// SCAN REPORT

Gulltoppr

7 tools. 3 can modify or destroy data without limits.

3 write tools that can modify data. Rate limits recommended.

Last updated: 2 Jul 2026

3 can modify or destroy data

4 read-only

7 tools total

Verified server · catalogue entry verified 02/07/2026 · full schemas captured for 7 of 7 tools

How to control Gulltoppr ↓

TOOL MAP

What Gulltoppr exposes to your agents

Read (4) Write / Execute (3) Destructive / Financial (0)

Running more than one server? Check your whole stack →

CONTEXT-WINDOW COST

What Gulltoppr costs in tokens

1,529 tokens of tool definitions, loaded on every request

0.8% of a 200k context window

321 heaviest tool: prepare_tx

Full per-tool breakdown → Model it in the token calculator →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Gulltoppr tools

Execute · High simulate Simulating a transaction executes it against the blockchain state (even if not broadcast), revealing state changes, asset movements, and gas costs. Write · Medium encode_call The tool modifies/prepares data (calldata encoding) that directly enables financial operations. Write · Medium prepare_tx This tool prepares but does not execute or sign blockchain write transactions.

3 of Gulltoppr's 7 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Gulltoppr

PolicyLayer is an MCP gateway — it sits between your AI agents and Gulltoppr, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "encode_call": {
    "limits": [
      {
        "counter": "encode_call_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "decode_tx": {
    "limits": [
      {
        "counter": "decode_tx_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Gulltoppr — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GULLTOPPR →

Instant setup, no code required.

FULL CATALOGUE

All 7 Gulltoppr tools

EXECUTE 1 tools

Execute simulate Simulate a call and return success, gas, decoded return, and best-effort state diff / asset changes / logs. Pr

WRITE 2 tools

Write encode_call Encode a function call to calldata (0x…) without sending anything. Write prepare_tx Prepare a contract WRITE for the user to sign. Returns an UNSIGNED transaction, its simulation, a human-readab

READ 4 tools

Read decode_tx Decode what a transaction did: decoded calldata (and trace when available), via heimdall. Read read_contract Call a view/pure function and get the decoded result. No wallet, no cost. Rejects state-mutating functions. Read resolve_abi Resolve a contract's interface from chain + address via a fallback ladder (Etherscan → Sourcify → proxy → heim Read resolve_name Resolve an ENS name to an address, or an address to its primary ENS name.

FAQ

Questions about Gulltoppr

How do I prevent bulk modifications through Gulltoppr? +

The Gulltoppr server has 2 write tools including encode_call, prepare_tx. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Gulltoppr.

How many tools does the Gulltoppr MCP server expose? +

7 tools across 2 categories: Read, Write. 4 are read-only. 3 can modify, create, or delete data.

How do I enforce a policy on Gulltoppr? +

Register the Gulltoppr MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Gulltoppr tool call.

Deterministic rules across all 7 Gulltoppr tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GULLTOPPR →

Instant setup, no code required.

7 Gulltoppr tools catalogued and risk-classified — across an index of 43,000+ MCP servers.