{"id":1475130,"recorded_at":"2026-10-31T02:19:56.209064Z","observed_at":"2026-10-31T02:19:56.209020Z","subject_kind":"endpoint","subject":"5b2f0926-cfbc-4ca4-8434-87e4a0b64c0a","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":1,"tools":[{"description":"Use this before an agent or wallet signs a Solana transaction. Decodes the unsigned or signed transaction and returns NO_MATCH (no known-bad pattern matched; not a safety guarantee), WARN, or BLOCK, with plain-language reasons and a signed receipt. Pass an x402 quote to also check a payment transaction against it (overpay, approve-instead-of-transfer, unchecked Transfer, wrong payee). Errors return ERROR and are never charged. Price $0.009 USDC (x402, Solana).","inputSchema":{"properties":{"cap_base_units":{"description":"Hard per-payment cap enforced even if the quote asks for more.","type":"integer"},"caps":{"description":"Optional spend caps you declare; any violation returns BLOCK. Keys: max_amount (int base units per outflow), max_amounts ({mint|'SOL': int}), max_total (int per asset), allowed_payees ([pubkey]; owners' ATAs match), allowed_assets ([mint|'SOL']), allow_approvals (bool, default false).","type":"object"},"known_addresses":{"description":"Optional: pubkeys you have recently paid or received from. A recipient that only looks like one of these (same first/last characters) is flagged as address poisoning.","items":{"type":"string"},"maxItems":200,"type":"array"},"quote":{"description":"x402 quote the tx pays: {asset, amount, pay_to | pay_to_token_account, decimals?, token_program?}.","type":"object"},"simulate":{"description":"Simulate against Solana mainnet (Helius RPC, sigVerify off, recent blockhash replaced, never submitted). Default true; false = static checks only. If simulation fails the verdict is at least WARN, except plain System/Token/ATA/ComputeBudget/Memo transactions with no unresolved lookup tables, which are fully decoded statically. Third-party unlimited approvals BLOCK by default. Response includes risk_score (0-100), basis (simulated|static) and top_reason.","type":"boolean"},"strict":{"description":"Escalate HIGH-risk token approvals (unlimited or third-party delegate) from WARN to BLOCK. Default false.","type":"boolean"},"tx":{"description":"Base64 wire transaction (also accepts an RPC getTransaction result).","type":"string"},"wallet":{"description":"Your own pubkey; only this key is treated as 'you'.","type":"string"}},"required":["tx"],"type":"object"},"name":"shield_guard_check"}]},"body_sha256":"9f3010dc102be4ede82c5da3ee6fd5999c033034344371379827258dcd422a65","prev_id":null,"leaf":"0x970b9a47d1c73c2793b0936d2a530ba3e7d121771fab5e8e7f27bbe1a5321887","leaf_text":"{\"body\":\"9f3010dc102be4ede82c5da3ee6fd5999c033034344371379827258dcd422a65\",\"id\":1475130,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793413196209020,\"prev\":null,\"subject\":\"5b2f0926-cfbc-4ca4-8434-87e4a0b64c0a\",\"subject_kind\":\"endpoint\"}","day":null,"proof":[]}