Web3 Systemic Agent

Web3 Condition-Action Trigger Agent

Autonomous Web3 Security & Governance Auditor with Two-Stage Hybrid LLM Pipeline & x402 Bazaar Micropayments

-2775C9.svg)

An autonomous Web3 agent engineered for real-time smart contract monitoring, DEX honeypot detection, and DAO governance security. Features a two-stage hybrid architecture that combines zero-cost deterministic on-chain gatekeeping with structured Gemini LLM evaluations, monetized Agent-to-Agent (A2A) via x402 gasless USDC micropayments on Base.

Operates natively as both a high-throughput FastAPI REST Service and a Model Context Protocol (MCP) Server compatible with Claude Desktop, Cursor, Smithery, Glama, and Coinbase AgentKit.

---

🌐 Live Production Service

The service is continuously deployed and operational in production on Render:

• Base URL: https://web3-systemic-agent.onrender.com
• MCP Discovery / Streamable-HTTP: https://web3-systemic-agent.onrender.com/mcp
• Deep Semantic Audit Price: 0.05 USDC (EIP-3009 Gasless)
• Default Production Network: Base Mainnet (eip155:8453) & Base Sepolia (eip155:84532)
• Agent Recipient Wallet (`PAY_TO_ADDRESS`): 0x2b7F1fd931f7f28f89e0f688Dd5Bb7a620c24b63

Canonical API Endpoints

---

🔌 Model Context Protocol (MCP) Server

The agent provides a first-class Model Context Protocol (MCP) server (src/mcp_server.py) implementing protocol specification 2024-11-05. It serves 3 free Stage 1 on-chain analysis tools to discover and qualify threats, and 1 paid Stage 2 tool for deep semantic auditing:

                                  ┌───────────────────────────────────────────────┐

│ MCP Server Tools Registry │ └───────────────────────────────────────────────┘ │ ┌─────────────────────────────────────┴─────────────────────────────────────┐ ▼ ▼ ┌───────────────────────────┐ ┌───────────────────────────┐ │ STAGE 1: FREE TOOLS │ │ STAGE 2: PAID AUDIT │ │ (Deterministic / $0.00) │ │ ($0.05 USDC via x402) │ └───────────────────────────┘ └───────────────────────────┘ │ │ ├── scan_contract_selectors ───> Discovers EVM selectors & high-risk backdoors │ ├── check_token_honeypot ───> Static bytecode analysis for tax & blacklist traps │ └── scan_dao_proposals ───> Ingests Snapshot DAO proposals & calldata payloads │ │ └─── (Upsell Recommendation Triggered) ──────────────────────────┘ ▼ deep_semantic_audit (Two-Stage Gatekeeping + Gemini LLM Reasoning)

1. Free Stage 1 Tools

scan_contract_selectors

• Purpose: Free deterministic bytecode inspection on Base or any EVM network. Discovers 4-byte function selectors and flags high-privilege administrative backdoors (transferOwnership, upgradeTo, mint, selfdestruct).
• Parameters:
• target_address *(string, required)*: Hex EVM smart contract address.
• chain_id *(integer, default 8453)*: EVM Chain ID (8453 for Base Mainnet, 84532 for Base Sepolia).
• bytecode_override *(string, optional)*: Raw contract runtime bytecode hex string for offline analysis.
• Returns: Contract status, bytecode size, extracted selectors, flagged high-risk capabilities, risk level (HIGH, LOW, EOA), and upsell recommendation.

check_token_honeypot

• Purpose: Free static bytecode analysis for DEX honeypots, rugpull traps, and malicious token contracts:
• Blacklist manipulation (isBlacklisted, setBlacklist, addToBlacklist)
• Arbitrary transfer taxes & 100% sell fee traps (setTax, setFee, setSellFee)
• Trading freeze and pause backdoors (pause, setTrading, enableTrading)
• EVM SELFDESTRUCT (opcode 0xff) drainage traps
• Parameters:
• token_address *(string, required)*: Hex EVM address of token contract.
• chain_id *(integer, default 8453)*: EVM Chain ID.
• bytecode_override *(string, optional)*: Raw token runtime bytecode for offline analysis.
• Returns: is_honeypot_suspect boolean, numeric risk_score (0.0 to 10.0), active threat categories, detailed risk flags, and audit upsell guidance.

scan_dao_proposals

• Purpose: Free scanner for recent Snapshot DAO governance proposals (Arbitrum, Aave, ENS, etc.). Extracts proposed execution targets, native Wei value transfers, and 4-byte calldata to detect governance hijack attempts.
• Parameters:
• space_id *(string, default "arbitrumfoundation.eth")*: Snapshot DAO space ENS domain.
• limit *(integer, default 3)*: Maximum proposals to fetch.
• use_curated_offline *(boolean, default false)*: If true, returns verified realistic curated proposals without outbound network calls.
• Returns: Proposal IDs, natural language titles, execution targets, calldata payloads, and audit recommendations.

2. Paid Stage 2 Tool

deep_semantic_audit

• Purpose: Two-stage autonomous security and governance audit. Executes deterministic on-chain gatekeeping followed by structured Google Gemini LLM reasoning crossing natural language claims with actual bytecode and calldata reality.
• Parameters:
• target_address *(string, required)*: Hex EVM smart contract address.
• proposal_description *(string, required)*: Natural language claim or governance proposal explanation.
• policy_prompt *(string, optional)*: Security policy or criteria to audit against.
• calldata *(string, default "0x")*: Transaction hex calldata being executed.
• chain_id *(integer, default 8453)*: EVM Chain ID.
• risk_threshold *(number, default 7.0)*: Threshold (0.0 to 10.0) above which intervention is warranted.
• x402_payment_header *(string, optional)*: Base64-encoded EIP-3009 transfer authorization satisfying $0.05 USDC payment.
• Pricing & Micropayment Flow:
• If invoked without payment credentials, returns a structured HTTP 402 payment challenge with the exact recipient address, amount ($0.05 USDC), and instructions.
• If x402_payment_header is supplied (or X402_BUYER_PRIVATE_KEY is configured in the environment), the audit executes immediately and returns a deterministic policy result (APPROVE, MANUAL_REVIEW, or REJECT) with risk scores and flagged issues.

---

🛠️ MCP Client Configuration & Installation

Claude Desktop

Add the server to your claude_desktop_config.json:

• macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
• Windows: %APPDATA%\Claude\claude_desktop_config.json

{

"mcpServers": { "web3-systemic-agent": { "command": "python", "args": ["-m", "src.mcp_server"], "cwd": "/path/to/web3-condition-action-trigger-agent", "env": { "WEB3_AGENT_URL": "https://web3-systemic-agent.onrender.com", "X402_BUYER_PRIVATE_KEY": "" } } } }

Cursor IDE

Create or edit .cursor/mcp.json in your project root or user config:

{

"mcpServers": { "web3-systemic-agent": { "command": "python", "args": ["-m", "src.mcp_server"], "env": { "WEB3_AGENT_URL": "https://web3-systemic-agent.onrender.com" } } } }

Smithery (smithery.yaml)

Install directly via Smithery.ai:

smithery run web3-systemic-agent

Or reference the local manifest:

startCommand:

type: stdio configSchema: type: object properties: web3AgentUrl: type: string default: "https://web3-systemic-agent.onrender.com" x402BuyerPrivateKey: type: string commandFunction: python: "python -m src.mcp_server"

Glama (glama.json)

Verified for the Glama MCP Directory:

{

"$schema": "https://glama.ai/mcp/schemas/server.json", "name": "web3-systemic-agent", "maintainers": ["RafaCoelho33"], "homepage": "https://web3-systemic-agent.onrender.com", "repository": "https://github.com/RafaCoelho33/web3-systemic-agent" }

Coinbase AgentKit / Streamable-HTTP

Connect via HTTP streaming to the remote MCP endpoint without local installation:

import httpx

Ingest tools manifest via Streamable-HTTP

async with httpx.AsyncClient() as client: resp = await client.get("https://web3-systemic-agent.onrender.com/mcp") tools = resp.json()["tools"]

---

🏗️ Two-Stage Architecture & x402 Micropayments

flowchart TD

Client["Client / Agent / MCP Tool"] -->|POST /evaluate or deep_semantic_audit| Gate["x402 Payment Gatekeeper\n(EIP-3009 Gasless USDC)"] Gate -->|No / Invalid Payment Header| R402["HTTP 402 Payment Required\n(0.05 USDC -> PAY_TO_ADDRESS)"] Gate -->|Valid EIP-3009 Authorization| S1["Stage 1: ChainInspector (AsyncWeb3)\nBytecode Cache + Native Balance + Selectors"] S1 -->|Condition Fails| ShortCircuit["Deterministic Short-Circuit\n(llm_invoked=False, LLM Cost = $0.00)"] S1 -->|RPC Connectivity Error| Err503["HTTP 503 Unavailable\n(Payment NOT Settled / No Charge)"] S1 -->|Condition Passes| S2["Stage 2: GeminiSemanticEvaluator\nStructured JSON Schema + Failover Models"] S2 --> Policy["enforce_decision_policy\nDeterministic Escalation: REJECT / MANUAL / APPROVE"] ShortCircuit --> Settle["Settle Payment via x402 Facilitator\nLog to SQLite Ledger (data/agent.db)"] Policy --> Settle Settle --> Resp["HTTP 200 OK: FinalAgentResponse + P