Skip to content

XGR MCP Gateway

by xgr-network · remote · no sign-in to list tools · v0.1.1 · published by GitHub user xgr-network

Public Streamable HTTP MCP gateway for XGRChain, XDaLa sessions, Explorer data and XGR standards.

Deletes · 3Final · 1Changes · 10

95 tools: 3 can delete or cancel things, 1 do something that can't be undone, 10 change things and 81 only read.

Scanned Oct 21, 2026

7 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http xdala-workflow-builder https://mcp.xgr.network/mcp

Findings

Matches of fixed checks, with the text they matched.

6 warn1 info
  • The server marks "cancel_operation_handoff" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "cancel_operation_handoff" says "cancel": a word for removing or ending something.

    What this check looks for
  • The server marks "cancel_xdala_bundle_deploy_handoff" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "cancel_xdala_bundle_deploy_handoff" says "cancel": a word for removing or ending something.

    What this check looks for
  • The server marks "cancel_xdala_session_start_handoff" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "cancel_xdala_session_start_handoff" says "cancel": a word for removing or ending something.

    What this check looks for
  • The server marks "validate_xgr_session_start_handoff" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "validate_xgr_session_start_handoff" says "validate": a word for reading.

    What this check looks for
  • The server marks "get_xgr_purchase_options" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_xgr_purchase_options" says "get": a word for reading.

    What this check looks for
  • The server marks "quote_xgr_purchase" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "quote_xgr_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.

    What this check looks for
Show 1 more finding

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

95 tools

Deletes or cancels 3Claude Code: deny
  • cancel_operation_handoffCancel a pending offchain operation handoff.1 finding

    Why it is in this group

    • The name "cancel_operation_handoff" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "cancel_operation_handoff" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "cancel_operation_handoff" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel a pending offchain operation handoff. This never cancels already signed or submitted chain transactions.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • cancel_xdala_bundle_deploy_handoffCancel a pending XDaLa bundle deploy handoff.1 finding

    Why it is in this group

    • The name "cancel_xdala_bundle_deploy_handoff" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "cancel_xdala_bundle_deploy_handoff" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "cancel_xdala_bundle_deploy_handoff" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel a pending XDaLa bundle deploy handoff. This is offchain metadata only and never cancels chain transactions.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • cancel_xdala_session_start_handoffCancel pending xDaLa session start handoff metadata only.1 finding

    Why it is in this group

    • The name "cancel_xdala_session_start_handoff" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "cancel_xdala_session_start_handoff" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "cancel_xdala_session_start_handoff" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel pending xDaLa session start handoff metadata only. This preparation/read-only MCP tool does not sign, submit, execute, or cancel on-chain work.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Can't be undone 1Claude Code: ask
  • quote_xgr_purchaseUse only when the user specifies a maximum USDC/USDT payment budget.1 finding

    Why it is in this group

    • The name "quote_xgr_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "quote_xgr_purchase" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "quote_xgr_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Use only when the user specifies a maximum USDC/USDT payment budget. Call get_xgr_purchase_options first, pass payment_assets[].key, and treat this result as planning only: it creates no order and is not a payment instruction.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Changes things 10Claude Code: ask
  • create_operation_handoffCreate an offchain human-in-the-loop operation and return a browser URL.No findings

    Why it is in this group

    • The name "create_operation_handoff" says "create": a word for a change.
    Description, as the server wrote it
    Create an offchain human-in-the-loop operation and return a browser URL. The MCP never signs or submits transactions; the user executes locally with a browser wallet on the operation page. Do not use this tool to start, run, launch, execute, or queue XDaLa sessions. Do not use this tool for xgr_validateDataTransfer, SessionPermit, Manage Sessions imports, xgr-session-start@1, XDaLa session start handoffs, or starting a deployed XRC-729 workflow. For these intents, use create_xdala_session_start_handoff. If create_xdala_session_start_handoff is unavailable, report that the session-start tool is unavailable instead of falling back to create_operation_handoff.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • create_xdala_bundle_deploy_handoffStore a validated xgr-multi-bundle@1 bundle offchain under an unguessable bearer handle and return an XDaLa Workbench import URL.No findings

    Why it is in this group

    • The name "create_xdala_bundle_deploy_handoff" says "create": a word for a change.
    Description, as the server wrote it
    Store a validated xgr-multi-bundle@1 bundle offchain under an unguessable bearer handle and return an XDaLa Workbench import URL. The MCP does not sign, submit, or execute transactions.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • create_xdala_session_start_handoffPrepare and store a read-only xgr-session-start@1 handoff for xDaLa Workbench.1 finding

    Why it is in this group

    • The name "create_xdala_session_start_handoff" says "create": a word for a change.

    Findings

    • Info

      The description is 2,040 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...].owner/sessionId/pid for the actual session owner/starter after Workbench start."

      What this check looks for
    Description, as the server wrote it
    Prepare and store a read-only xgr-session-start@1 handoff for xDaLa Workbench. Use this tool whenever the user wants to start, run, launch, execute, queue, or prepare an XDaLa session. Use this tool for starting an existing deployed XRC-729/XRC-137 workflow, starting from a runtime XRC-729 orchestration, starting from a bundle deploy result, or importing a canonical xgr-session-start@1 request into xDaLa Manage Sessions. When explaining required input to users, use canonical xgr-session-start@1 terminology: sessions[].orchestration, sessions[].ostcId, sessions[].stepId, sessions[].payload, sessions[].maxTotalGas. Do not ask users for entryStepId; entryStepId is not the Workbench Session Start field. For deployed XRC-729 workflows, first inspect the runtime, identify ostcId and the likely entry step, resolve that step's XRC-137 rule, derive required payload fields from the XRC-137 payload schema, treat fields with defaults as optional, and present required and optional/default fields before creating a handoff. Do not call this tool with guessed payload values. If required start payload fields are missing, first present the required fields to the user and ask for values or explicit permission to use demo values. Only use demo/dummy/example/default values when the user explicitly asks or accepts them. This tool returns a Workbench xdalaUrl such as https://xdala.devnet.xgr.network/session-start/ss_... . The agent must show the returned xdalaUrl to the user. Do not replace the xdalaUrl with a generic /operations/op_... link. The MCP does not sign, submit, or execute. xDaLa Workbench performs local signing and calls xgr_validateDataTransfer. Do not describe the XRC-729 contract owner as the owner of a not-yet-started session; owner()/getOwner() and getExecutorList() identify start-authority roles only. Use sessions[].starterAddress only as an intended starter when explicitly set, and use terminal result data such as result.results[].owner/sessionId/pid for the actual session owner/starter after Workbench start.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • create_xgr_purchase_orderUse when the user specifies an exact integer amount_xgr.No findings

    Why it is in this group

    • The name "create_xgr_purchase_order" says "create": a word for a change.
    Description, as the server wrote it
    Use when the user specifies an exact integer amount_xgr. Call get_xgr_purchase_options first, use payment_assets[].key, collect user-supplied identity and wallet fields, require explicit terms acceptance, and create one live reservation. Pay only from the returned payment_instruction.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • create_xgr_purchase_order_by_budgetUse when the user specifies a maximum USDC/USDT payment amount rather than an XGR quantity.No findings

    Why it is in this group

    • The name "create_xgr_purchase_order_by_budget" says "create": a word for a change.
    Description, as the server wrote it
    Use when the user specifies a maximum USDC/USDT payment amount rather than an XGR quantity. Call get_xgr_purchase_options first, use payment_assets[].key, collect user-supplied identity and wallet fields, require explicit terms acceptance, and create one live reservation. Pay only when payment_approved=true and next_action=external_crypto_payment; otherwise do not pay.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • estimate_xdala_rule_gasUse this to estimate XDaLa/XRC-137 rule gas.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this to estimate XDaLa/XRC-137 rule gas. Returns validation gas, branch gas, grant fees and worst-case totals from xgr_estimateRuleGas.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_purchase_optionsCall this first for every XGR purchase.1 finding

    Why it is in this group

    • The name "get_xgr_purchase_options" says "get": a word for reading.
    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "get_xgr_purchase_options" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_xgr_purchase_options" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Call this first for every XGR purchase. Read live price, stock and payment assets; use payment_assets[].key exactly as payment_asset and inspect requires_sender_wallet before creating an order.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • request_xgr_starter_gasUse this tool when a user or agent needs native XGR to pay transaction fees on the configured XGR network.No findings

    Why it is in this group

    • The name "request_xgr_starter_gas" says "request": a word for a change.
    Description, as the server wrote it
    Use this tool when a user or agent needs native XGR to pay transaction fees on the configured XGR network. It sends one fixed 1 XGR grant from a dedicated server-controlled funding wallet to an eligible low-balance EVM address. Use it before deployments, session starts, contract calls or other on-chain actions when the address lacks gas. One confirmed grant per address; client-IP request limits apply; no repayment is required. The service never requests, receives or stores user or third-party private keys and cannot sign on behalf of users.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • trace_xgr_transactionLoads an indexed transaction, uses its sender as the bounded graph root, returns sender/recipient trace roots plus the graph and an explicit edge to highlight.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Loads an indexed transaction, uses its sender as the bounded graph root, returns sender/recipient trace roots plus the graph and an explicit edge to highlight. Useful for following native XGR transaction relations, but it does not attribute later mixed balances to the seed value.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_xgr_session_start_handoffValidate a canonical Workbench xgr-session-start@1 request.1 finding

    Why it is in this group

    • The name "validate_xgr_session_start_handoff" says "validate": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "validate_xgr_session_start_handoff" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "validate_xgr_session_start_handoff" says "validate": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Validate a canonical Workbench xgr-session-start@1 request.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 81Claude Code: allow
  • expand_address_relation_graphRead-only progressive expansion of one address by exactly one graph level.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only progressive expansion of one address by exactly one graph level. Use this instead of requesting a larger graph when exploring interactively.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • find_latest_xdala_sessionUse this when the user asks for the latest XDaLa session but does not provide owner and sessionId.No findings

    Why it is in this group

    • The name "find_latest_xdala_session" says "find": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for the latest XDaLa session but does not provide owner and sessionId. This read-only tool resolves the newest indexed XDaLa session from the Explorer database and can optionally include final receipt payload data.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • find_reusable_xrc137_rulesRead-only metadata-assisted search for existing owner XRC-137 contracts that could be reused instead of redeployed.No findings

    Why it is in this group

    • The name "find_reusable_xrc137_rules" says "find": a word for reading.
    Description, as the server wrote it
    Read-only metadata-assisted search for existing owner XRC-137 contracts that could be reused instead of redeployed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • find_startable_xdala_workflowsRead-only discovery of deployed XRC-729 workflows that a given address can start as owner, executor, or wildcard executor.No findings

    Why it is in this group

    • The name "find_startable_xdala_workflows" says "find": a word for reading.
    Description, as the server wrote it
    Read-only discovery of deployed XRC-729 workflows that a given address can start as owner, executor, or wildcard executor. Use this whenever the user provides an address and asks which sessions/workflows they can start. This tool does not create session-start handoffs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_account_live_stateUse this for live EVM account state.No findings

    Why it is in this group

    • The name "get_account_live_state" says "get": a word for reading.
    Description, as the server wrote it
    Use this for live EVM account state. Returns balance, nonce and contract code for an address.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_account_transactionsRead-only chain-wide Explorer DB transaction lookup for one account as sender, recipient, or both.No findings

    Why it is in this group

    • The name "get_account_transactions" says "get": a word for reading.
    Description, as the server wrote it
    Read-only chain-wide Explorer DB transaction lookup for one account as sender, recipient, or both. Use this instead of XDaLa session tools for account-wide transaction history.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_address_relation_graphRead-only bounded graph of indexed native XGR transfers around an address.No findings

    Why it is in this group

    • The name "get_address_relation_graph" says "get": a word for reading.
    Description, as the server wrote it
    Read-only bounded graph of indexed native XGR transfers around an address. Returns aggregated on-chain relations, verified Explorer labels, depth and truncation metadata. A relation proves only that transactions occurred between addresses; it does not imply common ownership or identity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_block_transactionsRead-only list of transactions in a specific indexed block, latest indexed block, or latest indexed block minus latestOffset.No findings

    Why it is in this group

    • The name "get_block_transactions" says "get": a word for reading.
    Description, as the server wrote it
    Read-only list of transactions in a specific indexed block, latest indexed block, or latest indexed block minus latestOffset.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_chain_statusUse this for live XGRChain status.No findings

    Why it is in this group

    • The name "get_chain_status" says "get": a word for reading.
    Description, as the server wrote it
    Use this for live XGRChain status. Returns chain id, latest block number and gas price from JSON-RPC, plus official XGR.Network entry points for the connected mainnet.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_latest_blockUse this when the user asks for the latest EVM block details from XGRChain.No findings

    Why it is in this group

    • The name "get_latest_block" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for the latest EVM block details from XGRChain.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_latest_session_payloadUse this when the user asks for the payload of the latest XDaLa session.No findings

    Why it is in this group

    • The name "get_latest_session_payload" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for the payload of the latest XDaLa session. This read-only tool resolves the latest indexed session without requiring owner plus sessionId, then returns payload, apiSaves, contractSaves and extras from the final receipt.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_operation_statusReturn the current status of an operation handoff.No findings

    Why it is in this group

    • The name "get_operation_status" says "get": a word for reading.
    Description, as the server wrote it
    Return the current status of an operation handoff. Use this after the user opens the operation page and signs or cancels local wallet transactions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_recent_value_transfersRead-only shortcut for recent native XGR value transfers from the Explorer transaction index.No findings

    Why it is in this group

    • The name "get_recent_value_transfers" says "get": a word for reading.
    Description, as the server wrote it
    Read-only shortcut for recent native XGR value transfers from the Explorer transaction index. Native value transfer means transactions.value > minValueWei and does not include gas fees.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_recent_xdala_sessionsUse this to list recent indexed XDaLa sessions from the read-only Explorer database, especially when the user does not know owner and sessionId.No findings

    Why it is in this group

    • The name "get_recent_xdala_sessions" says "get": a word for reading.
    Description, as the server wrote it
    Use this to list recent indexed XDaLa sessions from the read-only Explorer database, especially when the user does not know owner and sessionId. Supports optional owner filtering, time windows, result limits and payload enrichment.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_relation_edge_transactionsReturns the indexed native XGR transactions represented by one directed graph edge, with the same minimum-value and time filters used by the relation graph.No findings

    Why it is in this group

    • The name "get_relation_edge_transactions" says "get": a word for reading.
    Description, as the server wrote it
    Returns the indexed native XGR transactions represented by one directed graph edge, with the same minimum-value and time filters used by the relation graph.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_session_receipt_logsUse this to inspect what an XDaLa session actually did.No findings

    Why it is in this group

    • The name "get_session_receipt_logs" says "get": a word for reading.
    Description, as the server wrote it
    Use this to inspect what an XDaLa session actually did. Returns decoded engine receipt data such as input payload, API saves, contract saves, execution contract, rule contract, valid flag, inner gas usage and optional raw receipt logs. Do not use this for a simple transaction timeline; use get_session_transactions instead.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_session_status_liveUse this to check live session status from XGR RPC.No findings

    Why it is in this group

    • The name "get_session_status_live" says "get": a word for reading.
    Description, as the server wrote it
    Use this to check live session status from XGR RPC. Returns xgr_sessionAlive for a session owner and session id.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_session_transactionsUse this to list the blockchain transactions belonging to an XDaLa session.No findings

    Why it is in this group

    • The name "get_session_transactions" says "get": a word for reading.
    Description, as the server wrote it
    Use this to list the blockchain transactions belonging to an XDaLa session. This returns the timeline of transaction hashes, blocks, fees and iteration steps. It does not return full engine payloads, API saves or contract read results.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_sessions_overviewUse this for high-level indexed XDaLa session analytics from the Explorer API.No findings

    Why it is in this group

    • The name "get_sessions_overview" says "get": a word for reading.
    Description, as the server wrote it
    Use this for high-level indexed XDaLa session analytics from the Explorer API.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_transaction_evidenceUse this when the user asks what happened in a specific transaction.No findings

    Why it is in this group

    • The name "get_transaction_evidence" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks what happened in a specific transaction. Combines indexed Explorer transaction data, receipt data and live RPC fallback if available.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_transaction_receiptUse this for receipt logs, status and gas usage of a transaction.No findings

    Why it is in this group

    • The name "get_transaction_receipt" says "get": a word for reading.
    Description, as the server wrote it
    Use this for receipt logs, status and gas usage of a transaction. Prefers Explorer decoded receipt data.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_transaction_statsRead-only compact chain transaction statistics from the Explorer transaction index, with optional block or block-timestamp window filters.No findings

    Why it is in this group

    • The name "get_transaction_stats" says "get": a word for reading.
    Description, as the server wrote it
    Read-only compact chain transaction statistics from the Explorer transaction index, with optional block or block-timestamp window filters.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_unused_xrc137_rulesRead-only list of owner XRC-137 rules with no observed tx_receipts engine_rule_contract usage.No findings

    Why it is in this group

    • The name "get_unused_xrc137_rules" says "get": a word for reading.
    Description, as the server wrote it
    Read-only list of owner XRC-137 rules with no observed tx_receipts engine_rule_contract usage.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_active_sessions_timeseriesUse this when the user asks for active/concurrent XDaLa sessions over time.No findings

    Why it is in this group

    • The name "get_xdala_active_sessions_timeseries" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for active/concurrent XDaLa sessions over time.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_authoring_rulesUse this before creating, modifying or reviewing XRC/XDaLa artifacts.No findings

    Why it is in this group

    • The name "get_xdala_authoring_rules" says "get": a word for reading.
    Description, as the server wrote it
    Use this before creating, modifying or reviewing XRC/XDaLa artifacts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_bundle_deploy_handoffReturn stored metadata, bundle JSON, and any recorded deployed result/artifact for an XDaLa bundle deploy handoff handle.No findings

    Why it is in this group

    • The name "get_xdala_bundle_deploy_handoff" says "get": a word for reading.
    Description, as the server wrote it
    Return stored metadata, bundle JSON, and any recorded deployed result/artifact for an XDaLa bundle deploy handoff handle.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_bundle_deploy_resultReturn the stored XDaLa bundle deploy result, canonical deployed artifact, and audit events for a handoff handle.No findings

    Why it is in this group

    • The name "get_xdala_bundle_deploy_result" says "get": a word for reading.
    Description, as the server wrote it
    Return the stored XDaLa bundle deploy result, canonical deployed artifact, and audit events for a handoff handle. This is read-only and never signs, submits, or executes transactions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_payload_field_value_statsUse this when the user asks which values occurred for a specific payload field, for example “which DocumentType values occurred?” or “top values for ReasonCategory”.No findings

    Why it is in this group

    • The name "get_xdala_payload_field_value_stats" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks which values occurred for a specific payload field, for example “which DocumentType values occurred?” or “top values for ReasonCategory”.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_payload_key_statsUse this when the user asks which payload fields/keys occurred, how often payload fields appeared, or which payload fields were empty/non-empty.No findings

    Why it is in this group

    • The name "get_xdala_payload_key_stats" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks which payload fields/keys occurred, how often payload fields appeared, or which payload fields were empty/non-empty. For “last 14 days”, pass windowHours=336.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_payload_term_statsUse this when the user asks for payload terms, payload words, payload Begriff statistics, or a statistic over all payload terms in a time range.No findings

    Why it is in this group

    • The name "get_xdala_payload_term_stats" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for payload terms, payload words, payload Begriff statistics, or a statistic over all payload terms in a time range. For “last 14 days”, pass windowHours=336. Do not sample sessions for this task.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_process_mermaidRender an XDaLa XRC-729 process graph from runtime, bundle, or bundle handoff data as Mermaid flowchart text.No findings

    Why it is in this group

    • The name "get_xdala_process_mermaid" says "get": a word for reading.
    Description, as the server wrote it
    Render an XDaLa XRC-729 process graph from runtime, bundle, or bundle handoff data as Mermaid flowchart text. Read-only; does not sign, submit, or execute transactions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_session_detailUse this when the user asks for details, timeline, steps, payloads, or evidence for a concrete XDaLa session with owner and sessionId.No findings

    Why it is in this group

    • The name "get_xdala_session_detail" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for details, timeline, steps, payloads, or evidence for a concrete XDaLa session with owner and sessionId.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_session_start_handoffRead stored xDaLa session start handoff metadata, canonical request, authority, derived sessionOwnership role summary, validation, lean result summary, and terminal result.No findings

    Why it is in this group

    • The name "get_xdala_session_start_handoff" says "get": a word for reading.
    Description, as the server wrote it
    Read stored xDaLa session start handoff metadata, canonical request, authority, derived sessionOwnership role summary, validation, lean result summary, and terminal result. Read-only; does not sign, submit, or execute. Use sessionOwnership to avoid confusing the XRC-729 contract owner with the actual session owner/starter before Workbench completion.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_session_start_resultReturn terminal xDaLa session start result, lean result summary, and audit events.No findings

    Why it is in this group

    • The name "get_xdala_session_start_result" says "get": a word for reading.
    Description, as the server wrote it
    Return terminal xDaLa session start result, lean result summary, and audit events. Read-only preparation/result lookup only; the MCP does not sign, submit, or execute, and users sign locally in Workbench/wallet/local signer. For completed handoffs, prefer result.results[].owner/sessionId/pid over XRC-729 contract owner facts when identifying the actual session owner/starter.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_session_statsUse this when the user asks for aggregate XDaLa session statistics, for example “statistics for the last 2 weeks”, “success/failure counts”, “average session duration”, “average st…No findings

    Why it is in this group

    • The name "get_xdala_session_stats" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for aggregate XDaLa session statistics, for example “statistics for the last 2 weeks”, “success/failure counts”, “average session duration”, “average steps per session”, “top errors”, or “how many sessions ran recently”. For “last 2 weeks”, pass windowHours=336.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_session_timeseriesUse this when the user asks for XDaLa sessions over time, for example “sessions per day”, “daily sessions last 2 weeks”, “monthly session trend”, or “success/fail per day”.No findings

    Why it is in this group

    • The name "get_xdala_session_timeseries" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for XDaLa sessions over time, for example “sessions per day”, “daily sessions last 2 weeks”, “monthly session trend”, or “success/fail per day”. For “last 2 weeks by day”, pass windowHours=336 and bucket="day".

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_start_payload_historyRead-only indexed history of payload values used when starting a specific XRC-729 OSTC entry step.No findings

    Why it is in this group

    • The name "get_xdala_start_payload_history" says "get": a word for reading.
    Description, as the server wrote it
    Read-only indexed history of payload values used when starting a specific XRC-729 OSTC entry step. Reads Explorer PGRO through the MCP gateway only, selects the first matching entry-step receipt per owner/session, and returns compact scalar value statistics for UI pickers.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xdala_step_statsUse this when the user asks for step-level XDaLa statistics, for example “how many steps were valid”, “invalid steps”, “failed steps”, “step gas totals”, or “step stats for a sessi…No findings

    Why it is in this group

    • The name "get_xdala_step_stats" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for step-level XDaLa statistics, for example “how many steps were valid”, “invalid steps”, “failed steps”, “step gas totals”, or “step stats for a session”.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_circulating_supplyUse this to retrieve circulating supply information exposed by xgr_getCirculatingSupply.No findings

    Why it is in this group

    • The name "get_xgr_circulating_supply" says "get": a word for reading.
    Description, as the server wrote it
    Use this to retrieve circulating supply information exposed by xgr_getCirculatingSupply.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_core_addressesUse this to retrieve XGR core protocol addresses exposed by the xgr_getCoreAddrs RPC method.No findings

    Why it is in this group

    • The name "get_xgr_core_addresses" says "get": a word for reading.
    Description, as the server wrote it
    Use this to retrieve XGR core protocol addresses exposed by the xgr_getCoreAddrs RPC method.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_docRetrieve canonical Markdown documentation for an XGR/XDaLa topic.No findings

    Why it is in this group

    • The name "get_xgr_doc" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve canonical Markdown documentation for an XGR/XDaLa topic.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_multibundle_referenceRetrieve canonical xgr-multi-bundle@1 Markdown documentation.No findings

    Why it is in this group

    • The name "get_xgr_multibundle_reference" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve canonical xgr-multi-bundle@1 Markdown documentation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_multibundle_schemaRetrieve canonical XGR MultiBundle schema.No findings

    Why it is in this group

    • The name "get_xgr_multibundle_schema" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve canonical XGR MultiBundle schema.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_network_infoUse this when the user asks what XGR.Network, XGRChain or XDaLa is, or requests official XGR URLs, chain metadata, RPC, Explorer, MCP, testnet faucet, documentation, XRC standards,…No findings

    Why it is in this group

    • The name "get_xgr_network_info" says "get": a word for reading.
    Description, as the server wrote it
    Use this when the user asks what XGR.Network, XGRChain or XDaLa is, or requests official XGR URLs, chain metadata, RPC, Explorer, MCP, testnet faucet, documentation, XRC standards, source repositories or ecosystem entry points. Returns canonical project metadata and links; use get_chain_status for live chain state.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_session_start_schemaRetrieve canonical Workbench xgr-session-start@1 handoff schema.No findings

    Why it is in this group

    • The name "get_xgr_session_start_schema" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve canonical Workbench xgr-session-start@1 handoff schema.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_standard_exampleRetrieve a concrete JSON example for XRC-137 or XRC-729.No findings

    Why it is in this group

    • The name "get_xgr_standard_example" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve a concrete JSON example for XRC-137 or XRC-729.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_standard_referenceUse this before drafting XRC-137 or XRC-729 artifacts.No findings

    Why it is in this group

    • The name "get_xgr_standard_reference" says "get": a word for reading.
    Description, as the server wrote it
    Use this before drafting XRC-137 or XRC-729 artifacts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_standard_schemaRetrieve machine-readable JSON schema for XGR standards.No findings

    Why it is in this group

    • The name "get_xgr_standard_schema" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve machine-readable JSON schema for XGR standards.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xgr_starter_gas_optionsCheck whether free native XGR starter gas is available for a low-balance EVM address.No findings

    Why it is in this group

    • The name "get_xgr_starter_gas_options" says "get": a word for reading.
    Description, as the server wrote it
    Check whether free native XGR starter gas is available for a low-balance EVM address. Use this before deployments, session starts, contract calls or other on-chain actions when the address lacks gas. Returns the fixed 1 XGR grant policy and the tool to call next.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xrc_contractRead-only lookup of one indexed XRC contract by address.No findings

    Why it is in this group

    • The name "get_xrc_contract" says "get": a word for reading.
    Description, as the server wrote it
    Read-only lookup of one indexed XRC contract by address.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xrc_contract_eventsRead-only list of all indexed XRC events for one contract.No findings

    Why it is in this group

    • The name "get_xrc_contract_events" says "get": a word for reading.
    Description, as the server wrote it
    Read-only list of all indexed XRC events for one contract.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xrc_failure_statsRead-only invalid/failure statistics associated with an XRC-137 rule or XRC-729 OSTC/process filters.No findings

    Why it is in this group

    • The name "get_xrc_failure_stats" says "get": a word for reading.
    Description, as the server wrote it
    Read-only invalid/failure statistics associated with an XRC-137 rule or XRC-729 OSTC/process filters.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xrc_owner_summaryCompact read-only summary of XRC-137/XRC-729 assets and recent XRC events for an owner.No findings

    Why it is in this group

    • The name "get_xrc_owner_summary" says "get": a word for reading.
    Description, as the server wrote it
    Compact read-only summary of XRC-137/XRC-729 assets and recent XRC events for an owner.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xrc_usageRead-only usage statistics from Explorer PGRO tx_receipts for XRC-137 rules or XRC-729 OSTC/process filters.No findings

    Why it is in this group

    • The name "get_xrc_usage" says "get": a word for reading.
    Description, as the server wrote it
    Read-only usage statistics from Explorer PGRO tx_receipts for XRC-137 rules or XRC-729 OSTC/process filters.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xrc729_authorityRead-only authority lookup for one XRC-729 orchestration contract.No findings

    Why it is in this group

    • The name "get_xrc729_authority" says "get": a word for reading.
    Description, as the server wrote it
    Read-only authority lookup for one XRC-729 orchestration contract. Reads owner()/getOwner() and getExecutorList(), detects zero-address executor wildcard, and never signs, submits, executes, or creates a handoff.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_xrc729_ostc_stateRead-only list of indexed OSTC state entries for an XRC-729 contract.No findings

    Why it is in this group

    • The name "get_xrc729_ostc_state" says "get": a word for reading.
    Description, as the server wrote it
    Read-only list of indexed OSTC state entries for an XRC-729 contract.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_recent_operationsList recent offchain operation handoffs.No findings

    Why it is in this group

    • The name "list_recent_operations" says "list": a word for reading.
    Description, as the server wrote it
    List recent offchain operation handoffs. Secrets and browser execution tokens are never returned by this tool.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_wakeup_targets_by_addressUse this to list WAITING XDaLa runtime steps that the given wallet or Safe address is allowed to wake via RPC.No findings

    Why it is in this group

    • The name "list_wakeup_targets_by_address" says "list": a word for reading.
    Description, as the server wrote it
    Use this to list WAITING XDaLa runtime steps that the given wallet or Safe address is allowed to wake via RPC. This is read-only and calls xgr_listWakeupTargetsByAddress, then enriches public/plain XRC rule payload metadata via eth_call when available.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xdala_session_idsUse this when the user asks for session IDs.No findings

    Why it is in this group

    • The name "list_xdala_session_ids" says "list": a word for reading.
    Description, as the server wrote it
    Use this when the user asks for session IDs. Always returns session IDs grouped by owner because session IDs are only unique together with owner.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xdala_session_ownersUse this when the user asks which owners had XDaLa sessions, asks for the owner list, or when aggregate results show uniqueOwners but the concrete owner addresses are needed.No findings

    Why it is in this group

    • The name "list_xdala_session_owners" says "list": a word for reading.
    Description, as the server wrote it
    Use this when the user asks which owners had XDaLa sessions, asks for the owner list, or when aggregate results show uniqueOwners but the concrete owner addresses are needed. For “last 3 weeks”, pass windowHours=504.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xdala_sessionsUse this when the user asks to list XDaLa sessions, enumerate recent sessions, or discover owner/sessionId pairs.No findings

    Why it is in this group

    • The name "list_xdala_sessions" says "list": a word for reading.
    Description, as the server wrote it
    Use this when the user asks to list XDaLa sessions, enumerate recent sessions, or discover owner/sessionId pairs. This returns concrete owner + sessionId pairs and supports keyset pagination. For “last 3 weeks”, pass windowHours=504.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xgr_docsList canonical Markdown documentation topics served by the MCP knowledge base.No findings

    Why it is in this group

    • The name "list_xgr_docs" says "list": a word for reading.
    Description, as the server wrote it
    List canonical Markdown documentation topics served by the MCP knowledge base.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xgr_standard_examplesList available example artifacts for a standard.No findings

    Why it is in this group

    • The name "list_xgr_standard_examples" says "list": a word for reading.
    Description, as the server wrote it
    List available example artifacts for a standard.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xgr_standardsList agent-readable XGR and XDaLa standards available in the MCP knowledge base.No findings

    Why it is in this group

    • The name "list_xgr_standards" says "list": a word for reading.
    Description, as the server wrote it
    List agent-readable XGR and XDaLa standards available in the MCP knowledge base.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xrc_contractsRead-only list of indexed XRC-137/XRC-729 contracts globally or filtered by owner/type.No findings

    Why it is in this group

    • The name "list_xrc_contracts" says "list": a word for reading.
    Description, as the server wrote it
    Read-only list of indexed XRC-137/XRC-729 contracts globally or filtered by owner/type.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xrc_eventsRead-only list of XRC events globally or by owner, contract, type/action, tx hash, or block range.No findings

    Why it is in this group

    • The name "list_xrc_events" says "list": a word for reading.
    Description, as the server wrote it
    Read-only list of XRC events globally or by owner, contract, type/action, tx hash, or block range.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xrc_process_sessionsRead-only list of sessions associated with an XRC-729 OSTC id/hash.No findings

    Why it is in this group

    • The name "list_xrc_process_sessions" says "list": a word for reading.
    Description, as the server wrote it
    Read-only list of sessions associated with an XRC-729 OSTC id/hash.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_xrc729_contracts_by_executorRead-only Explorer lookup for active XRC-729 executor relations of one address.No findings

    Why it is in this group

    • The name "list_xrc729_contracts_by_executor" says "list": a word for reading.
    Description, as the server wrote it
    Read-only Explorer lookup for active XRC-729 executor relations of one address. This is index-backed, does not scan contracts, and returns Explorer pagination metadata.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • read_xrc137_rule_jsonRead-only eth_call to XRC137.getRule(), returning the runtime rule JSON string.No findings

    Why it is in this group

    • The name "read_xrc137_rule_json" says "read": a word for reading.
    Description, as the server wrote it
    Read-only eth_call to XRC137.getRule(), returning the runtime rule JSON string.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • read_xrc729_ostc_jsonRead-only eth_call to XRC729.getOSTC(ostcId), returning the runtime OSTC JSON string.No findings

    Why it is in this group

    • The name "read_xrc729_ostc_json" says "read": a word for reading.
    Description, as the server wrote it
    Read-only eth_call to XRC729.getOSTC(ostcId), returning the runtime OSTC JSON string.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • resolve_wakeup_payload_schemaUse this to resolve payload fields for one currently WAITING wake-up target.No findings

    Why it is in this group

    • The name "resolve_wakeup_payload_schema" says "resolve": a word for reading.
    Description, as the server wrote it
    Use this to resolve payload fields for one currently WAITING wake-up target. It reads XRC-729.getOSTC(step -> XRC-137) and XRC-137.getRule() via eth_call for plain JSON rules. Encrypted rules are not decrypted server-side.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • resolve_xrc729_process_graphResolve deployed XRC-729 OSTC runtime JSON and linked indexed XRC-137 rule contracts without mutating chain state.No findings

    Why it is in this group

    • The name "resolve_xrc729_process_graph" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve deployed XRC-729 OSTC runtime JSON and linked indexed XRC-137 rule contracts without mutating chain state.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_transactionsRead-only chain-wide Explorer DB transaction search.No findings

    Why it is in this group

    • The name "search_transactions" says "search": a word for reading.
    Description, as the server wrote it
    Read-only chain-wide Explorer DB transaction search. Use for general transaction, native XGR value, from/to address, hash, input, session id, validity/execution, and block/time-range questions; do not sample XDaLa sessions for chain-wide transaction questions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_xgr_transactionsFind indexed native-XGR transactions using time, value and address filters before choosing a transaction for Relation Graph or Value Flow analysis.No findings

    Why it is in this group

    • The name "search_xgr_transactions" says "search": a word for reading.
    Description, as the server wrote it
    Find indexed native-XGR transactions using time, value and address filters before choosing a transaction for Relation Graph or Value Flow analysis. Typical use: all native transfers in the last 24 hours above a given XGR/wei amount. Results are read-only and cursor-paginated for latest/oldest sorting.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • trace_xgr_value_flowRead-only native-XGR value-flow analysis starting from one transaction.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read-only native-XGR value-flow analysis starting from one transaction. Use model="possible" for conservative attribution ranges or model="proportional" for haircut attribution. Native XGR has no per-coin identity, so results are provenance models rather than proof that a specific coin moved. maxTransfers and maxHops accept a number or "all"; "all" is still bounded by Explorer server safety caps and reports truncation explicitly.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_xdala_blueprintValidate XRC-729 OSTC plus per-step XRC-137 payload-flow consistency.No findings

    Why it is in this group

    • The name "validate_xdala_blueprint" says "validate": a word for reading.
    Description, as the server wrote it
    Validate XRC-729 OSTC plus per-step XRC-137 payload-flow consistency.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_xdala_bundleAlias for validate_xgr_multibundle.No findings

    Why it is in this group

    • The name "validate_xdala_bundle" says "validate": a word for reading.
    Description, as the server wrote it
    Alias for validate_xgr_multibundle.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_xdala_rulesValidate rule expressions against available placeholder fields.No findings

    Why it is in this group

    • The name "validate_xdala_rules" says "validate": a word for reading.
    Description, as the server wrote it
    Validate rule expressions against available placeholder fields.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_xgr_multibundleValidate canonical deployable xgr-multi-bundle@1.No findings

    Why it is in this group

    • The name "validate_xgr_multibundle" says "validate": a word for reading.
    Description, as the server wrote it
    Validate canonical deployable xgr-multi-bundle@1.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_xgr_session_startValidate legacy low-level session-start payload only.No findings

    Why it is in this group

    • The name "validate_xgr_session_start" says "validate": a word for reading.
    Description, as the server wrote it
    Validate legacy low-level session-start payload only.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • validate_xrc137_authoringValidate a drafted XRC-137 authoring object.No findings

    Why it is in this group

    • The name "validate_xrc137_authoring" says "validate": a word for reading.
    Description, as the server wrote it
    Validate a drafted XRC-137 authoring object.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http xdala-workflow-builder https://mcp.xgr.network/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__xdala-workflow-builder__get_xgr_network_info",
      "mcp__xdala-workflow-builder__get_chain_status",
      "mcp__xdala-workflow-builder__get_latest_block",
      "mcp__xdala-workflow-builder__get_account_live_state",
      "mcp__xdala-workflow-builder__get_transaction_evidence",
      "mcp__xdala-workflow-builder__get_transaction_receipt",
      "mcp__xdala-workflow-builder__search_transactions",
      "mcp__xdala-workflow-builder__get_recent_value_transfers",
      "mcp__xdala-workflow-builder__get_account_transactions",
      "mcp__xdala-workflow-builder__get_block_transactions",
      "mcp__xdala-workflow-builder__get_transaction_stats",
      "mcp__xdala-workflow-builder__search_xgr_transactions",
      "mcp__xdala-workflow-builder__get_address_relation_graph",
      "mcp__xdala-workflow-builder__expand_address_relation_graph",
      "mcp__xdala-workflow-builder__trace_xgr_value_flow",
      "mcp__xdala-workflow-builder__get_relation_edge_transactions",
      "mcp__xdala-workflow-builder__get_session_transactions",
      "mcp__xdala-workflow-builder__get_session_status_live",
      "mcp__xdala-workflow-builder__list_wakeup_targets_by_address",
      "mcp__xdala-workflow-builder__resolve_wakeup_payload_schema",
      "mcp__xdala-workflow-builder__get_sessions_overview",
      "mcp__xdala-workflow-builder__find_latest_xdala_session",
      "mcp__xdala-workflow-builder__get_latest_session_payload",
      "mcp__xdala-workflow-builder__get_recent_xdala_sessions",
      "mcp__xdala-workflow-builder__list_xdala_session_owners",
      "mcp__xdala-workflow-builder__list_xdala_sessions",
      "mcp__xdala-workflow-builder__list_xdala_session_ids",
      "mcp__xdala-workflow-builder__get_xdala_session_detail",
      "mcp__xdala-workflow-builder__get_xdala_session_stats",
      "mcp__xdala-workflow-builder__get_xdala_session_timeseries",
      "mcp__xdala-workflow-builder__get_xdala_step_stats",
      "mcp__xdala-workflow-builder__get_xdala_payload_key_stats",
      "mcp__xdala-workflow-builder__get_xdala_payload_term_stats",
      "mcp__xdala-workflow-builder__get_xdala_payload_field_value_stats",
      "mcp__xdala-workflow-builder__get_xdala_active_sessions_timeseries",
      "mcp__xdala-workflow-builder__get_xdala_start_payload_history",
      "mcp__xdala-workflow-builder__get_session_receipt_logs",
      "mcp__xdala-workflow-builder__get_xgr_core_addresses",
      "mcp__xdala-workflow-builder__get_xgr_circulating_supply",
      "mcp__xdala-workflow-builder__get_xrc729_authority",
      "mcp__xdala-workflow-builder__find_startable_xdala_workflows",
      "mcp__xdala-workflow-builder__list_xrc_contracts",
      "mcp__xdala-workflow-builder__get_xrc_contract",
      "mcp__xdala-workflow-builder__list_xrc_events",
      "mcp__xdala-workflow-builder__get_xrc_contract_events",
      "mcp__xdala-workflow-builder__get_xrc729_ostc_state",
      "mcp__xdala-workflow-builder__get_xrc_owner_summary",
      "mcp__xdala-workflow-builder__read_xrc729_ostc_json",
      "mcp__xdala-workflow-builder__read_xrc137_rule_json",
      "mcp__xdala-workflow-builder__resolve_xrc729_process_graph",
      "mcp__xdala-workflow-builder__get_xrc_usage",
      "mcp__xdala-workflow-builder__list_xrc_process_sessions",
      "mcp__xdala-workflow-builder__find_reusable_xrc137_rules",
      "mcp__xdala-workflow-builder__get_unused_xrc137_rules",
      "mcp__xdala-workflow-builder__get_xrc_failure_stats",
      "mcp__xdala-workflow-builder__list_xrc729_contracts_by_executor",
      "mcp__xdala-workflow-builder__get_operation_status",
      "mcp__xdala-workflow-builder__get_xdala_bundle_deploy_handoff",
      "mcp__xdala-workflow-builder__get_xdala_bundle_deploy_result",
      "mcp__xdala-workflow-builder__get_xdala_session_start_handoff",
      "mcp__xdala-workflow-builder__get_xdala_session_start_result",
      "mcp__xdala-workflow-builder__list_recent_operations",
      "mcp__xdala-workflow-builder__get_xdala_process_mermaid",
      "mcp__xdala-workflow-builder__list_xgr_standards",
      "mcp__xdala-workflow-builder__list_xgr_docs",
      "mcp__xdala-workflow-builder__get_xgr_doc",
      "mcp__xdala-workflow-builder__get_xdala_authoring_rules",
      "mcp__xdala-workflow-builder__get_xgr_standard_reference",
      "mcp__xdala-workflow-builder__get_xgr_standard_schema",
      "mcp__xdala-workflow-builder__list_xgr_standard_examples",
      "mcp__xdala-workflow-builder__get_xgr_standard_example",
      "mcp__xdala-workflow-builder__get_xgr_multibundle_reference",
      "mcp__xdala-workflow-builder__get_xgr_multibundle_schema",
      "mcp__xdala-workflow-builder__get_xgr_session_start_schema",
      "mcp__xdala-workflow-builder__validate_xgr_session_start",
      "mcp__xdala-workflow-builder__validate_xgr_multibundle",
      "mcp__xdala-workflow-builder__validate_xdala_bundle",
      "mcp__xdala-workflow-builder__validate_xrc137_authoring",
      "mcp__xdala-workflow-builder__validate_xdala_rules",
      "mcp__xdala-workflow-builder__validate_xdala_blueprint",
      "mcp__xdala-workflow-builder__get_xgr_starter_gas_options"
    ],
    "ask": [
      "mcp__xdala-workflow-builder__trace_xgr_transaction",
      "mcp__xdala-workflow-builder__estimate_xdala_rule_gas",
      "mcp__xdala-workflow-builder__create_operation_handoff",
      "mcp__xdala-workflow-builder__create_xdala_bundle_deploy_handoff",
      "mcp__xdala-workflow-builder__create_xdala_session_start_handoff",
      "mcp__xdala-workflow-builder__validate_xgr_session_start_handoff",
      "mcp__xdala-workflow-builder__get_xgr_purchase_options",
      "mcp__xdala-workflow-builder__quote_xgr_purchase",
      "mcp__xdala-workflow-builder__create_xgr_purchase_order",
      "mcp__xdala-workflow-builder__create_xgr_purchase_order_by_budget",
      "mcp__xdala-workflow-builder__request_xgr_starter_gas"
    ],
    "deny": [
      "mcp__xdala-workflow-builder__cancel_operation_handoff",
      "mcp__xdala-workflow-builder__cancel_xdala_bundle_deploy_handoff",
      "mcp__xdala-workflow-builder__cancel_xdala_session_start_handoff"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as xdala-workflow-builder. Review it before you use it.