# GBLIN Protocol — for AI agents and crawlers

> GBLIN is a basket token on Base mainnet (45% cbBTC + 45% WETH + 10% USDC)
> with an on-chain Crash Shield: a rules-based mechanism that cuts risk-asset
> weights during drawdowns (it has fired on mainnet, tx
> 0x896be221989930776972c78f81e2be9081c90d0027c14f7cd74bf51b9ad0acca).
> It is crypto exposure with a coded drawdown response — NOT capital-protected,
> NOT a USDC substitute; for surplus capital only. Risk policy is public code;
> risk state is a signed, continuously verifiable observable (attestations).
> For AI agents it ships an on-chain market-risk signal plus an open-source MCP
> server with a deterministic two-step JIT GBLIN→USDC redemption for x402 payments.

## Key facts

- **Network:** Base mainnet (chain id 8453)
- **Vault:** 0xc2181d975c05c8c724b334bcED0764c0b86B1D53
- **Lens (reads and quotes):** 0xfCFea8027019E8551A1f09AD91532471F5D26f61
- **Zap (buy with any token, exit to ETH):** 0x0E9D6Ceb6D313b021622C121Cda9C62e86e60200
- **Token decimals:** 18
- **NAV computation:** `GBLINLens.quoteSell(vault, 1e18) × Chainlink ETH/USD feed`
- **Fees:** 10 bps on mint (0.05% protocol fee + 0.05% stability fee, which stays in the NAV); 0.50% a year management fee, accrued as new shares; no fee on redemption
- **Min deposit:** none (read live: `GBLINLens.configFees(vault).minDeposit`)
- **Sell cooldown after a mint for oneself:** 20 seconds (read live: `GBLINLens.configFees(vault).sellCooldown`)
- **License:** MIT (open source, no telemetry)
- **Audit:** Soken, 9 October 2026, commit 311bd91 — 0 critical, 0 high, 0 medium, 2 low, 14 informational; all seven deployed contracts match the audited build. Report, as published by the auditor: https://github.com/Soken-LTD/smart-contract-audits/blob/main/GBLIN%20Protocol%20Security%20Review.pdf · identical copy in the protocol repository: https://github.com/gblinproject/GBLIN-Protocol/blob/main/audits/2026-10-09_soken_security_review.pdf (SHA-256 e3096c408b50dacd78368bf1810882cdc26583c0c34e2113e59131f8ea404da4)
- **Supply:** every share is minted against assets at NAV; no premine, team allocation or vesting. Circulating = total minus the unredeemable launch seed at 0x…dEaD. Project-operated wallets are disclosed, not hidden: https://gblin.digital/api/supply (JSON) · plain numbers for aggregators: https://gblin.digital/api/supply/total and https://gblin.digital/api/supply/circulating

## For AI agent developers

- **MCP Server (stdio, full toolset):** `npx @gblin-protocol/mcp-server`
- **Agent treasury (library + CLI):** `npx @gblin-protocol/agent-treasury status|park|ensure-usdc <amount>|pay <url>` — USDC reserve, surplus parked in GBLIN, USDC refilled from GBLIN just in time when an x402 invoice arrives (Coinbase's x402Client with the refill on its onBeforePaymentCreation hook). Self-custody. Skill: `npx skills add gblinproject/gblin-treasury-risk-regime`.
- **MCP hosted (Streamable HTTP, no install):** https://mcp.gblin.digital/mcp
  — 21 free tools: risk regime, attestation sample, stats, coherence, AI Action Receipts, and the vault, action and payment tools of the npm package; tool list below.
- **GBLIN payment relay (for a payer with no ETH):** GET https://gblin.digital/api/relay/gblin quotes the fee (in GBLIN at the NAV);
  POST a signed payment and a signed fee: both settle in one transaction or neither does.
- **Attestor address (pin this): `0x3ae65d36e8b1d82B0B80669E769A3dc300D543e4`** — every paid EIP-712 risk attestation is signed by it.
  A signature that recovers to any other address is not ours. Rotations are published here with the date.
- **AI Action Receipts (seal what your agent did):** $0.0045 via x402 at https://gblin.digital/api/x402/seal —
  hashes only, portable receipt (signature + Merkle proof + signed checkpoint), root anchored daily on Base;
  free demo and free reading at https://gblin-mcp.gblin-mcp-worker.workers.dev/log
- **x402 Uptime Observatory (free data):** https://gblin-mcp.gblin-mcp-worker.workers.dev/observatory
  — continuous liveness probes of the ~240 most recently updated x402 catalog resources (only ~1/3 answer);
  raw JSON at /observatory.json, per-seller badge at /observatory/badge.svg?host=…, our own endpoints in
  the same table under the same rules. Re-run it yourself: https://github.com/gblinproject/x402-catalog-probe
- **GitHub:** https://github.com/gblinproject/gblin-treasury-risk-regime
- **Docs:** https://gblin.digital/agents
- **Receipts (transaction record, not endorsement):** https://gblin.digital/receipts
  — every x402 settlement from a third-party ERC-8004 agent (id 59895) with on-chain tx hashes;
  it bought daily until 16 Aug 2026, then its settlement step stopped for every vendor (details on the page)
- **MCP hosted (Streamable HTTP, no install) — 21 free tools:**
  `risk.regime` · `risk.attestation_sample` · `protocol.stats` · `protocol.info` ·
  `coherence.report` · `receipts.seal` (demo, 5/day/IP) · `receipts.get` · `receipts.verify`, and, from the same
  source as the npm package, `treasury.state` · `treasury.quote` · `treasury.health` · `treasury.nav_history` · `governance.state` · `auction.state` · `attestation.verify` · `actions.prepare` · `actions.preview` · `actions.status` · `payments.prepare` · `payments.verify` · `payments.relay`.
  The npm package's snake_case names are accepted there as aliases.
  Dot-notation tree; the old flat names still work as unlisted aliases until 2026-11-21. Prompts: risk_gate, seal_and_verify.
  Resources (not tools): `gblin://howto/attestation`, `gblin://howto/seal`, `gblin://limits`, `gblin://keys` (60 req/min/IP).
  Witness endpoints: /witness and /witness/markovian (we co-sign a third party's log).
  Nothing is paid over MCP; paid = x402 HTTP endpoints. GET-only audit of the live surface:
  /meta (counts + manifest hash) · /tools.json · /resources.json · /conformance · /v1/verify/:index
  (all under https://gblin-mcp.gblin-mcp-worker.workers.dev).
- **MCP stdio package `@gblin-protocol/mcp-server` (npm) — 20 tools, 4 prompts, 4 resources; every tool that returns an object declares an `outputSchema`:**
  1. `get_market_risk_regime` — BTC/ETH risk regime (calm/elevated/crash) + posture (free) ← start here
  2. `get_treasury_state` — live NAV + basket + Crash Shield status
  3. `quote_safe_swap` — preview buy/sell with dynamic slippage
  4. `swap_gblin_to_usdc_jit` — atomic GBLIN→USDC calldata for x402
  5. `invest_usdc_to_gblin` — MEV-safe USDC→GBLIN reinvestment
  6. `analyze_treasury_health` — balance, gas, runway, advice
  7. `get_governance_state` — verify 48h timelock ownership + pending ops
  8. `share_skill_with_peer` — portable JSON skill seed for peer agent onboarding (its referral code is a label only: no fee is paid for it)
  9. `get_auction_state` — read the vault's Dutch auction: open or not, current premium over the oracle price, side and gap per row. Bidding is trading with the vault toward its target weights; the premium is the reward, nothing is paid out of the vault
  10. `verify_risk_attestation` — FREE verifier for GBLIN Risk Attestations (EIP-712 recover + freshness + live drift). Mint attestations at https://gblin.digital/api/x402/attestation ($0.003)
  11. `seal_action_demo` — free demo seal (5/day/IP) into the AI Action Receipts log
  12. `get_receipt` — read a sealed receipt by index, with inclusion proof and signed checkpoint
  13. `how_to_seal_paid` — instructions for unlimited paid seals ($0.0045 via x402) and offline verification
  14. `prepare_gblin_payment` — pay in GBLIN with a signature and no ETH (EIP-3009): returns the EIP-712 message to sign, the calldata and the x402 "exact" payload; the EIP-712 domain is read from the token
  15. `verify_gblin_authorization` — check a signed GBLIN authorization against the chain (signature, validity window, nonce, balance) before anyone spends gas
  16. `relay_gblin_payment` — when nobody else will carry the payment: GBLIN's relay settles payment and fee (in GBLIN) in one atomic transaction
  17. `prepare_action` — unsigned steps for any operation: mint with ETH, WETH or USDC, redeem in kind, exit to ETH or USDC, bid
  18. `preview_steps` — simulate the steps before signing; decoded reverts, and the gas limit each vault step really needs
  19. `get_transaction_status` — what a sent transaction did
  20. `get_nav_history` — NAV per share over time beside ETH/USD and BTC/USD
  Prompts: `risk_gate`, `pay_in_gblin`, `pay_invoice_just_in_time`, `seal_and_verify`. Resources: `gblin://contracts`, `gblin://payments`, `gblin://keys`, `gblin://limits`.
  (the stdio package keeps flat snake_case names; the hosted server uses the dot-notation tree above)

## Wallet compatibility

GBLIN->USDC is a three-step flow: approve the shares to the Zap, `GBLINZap.sellGBLINForEth(shares, minEthOut, venueData, receiver)` (redeem in kind and sell every leg, all or nothing), then a Uniswap WETH->USDC swap.
Works on:

- EOA wallets (Privy, MetaMask, raw key)
- ERC-4337 smart accounts (Safe, Coinbase smart wallet)
- EIP-7702 delegated EOAs (Pectra+)

No batched UserOp or Account Abstraction dependency.

## x402 compatibility

GBLIN MCP does NOT replace x402. x402 invoices still settle in USDC
through the Coinbase CDP facilitator (PayAI is the configured fallback if CDP is off). The MCP server simply produces
the swap calldata the agent broadcasts immediately before paying.

## Useful pages

- Homepage: https://gblin.digital/
- For AI agents: https://gblin.digital/agents
- Live dashboard: https://gblin.digital/dashboard
- Buy GBLIN (humans): https://gblin.digital/buy-gblin
- Frame (Farcaster): https://gblin.digital/frame

## GBLIN Sentinel — x402 data agent

An open-source autonomous agent that sells real-time Base DeFi risk signals
via x402 micropayments. Any agent with USDC on Base can query it.

- Live: https://gblin-sentinel.vercel.app
- x402 manifest: https://gblin-sentinel.vercel.app/.well-known/x402
- LLM reference: https://gblin-sentinel.vercel.app/llms.txt

Endpoints: base-risk-pulse ($0.002), risk-pulse-pro ($0.005); free: gblin-analytics, keeper-opps

## Useful repos

- Protocol web app: https://github.com/gblinproject/GBLIN
- MCP server: https://github.com/gblinproject/gblin-treasury-risk-regime

## Contact

- X / Twitter: @gblinproject (search "gblin" on X)
- Issues: https://github.com/gblinproject/gblin-treasury-risk-regime/issues