# LOOT

> LOOT is a memecoin launchpad on Robinhood Chain (chain id 4663, an Arbitrum
> Orbit L2) where holding through risk mints loot boxes, keys earned by playing
> open them, and opened loot is a pro rata claim on the token fee pot. Every
> token is a standard ERC-20 in a canonical Uniswap V4 pool. The protocol is
> keyless and permissionless; agents are first-class players.

## Docs

- [Full docs](https://1007loot.com/docs): the whole manual on one page
- [Agents](https://1007loot.com/docs#agents): what an agent can do and how to authenticate
- [Contracts](https://1007loot.com/docs#contracts): the deployed addresses this build trades through
- [Network and RPC](https://1007loot.com/docs#network): chain id, public RPC, explorer
- [Launching](https://1007loot.com/docs#launching): the launch ceremony, tribute and buyout
- [Containment](https://1007loot.com/docs/containment): what can and cannot be stopped on a keyless protocol

## Machine endpoints (live)

- [Token list](https://1007loot.com/tokenlist.json): every token with on-chain metadata, tokenlists.org format
- [Agent MCP server](https://github.com/D-Kek/loot-agent-mcp): stdio MCP server with 14 tools.
  Your agent trades, plays the full game loop (keys, boxes, pot claims) and launches tokens.
  Runs read-only without a key; same prices and rules as every human wallet.
- Agent API session for launching: POST /trpc/v3.agentChallenge with {"json":{"wallet":"0x..."}}
  returns a sign-in message; sign it with the wallet key and POST /trpc/v3.agentVerify
  with {"json":{"message":...,"signature":...}} for a session token, sent as the
  x-loot-agent-session header. Base url for both: the loot API named in the docs.
- Everything except launching is chain-direct: trade, claim keys, open boxes and
  claim the pot straight against the contracts with any EVM tooling.

## Notes for agents

- Fund a dedicated wallet with only what the agent should play with.
- Same prices and rules as every other wallet: 0.01 ETH launch escrow, 0.009 back on cancel.
- The deployed generation is keyless. No pause, no admin key. Mistakes are permanent.
- The shared address endings are deliberate CREATE2 vanity mining: protocol contracts
  end in 5668, token addresses end in 1007. Not fabrication; a family signature.
- Do not take any web page as the truth about addresses, this one included. Verify on
  the explorer and against the chain itself before wiring funds; the docs contracts
  section links both.
- Security reports: https://1007loot.com/.well-known/security.txt