Code examples for InsumerAPI: on-chain verification across 37 blockchains
This is a code examples repository, not a production MCP server. The two tools (signDelegation, attest) are documented in agent-delegation-verify.js but lack formal MCP registration, structured schemas, and proper error handling. Tool descriptions are present but vague; input schemas are only partially visible in the provided source. No evidence of MCP framework scaffolding, protocol transport, or proper tool composition patterns. This appears to be a blockchain utility library with minimal MCP integration.
Attest agent standing: registration + delegation, one signed call. Uses X-API-Key when INSUMER_API_KEY is set; otherwise pays per call via x402 with DEMO_PRIVATE_KEY (no key, no signup).
Sign an ERC-7710 root delegation from principal → agent
No formal MCP server registration or framework detected. Tools appear to be inferred from code comments and examples, not explicitly registered with the MCP protocol.
Input schemas are incomplete and not properly typed. signDelegation.principal is described as 'viem account' but type is 'object' with no properties defined. attest.body has generic 'object' type with no structure.
Tool descriptions are under 100 characters and lack actionable context. 'Sign an ERC-7710 root delegation from principal → agent' does not explain WHEN to call this tool, WHAT it returns, or dependencies.
No output schemas documented. It is unclear what signDelegation or attest return, whether they return transaction hashes, signed payloads, attestation tokens, or other data. Downstream tool chaining is impossible.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-22 | F | 30 | 2026-07-28+ | v2 |
| 2026-03-09 | F | 21 | - | v1 |
Parameter descriptions are vague or incomplete. principal is 'viem account of the principal (delegator)', unclear if it expects an address string, object with public key, or something else. caveats structure is not documented.
attest description mentions 'Uses X-API-Key when INSUMER_API_KEY is set; otherwise pays per call via x402', this reveals credential/auth handling in the tool description. Credentials should never be exposed as parameters or in descriptions; use server-side injection.
No error handling documented. No guidance on what happens if delegation signing fails, if attestation validation fails, or how to recover from API errors.
attest.body is a generic object parameter with no schema validation documented. LLMs cannot determine what fields are required, what types they should be, or what valid values are.