🐴 Gulltoppr

Reviewed 1h ago.

• tools: 12 tools scanned
• metadata: scanned

No findings.

Tools (12)

• list_chains

  List viem-backed chain aliases and ids. Use filters to find testnets, default-RPC chains, or a named chain before resolving contracts.

• runtime_metrics

  Read process-local resolver/rung/RPC counters for smoke checks and reliability dashboards.

• lookup_selector

  Lookup gulltoppr-proven signatures for a 4-byte function/error selector or 32-byte event topic0. Prefer these over public 4byte guesses.

• registry_stats

  Read selector commons counts by proof grade and bytecode-match index size.

• export_registry

  Return the CC0 selector commons as NDJSON. This can be large; prefer lookup_selector for normal agent workflows.

• resolve_abi

  Resolve a contract's interface from chain + address via a fallback ladder (Etherscan → Sourcify → proxy → heimdall decompile → 4byte). Returns a compact capability manifest (read vs write functions, the 'buttons'), proxy chain, token metadata, and PROVENANCE. ALWAYS read `provenance`: a `decompiled` ABI has synthetic function names — treat it with care and confirm intent before writing. Partial, proxy, and bytecode-match results lead with a WARNING before the JSON. The compact manifest/provenance is also returned as structuredContent. Use method_q/method_kind/method_limit for large ABIs. Raw ABI is omitted from MCP output to save tokens; use REST/SDK resolve_abi with include_abi=true if needed.

• read_contract

  Call a view/pure function and get the decoded result. No wallet, no cost. Rejects state-mutating functions.

• encode_call

  Encode a function call to calldata (0x…) without sending anything.

• simulate

  Simulate a call and return success, gas, decoded return, and best-effort state diff / asset changes / logs. Provide a high-level call (address + function + args) or raw (to + data), never both.

• prepare_tx

  Prepare a contract WRITE for the user to sign. Returns an UNSIGNED transaction, its simulation, a human-readable summary, safety metadata, warnings, a configured signing deeplink, and an EIP-1193 wallet request when signing is recommended. IMPORTANT: this tool NEVER signs or broadcasts. Present the summary + simulation + warnings to the user. Only hand them the `deeplink` or `wallet_request` when `safety.signing_recommended` is true. If `safety.risk_level` is high or blocked, make that explicit; blocked means do not send.

• decode_tx

  Decode what a transaction did: delegated heimdall decode plus `decoded_call` from the resolved target ABI when available. Prefer `decoded_call` for typed function/arg names, and read its provenance.

• resolve_name

  Resolve an ENS/Basename to an address, or an address to its primary ENS/Basename. Pass chain=base for Basenames.