quai-mcp-server
quai-mcp-server
Quai Networkのチェーンデータと読み取り専用の操作ツールを、Claude DesktopやClaude CodeのようなAIクライアントに公開するMCP(Model Context Protocol)サーバーです。公式の@modelcontextprotocol/sdkと、Quaiのethers風SDKであるquaisを使用して構築されています。
Quai Networkとは何か(平易な言葉で)
Quaiは、プルーフ・オブ・ワーク(PoW)方式でEVM互換のレイヤー1であり、シャーディングによってスケールします。1つのチェーンがすべての処理を行う代わりに、階層構造に配置された多数のチェーンに分割されます。
Prime chain (1)
/ | \
Region Region Region <- "Cyprus", "Paxos", "Hydra"
/ | \ / | \ / | \
Zone Zone Zone ... 9 Zone chains totalPrimeは単一の最上位チェーンです。すべてのマイナーがPrimeをマイニングし、ネットワーク全体の状態を確定させますが、ユーザートランザクションを直接処理することはありません。
Regionチェーン(現在はCyprus、Paxos、Hydra)はPrimeの下に位置し、自身のZoneを集約します。
Zoneチェーン(Cyprus1/2/3、Paxos1/2/3、Hydra1/2/3 — 現在は9つ、ネットワークの成長に応じて追加可能)は、実際のEVMが存在する場所です。ユーザートランザクション、コントラクト、残高など、すべてがここにあります。
データとともにセキュリティも分割するシャーディング設計とは異なり、Quaiは階層全体でセキュリティを統一し、データ/スループットのみを分割します。PrimeチェーンとRegionチェーンは、その下のZoneとマージマイニングを行います。
ツールにとって最も重要な点は、すべてのQuaiアドレスが位置情報を認識することです。アドレス自体のバイト列に、それが属する単一のZone(および、EthereumのようなアカウントベースのQUAI台帳か、BitcoinのようなUTXOベースのQi台帳のどちらにあるか)がエンコードされています。Cyprus1上のアドレスはCyprus1にのみ存在し、Paxos2に問い合わせることはできません。そのため、以下のツールのいくつかは、Zoneを自動的に解決するか、明示的に指定するよう求めます。
Related MCP server: QuickContract MCP
ツール
読み取り専用
Tool | What it does |
| QUAI残高をアドレスから取得します。Zoneはアドレスから自動的に解決されます。 |
| 番号/ハッシュ/タグによるブロック詳細。ブロック番号はチェーン間でグローバルに一意ではないため、シャード/ゾーンの指定が必要です。 |
| ハッシュによるトランザクションとレシート。どのゾーンに着地したかも含みます。 |
| アドレスを指定すると、そのゾーン、リージョン、台帳(Quai vs Qi)を報告します。ネットワーク呼び出しはありません。 |
| 読み取り専用の |
| Quaiドキュメントの厳選されたオフラインインデックスを検索し、スニペットとリンクを返します。 |
| QUAIとQi(Quai独自の2つのネイティブ台帳)間の変換レートを提示します。これはQuaiの組み込みの「スワップ」であり、サードパーティのDEXではありません(Quaiで確認されているものは知られていません)。 |
これらのいずれも、資金を移動したり、署名したり、オンチェーン状態を変更したりすることはできません。
ウォレット(カストディアル:暗号化、名前付き、パスワード保護)
Tool | What it does |
| 新しいQUAI台帳の秘密鍵とアドレスを生成し、選択したゾーン(デフォルトは |
| 既に所有しているQUAI台帳の秘密鍵に対して、同じ暗号化ストレージを使用します。 |
| 新しいQi台帳(UTXOベース)ウォレットを生成します。Qiは単一の鍵ペアではなく、アドレス導出とUTXOスキャンが必要なため、ニーモニック付きのHDウォレットです。同じ方法で暗号化されます。 |
| 既に所有しているQiのニーモニックフレーズに対して、同じ暗号化ストレージを使用します。 |
| 保存されている両方の種類のウォレット(名前、台帳、アドレス、ゾーン)を一覧表示します。パスワードは不要です。Qi残高の送金や確認にのみ必要です。 |
| 保存されているQUAIウォレットからQUAIに署名して送信します。2段階の確認(下記参照)。送信者と受信者が異なるゾーンにいる場合があります。これは外部トランザクション(ETX)であり、ネットワークが自動的に処理します。受信者がQiアドレスの場合、これはQUAI→Qi変換パスを兼ねます(下記参照)。 |
| Qiウォレットの合計残高と使用可能残高を取得します。パスワードが必要です。下記の「なぜQiにパスワードが必要か」を参照してください。 |
| Qiウォレットに保持されているQiをQUAIに変換し、QUAIアドレスに送信します。2段階の確認で、 |
| Qiウォレットの再利用可能なBIP-47ペイメントコードを取得します。これは、誰かがあなたに |
| Qiウォレットから受信者のペイメントコード(通常のアドレスではない)にQiを送信します。下記の「Qi → Qi送信」を参照してください。2段階の確認で、他の書き込みツールと同じパターンです。 |
このサーバーは、ウォレットを作成またはインポートすると、あなたの代わりに鍵を保持します。これは、gethキーストアやMetaMaskのローカルボールトと同じように、狭い意味でのローカルなカストディアルです。他の人の資金のためのホステッドサービスとして動作するものではありません。すべてはサーバーが実行されているマシン上のディレクトリに保存され、あなただけが知っているパスワードで暗号化されます。
暗号化の仕組み: 各ウォレットは、標準のWeb3 Secret Storage (V3 keystore)形式の秘密鍵です。これはgethやMetaMaskが使用するのと同じ形式で、quaisのencryptKeystoreJsonを介して使用されます。具体的には、パスワードはscrypt(N=2^17, r=8, p=1、標準の「高コスト」パラメータ。これにより、パスワード推測が意図的に遅くなります)でストレッチされ、秘密鍵はAES-128-CTRで暗号化され、暗号文に対するMACが、鍵素材が導出される前に誤ったパスワード(または改ざんされたファイル)を検出します。これはよくレビューされ、広く展開されている方式であり、ここに独自の暗号はありません。
ウォレットの保存場所: デフォルトでは~/.quai-mcp-server/wallets/(QUAI_WALLET_DIRで上書き可能)です。QUAIウォレットは<name>.json、Qiウォレットは<name>.qi.jsonとして保存されます。ディレクトリは0700、各キーストアファイルは0600(所有者のみ読み書き可能、非POSIXプラットフォームではベストエフォート)で作成され、作成後に明示的に強制されます(プロセスのumaskに任せるだけではありません)。アドレスはどちらの場合も平文で保存されます(公開情報であり、list_walletsやQUAI側のプレビューがパスワードなしで機能するのはそのためです)。しかし、秘密鍵(Qiの場合はニーモニック)は、どのツールによっても平文で書き込まれたり、ログに記録されたり、返されたりすることはありません。
命名: 名前は、最大で1つのQUAIウォレットと最大で1つのQiウォレットを識別します。これらは独立したキーストア(異なるファイル、異なる秘密、完全に無関係な鍵素材)であり、たまたま同じラベルを共有しているだけです。同じ名前で2つのQUAIウォレット(または2つのQiウォレット)を作成することはできませんが、QUAIウォレットの名前をQiウォレットに再利用することは、まさにcreate_walletのペアリングが機能する方法であり、create_qi_wallet/import_qi_walletは同じ理由で意図的にそれを許可しています。
Qiウォレットは内部的にはHDウォレットですが、このサーバーはニーモニックのみを保存します — 導出されたアドレスツリーやUTXO/スキャン状態は決して保存しません。create_qi_wallet/import_qi_walletは、QUAI側とまったく同じencryptKeystoreJson呼び出しを介して{address, privateKey, mnemonic}を暗号化します(そこでのaddress/privateKeyフィールドは、ウォレットの最初に導出されたアドレスに過ぎず、ファイルが通常の有効なV3キーストアであるために存在します)。意味のある秘密はニーモニックです。その後のすべての操作(get_qi_balance、convert_qi_to_quai)は、そのニーモニックから新しいQiHDWalletを再構築し、要求に応じて同じ受信アドレスを再導出します。これは決定論的です。固定のアカウント/ゾーンに対するHD導出は常に同じアドレスを生成するためです。これは直接検証されています。ウォレットのニーモニックをエクスポートし、別の名前で再インポートすると、同一のアドレスが再現されました。トレードオフとして、すべてのQi操作はキャッシュを読み取るのではなくゼロから再導出するため、推論が簡単で、ニーモニックが実際に意味するものから逸脱することはありませんが、QUAI側よりも頻繁にパスワードが必要になります(下記参照)。
なぜQiの方がパスワードをより頻繁に必要とするのか: QUAIのget_balanceは公開アカウント残高をチェーンから直接読み取るだけなので、秘密情報は不要です。Qiにはそのようなものはありません。「残高」とは、ウォレットのニーモニックだけが導出できるアドレスに属する未使用トランザクション出力(UTXO)の合計であり、それを計算するということはそもそもウォレットを再構築することを意味します。だからこそget_qi_balanceはパスワードを必要とし(QUAIのget_balanceは必要としない)、convert_qi_to_quaiのプレビュー手順では換算レートを提示できても、実際に支払いに足りるQiを持っているかどうかは確認できないのです。その確認は、パスワードが確認手順に届いた時点でのみ行われます。
パスワードのルール: 最低8文字で、何かを暗号化する前にチェックされます。誤ったパスワードの試行に対する独立したレート制限はありません。scryptのコストパラメータが各推測を計算上高価なものにしており、これがこの種のローカルキーストアに対する標準的な防御です。
send_transaction、convert_qi_to_quai、send_qiの確認フロー: 3つすべて常に2回の呼び出しを必要とし、パスワードが必要なのは2回目だけです。
宛先と金額を指定して呼び出します(
send_transactionの場合はwalletName/to/amount、send_qiの場合はwalletName/recipientPaymentCode/amount/destinationZone、convert_qi_to_quaiの場合はtoに相当する形)— まだパスワードは不要です。何もブロードキャストされません。プレビューが返ってきます — 解決済みのゾーン、存在する場合は見積もり(送金の場合はガス、変換の場合は換算後の金額、send_qiには1:1の転送なので見積もりなし)、そして2分間有効なconfirmationTokenです。同じパラメータに加えて、
confirm: true、そのconfirmationToken、そしてウォレットのpasswordを指定してもう一度呼び出します。この時点で初めてキー/ニーモニックが復号され、トランザクションが実際に署名され送信されます。
トークンは一度きりで、プレビューされた正確なパラメータに紐づいています。何かが変更された場合、トークンが期限切れになった場合、または既に使用された場合、ステップ2は明確なエラーで失敗し、再度プレビューすることになります。これはMCPクライアント自体にツール承認UIがあるかどうかに関係なく同じように機能するため、クライアントが提供することに依存するのではなく、実際のゲートとなります。誤ったパスワードは、トークン/パラメータがそれ以外に有効かどうかを漏らすことなく、きれいに失敗します(Incorrect password for wallet "...")。
意図的にexport_wallet/「秘密鍵またはニーモニックを表示」ツールはありません。秘密情報がストアに入ったら、このサーバーを通じて外に出る唯一の方法は、それを使って署名することです。
QUAI ↔ Qi変換(「スワップ」): Quaiには、2つの台帳(アカウントベースのQUAIと、BitcoinのようなUTXOベースのQi)の間でのネイティブなプロトコルレベルの変換があり、オンチェーンの為替レートを持ちます。サードパーティのDEXではありません。get_conversion_rateはどちらの方向でも見積もりを提供し、ウォレットは不要です。両方向の実行が実装されています:
QUAI → Qi: Qi台帳のアドレス(例:
create_qi_walletで作成したもの)への通常のsend_transactionに過ぎません。ツールはこれを自動的に検出し(プレビューでisConversion: true)、通常のガス/残高情報とともに受け取るQiの見積もりを表示します。Qi → QUAI:
convert_qi_to_quai。内部でquaisのQiHDWallet.convertToQuaiを使用し、send_transactionと同じプレビュー/確認/パスワードのパターンに従います。
Qi → Qi送金: Qiウォレットは互いのアドレスに直接送金しません。代わりに、各Qiウォレットには再利用可能なBIP-47ペイメントコード(get_qi_payment_code)があります。アドレスを共有するのと同じようにこれを共有しますが、プライバシーのために毎回の支払いでそこから新しいワンタイムアドレスが導出されます。送金するには、送信者が受信者のペイメントコードで「チャネルを開きます」(send_qiがこれを自動的に行います)— これは2つのペイメントコード間の純粋にローカルなECDHであり、決定的で再現可能で、オンチェーンアクションや永続化された状態は関与しません。問題は受信側にあります。それらのペアごとに導出されたアドレスは、ウォレットの通常の決定的アドレスシーケンスの一部ではないため、明示的に探すように指示しない限り、その方法で送られた資金は何も見つかりません。具体的には: 誰かがペイメントコード経由でQiウォレットに支払った後、その相手のペイメントコードをget_qi_balanceのcounterpartyPaymentCodesに渡します。すると同じチャネルが開かれ、残高に含まれます。ペイメントコードの支払いが届いたことを受信者に知らせる通知メカニズム(オンチェーンまたはその他)はありません。両者は帯域外で既に互いを知っている必要があります。これは、残高を確認する前にアドレスを知っている必要があるのと同じです。send_qiはクロスゾーン送金(送信者自身のゾーンとは別のdestinationZone)もサポートしており、send_transactionのETXやQiHDWallet自身のゾーンモデルと同じ方法です。
既知の粗いエッジが1つあります: send_qiのプレビュー手順はペイメントコードの形式を事前に検証しません(照合するためのエクスポートされたバリデータがないため)。そのため、不正な形式のコードはプレビューでは問題なく表示され、確認時にのみ失敗します — 安全に(何も送信されず、資金が危険にさらされることもありません)、ただ理想よりも遅いだけです。
まだ実装されていません: deploy_contract、request_faucet。
ここでテストされた内容についての正直な説明(更新版): 完全なsend_qi / ペイメントコードのループは、2つの実在するウォレットでメインネットに対してライブで検証されました。実際の正しい形式のBIP-47ペイメントコード(PM8T...)が生成され、呼び出し間で決定的であることが確認され、プレビューはクロスゾーンと同一ゾーンを正しく検出し、空のウォレットに対する確認はクラッシュする代わりに本物のSDKエラー(No Qi available in zone)で失敗し、get_qi_balanceは無効なカウンターパーティのペイメントコードをrejectedPaymentCodesに正しく分離し、呼び出し全体を失敗させることはありませんでした。このドキュメントの他のすべての場所と同じ理由で、まだ未検証なのは、資金のある2つのウォレット間で実際のペイメントコード送金が完了することです。これは実際のQiを必要とし、依頼なしには行われなかったためです。
ここでテストされた内容についての正直な説明: 上記のすべてはライブのメインネットに対して実行されました。決定性チェック(Qiウォレットのニーモニックをエクスポートし、別の名前で再インポートすると同一のアドレスが再現された)と実際のエラーパス(誤ったパスワード、QUAIガス不足、そして空のQiウォレットから変換しようとした際の実際のQiHDWalletエラー — No Qi available in zone)を含みます。まだ実行されていないのは、実際の資金を保有するウォレットに対してconvert_qi_to_quaiまたはQUAI→Qi変換が実際に完了することです。これは実際の資金の支出を必要とし、依頼なしには行われなかったためです。
インストール
npm install
npm run buildまたは、公開後にインストールせずに直接実行:
npx quai-mcp-server要件
Node.js 18+
設定(環境変数)
すべてオプション — デフォルトはQuaiメインネットを指します。
変数 | デフォルト | 目的 |
|
|
|
|
|
|
|
| 暗号化されたウォレットキーストアファイルが保存される場所。 |
すべてのツールは呼び出しごとにnetwork引数("mainnet"または"testnet")も受け入れるため、クライアントはサーバーを再起動せずにどちらのネットワークでも照会できます。
キーについて: 上記の「ウォレット」を参照してください。キーは、それらを必要とするcreate_wallet/import_wallet/send_transaction呼び出しの間だけ、メモリ内で平文として存在します。ディスク上には決して存在せず、ログにも記録されません。QUAI_WALLET_DIR(およびこのサーバーを実行するマシン)は、他のローカル秘密ストアと同様に扱ってください。そのディレクトリへのファイルシステムアクセスと、弱いパスワードを総当たりするのに十分な計算能力を持つ者は誰でも、ローカルのgethキーストアやMetaMaskボールトと同じように、最終的にウォレットを復号できます。
Claude Desktopに登録
これをClaude DesktopのMCP設定(claude_desktop_config.json — macOSの場合: ~/Library/Application Support/Claude/claude_desktop_config.json)に追加します:
{
"mcpServers": {
"quai": {
"command": "npx",
"args": ["quai-mcp-server"]
}
}
}または、公開パッケージを使用する代わりにこのリポジトリをローカルでクローンしてビルドした場合:
{
"mcpServers": {
"quai": {
"command": "node",
"args": ["/absolute/path/to/quai-mcp-server/dist/index.js"]
}
}
}デフォルトでテストネットを指すようにするには、envブロックを追加します:
{
"mcpServers": {
"quai": {
"command": "npx",
"args": ["quai-mcp-server"],
"env": {
"QUAI_TESTNET_RPC_URL": "https://orchard.rpc.quai.network"
}
}
}
}(その後、個々のツール呼び出しで"network": "testnet"を渡します — 環境変数はエンドポイントを設定し、呼び出しごとのデフォルトネットワークは設定しません)。
Claude Codeに登録
claude mcp add quai -- npx quai-mcp-serverまたは、ローカルビルドの場合:
claude mcp add quai -- node /absolute/path/to/quai-mcp-server/dist/index.js開発
npm run dev # tsc --watch
npm run build # one-shot build to dist/
npm start # run the built server directly (stdio) -- mainly useful for manual smoke testsサーバーはv1ではstdio経由でのみMCPを話します。HTTPトランスポートはありません。
設計ノート
生のRPCではなくquais: すべてのツールは、手書きの
eth_/quai_JSON-RPC呼び出しではなく、quaisSDKのJsonRpcProvider、Contract、およびアドレスユーティリティを経由するため、ゾーン解決、レスポンス形式、エラー形状はQuaiエコシステムの他の部分と一貫性を保ちます。1つのプロバイダ、多数のゾーン: ベースゲートウェイURL(例:
https://rpc.quai.network)を指す単一のJsonRpcProviderが、Primeチェーンからアクティブなゾーンを自動検出し、各呼び出しを正しいゾーンにルーティングします。ほとんどのツールはゾーンごとのURLを構築しません。カスタム暗号ではなく標準ツールによる管理: ウォレットは、
quaisによるEthereum V3キーストア形式(scrypt + AES-128-CTR + MAC)の実装を使用して保存されます。これはgethとMetaMaskが使用するのと同じ、よくレビューされた方式であり、手作りのものではありません。完全なモデルについては上記の「ウォレット」を参照してください。エラーはスタックトレースではなくテキスト: RPC/コントラクトエラーは捕捉され、生の例外オブジェクトをモデルに漏らす代わりに、短く具体的なメッセージ(例: "Contract call reverted: ..."、"Insufficient funds: ..."、"Incorrect password for wallet..."、"not a validly checksummed Quai address")に書き換えられます。
確認はクライアントのヒントではなく実際のゲート: 書き込みツールは
readOnlyHint: false(送信の場合はdestructiveHint: true)で注釈付けされているため、独自の承認UIを持つMCPクライアントはそれを表示しますが、send_transactionはさらに独自のプレビュー → トークン → パスワードのハンドシェイクをサーバー側で強制します(トークンはsrc/confirmations.ts、パスワードはsrc/walletStore.ts+decryptKeystoreJson)。そのため、承認UIがまったくないクライアントから呼び出しても安全です。パスワードは最後の瞬間に一度だけ必要: 送金のプレビューは、ウォレットのアドレスをキーストアファイルの暗号化されていない部分から直接解決し、
VoidSigner(ガスを見積もれるが署名はできないquaisサイナー)を使用してコストを見積もります。復号もパスワードも不要です。最終的なconfirm: true呼び出しだけがキーを復号し、それもその1回の呼び出しの間だけです。ETXは別のコードパスではない: 別のゾーンのアドレスへの送信は、同一ゾーン内の送信とまったく同じ
send_transaction呼び出しを使用します。署名されたトランザクションが送信者のゾーンに到達すると、Quaiのネットワークがクロスゾーンルーティング(外部トランザクションとして)を透過的に処理します。ツールは関与するゾーンを検出して報告するだけで、呼び出し側が何を期待すべきかを把握できます。Qiウォレットは意図的に呼び出し間でステートレス:
create_qi_wallet/import_qi_walletはニーモニックを暗号化するだけです。get_qi_balanceとconvert_qi_to_quaiは、キャッシュされたアドレス/UTXO状態を読み取るのではなく、呼び出しごとにQiHDWalletをゼロから再構築し、そのアドレスを再導出します(src/qiWallet.ts)。読み取るべき状態は存在しません。これは、少しのパフォーマンス(すべてのQi操作がキャッシュにヒットするのではなく再導出と再クエリを行う)を、よりシンプルで間違いにくいセキュリティストーリーと交換したものです。静止状態で存在するのは、重要ないくつかの秘密だけです。
Available Tools
17 toolscall_contractCall Quai Contract (Read-Only)ARead-only
Perform a read-only call (an eth_call equivalent) against a deployed EVM contract on Quai Network and return the decoded result. Provide the contract address, an ABI fragment array containing at least the method being called, the method name, and its arguments. The zone is resolved automatically from the contract address. This never sends a transaction, spends gas, or requires a key -- it works for view/pure methods, and simulates (without broadcasting) state-changing ones. It cannot actually change on-chain state; for that, the not-yet-available send_transaction tool will be needed.
| Name | Required | Description | Default |
|---|---|---|---|
| abi | Yes | An ABI fragment array containing (at least) the function being called. Both JSON ABI objects and human-readable ABI strings (e.g. "function balanceOf(address) view returns (uint256)") are accepted as array elements. | |
| args | No | Arguments to pass to the method, in order. Pass large integers (e.g. token amounts) as strings to avoid precision loss. | |
| method | Yes | The name of the method to call. | |
| address | Yes | The contract address to call, e.g. 0x00... | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint and openWorldHint, but the description adds significant behavior beyond them: it never spends gas, never requires a key, simulates without broadcasting state-changing calls, and returns decoded results. This is rich, non-redundant context that helps the agent predict side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, then the required inputs, then behavioral caveats and the alternative. Every sentence adds value; there is no filler or repetition of schema content beyond what is necessary for clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only call tool with 5 parameters and no output schema, the description covers purpose, input requirements, behavior, limitations, and the alternative tool. It even notes that state-changing calls are simulated rather than broadcast, which fully prepares the agent for expected outcomes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds meaningful guidance: it tells the user to provide the address, an ABI fragment array containing at least the method, the method name, and arguments. It also clarifies that zone resolution is automatic, which indirectly explains the network parameter's role.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Perform a read-only call (an eth_call equivalent) against a deployed EVM contract on Quai Network and return the decoded result.' It distinguishes itself from siblings by explicitly contrasting with the not-yet-available send_transaction tool and clarifying it cannot change state.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance: it works for view/pure methods and simulates state-changing ones, but cannot change on-chain state. It names the alternative tool (send_transaction) for state changes, and notes the zone is resolved automatically so users don't need a zone-resolution step.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
convert_qi_to_quaiConvert Qi to QUAI (Two-Step Confirmation)ADestructive
Convert Qi held in a wallet created with create_qi_wallet/import_qi_wallet into QUAI, sent to a QUAI-ledger address. This is the other half of Quai's native ledger swap (see get_conversion_rate and send_transaction's QUAI -> Qi path). Same two-step pattern as send_transaction: first call without "confirm" for a rate-quote preview (no password needed yet); then again with confirm: true, the same confirmationToken, and the wallet's password to actually spend. The preview cannot verify the wallet's Qi balance without the password (Qi requires reconstructing the wallet to check), so a confirm may still fail with insufficient funds even after a clean preview -- that failure is reported plainly, nothing is lost or retried silently.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Destination QUAI-ledger address to receive the converted amount. | |
| amount | Yes | Amount to convert, in Qi (e.g. "0.5"), not Qit. | |
| confirm | No | Set true only on the second call, together with confirmationToken and password, to actually convert. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | No | The Qi wallet's password. Required only on the confirm: true call. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. | |
| confirmationToken | No | The token returned by the initial preview call. Required when confirm is true. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as mutating and destructive, but the description adds substantial behavioral detail: the preview call needs no password, the preview cannot verify Qi balance because of wallet reconstruction, and a confirm may fail with insufficient funds after a clean preview with the failure reported plainly and no silent retry. This goes well beyond the annotations and matches them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four dense sentences, each earning its place: core action, sibling relationship, two-step flow, and a critical failure caveat. The description is front-loaded with the purpose and then layers usage and risk information efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description provides prerequisites (wallet must come from create_qi_wallet/import_qi_wallet), the two-step invocation pattern, the need for confirmationToken and password, and the possible late insufficient-funds failure. An agent has effectively all the contextual information needed to invoke this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds a temporal dimension beyond isolated property descriptions, linking confirm, confirmationToken, and password into the two-step flow and clarifying that the first call omits confirm. It reinforces that amount is in Qi, though the schema already states this.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Convert'), resource ('Qi held in a wallet created with create_qi_wallet/import_qi_wallet'), and target ('a QUAI-ledger address'). It also distinguishes itself from siblings by explicitly naming itself 'the other half of Quai's native ledger swap' and pointing to the reverse path in send_transaction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes to alternatives: 'see get_conversion_rate and send_transaction's QUAI -> Qi path.' It gives precise when-to-use guidance by describing the two-step preview/confirm pattern and exactly when password and confirmationToken are required, leaving no ambiguity about the call sequence.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_qi_walletCreate Qi WalletA
Generate a new Qi-ledger wallet (Quai's UTXO-based ledger, distinct from the account-based QUAI wallets create_wallet makes) and store it encrypted under a name and password. Use this so a QUAI -> Qi conversion (see send_transaction / get_conversion_rate) has somewhere real to land that this server can later check the balance of and convert back to QUAI with convert_qi_to_quai -- without a Qi wallet, converting into Qi sends it somewhere you may have no way to use again. Internally this is an HD (mnemonic-based) wallet, since Qi requires deriving addresses and scanning unspent outputs rather than a single keypair; only the mnemonic is encrypted at rest (same V3 keystore scheme as create_wallet: scrypt + AES-128-CTR + MAC), and it is never returned in this tool's output. Tip: create_wallet can create one of these automatically alongside a new QUAI wallet (pairQiWallet, on by default) -- use this tool directly only when you want a standalone Qi wallet or a different zone/name.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already be used by another Qi wallet -- reusing a QUAI wallet's name pairs with it (see create_wallet's pairQiWallet). | |
| zone | No | The zone the receiving address should belong to. | cyprus1 |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Not stored anywhere. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
All annotations are false, so the description carries the full disclosure burden. It discloses that the wallet is HD/mnemonic-based, that only the mnemonic is encrypted at rest using a specific V3 keystore scheme, and that the mnemonic is never returned. It also warns that without a Qi wallet converted funds may be unrecoverable, a meaningful behavioral consequence beyond what annotations or schema provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is substantial yet dense: purpose, usage, internal behavior, security, and alternative routing are each covered in order with no redundant filler. The most decision-relevant information—what it creates, when to use it, and what happens without it—is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers prerequisites, consequences, alternatives, internal mechanics, and security, which is unusually complete for a create tool with no annotations and no output schema. The only gap is that it never states what the successful response contains (e.g., address, zone, or name), which an agent may need when using the returned wallet; this keeps it from a perfect score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and each parameter already has clear semantics. The description reinforces that name and password are used for storage/encryption and hints at zone/name as reasons for direct use, but it adds little beyond what the schema already documents. The baseline of 3 for full schema coverage is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('Generate a new Qi-ledger wallet'), identifies the ledger type (UTXO-based), and explicitly contrasts it with account-based QUAI wallets from create_wallet. This makes the tool's purpose unambiguous and clearly differentiates it from the closest sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states exactly when to use this tool: as a destination for QUAI->Qi conversions (citing send_transaction / get_conversion_rate) and later convert_qi_to_quai. It also names the alternative create_wallet with pairQiWallet and the conditions for direct use (standalone Qi wallet or different zone/name), giving the agent both inclusion and exclusion rules.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_walletCreate Quai WalletA
Generate a brand-new Quai (QUAI-ledger) private key and address, and store it encrypted under a name and password -- this is a custodial store: the tool remembers the wallet, you don't have to pass a raw key around again. The private key is encrypted at rest with the standard Ethereum/Web3 V3 keystore format (scrypt + AES-128-CTR + MAC, the same scheme geth and MetaMask use) and written to disk with owner-only file permissions; it is never returned in this tool's output and never logged. Because Quai addresses are location-aware, this 'grinds' (retries with fresh randomness) until the address falls in the zone you ask for (default: cyprus1). Use send_transaction with this wallet's name and password to actually spend from it. By default this ALSO creates a paired Qi-ledger wallet under the same name and password (see pairQiWallet) in the same zone, so a QUAI -> Qi conversion always has somewhere to land that you can actually check and spend from -- set pairQiWallet to false to skip that and only create the QUAI wallet.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already exist. | |
| zone | No | The zone the generated address (and paired Qi address, if created) should belong to. | cyprus1 |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Used for the paired Qi wallet too, if created. You will need this again to send from either. It is not stored anywhere. | |
| pairQiWallet | No | If true (default), also create a Qi-ledger wallet under the same name and password. Set false to create only the QUAI wallet. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes far beyond the minimal annotations (which only state readOnlyHint=false, etc.) by disclosing encryption details (V3 keystore, scrypt, AES-128-CTR, MAC), file permissions, that the private key is never returned or logged, that address generation 'grinds' until it lands in the requested zone, and that a paired Qi wallet is created by default. This is rich, actionable behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but information-dense, with no fluff. It opens with the core purpose and then systematically covers security, behavior, and usage. Some details, like the exact keystore cipher suite, could be seen as more than strictly necessary, but they serve to build trust and clarify behavior, so every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema, the description thoroughly covers what happens, what is stored, how security works, and how to spend later. The only notable gap is that it never states what the tool actually returns (e.g., wallet address or confirmation). This is a minor omission given the depth of other context, but it is still a gap for an agent that needs to use the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents all four parameters. The description adds meaningful context beyond the schema: it explains why 'zone' matters (location-aware addresses, grinding), that 'password' is reused for the paired Qi wallet, and what pairQiWallet=true actually implies for conversions. This elevates it above the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Generate') and names the precise resource ('Quai (QUAI-ledger) private key and address'), clearly distinguishing it from import_wallet by emphasizing 'brand-new' and from create_qi_wallet by explaining the paired Qi wallet behavior. The custodial-store framing and explicit tie to send_transaction leave no ambiguity about what this tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says to use send_transaction with the wallet's name and password to spend from it, and gives a concrete condition for skipping the paired Qi wallet via pairQiWallet=false. It does not explicitly contrast with import_wallet or create_qi_wallet, but the 'brand-new' wording and paired-wallet explanation imply the appropriate alternatives, so the guidance is clear if not exhaustive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_balanceGet Quai BalanceARead-only
Get the QUAI balance of an address on Quai Network. Quai is a sharded network where every address belongs to a specific zone (e.g. cyprus1, paxos2); this tool resolves the correct zone automatically from the address itself, so you never need to specify a shard yourself. Returns the balance in both raw wei and formatted QUAI. Read-only: no gas, signing, or private key required.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | The Quai address to check the balance of, e.g. 0x00... | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| blockTag | No | Optional block number, hex block number, or tag ("latest", "earliest") to query at. Defaults to "latest". |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint and openWorldHint annotations, the description adds meaningful behavioral detail: it automatically resolves the correct zone, returns balances in both raw wei and formatted QUAI, and requires no gas, signing, or private key. These details are especially useful because there is no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: the core purpose appears in the first sentence, followed by the most important behavioral caveat and return format. Every sentence contributes context without redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only query tool with three well-schema-documented parameters, the description covers all essential aspects: what is returned, the automatic zone resolution behavior, and the absence of signing/gas requirements. The lacking output schema is partially mitigated by explicitly stating the return units.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are already well documented. The description adds value by clarifying that the address parameter is sufficient and that zone/shard selection is resolved internally, which prevents an agent from searching for a nonexistent zone parameter. It does not add meaning for network or blockTag, but the schema already covers those.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the action (get), the resource (QUAI balance of an address), and the network (Quai Network). It also distinguishes itself from siblings such as get_qi_balance by explicitly naming QUAI, and from resolve_zone by stating that zone resolution is handled automatically.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use the tool: whenever an agent needs an address's QUAI balance, and it explains that no shard specification is needed. It does not explicitly mention when not to use it or name alternatives like get_qi_balance, so it stops short of full when/when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_blockGet Quai BlockARead-only
Fetch a block from a specific Quai Network chain. Quai is a hierarchy of Prime, Region, and Zone chains, so a block number alone is not globally unique -- you must also say which chain to read from (e.g. "cyprus1" for a zone, "cyprus" for its region, or "prime"). Accepts a block number (decimal or 0x-hex), a block hash (0x + 64 hex chars), or a tag ("latest", "earliest", "pending"). If you only have an address and need its zone, call resolve_zone first.
| Name | Required | Description | Default |
|---|---|---|---|
| block | Yes | Block number (decimal or 0x-hex), block hash (0x...), or tag: "latest", "earliest", "pending". | |
| shard | Yes | The chain to query. One of: prime, cyprus, paxos, hydra, cyprus1, cyprus2, cyprus3, paxos1, paxos2, paxos3, hydra1, hydra2, hydra3. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| includeTransactions | No | If true, include full transaction objects in the block instead of just their hashes. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only behavior, and the description adds non-obvious context: block numbers are not globally unique across Prime/Region/Zone, so the shard is mandatory. It also clarifies accepted identifier formats and the address-to-zone precondition. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences with no filler. The core capability and the non-obvious shard prerequisite are front-loaded, and the trailing resolve_zone pointer is directly relevant to correct invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complex chain hierarchy and the absence of an output schema, the description covers the essential operational knowledge: how to specify the chain, what identifiers are accepted, and the address-to-zone precondition. It does not describe the response shape, but that is not required to select or invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value by giving concrete chain examples (cyprus1, cyprus, prime), explaining the accepted block identifier forms, and stressing that shard disambiguates the block lookup beyond what the enum alone conveys.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description begins with 'Fetch a block from a specific Quai Network chain' — a precise verb and resource. It then unpacks the hierarchy requirement so an agent won't confuse block lookup with transaction lookup, and the shard-qualification warning distinguishes its invocation semantics from ordinary single-chain block fetchers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explains when the tool is the right call: fetching a block by number, hash, or tag on a particular shard. It also gives a concrete routing rule — if you only have an address, call resolve_zone first. It doesn't explicitly say when not to use it versus get_transaction, but the read-context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_conversion_rateGet QUAI <-> Qi Conversion RateARead-only
Quote a conversion between Quai's two native ledgers: QUAI (account-based, EVM) and Qi (UTXO-based, like Bitcoin -- this is Quai's own built-in swap, not a third-party DEX. Returns the current on-chain rate for converting a given amount in one direction, as of the latest block in the given zone. This is read-only and doesn't move anything -- to actually convert QUAI into Qi, send_transaction to a Qi-ledger address (it detects this automatically and shows the same estimate in its preview). Converting Qi into QUAI is not supported by this server yet: Qi is UTXO-based and needs a different kind of wallet (one that scans and manages unspent outputs) than the single-key wallets this server currently stores.
| Name | Required | Description | Default |
|---|---|---|---|
| zone | Yes | The zone to get the rate in -- rates can differ slightly by zone. | |
| amount | Yes | Amount to convert, in the source currency's human units (e.g. "10" QUAI, or "5" Qi). | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| direction | Yes | Which way to convert. Only quai_to_qi is currently executable via send_transaction; qi_to_quai is quote-only here. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark readOnlyHint, and the description reinforces 'read-only and doesn't move anything' while adding behavior beyond the annotation: the rate is current as of the latest block in the zone, it is on-chain, and the reverse direction is quote-only. This is valuable context even though the discussion of QI-to-QUAI support is questionable given the sibling list.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose and each sentence adds substantive context: what is quoted, how to actually convert, and the reverse-direction limitation. It is slightly long, but the extra clauses about the built-in swap and wallet differences earn their place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The definition covers the tool's domain, zone/network behavior, read-only nature, and conversion limitations. However, it does not describe the response shape or numeric rate format, and with no output schema that gap matters; it also overlooks the convert_qi_to_quai sibling when discussing QI-to-QUAI support.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents all four parameters with descriptions and enums, so the baseline is 3. The description adds useful meaning by clarifying that amounts are in the source currency's human units and that quai_to_qi is executable via send_transaction while qi_to_quai is quote-only, going beyond the enum values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence clearly names the operation ('Quote a conversion') and identifies the two native ledgers (QUAI and Qi), and the rest scopes it to an on-chain rate at the latest block in a zone. It also distinguishes this from a third-party DEX and from send_transaction, so an agent can tell what this tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives useful routing: use send_transaction to actually convert QUAI to Qi, and treat qi_to_quai as quote-only. However, it claims QI-to-QUAI conversion is not supported by this server, even though a sibling tool named convert_qi_to_quai exists; it should mention that sibling as the alternative instead of declaring the operation impossible. That makes the guidance partially misleading.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_qi_balanceGet Qi Wallet BalanceARead-only
Check the Qi balance of a wallet created with create_qi_wallet or import_qi_wallet. Unlike get_balance (QUAI), this needs the wallet's password: Qi is UTXO-based, so checking a real balance means reconstructing the wallet from its mnemonic and asking the network for its unspent outputs, not just reading a stored public address. Returns both the total and spendable balance (spendable excludes still-immature/locked outputs). Funds received via a payment code (see send_qi) are NOT included unless you pass the sender's payment code in counterpartyPaymentCodes -- those addresses are pairwise-derived between the two payment codes and can't be discovered any other way.
| Name | Required | Description | Default |
|---|---|---|---|
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | Yes | The wallet's password. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. | |
| counterpartyPaymentCodes | No | Payment codes of people who may have sent this wallet Qi via send_qi. Omit if you're only checking regular (non-payment-code) receipts. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description discloses the actual mechanism: reconstructing the wallet from its mnemonic and querying network unspent outputs rather than reading a stored public address. It also explains spendable vs total balance, maturity exclusions, and the payment-code address derivation limitation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose and then adds the differentiator, return semantics, and caveat in a logical order. Every sentence contributes meaningful guidance without filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the readOnlyHint, openWorldHint, and fully documented schema, the description covers all non-obvious calling concerns: when to use it, why the password is needed, how the balance is computed, what the return values represent, and when counterpartyPaymentCodes is mandatory. The lack of an output schema is mitigated by the explicit return description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds meaning to password by explaining why it is required (mnemonic reconstruction) and to counterpartyPaymentCodes by clarifying that payment-code addresses are pairwise-derived and otherwise undiscoverable. This goes beyond the schema's basic field descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a precise action and resource: 'Check the Qi balance of a wallet', scoped to wallets created with create_qi_wallet or import_qi_wallet. It also distinguishes itself from get_balance (QUAI), so an agent can tell them apart without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly contrasts this tool with get_balance (QUAI) and explains why the password is needed for Qi UTXO balance reconstruction. It also gives the condition for when to pass counterpartyPaymentCodes for payment-code funds, naming send_qi as the relevant sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_qi_payment_codeGet Qi Payment CodeARead-only
Get the reusable BIP-47 payment code for a Qi wallet -- this is what you hand someone so they can send you Qi via send_qi, the same way you'd hand out an address, except a payment code is not itself an on-chain address: it derives a fresh one behind the scenes for each sender. Requires the password because deriving it needs the wallet's BIP-47 key material from its mnemonic. Purely local -- no network call.
| Name | Required | Description | Default |
|---|---|---|---|
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | Yes | The wallet's password. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the readOnlyHint annotation: it explains that the operation is purely local with no network call, that it requires the password because BIP-47 key material is derived from the mnemonic, and that a fresh on-chain address is derived behind the scenes per sender. This gives the agent a clear behavioral model.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense passage with no filler. It front-loads the core action and definition, then efficiently explains the key distinction, the password requirement, and the local nature of the operation. Every sentence contributes essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only getter with a fully documented schema and relevant annotations, the description covers the important behavioral context: purpose, usage, password need, and local execution. It does not explicitly describe the return value format, but given the tool name and context, an agent can reasonably infer it returns the payment code.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, satisfying the baseline. The description adds meaningful context by explaining why password is required and that the derivation is local, which helps the agent understand the role of that parameter beyond the schema's 'The wallet's password.' It does not repeat every parameter, but it adds value where it matters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: 'Get the reusable BIP-47 payment code for a Qi wallet.' It further clarifies what the thing is for and explicitly distinguishes it from an on-chain address, so an agent can clearly understand the tool's unique purpose relative to siblings like send_qi and get_qi_balance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage context: this is what you hand someone so they can send you Qi via send_qi, analogous to handing out an address. It does not explicitly enumerate when not to use it or name alternative tools beyond referencing send_qi, but the intended use case is well conveyed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_transactionGet Quai TransactionARead-only
Look up a transaction on Quai Network by its hash and return its details (from, to, value, gas, status) plus the receipt when available. Also reports which zone/shard the transaction landed on -- Quai resolves this automatically from the hash itself, so you do not need to know it in advance.
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | The transaction hash to look up, e.g. 0x... | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint and openWorldHint annotations, the description specifies exactly what the tool returns, including the conditional nature of the receipt ('when available'), and explains the automatic zone-resolution behavior. This is especially valuable because there is no output schema to carry that information.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two focused sentences cover the operation, the return fields, and the important zone/shard caveat without repetition or filler. The core lookup behavior is front-loaded, and every clause adds useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple two-parameter schema, fully documented parameters, and read-only annotations, the description is complete enough for an agent to select and invoke the tool correctly. It supplies the return contract that would otherwise be missing due to the lack of an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and both hash and network parameters are already well documented in the schema. The description reinforces that lookup is by hash but adds no meaningful parameter-level meaning beyond what the schema provides, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Look up a transaction on Quai Network by its hash') and names the returned details (from, to, value, gas, status) plus receipt. The automatic zone/shard resolution distinguishes it clearly from related tools like resolve_zone and from balance/block lookups.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly establishes when to use the tool: when you need transaction details by hash. It also explicitly tells the agent it does not need to know the zone/shard in advance, preventing unnecessary calls to resolve_zone. However, it does not name alternative tools or state exclusion conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
import_qi_walletImport Qi WalletA
Import an existing Qi-ledger wallet from its BIP-39 mnemonic phrase into this server's encrypted store, under a name and password. Same encryption as create_qi_wallet (only the mnemonic is encrypted at rest, never the phrase itself in this tool's output). The receiving address for the given zone is re-derived deterministically from the phrase.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already be used by another Qi wallet -- reusing a QUAI wallet's name pairs with it (see create_wallet's pairQiWallet). | |
| zone | No | The zone to derive the receiving address in. | cyprus1 |
| mnemonic | Yes | The existing BIP-39 mnemonic phrase (space-separated words) for this Qi wallet. | |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Not stored anywhere. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only record that this is not read-only/destructive, leaving behavioral context to the description. The description adds that the mnemonic is encrypted at rest, that the phrase is not emitted in the tool's output, and that the receiving address is deterministically re-derived from the phrase, which materially informs the agent about privacy and determinism. It does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, all useful, with the core action front-loaded and the encryption/output caveat earning its place. The phrasing around 'only the mnemonic is encrypted... never the phrase itself' is slightly redundant and awkward, keeping it from top marks for polish.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool description, schema, and annotations together let an agent select parameters correctly and understand the core operation, including encryption and deterministic derivation. Since there is no output schema, the absence of a precise return-value description or duplicate-import error behavior leaves a small but real gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the description need not repeat parameter details; the baseline is 3. It adds mild semantic color by tying the zone parameter to deterministic address re-derivation, but this largely mirrors the schema's own zone description rather than providing new meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a concrete action ('Import an existing Qi-ledger wallet...'), names the source (BIP-39 mnemonic) and destination (server's encrypted store), and goes beyond the title by mentioning deterministic address derivation. It clearly identifies this as an import operation for Qi wallets, though it does not explicitly contrast it with sibling tools like import_wallet or create_qi_wallet.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use statement or named alternative; the agent must infer that an existing Qi wallet with a mnemonic should use this tool rather than create_qi_wallet. The reference to 'Same encryption as create_qi_wallet' provides context but no exclusion or alternative-routing guidance, so usage guidance remains implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
import_walletImport Quai WalletA
Import an existing Quai private key into this server's encrypted wallet store, under a name and password, so it can be used with send_transaction without passing the raw key around again. Uses the same standard Ethereum/Web3 V3 keystore encryption as create_wallet (scrypt + AES-128-CTR + MAC), written to disk with owner-only file permissions. The private key you pass in is used once to encrypt and is never returned or logged. Whichever zone the key's address belongs to is detected automatically -- Quai addresses can't be moved between zones.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already exist. | |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Not stored anywhere. | |
| privateKey | Yes | The existing private key to import (0x-prefixed or not). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only indicate readOnlyHint=false, idempotentHint=false, etc., so the description carries the burden of explaining behavior. It adds meaningful details: the private key is used once, never returned, and never logged; disk files use owner-only permissions; the password is not stored; and the address's zone is auto-detected and cannot be changed. It does not describe failure behavior on duplicate names, but the schema already covers the uniqueness constraint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact: three sentences, with the core purpose front-loaded, then security-relevant details, then zone behavior. Every sentence adds distinct information without redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutating tool with no output schema, the description covers the invocation-critical aspects: purpose, parameter handling, security, and zone constraints. It does not state what the successful return value is, which would be helpful, but an agent can reasonably infer completion and use related tools like list_wallets to verify. This leaves only a minor completeness gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with all three parameters already documented (name constraints, password minimum, private key format). The description adds security context, such as 'never returned or logged,' but does not meaningfully expand parameter semantics beyond what the schema already provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb (import), a specific resource (an existing Quai private key), and the storage outcome (encrypted wallet store under a name/password). It also connects the tool to send_transaction, making its purpose concrete. It distinguishes itself from create_wallet by focusing on an existing key, and from import_qi_wallet by explicitly saying 'Quai private key'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: use this when you have an existing Quai private key and want to avoid passing it around for future send_transaction calls. However, it does not explicitly say when to prefer create_wallet, import_qi_wallet, or another sibling, nor does it state exclusions. The usage guidance is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_walletsList WalletsARead-only
List every wallet stored in this server's encrypted wallet store, both QUAI-ledger (create_wallet/import_wallet) and Qi-ledger (create_qi_wallet/import_qi_wallet): name, ledger, address, and zone for each. No password is needed -- addresses are stored in the clear alongside the encrypted key/mnemonic, only spending requires the password. Use this to find the walletName to pass to send_transaction, get_qi_balance, or convert_qi_to_quai.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the operation read-only; the description adds meaningful behavioral context by disclosing that no password is required and that addresses are stored in the clear alongside encrypted keys, with only spending requiring the password. It also specifies the output fields since no output schema exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences all carry signal: the scope, the security-relevant behavior, and the downstream use. It is front-loaded with the core action and avoids filler or repetition of the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only listing with no output schema, the description is fully self-sufficient: it names the resource, included wallet types, every returned field, the auth requirement, and downstream tools that consume the output.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters and the schema coverage is 100%, so there is nothing for the description to add. The no-parameter baseline of 4 applies; the description correctly spends no space on parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('List every wallet stored in this server's encrypted wallet store'), identifies both ledger types, and enumerates the returned fields (name, ledger, address, zone). It clearly distinguishes this tool from create/import/send siblings by framing it as the enumeration endpoint.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states the primary use ('Use this to find the walletName to pass to send_transaction, get_qi_balance, or convert_qi_to_quai') and clarifies that no password is needed. It does not explicitly contrast with alternative lookup tools, but for a listing tool the context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resolve_zoneResolve Quai ZoneARead-only
Determine which Quai Network shard/zone a given address belongs to, purely by inspecting the address (no network call). Quai uses location-based addressing: every address encodes both its zone (e.g. cyprus1, paxos2, hydra3) and its ledger (Quai account-based, or Qi UTXO-based) in its bytes, and only works within that zone. Use this before get_balance, get_transaction, or call_contract if you need to explain or confirm which part of the network an address or transaction belongs to.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | A Quai Network address, e.g. 0x00... |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already establish read-only behavior (readOnlyHint=true), and the description adds meaningful context beyond that: it performs no network call, works purely via local inspection, and treats addresses as zone-bound. This informs the agent about determinism and side-effect-freedom without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: the core purpose and key differentiator ('no network call') appear in the first sentence, followed by a concise background explanation and a clear usage note. No redundant or filler content is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter, read-only, local parsing tool, the description covers what the tool does, why it matters, and when to use it. It does not detail the exact return shape or invalid-address handling, but the absence of an output schema makes this a minor gap rather than a blocking one.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents the single 'address' parameter with 100% coverage. The description adds value by explaining that the address encodes both zone and ledger and by giving concrete zone examples ('cyprus1, paxos2, hydra3'), which helps the agent interpret the input and understand what the output represents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Determine which Quai Network shard/zone a given address belongs to'), names the resource (address), and explicitly distinguishes its mode ('purely by inspecting the address (no network call)'). It also clarifies the conceptual model (location-based addressing, zone and ledger encoded in bytes), which removes ambiguity about what the tool resolves.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit guidance on when to use this tool: 'Use this before get_balance, get_transaction, or call_contract if you need to explain or confirm which part of the network an address or transaction belongs to.' It also implies a non-network, local operation, helping the agent choose it over network-dependent siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_docsSearch Quai DocsARead-only
Search a small curated index of Quai Network developer documentation -- sharding model, location-based addressing, the quais SDK, network endpoints, wallets, faucet, contracts -- and get back relevant snippets with links to the official docs. Use this to explain a Quai concept, find the right doc page, or clarify terminology (e.g. what a 'Zone' or 'Qi ledger' is). This is an offline index, not a live web search, so for anything it doesn't cover, say so and point at docs.qu.ai directly rather than guessing.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | What to search for, e.g. "how are addresses assigned to zones" or "faucet". | |
| maxResults | No | Maximum number of results to return. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false, and the description reinforces this by noting it is 'an offline index, not a live web search.' It also discloses the limitation that results only cover topics in the curated index and instructs the agent to avoid guessing. This adds useful behavioral context beyond the minimal annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three dense sentences contain the action, the scope, concrete usage examples, and an explicit limitation/fallback path. Every sentence earns its place, and the key purpose is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter read-only search tool, the description covers what it searches, what it returns (snippets with links), when to use it, and how to handle misses. No output schema is present, but the return format is sufficiently described. The agent can invoke this tool correctly without further information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already fully documented. The description adds helpful query examples for the query parameter, which improves usability, but it does not enrich the semantics of maxResults beyond what the schema provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Search') and resource ('small curated index of Quai Network developer documentation') and states the output ('relevant snippets with links to the official docs'). It clearly distinguishes this documentation-search tool from the on-chain/sibling tools like get_transaction or get_balance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says when to use the tool ('explain a Quai concept, find the right doc page, or clarify terminology') and gives a concrete fallback behavior for uncoveed topics: say so and point at docs.qu.ai rather than guessing. This is strong, actionable usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_qiSend Qi to a Payment Code (Two-Step Confirmation)ADestructive
Send Qi from a wallet created with create_qi_wallet/import_qi_wallet to a recipient's BIP-47 payment code (see get_qi_payment_code) -- not a plain address. Qi peer-to-peer transfers work this way for privacy: a payment code is a reusable identifier from which a fresh address is derived for every send, rather than reusing one static address. Sender and recipient can be in different zones (destinationZone). Same two-step pattern as send_transaction and convert_qi_to_quai: preview first (no password needed) to see a confirmationToken, then confirm: true with that token and the wallet password to actually sign and send. The preview cannot verify the wallet's Qi balance (that needs the password), so a confirm can still fail with insufficient funds even after a clean preview.
| Name | Required | Description | Default |
|---|---|---|---|
| amount | Yes | Amount to send, in Qi (e.g. "0.5"), not Qit. | |
| confirm | No | Set true only on the second call, together with confirmationToken and password, to actually send. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | No | The sender wallet's password. Required only on the confirm: true call. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. | |
| destinationZone | Yes | Which zone the recipient wants to receive the funds in. | |
| confirmationToken | No | The token returned by the initial preview call. Required when confirm is true. | |
| recipientPaymentCode | Yes | The recipient's Base58 BIP-47 payment code (from get_qi_payment_code on their end). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say readOnlyHint=false and destructiveHint=true, so the description carries the burden of explaining actual behavior. It does this thoroughly: two-step confirmation, preview requiring no password, confirm signing and sending, and the important caveat that preview cannot verify balance so confirm can fail despite a clean preview. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is detailed but every sentence earns its place. The core distinction (payment code vs plain address) is front-loaded, then the privacy rationale and two-step flow are explained compactly. It is appropriately sized for a tool with a non-obvious confirmation workflow.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema and 8 parameters, the description covers what an agent needs: wallet prerequisites, recipient payment code origin, destination zone relevance, the exact two-step call sequence, and the insufficient-funds failure mode. Nothing critical is missing for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaningful workflow semantics beyond the schema: it explains how confirm, confirmationToken, and password relate to the two-step preview/confirm pattern, and it reinforces that amount is in Qi. This exceeds the baseline without duplicating the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Send Qi from a wallet ... to a recipient's BIP-47 payment code.' It explicitly distinguishes this tool from sending to a plain address, which separates it from siblings like send_transaction. It also ties the payment code to get_qi_payment_code, making the tool's purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear when-to-use guidance: use this for Qi peer-to-peer transfers to a payment code, not a plain address. It also names sibling tools with the same two-step pattern (send_transaction, convert_qi_to_quai) and explains the preview-then-confirm workflow, including when password and confirmationToken are required.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_transactionSend QUAI (Two-Step Confirmation)ADestructive
Send QUAI from a wallet in this server's encrypted store to a recipient address. Because Quai is sharded, the recipient may be in a different zone than the sender; if so, this is an external transaction (ETX) and is handled automatically by the network, just with slower finality than a same-zone send. If the recipient is a Qi-ledger address instead of a QUAI-ledger one, this is instead a QUAI -> Qi conversion (Quai's native "swap" between its two ledgers) -- the preview will say so and estimate what you'll receive in Qi (see get_conversion_rate for a quote without sending). This tool ALWAYS requires two calls: first without "confirm" (no password needed yet) to get a preview -- amounts, zones, estimated gas, a confirmationToken; then again with confirm: true, that same confirmationToken, and the wallet's password, to actually decrypt the key, sign, and send. The password is only ever used in-memory for that one call and is never stored or logged.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Recipient Quai address. | |
| amount | Yes | Amount to send, in QUAI (e.g. "1.5"), not wei. | |
| confirm | No | Set true only on the second call, together with confirmationToken and password, to actually broadcast. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | No | The wallet's password. Required only on the confirm: true call, to decrypt the key and sign. | |
| walletName | Yes | The name of a wallet previously created with create_wallet or import_wallet (see list_wallets). | |
| confirmationToken | No | The token returned by the initial preview call. Required when confirm is true. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds substantial behavior beyond the annotations: the mandatory two-step confirmation, password only held in memory and never stored or logged, automatic ETX handling with slower finality, and the QUAI-to-Qi conversion path. This is exactly the kind of non-obvious behavior an agent needs, and it does not contradict the destructiveHint/readOnlyHint annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than average, but every sentence earns its place: purpose, sharding/ETX behavior, conversion context, two-call workflow, and security guarantee. It is front-loaded with the core action and then layers necessary procedural detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive, non-idempotent mutation tool with no output schema, the description is unusually complete. It tells the agent exactly what the preview returns, when the password is required, what confirmationToken is, and what happens in the ETX and conversion cases. There is very little left for the agent to infer.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description enhances this by explaining the lifecycle of confirm, password, and confirmationToken across the two required calls, and it contextualizes amount as QUAI not wei, matching but reinforcing the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb and resource: 'Send QUAI from a wallet in this server's encrypted store to a recipient address.' It goes further by distinguishing same-zone sends, ETX sends, and QUAI-to-Qi conversions, making it easy to separate from sibling tools like get_conversion_rate and send_qi.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit workflow guidance: always requires two calls, first without confirm for a preview, then with confirm, confirmationToken, and password to broadcast. It points to get_conversion_rate as a quote-without-sending alternative. However, it does not explicitly say 'for pure Qi sends use send_qi,' so the exclusion of a close sibling is left implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
17 tool updates
v0.1.0- First observed
call_contract - First observed
convert_qi_to_quai - First observed
create_qi_wallet - First observed
create_wallet - First observed
get_balance - First observed
get_block - First observed
get_conversion_rate - First observed
get_qi_balance - First observed
get_qi_payment_code - First observed
get_transaction - First observed
import_qi_wallet - First observed
import_wallet - First observed
list_wallets - First observed
resolve_zone - First observed
search_docs - First observed
send_qi - First observed
send_transaction
TDQS
Scored across 17 tools
Each tool targets a distinct resource (blocks, transactions, balances, wallets, conversions), and the QUAI vs Qi split is clearly delineated. The only minor overlap is send_transaction also covering QUAI→Qi conversion, which send_qi and convert_qi_to_quai handle separately, but descriptions clarify the paths.
All tools use a predictable verb_first snake_case pattern (get_, create_, import_, send_, resolve_, call_, search_, list_, convert_). Ledger-specific variants are consistently prefixed with qi rather than mixed into inconsistent conventions.
Seventeen tools is slightly beyond the 3–15 sweet spot, but the domain is genuinely large: two ledgers, sharded chains, wallet lifecycle, and conversion flows. Each tool addresses a real operation, so the count feels dense rather than bloated.
The surface covers querying, wallet lifecycle (create/import/list), QUAI and Qi transfers, and the native conversion both ways, which is solid for the domain. Minor gaps remain: no wallet deletion, no Qi transaction/UTXO detail lookup, and no contract state-changing sends (though send_transaction exists despite call_contract's stale description).
Maintenance
Related MCP Connectors
Provide AI agents and automation tools with contextual access to blockchain data including balance…
Read-only on-chain intelligence for AI agents on Base: balances, tokens, gas, tx status.
Read-only on-chain intelligence for AI agents on Base: balances, tokens, gas, tx status.
Unified financial infrastructure connecting AI agents directly to trade live/demo brokerage accounts, Web3 non-custodial wallets, real-time market data across equities, ETFs, crypto, forex, options, DeFi swaps, and prediction markets, institutional research feeds, and algorithmic strategy backtesters.
Related MCP Servers
- AlicenseCqualityDmaintenanceEnables AI agents to interact with cryptocurrency ecosystems through wallet management, trading operations (swaps, DCA, limit orders), staking, and multi-chain support starting with Solana.37GPL 3.0

QuickContract MCPofficial
AlicenseAqualityDmaintenanceEnables AI agents to sign contracts, release escrow, query portfolios, and verify on-chain proofs via QuickContract.1711 npmMIT- AlicenseAqualityDmaintenanceEnables AI agents to check balances and send transactions across multiple blockchains with automatic spending limit protection and policy enforcement.3MIT

xian-mcp-serverofficial
FlicenseBqualityAmaintenanceEnables AI assistants to interact with the Xian blockchain, including wallet management, token transfers, smart contract operations, DEX trading, and indexed blockchain data queries through a unified MCP and HTTP interface.35-