{
  "format": "zambo.workflow-recipe",
  "version": "1.0.0",
  "updated_at": "2026-11-08",
  "title": "Check a crypto wallet before you act",
  "slug": "crypto-wallet-due-diligence",
  "purpose": "A user wants to gather current signals about a wallet and asset before deciding what to do.",
  "audience": "Traders and researchers",
  "status": "illustrative_not_executed",
  "validated_against": {
    "live_catalog": "https://zambo.dev/mcp?full=true",
    "checked_at": "2026-11-08"
  },
  "mapping_legend": {
    "$from_user": "Use the named user input; ask instead of guessing.",
    "$from_step": "Read a dotted field path from that earlier step's observed JSON result.",
    "$from_current_job": "Use the current connected job/session value.",
    "$from_each_item": "Use one item from the named user list for a step marked repeat_only_for; preserve the results in iteration order."
  },
  "client_compatibility": {
    "protocol": "MCP Streamable HTTP",
    "endpoint": "https://zambo.dev/mcp",
    "tested_clients": [],
    "note": "Not executed in a connected AI client. Client-specific compatibility is unverified."
  },
  "user_inputs": [
    "wallet_address",
    "chain",
    "asset_symbol",
    "redacted_summary"
  ],
  "input_guidance": "Inputs referenced by conditional steps are only needed when those steps apply. Ask the user before optional memory, journal, sharing, or public-repository actions.",
  "steps": [
    {
      "id": "risk",
      "tool": "scam_check",
      "action": "Check the user-supplied wallet or contract address and chain.",
      "arguments_template": {
        "target": {
          "$from_user": "wallet_address"
        },
        "chain": {
          "$from_user": "chain"
        }
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "Available threat signals for that exact address.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    },
    {
      "id": "wallet",
      "tool": "sybil_detect",
      "action": "Inspect one EVM wallet address on a supported chain when applicable.",
      "arguments_template": {
        "address": {
          "$from_user": "wallet_address"
        },
        "chain": {
          "$from_user": "chain"
        }
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "The wallet relationship signals returned; this is not a holder-set scan.",
      "run_only_when": "Only for a supported EVM wallet and chain; otherwise skip this step.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    },
    {
      "id": "price",
      "tool": "live_price",
      "action": "Read a current quote for the user-supplied asset symbol.",
      "arguments_template": {
        "symbol": {
          "$from_user": "asset_symbol"
        }
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "The current market data available at request time.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    },
    {
      "id": "log",
      "tool": "journal_log",
      "action": "Optionally log a redacted summary after user approval.",
      "arguments_template": {
        "job_id": {
          "$from_current_job": "session_id"
        },
        "executor_identity": "user-approved research",
        "action": "reviewed wallet and market signals",
        "metadata": {
          "$from_user": "redacted_summary"
        }
      },
      "authorization": {
        "mcp_access": "Public MCP endpoint; a specific tool may have separate limits or require user confirmation.",
        "user_approval": "Required before any write, sharing, payment, or external action.",
        "secrets": "Never include provider keys, passwords, or other secrets."
      },
      "expected_output": "A receipt for the reported checks.",
      "run_only_when": "Only if the user requests a journal entry and approves the redacted summary.",
      "stop_and_resume": "Stop on an error, missing permission, unexpected output, or unavailable tool. Do not claim success. Resume only from the last confirmed step using its actual returned values."
    }
  ],
  "safety": {
    "no_payment_or_external_action": true,
    "privacy": "Use only owner-approved, client-safe inputs. Public receipts may expose call details; keep sensitive data out.",
    "receipt_scope": "Receipts record Zambo-observed calls. They do not prove answer correctness, participant identity, or an outside outcome."
  },
  "pricing": [
    "Free access: 20 metered calls per UTC day, shared across tools, plus one free wrap-up handover each day.",
    "Day Pass: $0.99 for 24 hours, one payment.",
    "Zambo Pass: $29 for 30 days, one payment.",
    "Lifetime: $250 one payment while Zambo operates. It includes current Level 2 features, not future features or third-party provider costs.",
    "No subscription or automatic renewal. A pass does not pay for third-party AI plans or external services."
  ]
}