NullClear — Web3 Security & Tx Decoder
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
| prompts | {} |
| resources | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| scan_token_forensicsB | [ZERO API KEY REQUIRED] Block-pinned on-chain security, EIP-1967/1822 proxy resolution, instruction-boundary opcode disassembly, honeypot, and buy/sell tax audit for Base, Ethereum (ETH), or Solana tokens. Includes cross-chain self-healing auto-detection and <400-token deterministic provenance receipt (100 free calls/day/IP). |
| inspect_contract_abi_and_proxyA | [ZERO API KEY REQUIRED] Resolves EIP-1967, EIP-1822, and EIP-1167 proxy implementation addresses via eth_getStorageAt and extracts decoded 4-byte PUSH4 function selectors and dangerous opcodes (SELFDESTRUCT / DELEGATECALL) directly from on-chain bytecode without an Etherscan or Basescan API key. |
| decode_calldata_or_failed_txA | [ZERO API KEY REQUIRED] Universal Calldata, Custom Revert Error & Failed Transaction Post-Mortem Decoder. Accepts raw hex calldata/revert bytes (0x...) OR a 66-char transaction hash (0x...), replays reverted transactions at their exact block, decodes 4-byte signatures & parameters, and flags malicious approvals (approve / permit / setApprovalForAll). |
| simulate_transaction_preflightA | [ZERO API KEY REQUIRED] Pre-flight EVM transaction simulator. Dry-runs eth_call + eth_estimateGas on Base or Ethereum before signing/broadcasting, decodes any custom revert reason, detects unlimited drainer approvals, and outputs recommendedAgentAction ('EXECUTE_SAFE', 'ABORT_WILL_REVERT', or 'ABORT_DRAINER_APPROVAL'). |
| read_url_clean_markdownB | [ZERO API KEY REQUIRED] Converts any public web URL or documentation page into clean, token-efficient Markdown (<400 tokens) with cryptographic SHA-256 provenance and zero HTML clutter. |
| nullclear_discover_verified_x402_apisA | Search the live NullClear Ecosystem Directory for audited, high-uptime x402 & ERC-8004 APIs by topic/keyword, category, minimum uptime, or max latency. Automatically returns the NullClear-protected Zero-Loss Proxy URL ('https://api.nullclear.dev/https://...') for each endpoint. |
| nullclear_token_security_auditA | Audit any Base ERC-20 token address for honeypots, buy/sell taxes, verified bytecode, and x402 compatibility via NullClear Bazaar. Works out-of-the-box with zero configuration (10 free daily calls included). |
| nullclear_wallet_risk_scoreA | Check any wallet or agent address on Base for OFAC sanctions, Sybil wash-trading concentration flags, and ERC-8004 counterparty reputation. Works out-of-the-box with zero configuration (10 free daily calls included). |
| nullclear_crypto_market_oracleA | Fetch multi-exchange spread-verified crypto spot prices (ETH/USDC, BTC/USDC, SOL/USDC, BASE/USDC) with cryptographic NullClear invariant receipts. Works out-of-the-box with zero configuration (10 free daily calls included). |
| nullclear_safe_fetchB | Zero-config drop-in URL fetcher with automatic Canonical LLM Refusal Guard, HTTP 5xx crash guard, empty-JSON guard, and cryptographic execution receipt. Protects agents from hallucinated or broken API responses. |
| nullclear_escrow_x402_callA | Execute an x402-gated HTTP API call through NullClear deferred schema escrow. The arbiter guarantees payment is only settled if upstream returns valid data matching your schema contract. Works out-of-the-box with 10 free daily trial calls before requiring NULLCLEAR_PRIVATE_KEY. |
| nullclear_check_reputationA | Inspect an AI agent's trust score (0-100), clearing reliability, Sybil wash-trade penalty flags, and corporate KYA backing on Base |
| nullclear_verify_kya_mandateB | Verify an agent's Know Your Agent (KYA) corporate liability mandate, active validity, and whether a proposed transaction amount is within corporate limits |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| safe-x402-payment | Generate safety invariants and schema-escrow directives for an autonomous agent paying an upstream x402 seller. |
| audit-erc8004-agent | Conduct an end-to-end trust audit on an ERC-8004 agent on Base including Sybil risk and corporate KYA backing. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| NullClear Live Protocol Telemetry | Live protocol metrics: total clearings, verified settlements, voided hallucinations, and indexed agents |
| NullClear Quickstart Guide | Zero-loss x402 deferred schema escrow guide for autonomous AI agents on Base Mainnet |
TDQS
Scored across 13 tools
Several tool pairs overlap: scan_token_forensics and nullclear_token_security_audit both perform token honeypot/tax audits; nullclear_check_reputation and nullclear_wallet_risk_score both assess address reputation/Sybil/KYA signals; nullclear_safe_fetch and read_url_clean_markdown both fetch/clean URLs; decode_calldata_or_failed_tx and simulate_transaction_preflight both decode reverts and flag approvals. The descriptions add detail, but an agent could easily misselect among these overlapping security and fetch tools.
All names use snake_case, but conventions are mixed: about half are prefixed with nullclear_ while the rest are not, and some names start with verbs while others are noun phrases. The names are still readable and descriptive, but the pattern is not predictable.
Thirteen tools is within a healthy range for a Web3 security and agent-transaction toolkit. However, a few redundant pairs suggest some tools could be merged, so the set is slightly over-scoped rather than perfectly curated.
The surface covers token/contract/tx forensics, transaction simulation, wallet/agent reputation, KYA verification, x402 discovery/escrow, and URL/data safety. Minor gaps remain around direct approval revocation or broader chain coverage for non-token tools, but core workflows are well covered.