GBLIN MCP Server

Treasury standard for AI agents on Base mainnet. A Model Context Protocol (MCP) server that lets autonomous agents hold capital in GBLIN — a diversified, Crash-Shield-protected on-chain index — and Just-In-Time swap to USDC the millisecond they need to pay an x402 invoice.

📖 Full documentation and Quick Start: gblin.digital/agents

ElizaOS Plugin

For agents running on ElizaOS, install the companion plugin:

npm install plugin-gblin
# or: elizaos plugins add gblin

It exposes four native Actions (CHECK_GBLIN_TREASURY_HEALTH, INVEST_IDLE_USDC_GBLIN, RESCUE_USDC_FROM_GBLIN, GET_GBLIN_RISK_ATTESTATION) and a Provider that injects live NAV + Crash Shield status into the agent context on every loop.

→ Full Eliza plugin docs

AI assistant discovery — gblin-init

Drop an AGENTS.md treasury policy into your repo so every modern AI coding assistant (Claude Code, Cursor, Windsurf, GitHub Copilot, Codex) automatically discovers GBLIN when it works on your codebase:

npx -p @gblin-protocol/mcp-server gblin-init

The command is idempotent and safe:

• If AGENTS.md does not exist → creates it from the canonical template at gblin.digital/AGENTS.template.md.
• If AGENTS.md exists → appends a clearly delimited GBLIN block at the bottom; your own content is never touched.
• Re-running is a no-op (detected via stable HTML markers).
• --dry-run prints what it would do without writing.
• --force refreshes the block to the latest version.

It also runs offline thanks to a bundled fallback template.

Postinstall hint

When the package is installed as a regular dependency (npm i @gblin-protocol/mcp-server), a short tip is printed once suggesting the command above. No files are written during postinstall — security-friendly and Socket-compliant. Set GBLIN_SKIP_HINT=1 to silence it.

Trust & Governance

GBLIN V6 is governed by a 48h Timelock Controller — every admin operation (parameter change, oracle update, ownership transfer) is enforced on-chain to wait 172,800 seconds before execution. Agents and integrators can verify this directly on BaseScan.

Properties enforced at the contract level:

• MIN_DELAY is immutable (override of updateDelay reverts permanently)
• PROPOSER_ROLE and CANCELLER_ROLE are strictly separated (constructor reverts on overlap)
• EXECUTOR_ROLE is open (address(0)) — anyone can execute a matured operation, anti-censorship
• The timelock is self-administered: every role/config change must itself go through the 48h delay

This is why the get_governance_state tool returns owner_is_timelock: true and a verifiable min_delay_seconds: 172800. AI agents can use these flags to gate trust-sensitive actions.

Why this exists

AI agents today hold their working capital in USDC. USDC sits flat: zero yield, full inflation exposure.

GBLIN is an on-chain index on Base (45% cbBTC + 45% WETH + 10% USDC) with an algorithmic Crash Shield that adaptively reduces risk-asset exposure as drawdown rises (V6 adaptive threshold, from ~15%). GBLIN is managed crypto exposure with capped drawdown — a calmer way to hold BTC/ETH risk for surplus capital, not a substitute for USDC (it can still lose value in a crash). Agents settle x402 invoices instantly via Just-In-Time GBLIN→USDC redemption.

This server exposes that capability to any LLM agent through the standard MCP protocol.

Quick start

Claude Desktop

Add to claude_desktop_config.json (on Windows: %APPDATA%\Claude\claude_desktop_config.json):

{
  "mcpServers": {
    "gblin": {
      "command": "npx",
      "args": ["-y", "@gblin-protocol/mcp-server"]
    }
  }
}

Restart Claude Desktop. The 10 GBLIN tools appear in the tool picker.

Windsurf / Cursor

Add to ~/.codeium/windsurf/mcp_config.json (Windsurf) or the equivalent Cursor MCP config:

{
  "mcpServers": {
    "gblin": {
      "command": "npx",
      "args": ["-y", "@gblin-protocol/mcp-server"],
      "env": {
        "GBLIN_RPC_URL": "https://base-rpc.publicnode.com"
      }
    }
  }
}

Refresh MCP servers from the IDE settings (or restart). The tools become callable inline.

Coinbase AgentKit (TypeScript)

import { MCPClient } from "@modelcontextprotocol/sdk/client/index.js";
import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";

const transport = new StdioClientTransport({
  command: "npx",
  args: ["-y", "@gblin-protocol/mcp-server"],
});
const client = new MCPClient({ name: "my-agent", version: "1.0.0" });
await client.connect(transport);

// List tools
const { tools } = await client.listTools();

// Quote a JIT payment of $0.50
const jit = await client.callTool({
  name: "swap_gblin_to_usdc_jit",
  arguments: { usdc_needed: "0.50", wallet_address: "0xYourAgent..." },
});

ElizaOS / custom

Any framework that speaks MCP over stdio works:

npx @gblin-protocol/mcp-server

Also supports Cline, Continue.dev, and any agent that implements the MCP client spec.

The 10 tools

Free tools (no payment required)

Paid tools (x402 micropayments)

Risk Attestation — mint a perishable (10-minute), verifiable proof of the current BTC/ETH risk regime at GET https://gblin.digital/api/x402/attestation ($0.003 USDC via x402). Attach it to your action as proof-of-diligence; any counterparty verifies it for free with verify_risk_attestation.

All tools return structured JSON. All values are quoted on-chain (NAV via quoteSellGBLIN × Chainlink ETH/USD, with 24h staleness guard). No mock data.

Live verification: the test suite (npm test) runs the tool suite against Base mainnet and confirms calldata generation, oracle freshness, slippage math, and governance state. See the latest CI run.

x402 micropayments

The paid tools use the x402 protocol for instant micropayments. Here's how it works:

Payment flow

1. First call (without payment): The tool returns a 402 manifest with payment details
2. Pay via facilitator: Send a POST request to the facilitator with the payment details
3. Receive PaymentProof: The facilitator returns a signed proof of payment
4. Second call (with _payment): Include the base64-encoded PaymentProof in the _payment field

Example (analyze_treasury_health)

# Step 1: Get payment manifest
npx @gblin-protocol/mcp-server analyze_treasury_health '{"wallet_address":"0x..."}'
# Returns: 402 error with payment details

# Step 2: Pay via facilitator
curl -X POST https://facilitator.payai.network/pay \
  -H "Content-Type: application/json" \
  -d '{
    "amount": "0.003",
    "currency": "USDC", 
    "recipient": "0x0ebA5d314F4f5Dcb7A094953Fa9311a45172dd1B",
    "chainId": 8453
  }'
# Returns: PaymentProof JSON

# Step 3: Call tool with payment
npx @gblin-protocol/mcp-server analyze_treasury_health \
  '{"wallet_address":"0x...", "_payment":"<base64 PaymentProof>"}'
# Returns: Treasury analysis results

Payment recipients

• Default recipient: 0x0ebA5d314F4f5Dcb7A094953Fa9311a45172dd1B
• Override: Set RECIPIENT_WALLET environment variable to use your own wallet

Supported facilitators

• Primary: https://facilitator.payai.network (PayAI — settles on Base mainnet, no auth)
• Override: Set X402_FACILITATOR_URL environment variable
• Note: https://x402.org/facilitator is testnet-only under x402 v2 and cannot settle Base mainnet payments

All payments are processed on Base mainnet using USDC (0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913).

Architectural decisions

Native atomic swap

The GBLIN contract exposes sellGBLINForToken(amount, targetToken, fee, minOut). This burns GBLIN, swaps the basket → WETH → target token in a single transaction. No batched UserOp, no ERC-4337 dependency, no risk of half-finished JIT.

The MCP returns calldata that works identically on:

• EOA wallets (Privy, MetaMask, raw private key)
• ERC-4337 smart accounts (Safe, Coinbase smart account)
• EIP-7702 delegated EOAs (Pectra+)

Dynamic slippage

Slippage tolerance scales with on-chain risk regime:

The buffer is applied on top of the contract's internal maxInternalSlippage (200 bps), absorbing oracle drift and Uniswap pool variance.

MEV protection

invest_usdc_to_gblin never passes minOut = 0. Both minWethOut and minGblinOut are computed from on-chain quotes plus the dynamic slippage buffer. This eliminates the sandwich-attack surface that plagues naïve buy-with-token tools.

Cooldown enforcement

The contract enforces a 120-second sell lock after each buy. The JIT tool reads lastDepositTime and the on-chain block.timestamp (never Date.now()) and returns a clear CooldownActive error with the exact seconds remaining if the swap would revert.

Configuration

The server reads GBLIN_RPC_URL from the environment. With no env var it falls back to https://base-rpc.publicnode.com (free, no key, generous limits).

For production load (>100 concurrent agents) use a dedicated provider:

export GBLIN_RPC_URL="https://base-mainnet.g.alchemy.com/v2/YOUR_KEY"
npx @gblin-protocol/mcp-server

See .env.example for the full list.

Development

git clone https://github.com/gblinproject/GBLIN-MCP
cd GBLIN-MCP
npm install
npm run build
npm test         # live read-only smoke test against Base mainnet
npm start        # run the compiled server

Project layout:

src/
  config.ts    # network constants, addresses, slippage params
  abi.ts       # GBLIN_V6 + Chainlink + ERC-20 ABIs
  client.ts    # viem PublicClient + on-chain timestamp helper
  helpers.ts   # NAV, basket state, slippage, cooldown, reverse quote
  keeper.ts    # keeper bounty finder (incentivizedRebalance math)
  tools.ts     # the 10 tool implementations + zod schemas
  index.ts     # MCP stdio server entry
scripts/
  test.ts      # live smoke test

Security notes

• The server is read-only. It never holds, signs, or broadcasts.
• All quotes are derived from on-chain calls + Chainlink oracles. Stale or negative oracle answers cause the tool to abort with OracleStale / OracleDead.
• The agent's wallet is the sole signer. Calldata returned by tools is plain ABI-encoded bytes — review before broadcasting in untrusted environments.
• No telemetry, no analytics, no remote dependencies beyond the configured RPC.

Roadmap

• v0.2: Uniswap V3 QuoterV2 integration for sub-1% slippage precision
• v0.3: Permit2 support (skip the approve step for x402 reinvestment)
• v0.4: Streamable HTTP transport for hosted multi-agent setups
• v1.0: Audited contract integration + remote-only deployment guide

Links

• Contract: 0x36C81d7E19…52f0
• Protocol site: https://gblin.digital
• Agent docs: https://gblin.digital/agents
• Issues: https://github.com/gblinproject/GBLIN-MCP/issues

MIT © 2026 GBLIN Protocol

Agent-to-Agent Skill Propagation (v0.1.9+)

GBLIN MCP includes a unique tool — share_skill_with_peer — that lets one AI agent transfer treasury management capabilities to another agent.

When agent A meets agent B in a multi-agent context (delegated task, x402 payment flow, shared workspace), agent A can call share_skill_with_peer to generate a portable JSON "skill seed". The seed contains:

• Install instructions for the GBLIN MCP server
• A working transaction example with reference TX on Basescan
• Agent A's referral code (derived from its wallet)
• The full natural-language explanation of GBLIN

Agent B can install the server in seconds using the seed. From that moment, every GBLIN transaction agent B executes includes agent A's referral code in the calldata via ERC-8021 Builder Code (bc_gbdo32j0). A small portion of the protocol fee (0.05% of transaction value) is redirected to agent A's wallet — sourced from the existing protocol fee split, not added on top.

This creates a viral propagation mechanism for treasury skills across the agent ecosystem, while economically rewarding agents who evangelize good treasury practices.

No additional infrastructure is required. The mechanism is entirely on-chain via the existing Builder Code system.

Keeper Bounty System (v0.1.11+)

GBLIN is one of the few protocols that pays AI agents instead of charging them.

When the treasury pool drifts from its target allocation, any agent can call find_keeper_bounty to check if a profitable rebalance is available. If one exists, the tool returns ready-to-send calldata. The agent broadcasts the transaction and receives 0.0001 ETH from the protocol's stability fund — the swap uses the contract's own capital; the caller only pays gas (~$0.01 on Base).

// Example response when a bounty is available
{
  "bountyAvailable": true,
  "direction": "WETH->asset",
  "estimatedRewardEth": "0.0001",
  "target": "0x36C81d7E1966310F305eA637e761Cf77F90852f0",
  "calldata": "0x...",
  "value": "0",
  "note": "Send this calldata to earn the reward. The swap uses the contract's own funds."
}

For continuous income, poll find_keeper_bounty on an interval (e.g. every 5–15 minutes). A live keeper leaderboard is at gblin.digital/keepers.

Discovery & Trust

GBLIN exposes machine-readable discovery files for AI agents and protocols:

• Coinbase x402 Bazaar: all 11 GBLIN endpoints (7 webapp + 4 Sentinel) are indexed in the CDP Bazaar discovery layer — agents find them via semantic search (GET https://api.cdp.coinbase.com/platform/v2/x402/discovery/search?query=treasury+risk) or by merchant (.../discovery/merchant?payTo=0x0ebA5d314F4f5Dcb7A094953Fa9311a45172dd1B)
• x402 Manifest: https://gblin.digital/.well-known/x402 — full list of paid endpoints with prices, chain ID, and currency
• LLM Discovery: https://gblin.digital/api/x402/llms.txt — human-readable protocol summary (free, no paywall)
• Base MCP Plugin: PR #56 on base/skills — official integration in review

The MCP server in this repo provides the same operations as the x402 HTTP endpoints, but exposed via the Model Context Protocol for direct agent integration (Claude Desktop, Cursor, Windsurf, ElizaOS, etc.).

GBLIN Sentinel — x402 Data Agent Example

GBLIN Sentinel is an open-source reference implementation of an autonomous AI agent that sells on-chain data via x402 micropayments. It demonstrates the full x402 producer pattern on Base.

Discovery:

• x402 manifest: https://gblin-sentinel.vercel.app/.well-known/x402
• LLM reference: https://gblin-sentinel.vercel.app/llms.txt
• Source: https://github.com/gblinproject/gblin-sentinel

Any agent using this MCP server can call base-risk-pulse before investing to gate treasury actions on current market risk signal.

GBLIN Aureus — Autonomous Trading Agent (Track-Record Engine)

Aureus is an autonomous catalyst & rotation agent that trades crypto, equities, indices and metals on Base — and cannot lie about its results: every thesis is keccak-hashed and committed on-chain before the agent acts, then revealed at close. Win or lose, the record is permanent and independently verifiable. No cherry-picked screenshots.

Status: DRY-RUN validation. Aureus runs the full loop on live market data with zero real funds. It graduates to real capital only if it passes a public gate: 30–50 closed trades, profit factor > 1.3, max drawdown < 10%, zero liquidations. The live dashboard publishes every metric in real time: gblin.digital/aureus.

Under the hood (the boring parts that keep capital alive):

• Risk engine: volatility-targeted sizing, stops always inside the liquidation distance, mark-to-market equity with automatic drawdown halt, 10-second stop watcher
• Multi-venue funding carry: delta-neutral funding harvest confirmed across Binance/Bybit/OKX medians, with persistence gating (regimes, not single prints)
• Multi-timeframe alignment: fast mean-reversion signals are gated by the daily trend (time-series momentum, the most documented edge in finance)
• Microstructure eyes: taker-flow (CVD) and order-book imbalance veto entries the tape opposes
• Shadow book: every rejected strategy keeps paper-trading on live data; capital allocation follows statistical proof, never opinion
• News sentinel: a multi-LLM consensus ensemble (6 independent providers) reads verified headlines into a risk signal — the math decides every entry, the LLMs only modulate

Aureus is also a planned GBLIN treasury user: idle capital parks in GBLIN via this MCP server and JIT-swaps to USDC when margin is needed — the agent eating the protocol's own cooking.

• Live dashboard: https://gblin.digital/aureus
• Announcement: @GBLIN_Protocol on X

Related Repositories

• Smart Contract & Protocol: https://github.com/gblinproject/GBLIN-Protocol
• Web App & x402 Endpoints: https://github.com/gblinproject/GBLIN_WEBAPP
• ElizaOS Plugin: https://github.com/gblinproject/GBLIN_PLUGIN
• GBLIN Sentinel (x402 data agent): https://github.com/gblinproject/gblin-sentinel
• GBLIN Aureus (autonomous trading agent): https://gblin.digital/aureus — dry-run validation, on-chain commit-reveal track record