The agent

This is the core of HelloNear, and the part a judge can read end to end in engine/.

Design

Piece	How it is built	Where
One generic agent	A single Mastra `Agent`. Each request carries the Mind’s persona, skills, wallet token, time zone and rules in Mastra’s `RequestContext`; nothing per-Mind is hardcoded.	`engine/src/mastra.ts`, `engine/src/mind.ts`
Model	NEAR AI Cloud through `@ai-sdk/openai-compatible` with token usage on streams. Default `z-ai/glm-5.3-flash` (low reasoning effort), `deepseek-ai/DeepSeek-V4.1-Flash-1017` for reasoning, `Qwen/Qwen3-Embedding-0.6B` for memory. Chat goes through the NEAR AI SDK’s fetch so every response can be verified.	`engine/src/models.ts`
Verified replies	After the stream ends, each completion’s signature is fetched and checked against the TEE attestation (warmed at start and every 50 minutes). The badge shows the weakest step’s level; the proof is kept.	`engine/src/verify.ts`
Skills	33 equippable skills plus a built-in HelloNear guide. Each is a `SKILL.md` (frontmatter: title, blurb, tools, connections, status) turned into a Mastra skill; shared references load only when a playbook asks.	`engine/skills/*/SKILL.md`, `engine/src/skills.ts`
Tools granted by skills	The tool list is resolved per request from the equipped skills; the backend sends skill ids, never tool names. A tool no equipped skill grants does not exist for that run.	`engine/src/tools.ts` (`toolsFor`)
Approval	Tools that act get Mastra’s `requireApproval`: the run pauses into a stored snapshot until the owner answers. A per-call `needsApprovalFn` applies the owner’s rules (a payment skips the card only up to the owner’s amount and only to a listed address). `beforeApproval` re-reads the target first, so an invented id or a stale value never even gets a card.	`engine/src/tools.ts`, `engine/src/autoApprove.ts`
Writes re-check	Every write reads its target again just before writing (a Sheet cell, a Notion row, a calendar event, a Doc title) and refuses if it changed since the card was shown.	`engine/src/apps.ts`, `engine/src/calendar.ts`
Memory	Mastra Memory on Postgres + pgvector: working memory the owner can read, edit or clear, and semantic recall of past chats, scoped to the owner and the Mind’s persona version. Either can be switched off.	`engine/src/memory.ts`
Context budget	Mastra’s `TokenLimiterProcessor` drops the oldest messages first when a long thread passes the budget; the system prompt and tools stay.	`engine/src/mastra.ts`
Workflows	Builder canvases compile to Mastra dynamic workflows, including nested Ifs and End; Autopilot runs them on Mastra workflow schedules. Unattended runs never get approval tools, and user text can never become a Mastra template.	`engine/src/builder.ts`, `engine/src/workflows.ts`, `engine/src/autopilot.ts`
Secrets	The model writes `{{secrets.NAME}}`; only the tool fills it at execution, for the hosts the owner listed. Secret values and wallet tokens live in a `Map` in the request context, so they never reach prompts, traces or stored snapshots (a test scans every table).	`engine/src/secrets.ts`
Events	Mastra’s stream is normalised into HelloNear events (`tool.called`, `tool.approval_required`, `run.verified`, …) that drive the chat, the live view and the Mind Graph.	`engine/src/server.ts`, `docs/api-contract.md`
Stop	Closing the request aborts the model call, so a stopped reply stops spending tokens. Payments already sent to OutLayer are never cut halfway.	`engine/src/server.ts`

All 53 tools

A (approval) = needs the owner’s approval (or an owner rule). Reads never ask. Wallet and NEAR

Tool	A	What it does	Calls
`send_payment`	yes	Send testnet NEAR from the Mind’s wallet	Backend wallet route → OutLayer (policy checked in a TEE)
`get_balance`		The Mind’s wallet address and balance	Backend wallet route
`list_payments`		Recent payments, including refused ones and why	Backend wallet route
`split_amount`		Each person’s share of an amount, exactly, in yoctoNEAR	Local (BigInt)
`near_view_account`		Look up a testnet account: exists, balance, storage, and whether it is a contract (`isContract`, `codeHash`)	NEAR RPC `view_account`
`near_check_transfer`		Check one transaction: success, receiver, amount, whether it paid this Mind	NEAR RPC `tx`
`crosschain_quote`		Quote a USDC/USDT payment to another chain, signature checked	NEAR Intents 1Click `/v0/quote` (`dry: true`)
`buy_data`		Buy a live NEAR data report (402 pattern)	Backend shop route
`get_quotes`		Every seller’s price for a report, cheapest first, and which ones the wallet may pay	Backend shop route
`make_offer`		Offer one seller less than it quoted, once, within the owner’s budget; answers accepted or its last price, and whether to buy or walk away	Backend shop route (`offer`)
`market_search`		Search the NEAR AI Agent Market’s public catalog: agents, default price, track record, verification	market.near.ai `GET /v1/agents`
`market_quote`		Get a listed agent’s exact price for the owner’s task, unpaid (its x402 answer), and whether it is within the owner’s budget; nothing starts, nothing is paid	market.near.ai A2A `SendMessage` without payment
`sell_offer`	yes	Put something this Mind made on sale to other Minds	Backend offers route
`buy_from_mind`		Buy what another Mind sells (402 pattern)	Backend offers route

Gmail and the Mind’s own email address

Tool	A	What it does	Calls
`gmail_list_emails`		Recent emails, optionally filtered	Composio Gmail
`gmail_read_email`		Read one email	Composio Gmail
`gmail_create_draft`		Save a draft reply (no send tool exists)	Composio Gmail
`gmail_organize`	yes	Archive or label up to 20 emails; never deletes	Composio Gmail
`mail_send`	yes	Send from the Mind’s own address, only to addresses the owner typed	Backend mail route → AgentMail
`mail_list`		The Mind’s own inbox, with spam and phishing warnings	Backend mail route
`mail_read`		Read one message in the Mind’s inbox	Backend mail route
`mail_send_to_owner`	yes, in chat	Email the owner (never a chosen recipient); in Autopilot only as a step the owner placed	Backend mail route

Calendar and meetings

Tool	A	What it does	Calls
`googlecalendar_list_events`		Events with times on the owner’s clock	Composio Google Calendar
`googlecalendar_find_free_time`		Free slots of a given length within the owner’s day	Composio Google Calendar
`googlecalendar_create_event`	yes	Add an event; nobody is invited	Composio Google Calendar
`googlecalendar_create_meeting`	yes	A meeting with guests the owner named, optional Google Meet link	Composio Google Calendar + Meet
`googlecalendar_move_event`	yes	Move an event the owner organises; guests stay, nobody is emailed	Composio Google Calendar (PATCH)
`googlecalendar_block_time`		Block time today; only as a Builder step the owner placed	Composio Google Calendar
`zoom_list_meetings`		Upcoming or past Zoom meetings	Composio Zoom
`zoom_create_meeting`	yes	A Zoom meeting with a join link; nobody is invited	Composio Zoom
`zoom_meeting_summary`		Zoom’s AI summary of a past meeting	Composio Zoom

Documents and workspaces

Tool	A	What it does	Calls
`googlesheets_find_spreadsheets`		Find spreadsheets by name or content	Composio Sheets
`googlesheets_read_range`		Read cells, with row numbers	Composio Sheets
`googlesheets_append_row`	yes	Add a row (values stay text, never formulas)	Composio Sheets
`googlesheets_update_cells`	yes	Change cells, old and new value on the card; refuses a clear	Composio Sheets
`googledrive_find_files`		Search Drive by text	Composio Drive
`googledocs_read_document`		Read a Doc’s text	Composio Docs
`googledocs_create_document`	yes	Create a Doc from Markdown	Composio Docs
`googledocs_append_text`	yes	Add text at the end of a Doc; never replaces	Composio Docs
`notion_search`		Find shared pages or databases	Composio Notion
`notion_read_page`		Read a page’s text	Composio Notion
`notion_query_database`		A database’s rows, filtered and sorted	Composio Notion
`notion_create_page`	yes	Create a page under one the owner chose	Composio Notion
`notion_add_row`	yes	Add a database row	Composio Notion
`notion_update_row`	yes	Change a row’s properties, old and new on the card; never archives	Composio Notion
`slack_list_channels`		Channels the owner can see	Composio Slack
`slack_send_message`	yes	Post to a channel the owner named	Composio Slack
`outlook_list_emails`		Recent Outlook emails	Composio Outlook
`outlook_read_email`		Read one Outlook email	Composio Outlook
`outlook_create_draft`		Save a reply draft (no send)	Composio Outlook

Utilities

Tool	What it does	Calls
`get_time`	UTC and the owner’s local date, time and weekday (the model never works out a weekday itself)	Local
`add_numbers`	Exact addition, so the model never sums in its head	Local
`http_request`	Call a public HTTPS API with a key from Connections, only to the hosts the owner allowed; no redirects, private addresses refused, the key redacted from the result	The owner’s service

All 34 skills

Icons are the ones the web app shows on each skill card.

Skill	What it does	Tools it grants
Payments (`payments`)	Sends testnet NEAR and pays bills after the owner approves; quotes USDC or USDT payments to other chains (Base, Solana…) through NEAR Intents	`send_payment`, `get_balance`, `list_payments`, `get_time`, `near_view_account`, `crosschain_quote`
Recipient guard (`recipient-guard`)	Checks a recipient before paying and answers allow, warn or block with the reason: where the account came from, that it exists, lookalikes of people you already pay, first payments, and contracts	`near_view_account`, `list_payments`, `send_payment`, `get_balance`, `get_time`
Split bill (`split-bill`)	Works out each person’s share of a bill and pays each one after you approve	`add_numbers`, `split_amount`, `send_payment`, `near_view_account`, `list_payments`, `get_balance`, `get_time`
Revenue split (`revenue-split`)	Remembers your partners’ shares and pays each one their part of new income after you approve	`get_balance`, `send_payment`, `near_view_account`, `add_numbers`, `split_amount`, `list_payments`, `get_time`
Paid data (`paid-data`)	Buys small live NEAR reports, paying only after you approve	`buy_data`, `send_payment`, `list_payments`, `get_time`
Best price buyer (`best-price`)	Compares every seller of a data report, haggles once when the price is over your budget (then buys or walks away), and buys from one your wallet may pay, after you approve	`get_quotes`, `make_offer`, `buy_data`, `send_payment`, `list_payments`, `get_time`
Hire on Agent Market (`agent-market`)	Finds agents on the NEAR AI Agent Market (market.near.ai), gets a job’s exact price and picks the cheapest within your budget; hiring is paid in USDC on NEAR mainnet, so during the testnet phase it only quotes	`market_search`, `market_quote`
Price watch (`price-watch`)	Checks a data report’s price and buys only at or under your limit, after you approve	`get_quotes`, `buy_data`, `send_payment`, `add_numbers`, `get_time`
Mind as seller (`mind-seller`)	Sells what this Mind made to other Minds for testnet NEAR into its own wallet, and buys from other Minds, after you approve	`sell_offer`, `buy_from_mind`, `send_payment`, `get_balance`, `get_time`
Invoice & get paid (`invoice`)	Emails an invoice from this Mind’s address after you approve, and checks a payment only by its transaction	`mail_send`, `mail_list`, `mail_read`, `get_balance`, `near_check_transfer`, `get_time`
Treasury report (`treasury-report`)	Reports the wallet balance, what went out since yesterday and what is pending; it only reads	`get_balance`, `list_payments`, `get_time`, `add_numbers`
Spending audit (`spending-audit`)	Reviews a week of payments, with tx links for those sent and reasons for those refused; it only reads	`get_balance`, `list_payments`, `get_time`, `add_numbers`
Freeze advisor (`freeze-advisor`)	Spots trouble in the wallet and tells you when to press Freeze; it cannot freeze anything itself	`list_payments`, `get_balance`, `get_time`
NEAR account lookup (`near-account`)	Looks up NEAR testnet accounts, cannot spend	`near_view_account`
Phishing check (`phishing-detector`)	Flags emails that ask for money, keys or urgent action, or that try to give the AI orders; never acts on them	`gmail_list_emails`, `gmail_read_email`, `gmail_organize`
Confidential reader (`confidential-reader`)	Summarises sensitive emails (contracts, payslips, medical letters) into dates, amounts and obligations; signs or sends nothing	`gmail_list_emails`, `gmail_read_email`
Redact before send (`redact-before-send`)	Takes personal data the recipient does not need out of an email or web request and shows what it removed before sending	`mail_send`, `http_request`
Health journal (`health-journal`)	Keeps a private log of sleep, meals, symptoms and mood you tell it and sums up your week; gives no medical advice	`get_time`
Email helper (`email-triage`)	Reads the owner’s Gmail, saves drafts and tidies the inbox when you approve, never sends	`gmail_list_emails`, `gmail_read_email`, `gmail_create_draft`, `gmail_organize`, `get_time`
Email address (`email-address`)	Gives this Mind its own email address and sends email after the owner approves	`mail_send`, `mail_list`, `mail_read`, `get_time`, `mail_send_to_owner`
Follow-ups (`follow-ups`)	Finds unpaid invoices and unanswered promises in Gmail and drafts polite follow-ups; never sends	`get_time`, `gmail_list_emails`, `gmail_read_email`, `gmail_create_draft`
Subscriptions & bills (`subscriptions`)	Finds subscriptions, bills and due dates in Gmail, adds up the costs and adds reminders when you approve	`get_time`, `gmail_list_emails`, `gmail_read_email`, `add_numbers`, `googlecalendar_create_event`
Spending tracker (`spending-tracker`)	Reads receipts in Gmail and totals your spending by category; pays nothing	`get_time`, `gmail_list_emails`, `gmail_read_email`, `add_numbers`
Daily planner (`daily-planner`)	Time, quick math, Google Calendar events, free time, moving events, and meetings with a Google Meet link; never deletes events	`get_time`, `add_numbers`, `googlecalendar_list_events`, `googlecalendar_create_event`, `googlecalendar_create_meeting`, `googlecalendar_block_time`, `googlecalendar_find_free_time`, `googlecalendar_move_event`
Calendar conflict check (`calendar-conflicts`)	Finds double bookings and back-to-back meetings in the owner’s week and suggests moves; moves an event only when the owner asks and approves	`get_time`, `googlecalendar_list_events`, `googlecalendar_create_event`, `googlecalendar_find_free_time`, `googlecalendar_move_event`
Meeting prep (`meeting-prep`)	One read-only brief for a meeting from the calendar and recent emails with the people in it	`get_time`, `googlecalendar_list_events`, `gmail_list_emails`, `gmail_read_email`
Morning briefing (`morning-briefing`)	One read-only briefing of the day’s calendar, inbox and wallet	`get_time`, `googlecalendar_list_events`, `gmail_list_emails`, `gmail_read_email`, `get_balance`, `list_payments`
Google Sheets (`sheets`)	Finds and reads the owner’s spreadsheets, adds a row or changes cells after approval; never clears or deletes cells	`add_numbers`, `googlesheets_find_spreadsheets`, `googlesheets_read_range`, `googlesheets_append_row`, `googlesheets_update_cells`
Google Docs (`docs`)	Finds files in Google Drive, reads Google Docs, creates a new Doc or adds text at the end of one after approval; never shares, changes existing text or deletes	`googledrive_find_files`, `googledocs_read_document`, `googledocs_create_document`, `googledocs_append_text`
Notion (`notion`)	Searches and reads the owner’s Notion pages and databases, adds a page or a row, and changes a row’s properties after approval; never clears, archives or deletes	`notion_search`, `notion_read_page`, `notion_create_page`, `notion_add_row`, `notion_query_database`, `notion_update_row`
Slack (`slack`)	Lists the owner’s Slack channels and posts a message the owner approved; cannot read messages	`slack_list_channels`, `slack_send_message`
Outlook email (`outlook`)	Reads the owner’s Outlook inbox, sums it up and saves reply drafts; it never sends	`outlook_list_emails`, `outlook_read_email`, `outlook_create_draft`
Zoom (`zoom`)	Lists the owner’s Zoom meetings, schedules one with a join link after approval, and reads Zoom’s AI summary of a past meeting; never deletes, ends or invites	`zoom_list_meetings`, `zoom_create_meeting`, `zoom_meeting_summary`
HTTP request (`http-request`)	Calls the owner’s own HTTPS APIs with keys saved in Connections, only on the hosts the owner listed	`http_request`

Plus the built-in HelloNear guide, loaded by every Mind, so it can answer questions about the app without inventing screens or features.

How it is tested

Assertions are on what the engine guarantees (events, approval gating, what was sent), not on wording:

Unit: every SKILL.md parses and uses only registered tools; every list tool returns a count; amounts in BigInt; signature checks.
Live prompt tests against real NEAR AI Cloud and local Postgres, with stand-ins for the wallet, Composio and 1Click: engine/test/skills-*.test.ts (payments, recipient guard, split bill, mail, Sheets, Notion, calendar, Zoom, cross-chain quotes and more).
Secrets: tests scan every table in the mastra schema for a test secret and the wallet token.
Load tests with k6: engine/load/chat.js, engine/load/workflow.js.

Get started

Concepts

Track features

API

Smart contracts

More

Design

All 53 tools

All 34 skills

How it is tested

​Design

​All 53 tools

​All 34 skills

​How it is tested

Design

All 53 tools

All 34 skills

How it is tested