Skip to content
@gitbankio

gitbank

The secure on-chain bank inside your GitHub

Gitbank

Base MainnetSolidityTypeScriptNode.jsMCPClaude HaikuGitHub AppLicense

Gitbank

On-chain treasury for GitHub teams and AI agents. Soul-bound vaults on Base mainnet, anchored to GitHub user IDs. All operations run via @gitbankbot mentions in Issues and PRs. Zero gas for users.


Try it in the Playground

No setup required. Post a comment and the bot responds.

  1. Go to gitbankio/playground discussions
  2. Open any discussion thread
  3. Mention @gitbankbot with a command:
@gitbankbot deposit 10 USDC
@gitbankbot swap 5 USDC to WETH
@gitbankbot send 20 USDC to @alice
@gitbankbot assign 50 USDC bounty to @bob for #42

The bot parses the intent, executes the transaction on Base mainnet, and posts a receipt with the tx hash. Gitbank covers all gas.

Browse playground discussions


Bot commands

CommandDescription
@gitbankbot deposit <amount> <token>Lock USDC or WETH into your vault
@gitbankbot withdraw <amount> <token> to <address>Withdraw to any wallet address
@gitbankbot swap <amount> <from> to <to>Swap USDC/WETH inside the vault via Uniswap v3
@gitbankbot send <amount> <token> to @userTransfer to another GitHub user's vault
@gitbankbot create project <name> budget <amount>Create a project with a USDC budget
@gitbankbot assign <amount> bounty to @user for #issueAssign a bounty to a contributor
@gitbankbot launch token <name> <symbol>Launch a token on Base via Clanker (MCP only)

How it works

flowchart LR
A(["developer\nor AI agent"]) -->|"@gitbankbot assign\n@alice 80 USDC"| B["GitHub Issue / PR"]
subgraph Gitbank
C["webhook\nhandler"]
D["Claude Haiku\nNLP parser"]
E["viem relayer\nsign + submit"]
end
B -->|HMAC webhook| C
C --> D
D -->|structured intent| C
C --> E
subgraph "Base Mainnet"
F["GitVault\nContract"]
G["USDC escrowed\nfor @alice"]
end
E --> F
F --> G
H(["PR merged"]) -->|auto-payout trigger| C
G -->|release| I(["@alice\nreceives USDC"])
C -->|receipt + tx hash| B
Loading
  1. Install @gitbankbot on your repo
  2. Deploy your vault once from gitbank.io — one transaction, anchored to your GitHub ID forever
  3. All commands run inside GitHub Issues and PRs from that point

MCP server

Connect any MCP-compatible AI assistant directly to your Gitbank vault. No installation needed — just point to the live endpoint.

https://gitbank.io/api/mcp

Works with Claude Desktop, Cursor, VS Code Copilot, Grok, Kimi Code, and IBM watsonx.ai.

Read tools return live on-chain data instantly. Write tools queue a command and return a confirm code — the user posts it once on GitHub to authorize. GitHub account security (YubiKey, passkey, 2FA) is the only thing that matters.

ToolTypeDescription
get_vault_balanceReadWETH and USDC locked in the vault
get_transactionsReadRecent deposits, withdrawals, swaps, payouts
get_project_statusReadProject budget, spent, remaining, task list
list_reposReadGitHub repos with the bot installed
check_pendingReadPoll status of a pending command by confirm code
request_depositWriteLock USDC or WETH into the vault
request_withdrawWriteWithdraw to any wallet address
request_swapWriteSwap USDC/WETH via Uniswap v3
request_assign_bountyWriteAssign a bounty to a contributor for a GitHub issue
request_launch_tokenWriteLaunch a token on Base via Clanker (MCP-exclusive)

Confirm codes expire in 10 minutes and are single-use. A stolen code is useless without GitHub account access.


x402

Agent-to-agent HTTP payments on Base. No API keys. No accounts. Signed USDC via EIP-3009, settled on-chain.

import{payX402}from"@gitbank/x402";constresult=awaitpayX402("https://api.example.com/data",privateKey);

See gitbankio/x402 for the full client library.


AutoGit

AI app scaffolding. Describe an app, AutoGit generates a full React + Vite + TypeScript codebase using your own AI API key (OpenAI, Anthropic, Gemini, Groq, DeepSeek) and deploys it to GitHub Pages automatically. No terminal. No git commands.

Try it at gitbank.io/autogit or explore the community hackathon — submit a prompt template and earn 5 USDC automatically when your PR merges.


Security model

  • Soul-bound GitTokens — no transfer, no approve, no drain surface. Cannot be phished via approval exploits.
  • GitHub Permanent User ID as identity anchor — immutable integer, survives username renames, cannot be spoofed.
  • Two-signature security — every state-changing vault call requires both the user execution keypair AND a short-lived relayer ECDSA signature. A leaked execution key alone cannot drain the vault.
  • Two-step commit/reveal transfersinitTransfer + finalizeTransfer prevents front-running on inter-vault transfers.
  • On-chain swap whitelistgitSwap can only output WETH or USDC, enforced at the contract level.
  • AI agent safe — even a fully compromised agent cannot move funds without an authorized GitHub webhook event.

Deployed contracts (Base Mainnet)

ContractAddress
GitVaultFactory0xAA0a4ff46733EBaE8E658642A1314f18980fc77B
GitVault impl0x3602197A1b445AA4746c47C9D69436d9B7cF5dc9
Deployer / feeCollector0x1e660A9A1f1F08AFEF9c03c96D66260122464CF2
relayerSigner0x750E6E4C5DF3483a6235D3DDAB4087266D6EF510

Deployed May 2026. Deployer pays all gas — zero ETH required on any user address.


Repositories

RepoDescription
gitbankio/contractsSolidity smart contracts — GitVault, GitVaultFactory, soul-bound GitToken
gitbankio/serverExpress 5 API server — webhook handler, Claude NLP parser, viem relayer
gitbankio/appReact 19 + Vite 7 frontend — onboarding and vault monitoring dashboard
gitbankio/MCPMCP server — 5 read tools + 5 write tools via StreamableHTTP
gitbankio/base-pluginBase MCP skill spec — load into any AI client via URL or file upload
gitbankio/copilot-extensionGitHub Copilot extension — @gitbankbot directly in Copilot Chat
gitbankio/kimi-pluginKimi Code CLI plugin — MCP skill + manifest for one-command install
gitbankio/gitbank-xX bot — tweet replies execute on-chain vault transactions
gitbankio/x402x402 client — TypeScript library for EIP-3009 signed USDC payments
gitbankio/autogitAutoGit — AI app scaffolding with one-click GitHub Pages deploy
gitbankio/autogit-hackathonHackathon — submit a prompt template, earn 5 USDC on PR merge
gitbankio/playgroundPlayground — try bot commands without installing anything

Stack

LayerTechnology
ChainBase Mainnet (L2, chainId 8453)
ContractsSolidity 0.8.34 + OpenZeppelin 5 + EIP-1167 minimal proxy
Onchain libviem
APIExpress 5 + Node.js 24 + pino
DatabasePostgreSQL + Drizzle ORM
FrontendReact 19 + Vite 7 + Tailwind v4 + framer-motion
NLPClaude Haiku (Anthropic)
MCP@modelcontextprotocol/sdk, StreamableHTTP, stateless
AuthGitHub App (webhook HMAC + OAuth)
LanguageTypeScript 5.9

Links

License

Apache 2.0

Popular repositories Loading

  1. playground playgroundPublic

    Test @gitbankbot commands here: deposit, withdraw, swap, bounties. Open to everyone.

    3 3

  2. gitbank-sdk gitbank-sdkPublic

    Gitbank gitbank-sdk

    TypeScript 2

  3. gitbank-cli gitbank-cliPublic

    Gitbank gitbank-cli

    TypeScript 2

  4. contracts contractsPublic

    Soul-bound vault smart contracts on Base L2

    Solidity 1

  5. server serverPublic

    GitHub bot and API server for Gitbank

    TypeScript 1

  6. app appPublic

    Web interface for Gitbank, onboarding and vault monitoring

    TypeScript 1

Repositories

Showing 10 of 20 repositories

Top languages

Loading…

Most used topics

Loading…