quai-mcp-server
quai-mcp-server
MCP-сервер (Model Context Protocol), который предоставляет данные сети Quai и инструменты для read-only взаимодействия AI-клиентам, таким как Claude Desktop и Claude Code. Создан с использованием официального @modelcontextprotocol/sdk и quais, ethers-подобного SDK для Quai.
Что такое Quai Network простыми словами
Quai — это proof-of-work, EVM-совместимый Layer 1, который масштабируется за счёт шардинга: вместо одной цепи, выполняющей всю работу, он разделяется на множество цепей, организованных в иерархию.
Prime chain (1)
/ | \
Region Region Region <- "Cyprus", "Paxos", "Hydra"
/ | \ / | \ / | \
Zone Zone Zone ... 9 Zone chains totalPrime — единственная цепь верхнего уровня. Каждый майнер майнит Prime; она урегулирует состояние всей сети, но не обрабатывает пользовательские транзакции напрямую.
Region-цепи (сейчас Cyprus, Paxos, Hydra) находятся под Prime, агрегируя свои Zone.
Zone-цепи (Cyprus1/2/3, Paxos1/2/3, Hydra1/2/3 — сегодня 9, их можно добавлять по мере роста сети) — это место, где живёт настоящий EVM: пользовательские транзакции, контракты, балансы, всё.
В отличие от схем шардинга, которые разделяют безопасность вместе с данными, Quai сохраняет безопасность единой во всей иерархии, разделяя только данные/пропускную способность — Prime и Region-цепи merge-mine с Zone-цепями под ними.
Самая важная часть для инструментов: каждый адрес Quai знает своё местоположение. Собственные байты адреса кодируют, в какой единственной Zone он живёт (и находится ли он в реестре QUAI, account-based, как Ethereum, или в реестре Qi, UTXO-based, как Bitcoin). Адрес на Cyprus1 существует только на Cyprus1 — вы не можете спросить о нём Paxos2. Поэтому несколько инструментов ниже либо автоматически определяют зону за вас, либо просят указать её явно.
Related MCP server: QuickContract MCP
Инструменты
Только чтение
Tool | What it does |
| Баланс QUAI для адреса. Зона определяется автоматически из адреса. |
| Детали блока по номеру/хэшу/тегу. Требуется шард/зона, так как номера блоков не уникальны глобально между цепями. |
| Транзакция + квитанция по хэшу, включая зону, в которой она оказалась. |
| По адресу сообщает его зону, регион и реестр (Quai vs Qi) — без сетевого вызова. |
| Read-only вызов контракта в стиле |
| Поиск по небольшому курируемому офлайн-индексу документации Quai с возвратом фрагментов и ссылок. |
| Котировка конвертации между QUAI и Qi, двумя собственными нативными реестрами Quai — это встроенный «своп» Quai, а не сторонний DEX (ни один из них не подтверждён на Quai). |
Ни один из этих инструментов не может перемещать средства, подписывать что-либо или изменять состояние on-chain.
Кошельки (кастодиальные: зашифрованные, именованные, защищённые паролем)
Tool | What it does |
| Генерирует новый приватный ключ + адрес реестра QUAI, привязанный к выбранной зоне (по умолчанию |
| То же зашифрованное хранилище для уже имеющегося приватного ключа реестра QUAI. |
| Генерирует новый кошелёк Qi-реестра (UTXO-based) — HD-кошелёк с мнемонической фразой, поскольку Qi требует деривации адресов и сканирования UTXO, а не одной пары ключей. Шифруется так же. |
| То же зашифрованное хранилище для уже имеющейся мнемонической фразы Qi. |
| Перечисляет сохранённые кошельки обоих типов (имя, реестр, адрес, зона). Пароль не нужен — он требуется только для трат или проверки баланса Qi. |
| Подписывает и отправляет QUAI из сохранённого QUAI-кошелька. Двухэтапное подтверждение (см. ниже). Отправитель и получатель могут находиться в разных зонах — это внешняя транзакция (ETX), обрабатываемая сетью автоматически. Если получатель — адрес Qi, это также служит путём конвертации QUAI→Qi (см. ниже). |
| Общий и доступный для трат баланс Qi для Qi-кошелька. Требуется пароль — см. «Почему Qi требует пароль» ниже. |
| Конвертирует Qi, хранящийся в Qi-кошельке, в QUAI, отправляемый на адрес QUAI. Двухэтапное подтверждение, та же схема, что и |
| Получает многоразовый платёжный код BIP-47 Qi-кошелька — то, что вы даёте кому-то, чтобы он мог отправить |
| Отправляет Qi из Qi-кошелька на платёжный код получателя (не на обычный адрес) — см. «Отправка Qi → Qi» ниже. Двухэтапное подтверждение, та же схема, что и у других инструментов записи. |
Этот сервер хранит ключи от вашего имени после создания или импорта кошелька — он кастодиальный в этом узком, локальном смысле, так же как хранилище ключей geth или локальное хранилище MetaMask. Он не работает как хостинг-сервис для чужих средств; всё хранится в каталоге на машине, где запущен сервер, зашифрованное паролем, который знаете только вы.
Как работает шифрование: каждый кошелёк — это приватный ключ в стандартном формате Web3 Secret Storage (V3 keystore) — том же формате, который используют geth и MetaMask — через encryptKeystoreJson из quais. Конкретно: пароль растягивается с помощью scrypt (N=2^17, r=8, p=1, стандартные «дорогие» параметры стоимости — это намеренно замедляет каждую попытку подбора пароля), приватный ключ шифруется с помощью AES-128-CTR, а MAC над шифротекстом обнаруживает неверный пароль (или изменённый файл) до того, как из него будет получен какой-либо ключевой материал. Это хорошо проверенная и широко распространённая схема; здесь нет собственной криптографии.
Где хранятся кошельки: по умолчанию ~/.quai-mcp-server/wallets/ (переопределяется через QUAI_WALLET_DIR) — QUAI-кошельки как <name>.json, Qi-кошельки как <name>.qi.json. Каталог создаётся с правами 0700, а каждый файл хранилища — 0600 (только чтение/запись владельцем, best-effort на не-POSIX платформах) — это явно применяется после создания, а не просто оставляется на усмотрение umask процесса. Адрес хранится в открытом виде в обоих случаях (это публичная информация; именно так list_wallets и предпросмотры на стороне QUAI работают без пароля), но приватный ключ (или мнемоника для Qi) никогда не записывается, не логируется и не возвращается в открытом виде ни одним инструментом.
Именование: имя идентифицирует не более одного QUAI-кошелька и не более одного Qi-кошелька — это независимые хранилища (разные файлы, разные секреты, совершенно несвязанный ключевой материал), которые просто имеют общую метку. Нельзя создать два QUAI-кошелька (или два Qi-кошелька) с одним именем, но повторное использование имени QUAI-кошелька для Qi-кошелька — это именно то, как работает связывание в create_wallet, и create_qi_wallet/import_qi_wallet намеренно это разрешают по той же причине.
Qi-кошельки — это HD-кошельки под капотом, но этот сервер хранит только мнемонику — никогда не производное дерево адресов и не состояние UTXO/сканирования. create_qi_wallet/import_qi_wallet шифруют {address, privateKey, mnemonic} с помощью того же вызова encryptKeystoreJson, что и на стороне QUAI (поля address/privateKey там — это просто первый производный адрес кошелька, присутствующий, чтобы файл был обычным, валидным V3 keystore); значимый секрет — мнемоника. Каждая последующая операция (get_qi_balance, convert_qi_to_quai) воссоздаёт свежий QiHDWallet из этой мнемоники и заново выводит тот же адрес получения по требованию -- детерминированно, поскольку HD-деривация для фиксированного аккаунта/зоны всегда даёт один и тот же адрес. Это было проверено напрямую: экспорт мнемоники кошелька и повторный импорт под другим именем воспроизвели идентичный адрес. Компромисс в том, что каждая операция Qi заново выводит данные с нуля, а не читает кэш, что проще для понимания и не может отклониться от того, что на самом деле подразумевает мнемоника, ценой необходимости пароля чаще, чем на стороне QUAI (см. ниже).
Почему Qi требует пароль чаще: get_balance в QUAI читает публичный баланс аккаунта напрямую из цепочки — секрет не нужен. У Qi такого нет: «баланс» — это сумма неизрасходованных выходов транзакций (UTXO), принадлежащих адресам, которые может вывести только мнемоника кошелька, так что само вычисление баланса означает восстановление кошелька. Поэтому get_qi_balance принимает пароль (а get_balance в QUAI — нет), и поэтому шаг предпросмотра в convert_qi_to_quai может показать курс конвертации, но не может подтвердить, что у вас действительно достаточно Qi для траты — эта проверка происходит только когда пароль поступает на шаге подтверждения.
Правила пароля: минимум 8 символов, проверяется до любого шифрования. Отдельного ограничения частоты попыток с неверным паролем нет — стоимостные параметры scrypt уже делают каждую попытку вычислительно дорогой, что является стандартной защитой для такого рода локального хранилища ключей.
Поток подтверждения для send_transaction, convert_qi_to_quai и send_qi: все три всегда требуют два вызова, и только второй требует пароль.
Вызов с адресом назначения и суммой (
walletName/to/amountдляsend_transaction;walletName/recipientPaymentCode/amount/destinationZoneдляsend_qi; вариант в формеtoдляconvert_qi_to_quai) — пароль пока не требуется. Ничего не транслируется. Вы получаете предпросмотр — разрешённые зоны, оценку там, где она существует (газ для отправки, конвертированная сумма для конвертации; уsend_qiеё нет, так как это перевод 1:1), иconfirmationToken, действительный в течение 2 минут.Повторный вызов с теми же параметрами, плюс
confirm: true, этотconfirmationTokenиpasswordкошелька. Только тогда ключ/мнемоника расшифровывается и транзакция фактически подписывается и отправляется.
Токен одноразовый и привязан к точным параметрам предпросмотра — если что-то изменилось, токен истёк или уже был использован, шаг 2 завершается с понятной ошибкой, и вы делаете предпросмотр заново. Это работает одинаково независимо от того, есть ли у самого MCP-клиента UI подтверждения инструментов, так что это реальный барьер, а не полагание на клиент. Неверный пароль завершается чисто (Incorrect password for wallet "...") без утечки информации о том, были ли токен/параметры в остальном валидны.
Намеренно нет инструмента export_wallet/«показать приватный ключ или мнемонику» — как только секрет попал в хранилище, единственный способ вывести его через этот сервер — подписать им.
Конвертация QUAI ↔ Qi («своп»): у Quai есть нативная конвертация на уровне протокола между двумя её реестрами — QUAI (на основе аккаунтов) и Qi (на основе UTXO, как Bitcoin) — с ончейн-курсом обмена, а не через сторонний DEX. get_conversion_rate даёт котировку в любом направлении, кошелёк не нужен. Оба направления исполнения теперь реализованы:
QUAI → Qi: просто обычный
send_transactionна адрес Qi-реестра (например, изcreate_qi_wallet). Инструмент определяет это автоматически (isConversion: trueв предпросмотре) и показывает оценку полученного Qi рядом с обычной информацией о газе/балансе.Qi → QUAI:
convert_qi_to_quai, использующий под капотомQiHDWallet.convertToQuaiизquais, по той же схеме предпросмотр/подтверждение/пароль, что иsend_transaction.
Отправка Qi → Qi: Qi-кошельки не отправляют напрямую на адреса друг друга. Вместо этого у каждого Qi-кошелька есть переиспользуемый BIP-47 платёжный код (get_qi_payment_code) — делитесь им так же, как адресом, но из него для каждого платежа выводится свежий одноразовый адрес, для приватности. Чтобы отправить, отправитель «открывает канал» с платёжным кодом получателя (send_qi делает это автоматически) — это чистый локальный ECDH между двумя платёжными кодами, детерминированный и воспроизводимый, без ончейн-действий или сохраняемого состояния. Загвоздка на принимающей стороне: эти попарно выведенные адреса не входят в обычную детерминированную последовательность адресов кошелька, так что ничего не найдёт средства, отправленные таким образом, если вы не скажете ему искать. Конкретно: после того как кто-то заплатил вашему Qi-кошельку через платёжный код, передайте его платёжный код в counterpartyPaymentCodes у get_qi_balance — он открывает тот же канал и включает его в баланс. Механизма уведомлений (ончейн или иного) нет, который сообщил бы получателю о платеже через платёжный код; обе стороны должны уже знать друг о друге вне канала, так же как вам нужно знать адрес, прежде чем проверять его баланс. send_qi также поддерживает кросс-зонные отправки (destinationZone, отдельный от собственной зоны отправителя), так же как ETX в send_transaction и собственная зонная модель QiHDWallet.
Один известный недочёт: шаг предпросмотра в send_qi не проверяет формат платёжного кода заранее (нет экспортированного валидатора для проверки), так что некорректный код пройдёт предпросмотр и упадёт только при подтверждении — безопасно (ничего не отправляется, средствам ничего не угрожает), просто позже, чем хотелось бы.
Ещё не реализовано: deploy_contract, request_faucet.
Честность о том, что здесь протестировано, обновлено: полный цикл send_qi / платёжного кода был проверен вживую на мейннете с двумя реальными кошельками — реальный, корректно отформатированный BIP-47 платёжный код (PM8T...) был сгенерирован и подтверждён детерминированным при повторных вызовах, предпросмотр корректно определил, кросс-зонная это отправка или в ту же зону, подтверждение с пустым кошельком упало с настоящей ошибкой SDK (No Qi available in zone), а не с крашем, и get_qi_balance корректно изолировал невалидный платёжный код контрагента в rejectedPaymentCodes, не провалив весь вызов. Что всё ещё не проверено, по той же причине, что и везде в этом документе: фактическое завершение отправки через платёжный код между двумя финансированными кошельками, так как для этого нужны реальные Qi, и это не делалось без запроса.
Честность о том, что здесь протестировано: всё вышеперечисленное было проверено на живом мейннете, включая проверку детерминизма (экспорт мнемоники Qi-кошелька и повторный импорт под другим именем воспроизвёл идентичный адрес) и реальные пути ошибок (неверный пароль, недостаточно QUAI для газа и настоящая ошибка QiHDWallet — No Qi available in zone — при попытке конвертации из пустого Qi-кошелька). Что не было проверено — это фактическое завершение convert_qi_to_quai или конвертации QUAI→Qi против кошелька с реальными средствами, так как это требует траты реальных денег и не делалось без запроса.
Установка
npm install
npm run buildИли запустите напрямую без установки, после публикации:
npx quai-mcp-serverТребования
Node.js 18+
Конфигурация (переменные окружения)
Все опциональны — разумные значения по умолчанию указывают на мейннет Quai.
Переменная | По умолчанию | Назначение |
|
| Шлюз RPC мейннета, используемый инструментами при |
|
| Шлюз RPC тестнета Orchard, используемый при |
|
| Где хранятся зашифрованные файлы хранилища ключей кошельков. |
Каждый инструмент также принимает аргумент network ("mainnet" или "testnet") при каждом вызове, так что клиент может запрашивать любую сеть без перезапуска сервера.
О ключах: см. «Кошельки» выше. Ключи существуют в открытом виде только в памяти на время вызова create_wallet/import_wallet/send_transaction, которому они нужны — никогда на диске, никогда в логах. Относитесь к QUAI_WALLET_DIR (и к машине, на которой работает этот сервер) как к любому другому локальному хранилищу секретов: любой, у кого есть доступ к файловой системе этого каталога и достаточно вычислительной мощности для перебора слабого пароля, в конечном счёте сможет расшифровать кошелёк, как и локальное хранилище geth или хранилище MetaMask.
Регистрация в Claude Desktop
Добавьте это в ваш MCP-конфиг Claude Desktop (claude_desktop_config.json — на macOS: ~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"quai": {
"command": "npx",
"args": ["quai-mcp-server"]
}
}
}Или, если вы склонировали и собрали этот репозиторий локально вместо использования опубликованного пакета:
{
"mcpServers": {
"quai": {
"command": "node",
"args": ["/absolute/path/to/quai-mcp-server/dist/index.js"]
}
}
}Чтобы по умолчанию указывать на тестнет, добавьте блок env:
{
"mcpServers": {
"quai": {
"command": "npx",
"args": ["quai-mcp-server"],
"env": {
"QUAI_TESTNET_RPC_URL": "https://orchard.rpc.quai.network"
}
}
}
}(затем передавайте "network": "testnet" в отдельных вызовах инструментов — переменные окружения задают конечную точку, а не сеть по умолчанию для каждого вызова).
Регистрация в Claude Code
claude mcp add quai -- npx quai-mcp-serverили, для локальной сборки:
claude mcp add quai -- node /absolute/path/to/quai-mcp-server/dist/index.jsРазработка
npm run dev # tsc --watch
npm run build # one-shot build to dist/
npm start # run the built server directly (stdio) -- mainly useful for manual smoke testsСервер говорит по MCP через stdio только в v1; HTTP-транспорта нет.
Заметки по дизайну
quais поверх сырого RPC: каждый инструмент идёт через
JsonRpcProvider,Contractи утилиты адресов SDKquais, а не через самодельные JSON-RPC вызовыeth_/quai_, так что разрешение зон, форматирование ответов и формы ошибок остаются согласованными с остальной экосистемой Quai.Один провайдер, много зон: один
JsonRpcProvider, указывающий на базовый URL шлюза (например,https://rpc.quai.network), автоматически обнаруживает активные зоны из Prime-цепочки и маршрутизирует каждый вызов в нужную — большинству инструментов никогда не нужно конструировать URL для конкретной зоны.Хранение — стандартными инструментами, а не самодельной криптографией: кошельки хранятся с использованием реализации
quaisформата хранилища ключей Ethereum V3 (scrypt + AES-128-CTR + MAC) — той же хорошо проверенной схемы, которую используютgethи MetaMask, — а не чего-то самодельного. См. «Кошельки» выше для полной модели.Ошибки — это текст, а не стектрейсы: ошибки RPC/контрактов перехватываются и переписываются в короткие конкретные сообщения (например, «Contract call reverted: ...», «Insufficient funds: ...», «Incorrect password for wallet...», «not a validly checksummed Quai address») вместо утечки сырых объектов исключений модели.
Подтверждение — реальный барьер, а не просто подсказка клиенту: инструменты записи аннотированы
readOnlyHint: false(иdestructiveHint: trueдля отправки), чтобы MCP-клиенты со своим UI одобрения показывали его, ноsend_transactionдополнительно обеспечивает собственное рукопожатие предпросмотр → токен → пароль на стороне сервера (src/confirmations.tsдля токена,src/walletStore.ts+decryptKeystoreJsonдля пароля), так что его по-прежнему безопасно вызывать из клиента вообще без UI одобрения.Пароль нужен только один раз, в последний момент: предпросмотр отправки разрешает адрес кошелька прямо из незашифрованной части его файла хранилища ключей и использует
VoidSigner(подписывающий в quais, который может оценить газ, но не подписать) для оценки стоимости — без расшифровки, без пароля. Только финальный вызовconfirm: trueрасшифровывает ключ, и только на время этого одного вызова.ETX — не отдельный путь кода: отправка на адрес в другой зоне использует тот же самый вызов
send_transaction, что и отправка в ту же зону — сеть Quai обрабатывает кросс-зонную маршрутизацию (как внешнюю транзакцию) прозрачно, как только подписанная транзакция достигает зоны отправителя. Инструмент просто определяет и сообщает задействованные зоны, чтобы вызывающий знал, чего ожидать.Qi-кошельки не имеют состояния между вызовами, намеренно:
create_qi_wallet/import_qi_walletтолько шифруют мнемонику.get_qi_balanceиconvert_qi_to_quaiвосстанавливаютQiHDWalletс нуля при каждом вызове и заново выводят его адрес (src/qiWallet.ts), а не читают какое-либо кэшированное состояние адресов/UTXO — читать нечего. Это обменяло немного производительности (каждая Qi-операция заново выводит и перезапрашивает, а не бьёт в кэш) на более простую и трудную для ошибок историю безопасности: единственное, что когда-либо находится в покое, — это единственный секрет, который имеет значение.
Available Tools
17 toolscall_contractCall Quai Contract (Read-Only)ARead-only
Perform a read-only call (an eth_call equivalent) against a deployed EVM contract on Quai Network and return the decoded result. Provide the contract address, an ABI fragment array containing at least the method being called, the method name, and its arguments. The zone is resolved automatically from the contract address. This never sends a transaction, spends gas, or requires a key -- it works for view/pure methods, and simulates (without broadcasting) state-changing ones. It cannot actually change on-chain state; for that, the not-yet-available send_transaction tool will be needed.
| Name | Required | Description | Default |
|---|---|---|---|
| abi | Yes | An ABI fragment array containing (at least) the function being called. Both JSON ABI objects and human-readable ABI strings (e.g. "function balanceOf(address) view returns (uint256)") are accepted as array elements. | |
| args | No | Arguments to pass to the method, in order. Pass large integers (e.g. token amounts) as strings to avoid precision loss. | |
| method | Yes | The name of the method to call. | |
| address | Yes | The contract address to call, e.g. 0x00... | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint and openWorldHint, but the description adds significant behavior beyond them: it never spends gas, never requires a key, simulates without broadcasting state-changing calls, and returns decoded results. This is rich, non-redundant context that helps the agent predict side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, then the required inputs, then behavioral caveats and the alternative. Every sentence adds value; there is no filler or repetition of schema content beyond what is necessary for clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only call tool with 5 parameters and no output schema, the description covers purpose, input requirements, behavior, limitations, and the alternative tool. It even notes that state-changing calls are simulated rather than broadcast, which fully prepares the agent for expected outcomes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds meaningful guidance: it tells the user to provide the address, an ABI fragment array containing at least the method, the method name, and arguments. It also clarifies that zone resolution is automatic, which indirectly explains the network parameter's role.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Perform a read-only call (an eth_call equivalent) against a deployed EVM contract on Quai Network and return the decoded result.' It distinguishes itself from siblings by explicitly contrasting with the not-yet-available send_transaction tool and clarifying it cannot change state.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance: it works for view/pure methods and simulates state-changing ones, but cannot change on-chain state. It names the alternative tool (send_transaction) for state changes, and notes the zone is resolved automatically so users don't need a zone-resolution step.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
convert_qi_to_quaiConvert Qi to QUAI (Two-Step Confirmation)ADestructive
Convert Qi held in a wallet created with create_qi_wallet/import_qi_wallet into QUAI, sent to a QUAI-ledger address. This is the other half of Quai's native ledger swap (see get_conversion_rate and send_transaction's QUAI -> Qi path). Same two-step pattern as send_transaction: first call without "confirm" for a rate-quote preview (no password needed yet); then again with confirm: true, the same confirmationToken, and the wallet's password to actually spend. The preview cannot verify the wallet's Qi balance without the password (Qi requires reconstructing the wallet to check), so a confirm may still fail with insufficient funds even after a clean preview -- that failure is reported plainly, nothing is lost or retried silently.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Destination QUAI-ledger address to receive the converted amount. | |
| amount | Yes | Amount to convert, in Qi (e.g. "0.5"), not Qit. | |
| confirm | No | Set true only on the second call, together with confirmationToken and password, to actually convert. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | No | The Qi wallet's password. Required only on the confirm: true call. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. | |
| confirmationToken | No | The token returned by the initial preview call. Required when confirm is true. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as mutating and destructive, but the description adds substantial behavioral detail: the preview call needs no password, the preview cannot verify Qi balance because of wallet reconstruction, and a confirm may fail with insufficient funds after a clean preview with the failure reported plainly and no silent retry. This goes well beyond the annotations and matches them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four dense sentences, each earning its place: core action, sibling relationship, two-step flow, and a critical failure caveat. The description is front-loaded with the purpose and then layers usage and risk information efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description provides prerequisites (wallet must come from create_qi_wallet/import_qi_wallet), the two-step invocation pattern, the need for confirmationToken and password, and the possible late insufficient-funds failure. An agent has effectively all the contextual information needed to invoke this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds a temporal dimension beyond isolated property descriptions, linking confirm, confirmationToken, and password into the two-step flow and clarifying that the first call omits confirm. It reinforces that amount is in Qi, though the schema already states this.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Convert'), resource ('Qi held in a wallet created with create_qi_wallet/import_qi_wallet'), and target ('a QUAI-ledger address'). It also distinguishes itself from siblings by explicitly naming itself 'the other half of Quai's native ledger swap' and pointing to the reverse path in send_transaction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly routes to alternatives: 'see get_conversion_rate and send_transaction's QUAI -> Qi path.' It gives precise when-to-use guidance by describing the two-step preview/confirm pattern and exactly when password and confirmationToken are required, leaving no ambiguity about the call sequence.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_qi_walletCreate Qi WalletA
Generate a new Qi-ledger wallet (Quai's UTXO-based ledger, distinct from the account-based QUAI wallets create_wallet makes) and store it encrypted under a name and password. Use this so a QUAI -> Qi conversion (see send_transaction / get_conversion_rate) has somewhere real to land that this server can later check the balance of and convert back to QUAI with convert_qi_to_quai -- without a Qi wallet, converting into Qi sends it somewhere you may have no way to use again. Internally this is an HD (mnemonic-based) wallet, since Qi requires deriving addresses and scanning unspent outputs rather than a single keypair; only the mnemonic is encrypted at rest (same V3 keystore scheme as create_wallet: scrypt + AES-128-CTR + MAC), and it is never returned in this tool's output. Tip: create_wallet can create one of these automatically alongside a new QUAI wallet (pairQiWallet, on by default) -- use this tool directly only when you want a standalone Qi wallet or a different zone/name.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already be used by another Qi wallet -- reusing a QUAI wallet's name pairs with it (see create_wallet's pairQiWallet). | |
| zone | No | The zone the receiving address should belong to. | cyprus1 |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Not stored anywhere. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
All annotations are false, so the description carries the full disclosure burden. It discloses that the wallet is HD/mnemonic-based, that only the mnemonic is encrypted at rest using a specific V3 keystore scheme, and that the mnemonic is never returned. It also warns that without a Qi wallet converted funds may be unrecoverable, a meaningful behavioral consequence beyond what annotations or schema provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is substantial yet dense: purpose, usage, internal behavior, security, and alternative routing are each covered in order with no redundant filler. The most decision-relevant information—what it creates, when to use it, and what happens without it—is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers prerequisites, consequences, alternatives, internal mechanics, and security, which is unusually complete for a create tool with no annotations and no output schema. The only gap is that it never states what the successful response contains (e.g., address, zone, or name), which an agent may need when using the returned wallet; this keeps it from a perfect score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and each parameter already has clear semantics. The description reinforces that name and password are used for storage/encryption and hints at zone/name as reasons for direct use, but it adds little beyond what the schema already documents. The baseline of 3 for full schema coverage is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('Generate a new Qi-ledger wallet'), identifies the ledger type (UTXO-based), and explicitly contrasts it with account-based QUAI wallets from create_wallet. This makes the tool's purpose unambiguous and clearly differentiates it from the closest sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states exactly when to use this tool: as a destination for QUAI->Qi conversions (citing send_transaction / get_conversion_rate) and later convert_qi_to_quai. It also names the alternative create_wallet with pairQiWallet and the conditions for direct use (standalone Qi wallet or different zone/name), giving the agent both inclusion and exclusion rules.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_walletCreate Quai WalletA
Generate a brand-new Quai (QUAI-ledger) private key and address, and store it encrypted under a name and password -- this is a custodial store: the tool remembers the wallet, you don't have to pass a raw key around again. The private key is encrypted at rest with the standard Ethereum/Web3 V3 keystore format (scrypt + AES-128-CTR + MAC, the same scheme geth and MetaMask use) and written to disk with owner-only file permissions; it is never returned in this tool's output and never logged. Because Quai addresses are location-aware, this 'grinds' (retries with fresh randomness) until the address falls in the zone you ask for (default: cyprus1). Use send_transaction with this wallet's name and password to actually spend from it. By default this ALSO creates a paired Qi-ledger wallet under the same name and password (see pairQiWallet) in the same zone, so a QUAI -> Qi conversion always has somewhere to land that you can actually check and spend from -- set pairQiWallet to false to skip that and only create the QUAI wallet.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already exist. | |
| zone | No | The zone the generated address (and paired Qi address, if created) should belong to. | cyprus1 |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Used for the paired Qi wallet too, if created. You will need this again to send from either. It is not stored anywhere. | |
| pairQiWallet | No | If true (default), also create a Qi-ledger wallet under the same name and password. Set false to create only the QUAI wallet. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes far beyond the minimal annotations (which only state readOnlyHint=false, etc.) by disclosing encryption details (V3 keystore, scrypt, AES-128-CTR, MAC), file permissions, that the private key is never returned or logged, that address generation 'grinds' until it lands in the requested zone, and that a paired Qi wallet is created by default. This is rich, actionable behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but information-dense, with no fluff. It opens with the core purpose and then systematically covers security, behavior, and usage. Some details, like the exact keystore cipher suite, could be seen as more than strictly necessary, but they serve to build trust and clarify behavior, so every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema, the description thoroughly covers what happens, what is stored, how security works, and how to spend later. The only notable gap is that it never states what the tool actually returns (e.g., wallet address or confirmation). This is a minor omission given the depth of other context, but it is still a gap for an agent that needs to use the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents all four parameters. The description adds meaningful context beyond the schema: it explains why 'zone' matters (location-aware addresses, grinding), that 'password' is reused for the paired Qi wallet, and what pairQiWallet=true actually implies for conversions. This elevates it above the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Generate') and names the precise resource ('Quai (QUAI-ledger) private key and address'), clearly distinguishing it from import_wallet by emphasizing 'brand-new' and from create_qi_wallet by explaining the paired Qi wallet behavior. The custodial-store framing and explicit tie to send_transaction leave no ambiguity about what this tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says to use send_transaction with the wallet's name and password to spend from it, and gives a concrete condition for skipping the paired Qi wallet via pairQiWallet=false. It does not explicitly contrast with import_wallet or create_qi_wallet, but the 'brand-new' wording and paired-wallet explanation imply the appropriate alternatives, so the guidance is clear if not exhaustive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_balanceGet Quai BalanceARead-only
Get the QUAI balance of an address on Quai Network. Quai is a sharded network where every address belongs to a specific zone (e.g. cyprus1, paxos2); this tool resolves the correct zone automatically from the address itself, so you never need to specify a shard yourself. Returns the balance in both raw wei and formatted QUAI. Read-only: no gas, signing, or private key required.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | The Quai address to check the balance of, e.g. 0x00... | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| blockTag | No | Optional block number, hex block number, or tag ("latest", "earliest") to query at. Defaults to "latest". |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint and openWorldHint annotations, the description adds meaningful behavioral detail: it automatically resolves the correct zone, returns balances in both raw wei and formatted QUAI, and requires no gas, signing, or private key. These details are especially useful because there is no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: the core purpose appears in the first sentence, followed by the most important behavioral caveat and return format. Every sentence contributes context without redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only query tool with three well-schema-documented parameters, the description covers all essential aspects: what is returned, the automatic zone resolution behavior, and the absence of signing/gas requirements. The lacking output schema is partially mitigated by explicitly stating the return units.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are already well documented. The description adds value by clarifying that the address parameter is sufficient and that zone/shard selection is resolved internally, which prevents an agent from searching for a nonexistent zone parameter. It does not add meaning for network or blockTag, but the schema already covers those.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the action (get), the resource (QUAI balance of an address), and the network (Quai Network). It also distinguishes itself from siblings such as get_qi_balance by explicitly naming QUAI, and from resolve_zone by stating that zone resolution is handled automatically.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use the tool: whenever an agent needs an address's QUAI balance, and it explains that no shard specification is needed. It does not explicitly mention when not to use it or name alternatives like get_qi_balance, so it stops short of full when/when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_blockGet Quai BlockARead-only
Fetch a block from a specific Quai Network chain. Quai is a hierarchy of Prime, Region, and Zone chains, so a block number alone is not globally unique -- you must also say which chain to read from (e.g. "cyprus1" for a zone, "cyprus" for its region, or "prime"). Accepts a block number (decimal or 0x-hex), a block hash (0x + 64 hex chars), or a tag ("latest", "earliest", "pending"). If you only have an address and need its zone, call resolve_zone first.
| Name | Required | Description | Default |
|---|---|---|---|
| block | Yes | Block number (decimal or 0x-hex), block hash (0x...), or tag: "latest", "earliest", "pending". | |
| shard | Yes | The chain to query. One of: prime, cyprus, paxos, hydra, cyprus1, cyprus2, cyprus3, paxos1, paxos2, paxos3, hydra1, hydra2, hydra3. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| includeTransactions | No | If true, include full transaction objects in the block instead of just their hashes. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only behavior, and the description adds non-obvious context: block numbers are not globally unique across Prime/Region/Zone, so the shard is mandatory. It also clarifies accepted identifier formats and the address-to-zone precondition. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences with no filler. The core capability and the non-obvious shard prerequisite are front-loaded, and the trailing resolve_zone pointer is directly relevant to correct invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complex chain hierarchy and the absence of an output schema, the description covers the essential operational knowledge: how to specify the chain, what identifiers are accepted, and the address-to-zone precondition. It does not describe the response shape, but that is not required to select or invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value by giving concrete chain examples (cyprus1, cyprus, prime), explaining the accepted block identifier forms, and stressing that shard disambiguates the block lookup beyond what the enum alone conveys.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description begins with 'Fetch a block from a specific Quai Network chain' — a precise verb and resource. It then unpacks the hierarchy requirement so an agent won't confuse block lookup with transaction lookup, and the shard-qualification warning distinguishes its invocation semantics from ordinary single-chain block fetchers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explains when the tool is the right call: fetching a block by number, hash, or tag on a particular shard. It also gives a concrete routing rule — if you only have an address, call resolve_zone first. It doesn't explicitly say when not to use it versus get_transaction, but the read-context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_conversion_rateGet QUAI <-> Qi Conversion RateARead-only
Quote a conversion between Quai's two native ledgers: QUAI (account-based, EVM) and Qi (UTXO-based, like Bitcoin -- this is Quai's own built-in swap, not a third-party DEX. Returns the current on-chain rate for converting a given amount in one direction, as of the latest block in the given zone. This is read-only and doesn't move anything -- to actually convert QUAI into Qi, send_transaction to a Qi-ledger address (it detects this automatically and shows the same estimate in its preview). Converting Qi into QUAI is not supported by this server yet: Qi is UTXO-based and needs a different kind of wallet (one that scans and manages unspent outputs) than the single-key wallets this server currently stores.
| Name | Required | Description | Default |
|---|---|---|---|
| zone | Yes | The zone to get the rate in -- rates can differ slightly by zone. | |
| amount | Yes | Amount to convert, in the source currency's human units (e.g. "10" QUAI, or "5" Qi). | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| direction | Yes | Which way to convert. Only quai_to_qi is currently executable via send_transaction; qi_to_quai is quote-only here. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark readOnlyHint, and the description reinforces 'read-only and doesn't move anything' while adding behavior beyond the annotation: the rate is current as of the latest block in the zone, it is on-chain, and the reverse direction is quote-only. This is valuable context even though the discussion of QI-to-QUAI support is questionable given the sibling list.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose and each sentence adds substantive context: what is quoted, how to actually convert, and the reverse-direction limitation. It is slightly long, but the extra clauses about the built-in swap and wallet differences earn their place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The definition covers the tool's domain, zone/network behavior, read-only nature, and conversion limitations. However, it does not describe the response shape or numeric rate format, and with no output schema that gap matters; it also overlooks the convert_qi_to_quai sibling when discussing QI-to-QUAI support.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents all four parameters with descriptions and enums, so the baseline is 3. The description adds useful meaning by clarifying that amounts are in the source currency's human units and that quai_to_qi is executable via send_transaction while qi_to_quai is quote-only, going beyond the enum values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence clearly names the operation ('Quote a conversion') and identifies the two native ledgers (QUAI and Qi), and the rest scopes it to an on-chain rate at the latest block in a zone. It also distinguishes this from a third-party DEX and from send_transaction, so an agent can tell what this tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives useful routing: use send_transaction to actually convert QUAI to Qi, and treat qi_to_quai as quote-only. However, it claims QI-to-QUAI conversion is not supported by this server, even though a sibling tool named convert_qi_to_quai exists; it should mention that sibling as the alternative instead of declaring the operation impossible. That makes the guidance partially misleading.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_qi_balanceGet Qi Wallet BalanceARead-only
Check the Qi balance of a wallet created with create_qi_wallet or import_qi_wallet. Unlike get_balance (QUAI), this needs the wallet's password: Qi is UTXO-based, so checking a real balance means reconstructing the wallet from its mnemonic and asking the network for its unspent outputs, not just reading a stored public address. Returns both the total and spendable balance (spendable excludes still-immature/locked outputs). Funds received via a payment code (see send_qi) are NOT included unless you pass the sender's payment code in counterpartyPaymentCodes -- those addresses are pairwise-derived between the two payment codes and can't be discovered any other way.
| Name | Required | Description | Default |
|---|---|---|---|
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | Yes | The wallet's password. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. | |
| counterpartyPaymentCodes | No | Payment codes of people who may have sent this wallet Qi via send_qi. Omit if you're only checking regular (non-payment-code) receipts. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description discloses the actual mechanism: reconstructing the wallet from its mnemonic and querying network unspent outputs rather than reading a stored public address. It also explains spendable vs total balance, maturity exclusions, and the payment-code address derivation limitation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose and then adds the differentiator, return semantics, and caveat in a logical order. Every sentence contributes meaningful guidance without filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the readOnlyHint, openWorldHint, and fully documented schema, the description covers all non-obvious calling concerns: when to use it, why the password is needed, how the balance is computed, what the return values represent, and when counterpartyPaymentCodes is mandatory. The lack of an output schema is mitigated by the explicit return description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds meaning to password by explaining why it is required (mnemonic reconstruction) and to counterpartyPaymentCodes by clarifying that payment-code addresses are pairwise-derived and otherwise undiscoverable. This goes beyond the schema's basic field descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a precise action and resource: 'Check the Qi balance of a wallet', scoped to wallets created with create_qi_wallet or import_qi_wallet. It also distinguishes itself from get_balance (QUAI), so an agent can tell them apart without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly contrasts this tool with get_balance (QUAI) and explains why the password is needed for Qi UTXO balance reconstruction. It also gives the condition for when to pass counterpartyPaymentCodes for payment-code funds, naming send_qi as the relevant sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_qi_payment_codeGet Qi Payment CodeARead-only
Get the reusable BIP-47 payment code for a Qi wallet -- this is what you hand someone so they can send you Qi via send_qi, the same way you'd hand out an address, except a payment code is not itself an on-chain address: it derives a fresh one behind the scenes for each sender. Requires the password because deriving it needs the wallet's BIP-47 key material from its mnemonic. Purely local -- no network call.
| Name | Required | Description | Default |
|---|---|---|---|
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | Yes | The wallet's password. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the readOnlyHint annotation: it explains that the operation is purely local with no network call, that it requires the password because BIP-47 key material is derived from the mnemonic, and that a fresh on-chain address is derived behind the scenes per sender. This gives the agent a clear behavioral model.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense passage with no filler. It front-loads the core action and definition, then efficiently explains the key distinction, the password requirement, and the local nature of the operation. Every sentence contributes essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only getter with a fully documented schema and relevant annotations, the description covers the important behavioral context: purpose, usage, password need, and local execution. It does not explicitly describe the return value format, but given the tool name and context, an agent can reasonably infer it returns the payment code.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, satisfying the baseline. The description adds meaningful context by explaining why password is required and that the derivation is local, which helps the agent understand the role of that parameter beyond the schema's 'The wallet's password.' It does not repeat every parameter, but it adds value where it matters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: 'Get the reusable BIP-47 payment code for a Qi wallet.' It further clarifies what the thing is for and explicitly distinguishes it from an on-chain address, so an agent can clearly understand the tool's unique purpose relative to siblings like send_qi and get_qi_balance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage context: this is what you hand someone so they can send you Qi via send_qi, analogous to handing out an address. It does not explicitly enumerate when not to use it or name alternative tools beyond referencing send_qi, but the intended use case is well conveyed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_transactionGet Quai TransactionARead-only
Look up a transaction on Quai Network by its hash and return its details (from, to, value, gas, status) plus the receipt when available. Also reports which zone/shard the transaction landed on -- Quai resolves this automatically from the hash itself, so you do not need to know it in advance.
| Name | Required | Description | Default |
|---|---|---|---|
| hash | Yes | The transaction hash to look up, e.g. 0x... | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint and openWorldHint annotations, the description specifies exactly what the tool returns, including the conditional nature of the receipt ('when available'), and explains the automatic zone-resolution behavior. This is especially valuable because there is no output schema to carry that information.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two focused sentences cover the operation, the return fields, and the important zone/shard caveat without repetition or filler. The core lookup behavior is front-loaded, and every clause adds useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple two-parameter schema, fully documented parameters, and read-only annotations, the description is complete enough for an agent to select and invoke the tool correctly. It supplies the return contract that would otherwise be missing due to the lack of an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and both hash and network parameters are already well documented in the schema. The description reinforces that lookup is by hash but adds no meaningful parameter-level meaning beyond what the schema provides, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Look up a transaction on Quai Network by its hash') and names the returned details (from, to, value, gas, status) plus receipt. The automatic zone/shard resolution distinguishes it clearly from related tools like resolve_zone and from balance/block lookups.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly establishes when to use the tool: when you need transaction details by hash. It also explicitly tells the agent it does not need to know the zone/shard in advance, preventing unnecessary calls to resolve_zone. However, it does not name alternative tools or state exclusion conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
import_qi_walletImport Qi WalletA
Import an existing Qi-ledger wallet from its BIP-39 mnemonic phrase into this server's encrypted store, under a name and password. Same encryption as create_qi_wallet (only the mnemonic is encrypted at rest, never the phrase itself in this tool's output). The receiving address for the given zone is re-derived deterministically from the phrase.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already be used by another Qi wallet -- reusing a QUAI wallet's name pairs with it (see create_wallet's pairQiWallet). | |
| zone | No | The zone to derive the receiving address in. | cyprus1 |
| mnemonic | Yes | The existing BIP-39 mnemonic phrase (space-separated words) for this Qi wallet. | |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Not stored anywhere. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only record that this is not read-only/destructive, leaving behavioral context to the description. The description adds that the mnemonic is encrypted at rest, that the phrase is not emitted in the tool's output, and that the receiving address is deterministically re-derived from the phrase, which materially informs the agent about privacy and determinism. It does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, all useful, with the core action front-loaded and the encryption/output caveat earning its place. The phrasing around 'only the mnemonic is encrypted... never the phrase itself' is slightly redundant and awkward, keeping it from top marks for polish.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool description, schema, and annotations together let an agent select parameters correctly and understand the core operation, including encryption and deterministic derivation. Since there is no output schema, the absence of a precise return-value description or duplicate-import error behavior leaves a small but real gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the description need not repeat parameter details; the baseline is 3. It adds mild semantic color by tying the zone parameter to deterministic address re-derivation, but this largely mirrors the schema's own zone description rather than providing new meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a concrete action ('Import an existing Qi-ledger wallet...'), names the source (BIP-39 mnemonic) and destination (server's encrypted store), and goes beyond the title by mentioning deterministic address derivation. It clearly identifies this as an import operation for Qi wallets, though it does not explicitly contrast it with sibling tools like import_wallet or create_qi_wallet.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use statement or named alternative; the agent must infer that an existing Qi wallet with a mnemonic should use this tool rather than create_qi_wallet. The reference to 'Same encryption as create_qi_wallet' provides context but no exclusion or alternative-routing guidance, so usage guidance remains implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
import_walletImport Quai WalletA
Import an existing Quai private key into this server's encrypted wallet store, under a name and password, so it can be used with send_transaction without passing the raw key around again. Uses the same standard Ethereum/Web3 V3 keystore encryption as create_wallet (scrypt + AES-128-CTR + MAC), written to disk with owner-only file permissions. The private key you pass in is used once to encrypt and is never returned or logged. Whichever zone the key's address belongs to is detected automatically -- Quai addresses can't be moved between zones.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | A name for this wallet (letters, numbers, "-", "_"; 1-64 chars). Must not already exist. | |
| password | Yes | Password to encrypt the wallet with (minimum 8 characters). Not stored anywhere. | |
| privateKey | Yes | The existing private key to import (0x-prefixed or not). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only indicate readOnlyHint=false, idempotentHint=false, etc., so the description carries the burden of explaining behavior. It adds meaningful details: the private key is used once, never returned, and never logged; disk files use owner-only permissions; the password is not stored; and the address's zone is auto-detected and cannot be changed. It does not describe failure behavior on duplicate names, but the schema already covers the uniqueness constraint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact: three sentences, with the core purpose front-loaded, then security-relevant details, then zone behavior. Every sentence adds distinct information without redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutating tool with no output schema, the description covers the invocation-critical aspects: purpose, parameter handling, security, and zone constraints. It does not state what the successful return value is, which would be helpful, but an agent can reasonably infer completion and use related tools like list_wallets to verify. This leaves only a minor completeness gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with all three parameters already documented (name constraints, password minimum, private key format). The description adds security context, such as 'never returned or logged,' but does not meaningfully expand parameter semantics beyond what the schema already provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb (import), a specific resource (an existing Quai private key), and the storage outcome (encrypted wallet store under a name/password). It also connects the tool to send_transaction, making its purpose concrete. It distinguishes itself from create_wallet by focusing on an existing key, and from import_qi_wallet by explicitly saying 'Quai private key'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: use this when you have an existing Quai private key and want to avoid passing it around for future send_transaction calls. However, it does not explicitly say when to prefer create_wallet, import_qi_wallet, or another sibling, nor does it state exclusions. The usage guidance is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_walletsList WalletsARead-only
List every wallet stored in this server's encrypted wallet store, both QUAI-ledger (create_wallet/import_wallet) and Qi-ledger (create_qi_wallet/import_qi_wallet): name, ledger, address, and zone for each. No password is needed -- addresses are stored in the clear alongside the encrypted key/mnemonic, only spending requires the password. Use this to find the walletName to pass to send_transaction, get_qi_balance, or convert_qi_to_quai.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the operation read-only; the description adds meaningful behavioral context by disclosing that no password is required and that addresses are stored in the clear alongside encrypted keys, with only spending requiring the password. It also specifies the output fields since no output schema exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences all carry signal: the scope, the security-relevant behavior, and the downstream use. It is front-loaded with the core action and avoids filler or repetition of the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only listing with no output schema, the description is fully self-sufficient: it names the resource, included wallet types, every returned field, the auth requirement, and downstream tools that consume the output.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters and the schema coverage is 100%, so there is nothing for the description to add. The no-parameter baseline of 4 applies; the description correctly spends no space on parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('List every wallet stored in this server's encrypted wallet store'), identifies both ledger types, and enumerates the returned fields (name, ledger, address, zone). It clearly distinguishes this tool from create/import/send siblings by framing it as the enumeration endpoint.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states the primary use ('Use this to find the walletName to pass to send_transaction, get_qi_balance, or convert_qi_to_quai') and clarifies that no password is needed. It does not explicitly contrast with alternative lookup tools, but for a listing tool the context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resolve_zoneResolve Quai ZoneARead-only
Determine which Quai Network shard/zone a given address belongs to, purely by inspecting the address (no network call). Quai uses location-based addressing: every address encodes both its zone (e.g. cyprus1, paxos2, hydra3) and its ledger (Quai account-based, or Qi UTXO-based) in its bytes, and only works within that zone. Use this before get_balance, get_transaction, or call_contract if you need to explain or confirm which part of the network an address or transaction belongs to.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | A Quai Network address, e.g. 0x00... |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already establish read-only behavior (readOnlyHint=true), and the description adds meaningful context beyond that: it performs no network call, works purely via local inspection, and treats addresses as zone-bound. This informs the agent about determinism and side-effect-freedom without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: the core purpose and key differentiator ('no network call') appear in the first sentence, followed by a concise background explanation and a clear usage note. No redundant or filler content is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter, read-only, local parsing tool, the description covers what the tool does, why it matters, and when to use it. It does not detail the exact return shape or invalid-address handling, but the absence of an output schema makes this a minor gap rather than a blocking one.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents the single 'address' parameter with 100% coverage. The description adds value by explaining that the address encodes both zone and ledger and by giving concrete zone examples ('cyprus1, paxos2, hydra3'), which helps the agent interpret the input and understand what the output represents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Determine which Quai Network shard/zone a given address belongs to'), names the resource (address), and explicitly distinguishes its mode ('purely by inspecting the address (no network call)'). It also clarifies the conceptual model (location-based addressing, zone and ledger encoded in bytes), which removes ambiguity about what the tool resolves.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit guidance on when to use this tool: 'Use this before get_balance, get_transaction, or call_contract if you need to explain or confirm which part of the network an address or transaction belongs to.' It also implies a non-network, local operation, helping the agent choose it over network-dependent siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_docsSearch Quai DocsARead-only
Search a small curated index of Quai Network developer documentation -- sharding model, location-based addressing, the quais SDK, network endpoints, wallets, faucet, contracts -- and get back relevant snippets with links to the official docs. Use this to explain a Quai concept, find the right doc page, or clarify terminology (e.g. what a 'Zone' or 'Qi ledger' is). This is an offline index, not a live web search, so for anything it doesn't cover, say so and point at docs.qu.ai directly rather than guessing.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | What to search for, e.g. "how are addresses assigned to zones" or "faucet". | |
| maxResults | No | Maximum number of results to return. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false, and the description reinforces this by noting it is 'an offline index, not a live web search.' It also discloses the limitation that results only cover topics in the curated index and instructs the agent to avoid guessing. This adds useful behavioral context beyond the minimal annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three dense sentences contain the action, the scope, concrete usage examples, and an explicit limitation/fallback path. Every sentence earns its place, and the key purpose is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter read-only search tool, the description covers what it searches, what it returns (snippets with links), when to use it, and how to handle misses. No output schema is present, but the return format is sufficiently described. The agent can invoke this tool correctly without further information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already fully documented. The description adds helpful query examples for the query parameter, which improves usability, but it does not enrich the semantics of maxResults beyond what the schema provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Search') and resource ('small curated index of Quai Network developer documentation') and states the output ('relevant snippets with links to the official docs'). It clearly distinguishes this documentation-search tool from the on-chain/sibling tools like get_transaction or get_balance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says when to use the tool ('explain a Quai concept, find the right doc page, or clarify terminology') and gives a concrete fallback behavior for uncoveed topics: say so and point at docs.qu.ai rather than guessing. This is strong, actionable usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_qiSend Qi to a Payment Code (Two-Step Confirmation)ADestructive
Send Qi from a wallet created with create_qi_wallet/import_qi_wallet to a recipient's BIP-47 payment code (see get_qi_payment_code) -- not a plain address. Qi peer-to-peer transfers work this way for privacy: a payment code is a reusable identifier from which a fresh address is derived for every send, rather than reusing one static address. Sender and recipient can be in different zones (destinationZone). Same two-step pattern as send_transaction and convert_qi_to_quai: preview first (no password needed) to see a confirmationToken, then confirm: true with that token and the wallet password to actually sign and send. The preview cannot verify the wallet's Qi balance (that needs the password), so a confirm can still fail with insufficient funds even after a clean preview.
| Name | Required | Description | Default |
|---|---|---|---|
| amount | Yes | Amount to send, in Qi (e.g. "0.5"), not Qit. | |
| confirm | No | Set true only on the second call, together with confirmationToken and password, to actually send. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | No | The sender wallet's password. Required only on the confirm: true call. | |
| walletName | Yes | The name of a Qi wallet previously created with create_qi_wallet or import_qi_wallet. | |
| destinationZone | Yes | Which zone the recipient wants to receive the funds in. | |
| confirmationToken | No | The token returned by the initial preview call. Required when confirm is true. | |
| recipientPaymentCode | Yes | The recipient's Base58 BIP-47 payment code (from get_qi_payment_code on their end). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only say readOnlyHint=false and destructiveHint=true, so the description carries the burden of explaining actual behavior. It does this thoroughly: two-step confirmation, preview requiring no password, confirm signing and sending, and the important caveat that preview cannot verify balance so confirm can fail despite a clean preview. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is detailed but every sentence earns its place. The core distinction (payment code vs plain address) is front-loaded, then the privacy rationale and two-step flow are explained compactly. It is appropriately sized for a tool with a non-obvious confirmation workflow.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema and 8 parameters, the description covers what an agent needs: wallet prerequisites, recipient payment code origin, destination zone relevance, the exact two-step call sequence, and the insufficient-funds failure mode. Nothing critical is missing for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaningful workflow semantics beyond the schema: it explains how confirm, confirmationToken, and password relate to the two-step preview/confirm pattern, and it reinforces that amount is in Qi. This exceeds the baseline without duplicating the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Send Qi from a wallet ... to a recipient's BIP-47 payment code.' It explicitly distinguishes this tool from sending to a plain address, which separates it from siblings like send_transaction. It also ties the payment code to get_qi_payment_code, making the tool's purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear when-to-use guidance: use this for Qi peer-to-peer transfers to a payment code, not a plain address. It also names sibling tools with the same two-step pattern (send_transaction, convert_qi_to_quai) and explains the preview-then-confirm workflow, including when password and confirmationToken are required.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_transactionSend QUAI (Two-Step Confirmation)ADestructive
Send QUAI from a wallet in this server's encrypted store to a recipient address. Because Quai is sharded, the recipient may be in a different zone than the sender; if so, this is an external transaction (ETX) and is handled automatically by the network, just with slower finality than a same-zone send. If the recipient is a Qi-ledger address instead of a QUAI-ledger one, this is instead a QUAI -> Qi conversion (Quai's native "swap" between its two ledgers) -- the preview will say so and estimate what you'll receive in Qi (see get_conversion_rate for a quote without sending). This tool ALWAYS requires two calls: first without "confirm" (no password needed yet) to get a preview -- amounts, zones, estimated gas, a confirmationToken; then again with confirm: true, that same confirmationToken, and the wallet's password, to actually decrypt the key, sign, and send. The password is only ever used in-memory for that one call and is never stored or logged.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | Recipient Quai address. | |
| amount | Yes | Amount to send, in QUAI (e.g. "1.5"), not wei. | |
| confirm | No | Set true only on the second call, together with confirmationToken and password, to actually broadcast. | |
| network | No | Which Quai network to query: "mainnet" or "testnet" (the Orchard testnet). Defaults to mainnet. | mainnet |
| password | No | The wallet's password. Required only on the confirm: true call, to decrypt the key and sign. | |
| walletName | Yes | The name of a wallet previously created with create_wallet or import_wallet (see list_wallets). | |
| confirmationToken | No | The token returned by the initial preview call. Required when confirm is true. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds substantial behavior beyond the annotations: the mandatory two-step confirmation, password only held in memory and never stored or logged, automatic ETX handling with slower finality, and the QUAI-to-Qi conversion path. This is exactly the kind of non-obvious behavior an agent needs, and it does not contradict the destructiveHint/readOnlyHint annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than average, but every sentence earns its place: purpose, sharding/ETX behavior, conversion context, two-call workflow, and security guarantee. It is front-loaded with the core action and then layers necessary procedural detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive, non-idempotent mutation tool with no output schema, the description is unusually complete. It tells the agent exactly what the preview returns, when the password is required, what confirmationToken is, and what happens in the ETX and conversion cases. There is very little left for the agent to infer.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description enhances this by explaining the lifecycle of confirm, password, and confirmationToken across the two required calls, and it contextualizes amount as QUAI not wei, matching but reinforcing the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb and resource: 'Send QUAI from a wallet in this server's encrypted store to a recipient address.' It goes further by distinguishing same-zone sends, ETX sends, and QUAI-to-Qi conversions, making it easy to separate from sibling tools like get_conversion_rate and send_qi.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit workflow guidance: always requires two calls, first without confirm for a preview, then with confirm, confirmationToken, and password to broadcast. It points to get_conversion_rate as a quote-without-sending alternative. However, it does not explicitly say 'for pure Qi sends use send_qi,' so the exclusion of a close sibling is left implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
17 tool updates
v0.1.0- First observed
call_contract - First observed
convert_qi_to_quai - First observed
create_qi_wallet - First observed
create_wallet - First observed
get_balance - First observed
get_block - First observed
get_conversion_rate - First observed
get_qi_balance - First observed
get_qi_payment_code - First observed
get_transaction - First observed
import_qi_wallet - First observed
import_wallet - First observed
list_wallets - First observed
resolve_zone - First observed
search_docs - First observed
send_qi - First observed
send_transaction
TDQS
Scored across 17 tools
Each tool targets a distinct resource (blocks, transactions, balances, wallets, conversions), and the QUAI vs Qi split is clearly delineated. The only minor overlap is send_transaction also covering QUAI→Qi conversion, which send_qi and convert_qi_to_quai handle separately, but descriptions clarify the paths.
All tools use a predictable verb_first snake_case pattern (get_, create_, import_, send_, resolve_, call_, search_, list_, convert_). Ledger-specific variants are consistently prefixed with qi rather than mixed into inconsistent conventions.
Seventeen tools is slightly beyond the 3–15 sweet spot, but the domain is genuinely large: two ledgers, sharded chains, wallet lifecycle, and conversion flows. Each tool addresses a real operation, so the count feels dense rather than bloated.
The surface covers querying, wallet lifecycle (create/import/list), QUAI and Qi transfers, and the native conversion both ways, which is solid for the domain. Minor gaps remain: no wallet deletion, no Qi transaction/UTXO detail lookup, and no contract state-changing sends (though send_transaction exists despite call_contract's stale description).
Maintenance
Related MCP Connectors
Provide AI agents and automation tools with contextual access to blockchain data including balance…
Read-only on-chain intelligence for AI agents on Base: balances, tokens, gas, tx status.
Read-only on-chain intelligence for AI agents on Base: balances, tokens, gas, tx status.
Unified financial infrastructure connecting AI agents directly to trade live/demo brokerage accounts, Web3 non-custodial wallets, real-time market data across equities, ETFs, crypto, forex, options, DeFi swaps, and prediction markets, institutional research feeds, and algorithmic strategy backtesters.
Related MCP Servers
- AlicenseCqualityDmaintenanceEnables AI agents to interact with cryptocurrency ecosystems through wallet management, trading operations (swaps, DCA, limit orders), staking, and multi-chain support starting with Solana.37GPL 3.0

QuickContract MCPofficial
AlicenseAqualityDmaintenanceEnables AI agents to sign contracts, release escrow, query portfolios, and verify on-chain proofs via QuickContract.1711 npmMIT- AlicenseAqualityDmaintenanceEnables AI agents to check balances and send transactions across multiple blockchains with automatic spending limit protection and policy enforcement.3MIT

xian-mcp-serverofficial
FlicenseBqualityAmaintenanceEnables AI assistants to interact with the Xian blockchain, including wallet management, token transfers, smart contract operations, DEX trading, and indexed blockchain data queries through a unified MCP and HTTP interface.35-