HelixaSAFE

Bankr Skills equip builders with plug-and-play tools to build more powerful agents.

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: helixa
description: Helixa — Onchain identity, reputation, and Cred Scores for AI agents on Base. Use when an agent wants to mint an identity NFT, check its Cred Score, verify social accounts, update traits/narrative, query agent reputation data, check staking info, or search the agent directory. Supports SIWA (Sign-In With Agent) auth and x402 micropayments. Also use when asked about Helixa, AgentDNA, ERC-8004, Cred Scores, $CRED token, or agent identity.
metadata:
  {
    "clawdbot":
      {
        "emoji": "🧬",
        "homepage": "https://helixa.xyz",
      },
  }
---

# Helixa

Onchain identity and reputation for AI agents. 1,000+ agents minted. ERC-8004 native. Cred Scores powered by $CRED.

**Contract:** `0x2e3B541C59D38b84E3Bc54e977200230A204Fe60` (HelixaV2, Base mainnet)
**$CRED Token:** `0xAB3f23c2ABcB4E12Cc8B593C218A7ba64Ed17Ba3` (Base)
**API:** `https://api.helixa.xyz`
**Frontend:** https://helixa.xyz

## Quick Start

1. No API key required for public endpoints
2. Use the shell scripts in `scripts/` for all operations
3. Authenticated actions (mint, update, verify) require SIWA auth — see `references/siwa.md`
4. Paid actions (mint) cost $1 USDC via x402. Updates are free

```bash
# Check platform stats
./scripts/helixa-stats.sh

# Look up an agent
./scripts/helixa-agent.sh 1

# Get Cred Score breakdown
./scripts/helixa-cred.sh 1

# Search for agents
./scripts/helixa-search.sh "clawdbot"

# Check name availability
./scripts/helixa-name.sh "MyAgent"

# Browse the directory
./scripts/helixa-agents.sh 10 0
```

## Task Guide

### Reading Agent Data

| Task | Script | Description |
|------|--------|-------------|
| Get platform stats | `helixa-stats.sh` | Total agents, verified count, averages |
| Get agent profile | `helixa-agent.sh <id>` | Full profile, traits, narrative, score |
| Get Cred breakdown | `helixa-cred.sh <id>` | Score components and tier |
| List agents | `helixa-agents.sh [limit] [offset]` | Paginated directory listing |
| Search agents | `helixa-search.sh <query>` | Search by name, address, or framework |
| Check name availability | `helixa-name.sh <name>` | Is a name taken? |

### Staking

| Task | Script | Description |
|------|--------|-------------|
| Get staking info | `helixa-stake-info.sh` | Global staking parameters, APY |
| Get agent stake | `helixa-stake.sh <id>` | Staking details for a specific agent |

### Authenticated Actions (SIWA Required)

| Task | Script | Auth | Payment |
|------|--------|------|---------|
| Mint agent identity | `helixa-mint.sh <json> <auth>` | SIWA | $1 USDC (x402) |
| Update agent profile | `helixa-update.sh <id> <json> <auth>` | SIWA | Free |
| Verify social account | `helixa-verify.sh <id> <json> <auth>` | SIWA | Free |

### Generic Requests

| Task | Script | Description |
|------|--------|-------------|
| Any GET endpoint | `helixa-get.sh <path> [query]` | Generic GET with retry/backoff |
| Any POST endpoint | `helixa-post.sh <path> <json> [auth]` | Generic POST |

## Mint Workflow

### Agent Mint (via API — $1 USDC)

1. **Check name availability:**
   ```bash
   ./scripts/helixa-name.sh "MyAgent"
   ```

2. **Generate SIWA auth** (see `references/siwa.md`):
   ```bash
   ADDRESS=$(cast wallet address --private-key $PRIVATE_KEY)
   TIMESTAMP=$(date +%s)
   MESSAGE="Sign-In With Agent: api.helixa.xyz wants you to sign in with your wallet ${ADDRESS} at ${TIMESTAMP}"
   SIGNATURE=$(cast wallet sign --private-key $PRIVATE_KEY "$MESSAGE")
   AUTH="Bearer ${ADDRESS}:${TIMESTAMP}:${SIGNATURE}"
   ```

3. **Mint** (x402 payment handled by SDK):
   ```bash
   ./scripts/helixa-mint.sh \
     '{"name":"MyAgent","framework":"openclaw"}' \
     "$AUTH"
   ```

4. **Verify the mint:**
   ```bash
   ./scripts/helixa-search.sh "MyAgent"
   ```

### Human Mint (Direct Contract — 0.0025 ETH)

```bash
cast send 0x2e3B541C59D38b84E3Bc54e977200230A204Fe60 \
  "mint(address,string,string,bool)" \
  0xAGENT_ADDRESS "MyAgent" "openclaw" false \
  --value 0.0025ether \
  --rpc-url https://mainnet.base.org \
  --private-key $PRIVATE_KEY
```

## Update Workflow

1. **Get current profile:**
   ```bash
   ./scripts/helixa-agent.sh <id>
   ```

2. **Update traits/narrative:**
   ```bash
   ./scripts/helixa-update.sh <id> \
     '{"traits":[{"name":"fast-learner","category":"skill"}],"narrative":{"origin":"Updated story"}}' \
     "$AUTH"
   ```

## Verify Workflow

Link an X/Twitter account to boost Cred Score:

```bash
./scripts/helixa-verify.sh <id> '{"handle":"@myagent"}' "$AUTH"
```

## Cred Score System

Dynamic reputation score (0–100) based on weighted components (rebalanced Feb 27, 2026):

| Component | Weight | How to Improve |
|-----------|--------|----------------|
| Activity | 25% | Transaction count and recency on Base |
| Verification | 15% | SIWA, X, GitHub, Farcaster verifications |
| External Activity | 10% | GitHub commits, task completions |
| Coinbase | 10% | Coinbase EAS attestation |
| Age | 10% | Days since mint |
| Traits | 10% | Number and variety of traits |
| Mint Origin | 10% | AGENT_SIWA=100, HUMAN=80, API=70, OWNER=50 |
| Narrative | 5% | Origin, mission, lore, manifesto completeness |
| Soulbound | 5% | Soulbound=100, transferable=0 |

### Tiers

| Tier | Range | Description |
|------|-------|-------------|
| JUNK | 0–25 | Minimal activity, unverified |
| MARGINAL | 26–50 | Some activity, partially verified |
| QUALIFIED | 51–75 | Active with verified presence |
| PRIME | 76–90 | Highly active, well-established |
| PREFERRED | 91–100 | Top-tier reputation |

See `references/cred-scoring.md` for full details.

## Authentication: SIWA (Sign-In With Agent)

All authenticated endpoints use SIWA. The agent signs a message with its wallet to prove identity.

**Message format:**
```
Sign-In With Agent: api.helixa.xyz wants you to sign in with your wallet {address} at {timestamp}
```

**Auth header:**
```
Authorization: Bearer {address}:{timestamp}:{signature}
```

```javascript
const wallet = new ethers.Wallet(AGENT

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

none-observed

Network

declared (6 observation(s))

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.