server; receipts.get re-reads any receipt by index. A receipt proves the record existed here at this time - NOT that the action happened (provenance is self-reported). (2) MARKET RISK: risk.regime (live calm|elevated|crash from the on-chain Crash Shield), risk.attestation_sample, protocol.stats, protocol.info, coherence.report. Nothing is paid over MCP; unlimited seals and signed attestations are x402 HTTP endpoints - see resources gblin://howto/seal, gblin://howto/attestation, gblin://limits, gblin://keys. Ready-made prompts: seal_and_verify, risk_gate. (3) THE GBLIN VAULT, the same code as the npm package @gblin-protocol/mcp-server: treasury.state, treasury.quote, treasury.health, treasury.nav_history, governance.state, auction.state, attestation.verify; to act, actions.prepare (any operation) -> actions.preview (simulate before signing; finds the gas each vault step really needs) -> send from your own wallet -> actions.status; to pay in GBLIN with a signature and no ETH, payments.prepare -> payments.verify, or payments.relay when nobody else will carry it. This server holds no key and never signs. The npm package's snake_case tool names are accepted here as aliases. (4) DOCUMENTS: search (query) and fetch (id) return the protocol's documentation, one card per tool and the live vault state as documents, in the shape research clients read.

Known tools 24

risk.regime

Current BTC/ETH risk regime (calm | elevated | crash) with a suggested posture, read live from GBLIN's on-chain Crash Shield on Base (60s cache).

Inferred read-only

risk.attestation_sample

Static, permanently expired sample of the signed Risk Attestation (sample:true), same fields and EIP-712 schema as the paid one.

Inferred read-only

protocol.stats

Cumulative public counters of GBLIN's x402 endpoints: paid calls, unique payer wallets, USDC earned, with methodology disclosure.

Inferred read-only

protocol.info

GBLIN llms.

Inferred read-only

receipts.seal

Append the HASHES of an AI action to GBLIN's public RFC 6962 transparency log and return a portable receipt: Ed25519 signature, inclusion proof, operator-signed C2SP checkpoint, plus the latest on-chain anchor (EAS on Base, daily).

Inferred read-only

receipts.get

Receipt #index from GBLIN's receipts log, re-signed (Ed25519 is deterministic) with a fresh inclusion proof, the current signed checkpoint and the latest on-chain anchor.

Inferred read-only

receipts.verify

Verify a gblin-receipt/v1 JSON with pure math (no log lookup, no trust in this server): leaf hash, Ed25519 signature, RFC 6962 inclusion proof, C2SP checkpoint signature, verifier-key hash.

Inferred read-only

coherence.report

Kept/violated tallies for GBLIN's pre-registered, hash-pinned promises (attestation uptime, counter honesty), probed every 10 minutes; each closed UTC day is sealed on Base as an EAS attestation (schema 0x9f433a96…).

Inferred read-only

treasury.state

Read the current GBLIN protocol state on Base mainnet: NAV in USD, basket composition with dynamic weights, and Crash Shield status.

Inferred read-only

treasury.quote

Preview a buy (ETH→GBLIN) or sell (GBLIN→ETH) without executing.

Inferred read-only

treasury.health

Analyze an agent wallet's treasury health: GBLIN/USDC/ETH balances, whether the ETH covers an exit at the live gas price, the redemption cooldown, and (if daily_burn_usd is provided) days of USDC runway plus a recommendation that keeps seven days of spend in USDC and treats only the surplus as a candidate for GBLIN.

Inferred read-only

treasury.plan

Idle USDC to a reviewable plan in one call: operating cash = max(reserve_usd, daily_burn_usd × days), the surplus above it, a simulation of minting that surplus into GBLIN at NAV (fees read live from the vault, estimated exit value today, round-trip cost), the same simulation for a trial amount (100 USDC by default), the blockers (crash shield, redemption cooldown, ETH for the exit) and the tools to call after a human confirms.

Inferred read-only

treasury.nav_history

NAV per GBLIN share over time, read from the chain at past blocks, beside the ETH/USD and BTC/USD oracle prices the vault itself uses, with the change of each over the window and the NAV's largest drawdown.

Inferred read-only

actions.prepare

Build the unsigned transactions for any operation on the GBLIN vault, in the order to send them.

Potential side effects

actions.preview

Simulate a list of transactions in sequence against the latest Base block, as if the wallet sent them one after the other, before anything is signed.

Inferred read-only

actions.status

Report what a sent Base transaction did: pending, succeeded, reverted or not found; its block and confirmations; the fee paid; the net token movements for the sender (GBLIN shares minted or redeemed, USDC, basket tokens); and, when it reverted, the decoded reason.

Inferred read-only

governance.state

Verify GBLIN protocol governance state: confirms whether the GBLIN vault is owned by the 48h Timelock, reads the timelock's min delay and grace period, reports role member counts, and surfaces any pending asset-addition proposal on the index contract.

Inferred read-only

auction.state

Read the GBLIN rebalancing auction on Base.

Inferred read-only

payments.prepare

Build a gasless GBLIN payment.

Potential side effects

payments.verify

Check a signed GBLIN authorization against the chain before spending gas on it.

Inferred read-only

payments.relay

Have GBLIN's relay carry a signed GBLIN payment on chain for a payer that holds no ETH.

Potential side effects

attestation.verify

Verify a GBLIN Risk Attestation — the object returned by GBLIN's /api/x402/attestation, or a proof-of-diligence a peer agent attached to its action.

Inferred read-only

search

Search GBLIN's documentation and live state and return matching documents: the agent API summary, the protocol's README and documents (governance, deployments, review record), the MCP server and library READMEs, the public pages, one card per MCP tool, and a snapshot of the live vault state.

Inferred read-only

fetch

Return the full text of one document found with search: {id, title, text, url, metadata}.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.gblin-mcp-http]
url = "https://gblin-mcp.gblin-mcp-worker.workers.dev/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "gblin-mcp-http": {
      "type": "http",
      "url": "https://gblin-mcp.gblin-mcp-worker.workers.dev/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: gblin-mcp-http
Remote MCP URL: https://gblin-mcp.gblin-mcp-worker.workers.dev/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "gblin-mcp-http": {
      "url": "https://gblin-mcp.gblin-mcp-worker.workers.dev/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "gblin-mcp-http": {
      "type": "http",
      "url": "https://gblin-mcp.gblin-mcp-worker.workers.dev/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "gblin-mcp-http",
  "transport": "streamable-http",
  "url": "https://gblin-mcp.gblin-mcp-worker.workers.dev/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 2

https://mcp.gblin.digital/mcp

No auth detected

MCP server metadata

Name: gblin-mcp-http
Version: 0.13.12

Capabilities

toolsresourcesprompts

Server instructions

Known tools 24

risk.regime

Current BTC/ETH risk regime (calm | elevated | crash) with a suggested posture, read live from GBLIN's on-chain Crash Shield on Base (60s cache).

Inferred read-only

risk.attestation_sample

Static, permanently expired sample of the signed Risk Attestation (sample:true), same fields and EIP-712 schema as the paid one.

Inferred read-only

protocol.stats

Cumulative public counters of GBLIN's x402 endpoints: paid calls, unique payer wallets, USDC earned, with methodology disclosure.

Inferred read-only

protocol.info

GBLIN llms.

Inferred read-only

receipts.seal

Inferred read-only

receipts.get

Receipt #index from GBLIN's receipts log, re-signed (Ed25519 is deterministic) with a fresh inclusion proof, the current signed checkpoint and the latest on-chain anchor.

Inferred read-only

receipts.verify

Verify a gblin-receipt/v1 JSON with pure math (no log lookup, no trust in this server): leaf hash, Ed25519 signature, RFC 6962 inclusion proof, C2SP checkpoint signature, verifier-key hash.

Inferred read-only

coherence.report

Inferred read-only

treasury.state

Read the current GBLIN protocol state on Base mainnet: NAV in USD, basket composition with dynamic weights, and Crash Shield status.

Inferred read-only

treasury.quote

Preview a buy (ETH→GBLIN) or sell (GBLIN→ETH) without executing.

Inferred read-only

treasury.health

Inferred read-only

treasury.plan

Inferred read-only

treasury.nav_history

Inferred read-only

actions.prepare

Build the unsigned transactions for any operation on the GBLIN vault, in the order to send them.

Potential side effects

actions.preview

Simulate a list of transactions in sequence against the latest Base block, as if the wallet sent them one after the other, before anything is signed.

Inferred read-only

actions.status

Inferred read-only

governance.state

Inferred read-only

auction.state

Read the GBLIN rebalancing auction on Base.

Inferred read-only

payments.prepare

Build a gasless GBLIN payment.

Potential side effects

payments.verify

Check a signed GBLIN authorization against the chain before spending gas on it.

Inferred read-only

payments.relay

Have GBLIN's relay carry a signed GBLIN payment on chain for a payer that holds no ETH.

Potential side effects

attestation.verify

Verify a GBLIN Risk Attestation — the object returned by GBLIN's /api/x402/attestation, or a proof-of-diligence a peer agent attached to its action.

Inferred read-only

search

Inferred read-only

fetch

Return the full text of one document found with search: {id, title, text, url, metadata}.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.gblin-mcp-http]
url = "https://mcp.gblin.digital/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "gblin-mcp-http": {
      "type": "http",
      "url": "https://mcp.gblin.digital/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: gblin-mcp-http
Remote MCP URL: https://mcp.gblin.digital/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "gblin-mcp-http": {
      "url": "https://mcp.gblin.digital/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "gblin-mcp-http": {
      "type": "http",
      "url": "https://mcp.gblin.digital/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "gblin-mcp-http",
  "transport": "streamable-http",
  "url": "https://mcp.gblin.digital/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for workers.dev was fetched 2026-09-25T13:56:19.197Z.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.