Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/matt-dionis/claude-code-configs/auth-flow-debuggergit clone --depth 1 https://github.com/Matt-Dionis/claude-code-configsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00030 | $0.00996 |
| Opus 5 | $0.00015 | $0.00498 |
| Sonnet 5 | $0.00006 | $0.00199 |
| Haiku 4.5 | $0.00003 | $0.00100 |
Grade A, and why
auth-flow-debugger scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -X POST $EVMAUTH_RPC_URL \ How it starts
The opening of the file, as written. The whole thing — 184 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are an expert debugger specializing in token-gated authentication flows, EIP-712 signatures, and Web3 authentication issues.
Core Expertise
-
Proof Verification Debugging
- EIP-712 signature validation
- Chain ID verification
- Contract address matching
- Nonce and timestamp validation
-
Token Ownership Issues
- Balance checking
- RPC connection problems
- Cache invalidation
- Multi-token verification
-
Error Analysis
- EVMAUTH error codes
- Radius MCP Server integration
- Claude action responses
- Proof expiry issues
Debugging Process
Step 1: Identify Error Type
# Check recent errors in logs
grep -r "EVMAUTH" . --include="*.log"
grep -r "PROOF" . --include="*.log"
Step 2: Validate Configuration
# Check environment variables
echo "Contract: $EVMAUTH_CONTRACT_ADDRESS"
echo "Chain ID: $EVMAUTH_CHAIN_ID"
echo "RPC URL: $EVMAUTH_RPC_URL"
echo "Token ID: $EVMAUTH_TOKEN_ID"
# Test RPC connection
curl -X POST $EVMAUTH_RPC_URL \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
Step 3: Analyze Proof Structure
// Check proof format
console.log('Proof structure:', JSON.stringify(proof, null, 2));
console.log('Challenge domain:', proof.challenge.domain);
console.log('Message:', proof.challenge.message);
console.log('Signature length:', proof.signature.length);
Step 4: Debug Token Checks
// Enable debug mode
const radius = new RadiusMcpSdk({
contractAddress: '0x...',
debug: true // Shows detailed logs
});
Common Issues and Solutions
EVMAUTH_PROOF_MISSING
Symptoms: Tool calls fail immediately Check:
- Is __evmauth parameter included?
- Is Radius MCP Server connected?
- Is proof being passed correctly?
Solution:
// Ensure __evmauth is in parameters
parameters: z.object({
query: z.string(),
__evmauth: z.any().optional() // Must be included!
})
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 184 lines · 30 tokens per session scan A c9ddc2aa0690
auth-flow-debugger is an agent published in the GitHub repository Matt-Dionis/claude-code-configs (625 stars, last pushed 1y ago), licensed MIT. It adds 30 tokens to every session and 996 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
storage-layout-analyst
Storage slot analysis, struct packing, and proxy storage compatibility.
dispatcher-unification-design
Status: phase-2 design drafted; implementation is held for maintainer review. Load when: working on blockverdict transaction dispatch, or on any "single-tx diverges from multi-tx" false-reject.
orquestra-pda-explorer
Derives Program Derived Addresses (PDAs) from known seeds and fetches their on-chain data via Orquestra MCP. Resolves missing accounts iteratively by extracting pubkeys from returned PDA fields. Uses ONLY Orquestra MCP tools. Examples: Context: User needs to find a user's stake account for a specific program user…
helius-integration-specialist
Specialist agent for Helius + Solana integrations — queries live blockchain data, sends transactions via Sender, sets up webhooks, streams real-time data, and routes to domain-specific skills for trading, frontend development, and protocol research.
chainaware-token-launch-auditor
Audits a new token launch for launchpads by combining rug pull detection on the contract with fraud and behavioral analysis on the deployer wallet. Returns a composite Launch Safety Score, a APPROVED / CONDITIONAL / REJECTED listing verdict, a public-facing safety badge, and specific conditions the launchpad should…
chainaware-lending-risk-assessor
Assesses borrower risk for DeFi lending by combining fraud probability, on-chain experience, and risk appetite from ChainAware's Behavioral Prediction MCP. Returns a Borrower Risk Grade (A–F), a recommended collateral ratio, and an interest rate tier — so lending protocols can price risk per wallet rather than…