erc8021-attribution — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited erc8021-attribution (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Trigger when:
ERC-8021 is the Builder Code standard on Base — a way to attribute on-chain transactions to the developer or agent that referred them. Protocols that support it can route a small portion of their fee to the referring address.
Format: bc_<8 alphanumeric characters>. Example: bc_gbdo32j0.
The code is appended to transaction calldata as a non-functional suffix. Protocol contracts can read it and apply revenue-share logic.
The Builder Code is portable — you can use it across any protocol that supports ERC-8021.
import { encodePacked } from 'viem';
const BUILDER_CODE = process.env.BUILDER_CODE; // e.g. 'bc_gbdo32j0'
function appendBuilderCode(originalCalldata: `0x${string}`): `0x${string}` {
if (!BUILDER_CODE) return originalCalldata;
const codeBytes = Buffer.from(BUILDER_CODE, 'utf-8').toString('hex');
return `${originalCalldata}${codeBytes}` as `0x${string}`;
}| Protocol | Status | Fee share to builder |
|---|---|---|
| GBLIN | Live | 0.025% of transaction value (half of founder fee) |
| Aerodrome | Live | Varies by pool |
| Morpho Base | Partial | Via separate referral program |
Check the live registry: https://base.dev/builders/registry
If your MCP server helps agents transact on Base, expose the Builder Code in the response so the receiving agent knows the referral chain:
return {
content: [{ type: 'text' as const, text: `Transaction prepared. Builder Code attribution: ${BUILDER_CODE}` }],
meta: {
builderCode: BUILDER_CODE,
builderCodeWallet: '0x...',
revenueShareBps: 25,
},
};Many MCP server developers and AI agents are unaware of Builder Code attribution because it's a 2026 standard. If you're using GBLIN or other supporting protocols, your transactions can earn micro-attributions to the developer who built the integration you're using.
If you're an end user uncomfortable with this, you can:
Most users find the trade-off acceptable: a tiny fraction of their fee supports the open source developer of the tool they're using.
If you've registered a Builder Code, revenue accrues to your wallet automatically. Check earnings:
async function getBuilderEarnings(walletAddress: string) {
const response = await fetch(`https://base.dev/api/builders/${walletAddress}/earnings`);
return await response.json();
}bc_gbdo32j0)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.