Starknet

​

What to send

​

How calls are decoded

​

STRK20 private operations

• apply_actions, compile_actions and execute_writes are value-moving pool calls. The payload may carry a strk20 object that declares what the call does: {action: "shield" | "unshield" | "private-transfer" | "private-swap", token, amount, toToken, minReceived, recipient, venue}. With it, the call is classified transfer and summarized from the declaration, which the judge is told is the client’s claim and not checked against the proof. Without it, the call is classified unknown.
• grant_role, revoke_role, set_open_note_screening_policy, set_auditor_public_key and set_screener_public_key are pool administration, classified permission and flagged as never part of a user’s transfer. Any other pool entrypoint is unknown.
• Calls to the anonymizer contracts (AVNU PrivacySwapHelper, the Ekubo swap anonymizer, the Endur deposit anonymizer and the Privacy Bridge in both directions) are classified transfer. For swaps, a note says the trade size is visible on chain: a private swap unlinks the wallet from the trade but does not hide the amount.
• A declared shield also notes that a third-party screener signs deposits and can refuse one.

​

No live lookup

​

Example

const action = {
  calls: [
    {
      contractAddress: "0x04718f5a0fc34cc1af16a1cdee98ffb20c31f5cd61d6ab07201858f4287c938d", // STRK
      entrypoint: "transfer",
      // recipient, amount low, amount high: 10 STRK
      calldata: ["0x0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef", "0x8ac7230489e80000", "0x0"],
    },
  ],
};

const res = await fetch("https://harness.chance.cc/api/v1/intent", {
  method: "POST",
  headers: { "x-api-key": process.env.CHANCE_API_KEY!, "Content-Type": "application/json" },
  body: JSON.stringify({
    intent: "Pay the design contractor in STRK, at most 50 STRK per payment.",
    venue: "starknet",
    action,
  }),
});
const result = await res.json();
if (result.verdict !== "ALLOW") throw new Error(result.reasoning ?? result.error);
// Only now execute the calls from the account.

​

From an MCP client