web3-tools-mcp 1.5.0 → 2.0.0

package/README.md

@@ -1,78 +1,188 @@
-# Web3 Tools MCP Server
+<div align="center">
 
-A Model Context Protocol (MCP) server for blockchain interactions using [viem](https://viem.sh/), [Etherscan](https://etherscan.io), and [Hypersync](https://docs.envio.dev/docs/HyperSync/overview).
+# web3-tools-mcp
 
-## Features
+**Your agent proposes the transaction. You approve it — in your own wallet, on your phone.** 📱
 
-- Multi-chain support (Ethereum, Arbitrum, Avalanche, Base, BNB Chain, Gnosis, Sonic, Optimism, Polygon, zkSync Era, Linea, Unichain)
-- **🔐 Transaction Signing via Browser Wallet** (MetaMask, Rabby, Coinbase Wallet)
-- Clear signing: transactions are decoded, named and simulated before you approve them
-- Smart contract interactions (read & write functions, ABI retrieval, source code)
-- Contract simulation & gas estimation (simulate transactions, estimate costs)
-- Real-time gas price tracking (legacy & EIP-1559)
-- ENS resolution (names ↔ addresses, text records, avatars)
-- Token balances & transfers (native & ERC20, batch queries)
-- Event log queries with Hypersync acceleration
-- Transaction tracing and analysis
-- Storage slot reading with type decoding
+30 MCP tools for reading any EVM network and signing transactions in *your own* wallet.
+Every transaction is decoded, named and simulated before you approve it.
 
-## Quick Start
+[![npm](https://img.shields.io/npm/v/web3-tools-mcp?color=%233856d6&label=npm)](https://www.npmjs.com/package/web3-tools-mcp)
+[![downloads](https://img.shields.io/npm/dm/web3-tools-mcp?color=%233856d6)](https://www.npmjs.com/package/web3-tools-mcp)
+[![node](https://img.shields.io/node/v/web3-tools-mcp?color=%233856d6)](https://nodejs.org)
+[![license](https://img.shields.io/npm/l/web3-tools-mcp?color=%233856d6)](LICENSE)
 
-### Claude Code
-```bash
-claude mcp add --scope user --transport stdio web3-tools -- npx -y web3-tools-mcp
-```
+</div>
+
+**Claude Desktop, Cursor, VS Code, Windsurf** and **Claude Code** launch it on your machine.
+One entry in that client's MCP config:
 
-### Claude Desktop
-Add to `config.json`:
 ```json
-{
-  "mcpServers": {
-    "web3-tools": {
-      "command": "npx",
-      "args": ["-y", "web3-tools-mcp"]
-    }
-  }
-}
+{ "mcpServers": { "web3-tools": { "command": "npx", "args": ["-y", "web3-tools-mcp"] } } }
 ```
 
-## API Keys (Optional)
+Each app keeps that config somewhere different —
+[the file paths are below ↓](#-setup). You need Node.js ≥ 20; `npx` fetches the rest.
 
-All API keys are optional. The server uses public RPCs by default. Add keys to unlock additional features:
+**ChatGPT, Grok** and **claude.ai** cannot launch anything locally — they only reach a URL.
+[Host it once ↓](#-hosting) and add it as a connector, and there is nothing running on your
+laptop at all.
 
-**Configuration options:**
-- `--etherscan-api-key` or `ETHERSCAN_API_KEY` - Enables contract ABI/source retrieval
-- `--hypersync-api-key` or `HYPERSYNC_API_KEY` - Fast event queries (10-100x faster)
-- `--alchemy-api-key` or `ALCHEMY_API_KEY` - Enhanced RPC reliability
-- `--infura-api-key` or `INFURA_API_KEY` - Additional RPC provider
-- `--custom-rpc` - Custom RPC URLs as JSON
+It runs with no API keys at all — reads on recent state work on public RPCs, and signing
+previews still decode. Keys widen what it can reach; [see what each unlocks ↓](#-setup).
 
-**Wallet relay (all optional):**
-- `WALLET_SERVER_URL` + `WALLET_TOKEN` - Use a hosted relay instead of a local one
-- `PORT`, `HOST`, `WALLET_PUBLIC_URL` - Read by the relay itself when you host it
+## 🔍 No blind signing
 
-**Get free API keys:**
-- Etherscan: [etherscan.io/apis](https://etherscan.io/apis)
-- Hypersync: [hypersync.xyz](https://hypersync.xyz)
-- Alchemy: [alchemy.com](https://alchemy.com)
-- Infura: [infura.io](https://infura.io)
+Your agent proposes. You see what it actually does, then approve it in your own wallet.
+The server never holds a private key.
 
-**Example with API keys:**
-```bash
-# Claude Code
-claude mcp add --scope user --transport stdio web3-tools -- npx -y web3-tools-mcp --etherscan-api-key YOUR_KEY --hypersync-api-key YOUR_KEY
+<table>
+<tr><th>What a wallet usually shows</th><th>What you get here</th></tr>
+<tr><td>
 
-# Environment variables
-export ETHERSCAN_API_KEY=your_key
-export HYPERSYNC_API_KEY=your_key
-npx web3-tools-mcp
+```
+To    0x87870Bca…B4fA4E2
+Data  0x617ba037000000000…
+Value 0
 ```
 
-## Supported Networks
+*Unknown contract, unknown call.*
+
+</td><td>
+
+```
+Supply · Aave V3
+Amount to supply   250 USDC
+On behalf of       you
+
+−250 USDC  →  +250 aUSDC
+184,207 gas · will succeed
+```
+
+</td></tr>
+</table>
+
+Four things go into that panel:
+
+| | | |
+| --- | --- | --- |
+| 🏷️ | **Intent** | Field labels straight from the protocol, via the [ERC-7730 registry](https://github.com/LedgerHQ/clear-signing-erc7730-registry) — 600+ contracts, 3,000+ selectors, bundled offline and refreshed weekly by a PR |
+| 🔎 | **Decoded call** | Otherwise the function and named arguments, from the verified ABI (Sourcify / Etherscan) — or recovered straight from bytecode with [WhatsABI](https://github.com/shazow/whatsabi) when a contract is unverified. Proxies resolve to their implementation |
+| 💰 | **Real amounts** | Formatted with on-chain decimals and symbol. Unlimited approvals are called out |
+| 🧪 | **Simulation** | `eth_simulateV1` reports the gas and every ERC-20 movement the transaction would cause, marked in or out. A transaction that would revert says so before you can sign it |
+
+## 📱 Sign on your phone
+
+**Your agent runs wherever it likes. Your keys stay in your pocket.**
+
+A phone can't host a local signing page — so it doesn't have to. Point the server at a
+[WalletConnect](https://dashboard.walletconnect.com) project id and it talks to your wallet
+app directly, over WalletConnect's own end-to-end encrypted relay. Nothing to load, nothing
+to host, no browser anywhere in the path.
+
+```bash
+npx web3-tools-mcp --walletconnect-project-id YOUR_PROJECT_ID
+```
+
+| | |
+| --- | --- |
+| 🌍 | **Works hosted.** A deployed server can sign on your phone with nothing running beside you — and now in your browser too, from the page it serves itself |
+| 📷 | **Pair once.** Ask the agent to run `pair_phone_wallet`. You get a QR to scan — or, when the agent is already on your phone, a tap-through link straight into your wallet app |
+| 💾 | **It sticks.** The session is stored on disk (or in Redis when hosted), so it survives restarts and redeploys. Pair once, not once a day |
+| ✍️ | **You choose each time.** Every signing tool takes a required `signWith`, so the agent asks whether this one goes to your phone or the browser. A paired phone never quietly claims a request |
+| 🧾 | **You still see the decode.** The full preview comes back in the tool response — your wallet shows its own summary, so read ours before you approve theirs |
+| 🔌 | **Drop it any time.** `disconnect_phone_wallet` clears every session and pairing |
+
+Works with **MetaMask · Rabby · Trust · Coinbase Wallet** — anything speaking WalletConnect v2.
+
+> ### ☁️ + 📱 The combination that unlocks everything
+>
+> Because signing no longer needs anything next to you, the server can live in the cloud and
+> **still** have your phone sign. Host it once and every client you own — laptop, browser,
+> the Claude phone app — drives the same instance, with approvals landing on your phone
+> wherever you are. [Hosting takes about a minute ↓](#-hosting)
+
+<details>
+<summary>💻 <b>On a laptop?</b> Sign in the wallet extension you already run — zero configuration</summary>
+
+Nothing to install and nothing to set up: the server serves a local page, and that page talks
+to whatever wallet extension your browser already has. The first transaction opens it, you
+connect MetaMask, Rabby or Coinbase once, and every later request lands in that same tab.
+
+**One relay per machine** — all your editor sessions share the page, so you connect once and
+a transaction from any session shows up there. The page and the server are both clients of a
+local relay on `127.0.0.1:3456` (next free port up to 3460), authenticated with a pairing
+token carried in the URL fragment (`#t=…`) of the link the server prints. The token lives in
+`~/.config/web3-tools-mcp/relay-token` (mode 0600) — delete it to rotate.
+
+Works with MetaMask, Rabby, Coinbase Wallet, and any EIP-1193 browser wallet. `wallet_status`
+returns the page URL any time you want to open it yourself.
+
+</details>
+
+## 🧰 Tools
+
+<details>
+<summary><b>30 tools</b> — reads, writes, ENS, logs, tracing</summary>
+
+### ✍️ Transactions & signing
+| Tool | |
+| --- | --- |
+| `write_contract` | Send a transaction calling a state-changing function, via your wallet |
+| `send_native_token` | Send ETH or a native token |
+| `send_erc20_token` | Send an ERC-20 |
+| `sign_message` | Sign a message |
+| `wallet_status` | Which signer is connected — phone or browser |
+| `pair_phone_wallet` | Pair a phone over WalletConnect, returns a QR |
+| `disconnect_phone_wallet` | Drop every WalletConnect session and pairing |
+
+The four signing tools take a required `signWith` of `phone` or `browser`. There is no
+default on purpose — the agent has to ask you, so a request never lands on a device you are
+not holding.
+
+### 📜 Contracts
+| Tool | |
+| --- | --- |
+| `read_contract` | Read state via view/pure functions — batched, no wallet, no gas |
+| `simulate_contract` | Simulate without broadcasting, with gas |
+| `get_contract_abi` | ABI, with proxy detection and verification status |
+| `get_contract_source_code` | Verified source, proxies included |
+| `get_contract_source_file` | One file out of the cached source |
+| `is_contract` | Contract or EOA |
+| `encode_function_data` | Calldata from an ABI and arguments |
+| `get_function_signature` | 4-byte selector |
+| `get_event_signature` | 32-byte topic0 |
+| `get_error_signature` | 4-byte error selector |
+
+### ⛓️ Chain data
+| Tool | |
+| --- | --- |
+| `get_balance` | Native or ERC-20 balances — batched |
+| `get_logs` | Query and decode events, with Hypersync fallback |
+| `get_block_info` | Block data |
+| `get_storage_at` | Storage slots, with type decoding |
+| `get_gas_price` | Current gas — legacy and EIP-1559 |
+| `estimate_gas` | Gas for any transaction |
+| `trace_transaction` | Call tree, VM trace, state diff |
+| `debug_call` | Trace a call without broadcasting, falling back to a local anvil fork |
+
+### 🏷️ ENS
+| Tool | |
+| --- | --- |
+| `resolve_ens_name` | Name → address |
+| `reverse_resolve_ens` | Address → name |
+| `get_ens_text_record` | Text records |
+| `get_ens_avatar` | Avatar URI |
+| `batch_resolve_ens_names` | Many names at once |
+
+</details>
+
+<details>
+<summary>🌐 <b>13 networks</b></summary>
 
 | Network | Chain ID | Hypersync |
-|---------|----------|-----------|
-| Ethereum Mainnet | 1 | ✅ |
+| --- | --- | --- |
+| Ethereum | 1 | ✅ |
 | Arbitrum | 42161 | ✅ |
 | Avalanche | 43114 | ✅ |
 | Base | 8453 | ✅ |
@@ -86,160 +196,232 @@ npx web3-tools-mcp
 | Unichain | 130 | ✅ |
 | Localhost | 1337 | ❌ |
 
-## 🔐 Browser Wallet Integration
+Adding one is a single entry in [`mcp/src/chains.ts`](mcp/src/chains.ts).
+
+</details>
 
-The server includes a built-in wallet interface for secure transaction signing without exposing private keys.
+## 🔧 Setup
 
-### How It Works
+<details open>
+<summary>🖥️ <b>Local clients</b> — where the config file lives</summary>
 
-1. When you use a transaction tool (e.g., `send_native_token`), the server automatically:
-   - Starts a local wallet relay on `http://127.0.0.1:3456` (the next free port up to 3460)
-   - Opens your browser to connect your wallet (MetaMask, Rabby, Coinbase Wallet, etc.)
-2. You connect your wallet once in the browser
-3. The transaction is decoded and simulated, then the request appears in the browser for approval
-4. Sign or reject transactions directly in your wallet
+Add the entry below to your client's MCP config, then restart the app. Every one of these
+also has a UI route that creates the file for you, which is usually quicker than finding it:
 
-The browser page and the MCP server are both clients of the relay, authenticated with a
-pairing token that travels in the URL fragment (`#t=…`) of the link the server prints.
+| Client | Config file | Or via the UI |
+| --- | --- | --- |
+| **Claude Desktop** | macOS `~/Library/Application Support/Claude/claude_desktop_config.json`<br>Windows `%APPDATA%\Claude\claude_desktop_config.json`<br>Linux `~/.config/Claude/claude_desktop_config.json` | Settings → Developer → **Edit Config** |
+| **Cursor** | `~/.cursor/mcp.json` (all projects)<br>`.cursor/mcp.json` (this project) | Settings → Tools & MCP → **Add new MCP server** |
+| **VS Code** | `.vscode/mcp.json` (workspace)<br>or your user profile | Command Palette → **MCP: Add Server** |
+| **Windsurf** | `~/.codeium/windsurf/mcp_config.json`<br>global only, no per-project | Cascade panel → **MCP** icon |
+
+```json
+{
+  "mcpServers": {
+    "web3-tools": {
+      "command": "npx",
+      "args": ["-y", "web3-tools-mcp"],
+      "env": {
+        "WALLETCONNECT_PROJECT_ID": "<your project id>",
+        "ETHERSCAN_API_KEY": "<your key>"
+      }
+    }
+  }
+}
+```
 
-**One relay per machine.** Every local MCP process looks for an existing relay on ports
-3456-3460 before starting one, so all your editor sessions share a single wallet page —
-connect once, and a transaction from any session lands in that tab. They authenticate with
-a token kept in `~/.config/web3-tools-mcp/relay-token` (mode 0600); delete it to rotate.
+Drop the whole `env` block if you have no keys yet: the server runs without them, with less
+reach. **🔑 API keys** below says exactly what each one turns on.
 
-### Before You Sign
+> ⚠️ **VS Code is the exception.** Its `mcp.json` nests servers under `"servers"`, not
+> `"mcpServers"` — paste the block above unchanged and it is silently ignored:
+>
+> ```json
+> { "servers": { "web3-tools": { "command": "npx", "args": ["-y", "web3-tools-mcp"] } } }
+> ```
 
-Each request shows what the transaction actually does, not just calldata:
+</details>
 
-- **What it means** — for contracts in the [Ledger ERC-7730 registry](https://github.com/LedgerHQ/clear-signing-erc7730-registry)
-  (651 contracts, 3253 selectors), the protocol's own intent and field labels: *Supply ·
-  Aave · Amount to supply: 250 USDC*, rather than `supply(address,uint256,address,uint16)`.
-  The index ships gzipped (~60KB) and a weekly workflow opens a PR when it changes.
-- **Decoded call** — otherwise the function name and named arguments, from the verified ABI
-  (Sourcify / Etherscan) or, for unverified contracts, from selectors recovered from bytecode
-  via [WhatsABI](https://github.com/shazow/whatsabi). Proxies resolve to their implementation.
-- **Token amounts** — formatted with on-chain decimals and symbol; unlimited approvals are
-  flagged explicitly.
-- **Simulation** — `eth_simulateV1` (falling back to `eth_call` + `estimateGas`) reports the
-  gas estimate and every ERC20 transfer the transaction would cause, marked in/out for your
-  account. A reverting transaction is shown as such before you can approve it.
+<details>
+<summary>⌨️ <b>Claude Code</b></summary>
 
-### Hosting the Wallet Page
+```bash
+claude mcp add --scope user --transport stdio web3-tools -- npx -y web3-tools-mcp
+```
 
-The relay lives in its own workspace, [`wallet/`](wallet), and depends only on express, cors
-and ws (~4MB installed, against ~180MB for the MCP server). It deploys on its own to any host
-that keeps a Node process alive and supports WebSockets — Render, Railway, Fly:
+Or, against a hosted instance:
 
 ```bash
-# On the host, from wallet/ — PORT is provided by the platform
-WALLET_TOKEN=<long random string> WALLET_PUBLIC_URL=https://wallet.example.com npm start
+claude mcp add --transport http web3-tools https://your-host/mcp \
+  --header "Authorization: Bearer <MCP_TOKEN>"
 ```
 
-Then point the MCP server at it:
+</details>
+
+<details>
+<summary>🤖 <b>ChatGPT</b>, 🦾 <b>Grok</b> and 🌐 <b>claude.ai</b> — remote only</summary>
+
+None of these can launch a local process, so they need a hosted instance:
+[deploy one ↓](#-hosting), then point the client at `https://your-host/mcp`.
+
+**ChatGPT** — Settings → Apps & Connectors → Advanced → enable Developer mode, then
+**Create**. Give it a name and the server URL. The URL has to include the `/mcp` path; that
+is the usual mistake. Pick OAuth and it walks you through the login page the server serves,
+or pick token and paste `MCP_TOKEN`. Needs a paid plan.
+
+**Grok** — [grok.com/connectors](https://grok.com/connectors) → **New Connector** →
+**Custom**, then the same URL and authentication. Needs a paid plan.
+
+**claude.ai** — Settings → Connectors → **Add custom connector**, then the URL. It uses
+OAuth, which the server implements against `MCP_TOKEN`: it shows a page asking for the
+token and issues one once you paste it.
+
+Once connected, pair your phone and approvals arrive there — no laptop in the loop at all.
+
+</details>
+
+<details>
+<summary>🔑 <b>API keys</b> — none required, but they decide how much works</summary>
+
+Nothing here is required to start, and the server will not refuse to run without any of it.
+What you lose is reach, not stability — so here is the honest version:
+
+| Key | Free from | Without it |
+| --- | --- | --- |
+| `WALLETCONNECT_PROJECT_ID` | [walletconnect](https://dashboard.walletconnect.com) | 📱 **No phone signing at all.** Browser wallet only, so a hosted instance has no way to sign |
+| `ALCHEMY_API_KEY`<br>or `INFURA_API_KEY`<br>or `CUSTOM_RPC` | [alchemy](https://alchemy.com) · [infura](https://infura.io) | **No historical state.** Public endpoints answer `403 Archive requests require a personal token`, which takes out balances, storage and calls at a past block, event ranges, and `trace_transaction` |
+| `ETHERSCAN_API_KEY` | [etherscan](https://etherscan.io/apis) | `get_contract_abi`, `get_contract_source_code` and `get_contract_source_file` refuse. Signing previews still decode — they try Sourcify first, then recover the ABI from bytecode |
+| `HYPERSYNC_API_KEY` | [envio](https://envio.dev) | Event queries fall back to plain RPC — slower, and past ranges then need one of the provider keys above |
+
+So with nothing configured you get current balances, contract reads, gas, ENS, simulation
+and browser signing. Add `WALLETCONNECT_PROJECT_ID` for your phone and one provider key for
+history, and everything above lights up.
+
+Every key has a matching flag (`--etherscan-api-key`, …), RPC selection falls back
+Alchemy → Infura → public, and `CUSTOM_RPC` overrides all of it.
+`npx web3-tools-mcp --help` lists them; [.env.example](.env.example) documents each one.
 
 ```bash
-export WALLET_SERVER_URL=https://wallet.example.com
-export WALLET_TOKEN=<the same token>
-npx web3-tools-mcp
+npx web3-tools-mcp --etherscan-api-key KEY --walletconnect-project-id ID
 ```
 
-`render.yaml` deploys the relay as-is (`rootDir: wallet`, so only its dependencies are
-installed). Anyone holding `WALLET_TOKEN` can send your browser transactions to sign, so
-treat it like a password and always serve the page over HTTPS.
+</details>
 
-Locally nothing changes: the MCP server embeds the same relay and `npm run start:wallet`
-runs it from the workspace.
+## 🚀 Hosting
 
-### Supported Wallets
+With WalletConnect nothing has to run next to you, so the server can live in the cloud and
+still have your phone sign. Run your own rather than sharing one: your wallet, your keys,
+your quota, and no multi-tenant server in the middle that could push someone else's
+transaction at your phone.
 
-- MetaMask
-- Rabby
-- Coinbase Wallet
-- Any browser wallet supporting EIP-1193
+<a href="https://render.com/deploy?repo=https://github.com/hajnalben/web3-tools-mcp"><img src="https://render.com/images/deploy-to-render-button.svg" alt="Deploy to Render" height="32"></a>
+&nbsp;
+<a href="https://fly.io/docs/launch/"><img src="https://img.shields.io/badge/Deploy%20on-Fly.io-8b5cf6?style=for-the-badge&logo=flydotio&logoColor=white" alt="Deploy on Fly.io" height="32"></a>
+
+**Render** reads `render.yaml`, generates `MCP_TOKEN` and asks for `WALLETCONNECT_PROJECT_ID`
+— genuinely one click.
+
+**Fly** ships no deploy button, so it is four commands. Worth it for a personal instance:
+volumes come with any plan, so the pairing survives redeploys without paying for a disk.
+
+```bash
+fly launch --no-deploy --copy-config
+fly volumes create data --size 1
+fly secrets set MCP_TOKEN=$(openssl rand -hex 24) WALLETCONNECT_PROJECT_ID=<id>
+fly deploy
+```
 
-### Manual Access
+<details>
+<summary>🐳 <b>Docker, and connecting a client</b></summary>
 
-Visit the wallet URL printed by the server (`wallet_status` also returns it) anytime to:
-- Check wallet connection status
-- See pending transactions
-- View transaction history
+There is a plain `Dockerfile` too, so Railway, Cloud Run or your own box work the same way:
 
-**Note:** The relay starts automatically with the MCP server. No additional setup required.
+```bash
+docker run -p 8080:8080 \
+  -e MCP_TOKEN=<long random string> \
+  -e WALLETCONNECT_PROJECT_ID=<id> \
+  web3-tools-mcp
+```
 
-## Available Tools
+Then point a client at it:
 
-### Signatures
-- `get_function_signature` - Generate 4-byte function selectors
-- `get_event_signature` - Generate 32-byte event topic0 hashes
-- `get_error_signature` - Generate 4-byte error selectors
-- `encode_function_data` - Encode a call's calldata from its ABI and arguments
+```bash
+claude mcp add --transport http web3-tools https://your-host/mcp \
+  --header "Authorization: Bearer <MCP_TOKEN>"
+```
 
-### Contract Info
-- `get_contract_abi` - Get ABI with proxy detection and verification status
-- `get_contract_source_code` - Get verified source code with proxy support
-- `get_contract_source_file` - Retrieve specific source file from cache
-- `is_contract` - Check if address is contract or EOA
+Clients that cannot send a header — claude.ai connectors, and the browser and phone apps —
+use OAuth, which the server implements against the same credential: it shows a page asking
+for `MCP_TOKEN` and issues a token once you paste it. No identity provider, no accounts. Set
+`MCP_PUBLIC_URL` to the address clients reach you on, since OAuth metadata must advertise it.
 
-### Contract Interaction
-- `call_contract_function` - Call view/pure functions (supports batch)
-- `call_contract_write` - Execute state-changing contract functions via browser wallet
-- `simulate_contract` - Simulate contract calls without broadcasting (includes gas estimate)
+> 🔐 **`MCP_TOKEN` is mandatory** and the server refuses to start without it. Anyone who
+> reaches `/mcp` while your phone is paired can push signing prompts at it. You would still
+> approve each one, but that is a phishing surface, not a feature.
 
-### Transactions (Browser Wallet Required)
-- `send_native_token` - Send ETH/native tokens to an address
-- `send_erc20_token` - Send ERC20 tokens to an address
-- `sign_message` - Sign messages with your wallet
-- `wallet_status` - Check wallet connection status
+Two things decide whether the pairing survives:
 
-### Gas & Simulation
-- `estimate_gas` - Estimate gas cost for any transaction
-- `get_gas_price` - Get current gas prices (legacy & EIP-1559)
+- ⏰ **Keep the instance awake.** Sleeping drops the WalletConnect socket, so the first
+  transaction after an idle period waits for the host to wake — about a minute on a free tier.
+- 💾 **Give the session somewhere durable.** Most hosts have an ephemeral filesystem, so a
+  plain file is lost on redeploy and you rescan the QR. Attach a volume and point
+  `XDG_CONFIG_HOME` at it (what `render.yaml` does), or set `UPSTASH_REDIS_REST_URL` and
+  `UPSTASH_REDIS_REST_TOKEN` ([Upstash](https://upstash.com) has a free plan).
 
-### ENS
-- `resolve_ens_name` - ENS name → address
-- `reverse_resolve_ens` - Address → ENS name
-- `get_ens_text_record` - Get text records (avatar, email, twitter, etc.)
-- `get_ens_avatar` - Get avatar URI
-- `batch_resolve_ens_names` - Batch resolve multiple names
+Render's free Key Value instance is not an option here — no persistence, so the pairing
+disappears at its next maintenance.
 
-### Balances
-- `get_balance` - Get native or ERC20 balances (supports batch)
+Both signers work on a hosted instance. The signing page is served from the same port as
+`/mcp`, so `https://your-host/#t=<relay token>` is your wallet page — no second service to
+deploy. Ask the agent for `wallet_status` to get the link; it is behind `MCP_TOKEN`, and the
+relay token is minted fresh each boot rather than stored, so the URL changes when you
+redeploy.
 
-### Events & Logs
-- `get_logs` - Query and decode events with Hypersync fallback
+</details>
 
-### Advanced
-- `get_storage_at` - Read storage slots with type decoding
-- `get_block_info` - Get block data (timestamp, hash, etc.)
-- `trace_transaction` - Trace execution (call tree, VM, state diff)
-- `debug_call` - Trace a call without broadcasting it, falling back to a local anvil fork
+<details>
+<summary>🖇️ <b>Host the signing page</b> separately</summary>
 
-## Advanced Configuration
+The relay is its own package, [`wallet-relay/`](wallet-relay) — express, cors and ws, about
+4 MB installed against ~180 MB for the server. It runs anywhere that keeps a Node process
+alive and supports WebSockets.
 
-### Custom RPC
 ```bash
-npx web3-tools-mcp --custom-rpc '{"mainnet":"https://my-rpc.com","base":"https://base-rpc.com"}'
+WALLET_TOKEN=<long random string> \
+WALLET_PUBLIC_URL=https://wallet.example.com \
+npx web3-wallet-relay
 ```
 
-### RPC Failover
-Automatic provider selection: Alchemy → Infura → Public RPCs
+Then point the server at it with `WALLET_SERVER_URL` and the same `WALLET_TOKEN`.
+`render.yaml` deploys it as-is. Anyone holding `WALLET_TOKEN` can send your browser a
+transaction to sign — treat it like a password, and always serve over HTTPS.
+
+Locally nothing changes: the server embeds the same relay.
 
-### Batch Operations
-Many tools support batching for improved efficiency (contract calls, balances, ENS resolution).
+</details>
 
-## Requirements
+## 🔄 How signing works
 
-- Node.js ≥ 20.0.0
-- Internet connection for RPC calls
+1. 🤖 A transaction tool runs. The server decodes and simulates the transaction first.
+2. 📨 It goes to the signer you picked — your phone, or the browser page.
+3. 👀 You read the summary and approve or reject in your wallet.
+4. 🔗 The result, with an explorer link, comes back to the agent.
 
-## Testing
+## 🛠️ Development
 
 ```bash
-npm test              # Run all tests
-npm run test:watch   # Watch mode
-npm run test:ui      # UI mode
+npm install
+npm run lint       # Biome; npm run format fixes what it can
+npm run typecheck
+npm test
 ```
 
-## License
+Two workspaces: [`mcp/`](mcp) is this server, [`wallet-relay/`](wallet-relay) is the signing
+page. [CONTRIBUTING.md](CONTRIBUTING.md) covers running a checkout against a client, the
+layout, and how to add a chain or a tool. Releases: [CHANGELOG.md](CHANGELOG.md).
+
+Requires Node.js ≥ 20.
+
+## 📄 License
 
 MIT

package/dist/anvil.d.ts

@@ -1,4 +1,4 @@
-import { ChildProcess } from 'child_process';
+import { type ChildProcess } from 'node:child_process';
 import { createPublicClient } from 'viem';
 export interface AnvilInstance {
     process: ChildProcess;

package/dist/anvil.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anvil.d.ts","sourceRoot":"","sources":["../src/anvil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,YAAY,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAQ,MAAM,MAAM,CAAA;AAG/C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,YAAY,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAA;CAC9C;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAGD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAMzD;AAuBD,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAsF5E;AAGD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAIvD;AAGD,wBAAsB,SAAS,CAAC,CAAC,EAC/B,MAAM,EAAE,WAAW,EACnB,EAAE,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAC1C,OAAO,CAAC,CAAC,CAAC,CAOZ;AAQD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,YAAY,GAAG,gBAAgB,GAAG,iBAAgC,EAC1E,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAiDlB;AAGD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,EAC1B,WAAW,CAAC,EAAE,MAAM,EACpB,MAAM,GAAE,YAAY,GAAG,gBAA+B,GACrD,OAAO,CAAC;IACT,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAC,CAmFD"}
+{"version":3,"file":"anvil.d.ts","sourceRoot":"","sources":["../src/anvil.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAS,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAAQ,MAAM,MAAM,CAAA;AAG/C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,YAAY,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAA;CAC9C;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAGD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAMzD;AAyBD,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAoF5E;AAGD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAIvD;AAGD,wBAAsB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAO/G;AAQD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,YAAY,GAAG,gBAAgB,GAAG,iBAAgC,EAC1E,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAiDlB;AAGD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,EAC1B,WAAW,CAAC,EAAE,MAAM,EACpB,MAAM,GAAE,YAAY,GAAG,gBAA+B,GACrD,OAAO,CAAC;IACT,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAC,CAmFD"}