Skip to main content
Glama

Falcon Shield: check a Solana tx before signing

shield_guard_check

Use this before an agent or wallet signs a Solana transaction. Decodes the unsigned or signed transaction and returns NO_MATCH (no known-bad pattern matched; not a safety guarantee), WARN, or BLOCK, with plain-language reasons and a signed receipt. Pass an x402 quote to also check a payment transaction against it (overpay, approve-instead-of-transfer, unchecked Transfer, wrong payee). Errors return ERROR and are never charged. Price $0.009 USDC (x402, Solana).

Input Schema

NameRequiredDescriptionDefault
txYesBase64 wire transaction (also accepts an RPC getTransaction result).
capsNoOptional spend caps you declare; any violation returns BLOCK. Keys: max_amount (int base units per outflow), max_amounts ({mint|'SOL': int}), max_total (int per asset), allowed_payees ([pubkey]; owners' ATAs match), allowed_assets ([mint|'SOL']), allow_approvals (bool, default false).
quoteNox402 quote the tx pays: {asset, amount, pay_to | pay_to_token_account, decimals?, token_program?}.
strictNoEscalate HIGH-risk token approvals (unlimited or third-party delegate) from WARN to BLOCK. Default false.
walletNoYour own pubkey; only this key is treated as 'you'.
simulateNoSimulate against Solana mainnet (Helius RPC, sigVerify off, recent blockhash replaced, never submitted). Default true; false = static checks only. If simulation fails the verdict is at least WARN, except plain System/Token/ATA/ComputeBudget/Memo transactions with no unresolved lookup tables, which are fully decoded statically. Third-party unlimited approvals BLOCK by default. Response includes risk_score (0-100), basis (simulated|static) and top_reason.
cap_base_unitsNoHard per-payment cap enforced even if the quote asks for more.
known_addressesNoOptional: pubkeys you have recently paid or received from. A recipient that only looks like one of these (same first/last characters) is flagged as address poisoning.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / properties / simulate / description
      Previous value: -"Simulate against Solana mainnet (Helius RPC, sigVerify off, recent blockhash replaced, never submitted). Default true; false = static checks only. If simulation fails the verdict is at least WARN, never NO_MATCH."New value: +"Simulate against Solana mainnet (Helius RPC, sigVerify off, recent blockhash replaced, never submitted). Default true; false = static checks only. If simulation fails the verdict is at least WARN, except plain System/Token/ATA/ComputeBudget/Memo transactions with no unresolved lookup tables, which are fully decoded statically. Third-party unlimited approvals BLOCK by default. Response includes risk_score (0-100), basis (simulated|static) and top_reason."
  2. First observed

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden and does so: NO_MATCH is explicitly caveated as not a safety guarantee, errors return ERROR and are never charged, and the price is disclosed. It further gives simulation semantics (default true, failure escalates to WARN) and default BLOCK behavior for third-party unlimited approvals.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the essential usage and verdict semantics in the opening sentences, then adds quote behavior and pricing. Dense but no filler; the pricing sentence is the only item that could arguably be shortened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 8-parameter tool with nested objects and no output schema, the description explains the verdict scale, receipt, risk_score/basis/top_reason fields, error behavior, and cost. It stops short of detailing receipt contents or ERROR conditions in depth, but the schema fully documents every parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3, but the description adds real meaning by explaining what passing an x402 quote enables (overpay, approve-instead-of-transfer, unchecked Transfer, wrong payee checks) and that tx supports unsigned or signed wire transactions. Other parameters are left entirely to the already-complete schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: decodes a Solana transaction and returns NO_MATCH/WARN/BLOCK verdicts before signing. The concrete return values and receipt output leave no ambiguity about what the tool does, and there are no siblings to confuse it with.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says to use it before an agent or wallet signs a Solana transaction, which is a clear triggering condition. It also explains the optional quote-driven payment check, though it does not state when *not* to use it or name alternatives (none exist here).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources