x402-agent-services
Registry code: 4033a50641489efd
AI Agent Utility Layer for agent safety, web monitoring, crypto research and tool discovery.
from a public catalogue that lists it, not from the operator
- endpoint
- https://mcp.dropenginehq.com/api/paid-mcp
- protocol
- http-sse ·2025-06-18
- authentication
- none observed
- public key
- none — nobody has proven they own this listing · is it yours? claim it
- karma
- 10 · newcomer
- Is x402-agent-services live?
- Yes — it answered the hub's last check (checked 56m ago). It answered 100% of checks over the last 30 days.
- Is x402-agent-services free to use?
- Yes — the hub reached it with no key and no payment.
- What tools does x402-agent-services have?
- 24 tools: check_change, check_package, check_url, agent_spend_governor, agent_permission_vault, agent_outcome_receipt, invoice_preflight_quote, preflight_action, ….
- Is x402-agent-services safe to connect?
- The hub found no text in its card or tool descriptions aimed at the agent reading them. It measures what the server answers, not its code — grant it only the access its tools need.
90 days 100%· all time 100%
last good check
of 24 tools
- unknown → live
Calls placed through this hub's router, from its own receipts, and USDC settlements on base into the address this listing's priced doors name, read off the chain. Every caller and every payer counts the same; the chain total is counted from three payers. The address stands behind 20 doors on this origin, so the chain figures are the operator's. How it is counted.
through this hub
successful
what callers paid
distinct
last 2026-10-23
no flags
Access was read off the card rather than seen on the wire: inferred: the handshake, the tool list and a call without arguments went through with no key and no payment asked; no tool was run
Price is per tool, not per server. An agent whose handshake is open can hold tools that demand a key or a payment, and one figure for the whole agent sends callers into a wall.
backtest_strategy 0.1 USDC paid never probed
Paid Strategy Backtest ($0.10 USDC). Tests built-in long-only spot strategies against bounded public Binance OHLCV history. Signals form at candle close and execute at the next candle open. Applies configured fees/slippage; accepts declarative parameters only and never executes user code. Historical results are not predictions. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "market", "timeframe", "start", "end", "initial_capital", "strategy" ], "properties": { "end": { "type": "string", "format": "date", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$" }, "start": { "type": "string", "format": "date", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$" }, "market": { "type": "string", "pattern": "^[A-Z0-9]{4,20}$" }, "fee_bps": { "type": "number", "default": 10, "maximum": 500, "minimum": 0 }, "strategy": { "type": "object", "required": [ "type" ], "properties": { "type": { "enum": [ "moving_average_crossover", "rsi_mean_reversion", "momentum", "breakout", "buy_and_hold" ], "type": "string" }, "parameters": { "type": "object", "default": {}, "propertyNames": { "type": "string" }, "additionalProperties": { "type": "number" } } }, "additionalProperties": false }, "timeframe": { "enum": [ "1h", "4h", "1d" ], "type": "string" }, "slippage_bps": { "type": "number", "default": 5, "maximum": 500, "minimum": 0 }, "initial_capital": { "type": "number", "maximum": 100000000, "minimum": 10 } }, "additionalProperties": false }arguments 83 linesaction_lock 0.001 USDC paid never probed
Action Lock ($0.001 USDC): Prevent duplicate side effects across agent retries, crashes, and concurrent workers. If an action has side effects and may be retried or executed concurrently, acquire before execution. Complete after confirmed success; release after confirmed failure. Use before payments, purchases, orders, emails, transactions, writes, and external tool actions. Avoid pure reads or equivalent provider-side idempotency. An expired lease can hide a completed external effect; reconcile first. Agent Action Gate asks whether an action should be performed; Action Lock asks whether it is already running or completed. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "oneOf": [ { "type": "object", "required": [ "operation", "action_id" ], "properties": { "scope": { "type": "string", "default": "default", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 80, "minLength": 1 }, "action_id": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 1 }, "operation": { "type": "string", "const": "acquire" }, "payload_hash": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 16 }, "lease_ttl_seconds": { "type": "integer", "default": 60, "maximum": 3600, "minimum": 5 }, "dedupe_ttl_seconds": { "type": "integer", "default": 86400, "maximum": 2592000, "minimum": 60 } }, "additionalProperties": false }, { "type": "object", "required": [ "operation", "action_id", "lease_token" ], "properties": { "scope": { "type": "string", "default": "default", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 80, "minLength": 1 }, "action_id": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 1 }, "operation": { "type": "string", "const": "complete" }, "lease_token": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "payload_hash": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 16 } }, "additionalProperties": false }, { "type": "object", "required": [ "operation", "action_id", "lease_token" ], "properties": { "scope": { "type": "string", "default": "default", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 80, "minLength": 1 }, "action_id": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 1 }, "operation": { "type": "string", "const": "release" }, "lease_token": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "payload_hash": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 16 } }, "additionalProperties": false }, { "type": "object", "required": [ "operation", "action_id" ], "properties": { "scope": { "type": "string", "default": "default", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 80, "minLength": 1 }, "action_id": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 1 }, "operation": { "type": "string", "const": "status" }, "payload_hash": { "type": "string", "pattern": "^[a-zA-Z0-9._~:-]+$", "maxLength": 128, "minLength": 16 } }, "additionalProperties": false } ], "$schema": "https://json-schema.org/draft/2020-12/schema" }arguments 160 linesmcp_server_inspect 0.01 USDC paid never probed
MCP server health check ($0.01 USDC on Base): connect to any public MCP endpoint over HTTPS, confirm it is reachable, list its tool names and input-schema summaries, compare against expected tool names, and flag risky or misleading tool descriptions. Read-only: inspected tools are never called. Use it before wiring an unknown MCP server into an agent, or to verify your own deployment. Pair with check_url to pre-screen a suspicious endpoint. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "endpoint" ], "properties": { "endpoint": { "type": "string", "format": "uri", "maxLength": 2048 }, "expected_tools": { "type": "array", "items": { "type": "string", "maxLength": 128, "minLength": 1 }, "maxItems": 100 } }, "additionalProperties": false }arguments 24 linesscan_content 0.005 USDC paid never probed
Paid Untrusted Content Security Layer ($0.005 USDC on Base). Scan untrusted text, HTML, Markdown, email, document text, API responses, and tool outputs before your agent adds them to context, follows their instructions, or acts. Returns risk score, risk categories, recommendation, and sanitized plain text when possible. Bounded deterministic local scanning; no external LLM or provider call. Maximum 100000 characters. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "content" ], "properties": { "source": { "type": "string", "maxLength": 2048 }, "content": { "type": "string", "minLength": 1 }, "content_type": { "enum": [ "text", "html", "markdown", "email", "tool_output", "api_response", "document_text" ], "type": "string" } }, "additionalProperties": false }arguments 30 linessimulate_transaction 0.02 USDC paid never probed
Paid Transaction Preflight ($0.02 USDC on Base). Simulates an unsigned Base transaction before an autonomous agent signs or broadcasts it. Returns RPC execution/revert status, gas estimate, known top-level method decoding, direct ERC-20 transfer/approval calldata, unlimited approval warnings, and machine-readable risk. Standard JSON-RPC does not expose full internal token state changes; do not treat calldata decoding as a complete state diff. Never send a private key or seed phrase. This tool never signs, holds keys, or broadcasts. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "chain", "from", "to", "value", "data" ], "properties": { "to": { "type": "string", "pattern": "^0x[a-fA-F0-9]{40}$" }, "data": { "type": "string", "pattern": "^0x(?:[a-fA-F0-9]{2})*$", "maxLength": 131074 }, "from": { "type": "string", "pattern": "^0x[a-fA-F0-9]{40}$" }, "chain": { "enum": [ "base", "base-sepolia" ], "type": "string" }, "value": { "type": "string", "pattern": "^(?:0|[1-9]\\d*)$", "maxLength": 78 } }, "additionalProperties": false }arguments 39 linescheck_wallet 0.02 USDC paid never probed
Paid Wallet Risk Check ($0.02 USDC on Base). Call before an agent sends funds to, accepts value from, grants an approval to, or interacts with an unfamiliar address. Checks whether the address is a wallet or contract and reads basic on-chain metadata. Sanctions, scam, drainer, mixer, and malicious-address intelligence are unknown unless a trusted provider is configured; without one, the result is cautious and low-confidence, not a safety certification. Never send private keys or seed phrases. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "chain", "address" ], "properties": { "chain": { "enum": [ "base", "base-sepolia" ], "type": "string" }, "address": { "type": "string", "pattern": "^0x[a-fA-F0-9]{40}$" } }, "additionalProperties": false }arguments 22 linesroute_tool 0.002 USDC paid never probed
Paid Agent Tool Router ($0.002 USDC on Base). Finds and ranks machine-payable MCP services and x402 HTTP endpoints before your agent chooses or pays a provider. Uses structured capability matching, hard constraints, price, observed latency/reliability, and cold-start trust confidence; no LLM call is required. Returns the best tool, confidence, reason, price, relevant workflow, next-best option, and a context-aware recommended_next when useful. This is recommendation metadata only: it never invokes the selected provider or makes a second payment. Without X402_BAZAAR_DISCOVERY_URLS, results come only from this platform's local service registry and are marked degraded. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "capability" ], "properties": { "query": { "type": "string", "maxLength": 300 }, "capability": { "type": "string", "pattern": "^[a-zA-Z][a-zA-Z0-9_.-]*$", "maxLength": 80, "minLength": 2 }, "constraints": { "type": "object", "properties": { "max_price_usd": { "type": "number", "maximum": 1000000, "minimum": 0 }, "max_latency_ms": { "type": "integer", "maximum": 600000, "minimum": 1 }, "min_success_rate": { "type": "number", "maximum": 1, "minimum": 0 } }, "additionalProperties": false }, "preferences": { "type": "object", "properties": { "optimize_for": { "enum": [ "cheapest", "fastest", "quality", "reliability", "balanced" ], "type": "string" } }, "additionalProperties": false }, "completed_tools": { "type": "array", "items": { "type": "string", "maxLength": 128, "minLength": 1 }, "maxItems": 30 } }, "additionalProperties": false }arguments 66 linesget_live_quote 0.01 USDC paid never probed
Paid Live Product Quote ($0.01 USDC). Retrieves explicitly published product price and stock from a public HTTPS product page before an agent buys; shipping, tax and unknown values remain null. Never purchases. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "url" ], "properties": { "url": { "type": "string", "format": "uri", "maxLength": 4096 }, "variant": { "type": "object", "properties": { "size": { "type": "string", "maxLength": 80 }, "color": { "type": "string", "maxLength": 80 } }, "additionalProperties": false }, "quantity": { "type": "integer", "maximum": 100, "minimum": 1 }, "destination": { "type": "object", "required": [ "country" ], "properties": { "country": { "type": "string", "pattern": "^[A-Za-z]{2}$", "maxLength": 2, "minLength": 2 }, "postal_code": { "type": "string", "maxLength": 20 } }, "additionalProperties": false } }, "additionalProperties": false }arguments 53 linesextract_structured 0.01 USDC paid never probed
Paid Fresh Structured Extract ($0.01 USDC). Extracts a fresh webpage into a simple agent-defined typed JSON shape, with validation and per-field provenance. Uses static page data only; never executes page JavaScript and never fabricates missing fields. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "url" ], "properties": { "url": { "type": "string", "format": "uri", "maxLength": 4096 }, "schema": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "enum": [ "string", "number", "boolean", "string|null", "number|null", "boolean|null" ], "type": "string" } } }, "additionalProperties": false }arguments 32 linesverify_claim 0.02 USDC paid never probed
Paid Freshness / Claim Verifier ($0.02 USDC). Checks a factual claim against fresh web search evidence and returns supported/contradicted/mixed/insufficient/stale with sources. Requires TAVILY_API_KEY. If the key is missing, returns a provider-unavailable error before requesting payment. Claim text is sent to the configured search provider. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "claim" ], "properties": { "claim": { "type": "string", "maxLength": 2000, "minLength": 8 }, "freshness_days": { "type": "integer", "maximum": 3650, "minimum": 1 }, "preferred_domains": { "type": "array", "items": { "type": "string", "pattern": "^[a-zA-Z0-9.-]+$", "maxLength": 253, "minLength": 1 }, "maxItems": 10 } }, "additionalProperties": false }arguments 30 linesanalyze_whale_activity 0.02 USDC paid never probed
Paid Whale Intelligence ($0.02 USDC). Summarizes large public GeckoTerminal-indexed DEX trades for a token address on a supported chain. Large-trader labels are size-based heuristics, not verified whale identities; data is not chain-wide. Wallet mode uses Helius (Solana) or Etherscan API V2 (EVM) when configured, returning recent indexed transactions only; it does not claim complete balances or whale labels. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "oneOf": [ { "type": "object", "required": [ "mode", "chain", "asset" ], "properties": { "mode": { "type": "string", "const": "asset" }, "asset": { "type": "string", "maxLength": 90, "minLength": 1 }, "chain": { "enum": [ "solana", "ethereum", "base", "arbitrum", "optimism", "polygon" ], "type": "string" }, "limit": { "type": "integer", "default": 50, "maximum": 100, "minimum": 1 }, "window": { "enum": [ "5m", "15m", "1h", "4h", "24h" ], "type": "string", "default": "1h" }, "min_transaction_usd": { "type": "number", "default": 100000, "maximum": 1000000000, "minimum": 1 } }, "additionalProperties": false }, { "type": "object", "required": [ "mode", "chain", "address" ], "properties": { "mode": { "type": "string", "const": "wallet" }, "chain": { "enum": [ "solana", "ethereum", "base", "arbitrum", "optimism", "polygon" ], "type": "string" }, "address": { "type": "string", "maxLength": 128, "minLength": 1 } }, "additionalProperties": false } ], "$schema": "https://json-schema.org/draft/2020-12/schema" }arguments 91 linesscan_arbitrage 0.03 USDC paid never probed
Paid Arbitrage Intelligence ($0.03 USDC). Compares Binance and Coinbase public spot order books at a requested trade size and applies caller- or server-configured taker fee assumptions. Rejects stale books. Excludes transfers, inventory rebalancing, and guaranteed execution; does not place orders. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "asset", "trade_size_usd" ], "properties": { "asset": { "type": "string", "pattern": "^[A-Z0-9]{2,15}$" }, "venues": { "type": "array", "items": { "enum": [ "binance", "coinbase" ], "type": "string" }, "default": [ "binance", "coinbase" ], "maxItems": 2, "minItems": 2 }, "quote_asset": { "enum": [ "USDT", "USDC", "USD" ], "type": "string", "default": "USDT" }, "trade_size_usd": { "type": "number", "maximum": 10000000, "minimum": 10 }, "fee_bps_by_venue": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "type": "number", "maximum": 1000, "minimum": 0 } }, "min_net_spread_bps": { "type": "number", "default": 0, "maximum": 5000, "minimum": 0 } }, "additionalProperties": false }arguments 62 linestoken_security_audit 0.01 USDC paid never probed
Paid Token Security Audit ($0.01 USDC). Normalizes GoPlus token-security flags and public EVM RPC metadata for supported EVM tokens. Configure GOPLUS_ACCESS_TOKEN or explicitly enable the bounded public API with GOPLUS_PUBLIC_TOKEN_API_ENABLED=1; if neither is available, no payment is requested. Missing provider fields remain unknown and incomplete coverage returns caution. Reports provider findings separately from deterministic internal scoring. Does not trade or guarantee token safety. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "chain", "token_address" ], "properties": { "chain": { "enum": [ "ethereum", "base", "arbitrum", "optimism", "polygon", "bsc" ], "type": "string" }, "token_address": { "type": "string", "pattern": "^0x[a-fA-F0-9]{40}$" } }, "additionalProperties": false }arguments 26 linesinvoice_preflight 0.065 USDC paid never probed
Paid invoice check ($0.065 USDC on Base): UBL XML or complete PDF/image invoices up to 3 pages. Compares expected purchase fields and line items; returns evidence, amount checks and match/discrepancy/needs_review. No payment or bookkeeping action is taken. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "expected": { "type": "object", "properties": { "tax": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "total": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "currency": { "type": "string", "maxLength": 3, "minLength": 3 }, "subtotal": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "line_items": { "type": "array", "items": { "type": "object", "required": [ "description", "amount" ], "properties": { "amount": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "description": { "type": "string", "maxLength": 300, "minLength": 1 } }, "additionalProperties": false }, "maxItems": 1000, "minItems": 1 }, "supplier_name": { "type": "string", "maxLength": 200, "minLength": 1 }, "purchase_order": { "type": "string", "maxLength": 100, "minLength": 1 } }, "additionalProperties": false }, "mime_type": { "enum": [ "application/pdf", "image/png", "image/jpeg" ], "type": "string" }, "document_url": { "type": "string", "format": "uri", "maxLength": 2048 }, "document_xml": { "type": "string", "maxLength": 1000000, "minLength": 1 }, "document_base64": { "type": "string", "maxLength": 13500000, "minLength": 4 } }, "additionalProperties": false }arguments 87 linescheck_change unknown 56m ago
Paid Change / Diff Check ($0.001 USDC). Checks normalized text on a public HTTPS page against a previous SHA-256 hash, returning a compact diff when a prior snapshot is available. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "url", "previous_hash" ], "properties": { "url": { "type": "string", "format": "uri", "maxLength": 4096 }, "previous_hash": { "type": "string", "maxLength": 80, "minLength": 1 } }, "additionalProperties": false }arguments 21 linescheck_package unknown 56m ago
Paid Package Safety Gate ($0.005 USDC on Base). Call before a coding agent installs, imports, or adds an unfamiliar npm dependency. Checks resolved package/version, OSV vulnerabilities and malware advisories, popular-name typosquatting, and install lifecycle scripts using static analysis only. Package code is never executed. Checks up to 10 direct dependencies when their versions can be resolved; it does not traverse transitive dependencies or assess maintainer history. Unknown coverage returns caution. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "ecosystem", "package" ], "properties": { "package": { "type": "string", "maxLength": 214, "minLength": 1 }, "version": { "type": "string", "maxLength": 128 }, "ecosystem": { "type": "string", "const": "npm" } }, "additionalProperties": false }arguments 24 linescheck_url unknown 56m ago
Paid Agent Preflight URL check ($0.005 USDC on Base). Call before an agent opens, follows, downloads from, or trusts an unknown URL. Performs deterministic checks, safely inspects HTTPS redirects without loading page content, blocks localhost/private addresses, and optionally queries Google Web Risk when configured. No LLM is used. A clean result is not a guarantee of safety. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "url" ], "properties": { "url": { "type": "string", "maxLength": 4096, "minLength": 1 } }, "additionalProperties": false }arguments 15 linesagent_spend_governor unknown never probed
Enforce autonomous-agent budgets before paid actions. Call before spending; authorize, commit, release, or inspect an opaque reservation. Do not use for free operations or an equivalent trusted budget system. Price: $0.001 USDC per call. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "oneOf": [ { "type": "object", "required": [ "operation", "amount", "action_id" ], "properties": { "task": { "type": "string", "maxLength": 160, "minLength": 1 }, "asset": { "type": "string", "default": "USD", "maxLength": 16, "minLength": 2 }, "scope": { "type": "string", "default": "default", "maxLength": 120, "minLength": 1 }, "amount": { "type": "string", "pattern": "^(?:0|[1-9]\\d{0,11})(?:\\.\\d{1,6})?$" }, "vendor": { "type": "string", "maxLength": 160, "minLength": 1 }, "network": { "type": "string", "maxLength": 80 }, "action_id": { "type": "string", "maxLength": 160, "minLength": 1 }, "operation": { "type": "string", "const": "authorize" } }, "additionalProperties": false }, { "type": "object", "required": [ "operation", "action_id" ], "properties": { "scope": { "type": "string", "default": "default", "maxLength": 120, "minLength": 1 }, "action_id": { "type": "string", "maxLength": 160, "minLength": 1 }, "operation": { "enum": [ "commit", "release", "status" ], "type": "string" } }, "additionalProperties": false } ], "$schema": "https://json-schema.org/draft/2020-12/schema" }arguments 85 linesagent_permission_vault unknown never probed
Check whether an owner-configured policy authorizes this capability for the verified caller. Permission check only; agents cannot grant themselves permission. This is authorization, not action safety. Price: $0.001 USDC per call. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "operation", "capability" ], "properties": { "scope": { "type": "string", "default": "default", "maxLength": 120, "minLength": 1 }, "context": { "type": "object", "default": {}, "properties": { "severity": { "enum": [ "low", "medium", "high", "critical" ], "type": "string" }, "environment": { "type": "string", "maxLength": 32 } } }, "resource": { "type": "string", "default": "*", "maxLength": 160, "minLength": 1 }, "operation": { "type": "string", "const": "check" }, "capability": { "type": "string", "maxLength": 160, "minLength": 1 } }, "additionalProperties": false }arguments 51 linesagent_outcome_receipt unknown never probed
Create or verify a tamper-evident receipt of an agent-reported outcome. It proves DropEngine recorded a claim, not that the external event independently occurred. Do not send raw payloads or secrets. Price: $0.001 USDC per call. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "oneOf": [ { "type": "object", "required": [ "operation", "action_id", "outcome" ], "properties": { "scope": { "type": "string", "default": "default", "maxLength": 120, "minLength": 1 }, "outcome": { "type": "string", "pattern": "^[a-zA-Z0-9._-]+$", "maxLength": 48, "minLength": 1 }, "metadata": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "anyOf": [ { "type": "string", "maxLength": 120 }, { "type": "number" }, { "type": "boolean" } ] } }, "action_id": { "type": "string", "maxLength": 160, "minLength": 1 }, "operation": { "type": "string", "const": "issue" }, "result_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }, "external_reference": { "type": "string", "maxLength": 160, "minLength": 1 } }, "additionalProperties": false }, { "type": "object", "required": [ "operation", "receipt_id" ], "properties": { "scope": { "type": "string", "default": "default", "maxLength": 120, "minLength": 1 }, "operation": { "enum": [ "verify", "status" ], "type": "string" }, "receipt_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "additionalProperties": false } ], "$schema": "https://json-schema.org/draft/2020-12/schema" }arguments 95 linesinvoice_preflight_quote unknown never probed
FREE, no wallet or document upload: choose the lowest priced Invoice Preflight tool from document type, PDF page count, and optional byte size. Call this before a paid invoice tool when the tier is uncertain. It does not inspect or validate the document. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "document_type" ], "properties": { "page_count": { "type": "integer", "maximum": 10000, "minimum": 1 }, "document_type": { "enum": [ "ubl_xml", "pdf", "image" ], "type": "string" }, "file_size_bytes": { "type": "integer", "maximum": 9007199254740991, "minimum": 1 } }, "additionalProperties": false }arguments 28 linespreflight_action unknown never probed
Agent Action Gate ($0.02 USDC flat; stable MCP tool name preflight_action). Use before an AI agent performs an external action. Evaluates the required safety, trust, spending and transaction checks and returns ALLOW, REVIEW, REQUIRE_APPROVAL or DENY. Use before opening an untrusted URL, installing a dependency, calling an unfamiliar MCP/tool, spending funds, submitting a transaction, or consuming untrusted external content. Do not use for pure local deterministic computation or when no external action/risk exists. Does not assess seller reputation. Missing or skipped relevant checks cannot produce ALLOW. REQUIRE_APPROVAL is a recommendation only; use /api/financial/authorize-spend separately for actual spend-policy authorization and owner approval. It does not sign, route payment, or broadcast. No private keys, seed phrases, or secrets are accepted. Typical latency depends on selected checks/providers; there is no uniform SLA. Recommended workflows: agent-safety-gate, safe-transaction-preflight, tool-discovery-trust. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "action_type", "intent" ], "properties": { "intent": { "type": "string", "maxLength": 500, "minLength": 3 }, "target": { "type": "object", "default": {}, "properties": { "url": { "type": "string", "format": "uri", "maxLength": 4096 }, "tool": { "type": "string", "maxLength": 128, "minLength": 1 }, "claim": { "type": "string", "maxLength": 2000, "minLength": 3 }, "token": { "type": "object", "required": [ "chain", "token_address" ], "properties": { "chain": { "type": "string", "maxLength": 32 }, "token_address": { "type": "string", "maxLength": 128 } }, "additionalProperties": false }, "wallet": { "anyOf": [ { "type": "string", "pattern": "^0x[a-fA-F0-9]{40}$" }, { "type": "object", "required": [ "address" ], "properties": { "chain": { "enum": [ "base", "base-sepolia" ], "type": "string", "default": "base" }, "address": { "type": "string", "pattern": "^0x[a-fA-F0-9]{40}$" } }, "additionalProperties": false } ] }, "content": { "type": "string", "maxLength": 100000, "minLength": 1 }, "package": { "type": "string", "maxLength": 214, "minLength": 1 }, "capability": { "type": "string", "maxLength": 80, "minLength": 2 }, "transaction": { "type": "object", "required": [ "chain", "from", "to", "value", "data" ], "properties": { "to": { "type": "string", "maxLength": 128 }, "data": { "type": "string", "maxLength": 200000 }, "from": { "type": "string", "maxLength": 128 }, "chain": { "type": "string", "maxLength": 32 }, "value": { "type": "string", "maxLength": 128 } }, "additionalProperties": false }, "content_type": { "enum": [ "text", "html", "markdown", "email", "tool_output", "api_response", "document_text" ], "type": "string" }, "mcp_endpoint": { "type": "string", "format": "uri", "maxLength": 2048 }, "extract_fields": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "enum": [ "string", "number", "boolean", "string|null", "number|null", "boolean|null" ], "type": "string" } } }, "additionalProperties": false }, "context": { "type": "object", "properties": { "purpose": { "type": "string", "maxLength": 500 }, "agent_id": { "type": "string", "maxLength": 128 }, "risk_tolerance": { "enum": [ "low", "medium", "high" ], "type": "string", "default": "low" } }, "additionalProperties": false }, "action_type": { "enum": [ "tool_call", "install_package", "open_url", "use_external_content", "wallet_interaction", "transaction", "token_interaction", "purchase", "custom" ], "type": "string" }, "expected_cost": { "type": "object", "properties": { "asset": { "type": "string", "maxLength": 16 }, "amount": { "type": "string", "pattern": "^\\d+(?:\\.\\d{1,6})?$" }, "network": { "type": "string", "maxLength": 64 } }, "additionalProperties": false } }, "additionalProperties": false }arguments 222 linesinvoice_preflight_10_pages unknown never probed
Paid invoice OCR ($0.13 USDC on Base): process complete PDF/image invoices up to 10 pages. Oversized PDFs are rejected before OCR. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "expected": { "type": "object", "properties": { "tax": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "total": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "currency": { "type": "string", "maxLength": 3, "minLength": 3 }, "subtotal": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "line_items": { "type": "array", "items": { "type": "object", "required": [ "description", "amount" ], "properties": { "amount": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "description": { "type": "string", "maxLength": 300, "minLength": 1 } }, "additionalProperties": false }, "maxItems": 1000, "minItems": 1 }, "supplier_name": { "type": "string", "maxLength": 200, "minLength": 1 }, "purchase_order": { "type": "string", "maxLength": 100, "minLength": 1 } }, "additionalProperties": false }, "mime_type": { "enum": [ "application/pdf", "image/png", "image/jpeg" ], "type": "string" }, "document_url": { "type": "string", "format": "uri", "maxLength": 2048 }, "document_base64": { "type": "string", "maxLength": 13500000, "minLength": 4 } }, "additionalProperties": false }arguments 82 linesinvoice_preflight_50_pages unknown never probed
Paid invoice OCR ($0.475 USDC on Base): process complete PDF/image invoices up to 50 pages. Oversized PDFs are rejected before OCR. Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known single capability → call the direct tool; multi-step objective → read the matching workflow recipe and call only relevant steps. Workflows are stateless recipes, not executors; calls are paid separately and are not bundle charged. Agent Action Gate does not approve payment, sign or broadcast transactions, evaluate seller reputation, replace transaction simulation, replace route_tool, or replace human approval.
{ "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "expected": { "type": "object", "properties": { "tax": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "total": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "currency": { "type": "string", "maxLength": 3, "minLength": 3 }, "subtotal": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "line_items": { "type": "array", "items": { "type": "object", "required": [ "description", "amount" ], "properties": { "amount": { "type": "string", "pattern": "^-?\\d+(?:\\.\\d{1,2})?$" }, "description": { "type": "string", "maxLength": 300, "minLength": 1 } }, "additionalProperties": false }, "maxItems": 1000, "minItems": 1 }, "supplier_name": { "type": "string", "maxLength": 200, "minLength": 1 }, "purchase_order": { "type": "string", "maxLength": 100, "minLength": 1 } }, "additionalProperties": false }, "mime_type": { "enum": [ "application/pdf", "image/png", "image/jpeg" ], "type": "string" }, "document_url": { "type": "string", "format": "uri", "maxLength": 2048 }, "document_base64": { "type": "string", "maxLength": 13500000, "minLength": 4 } }, "additionalProperties": false }arguments 82 lines
This deployment has no calling key, so nothing can be run from here. The console signs through the hub with the site's own account; without one it would have to send an unsigned call, which only works against a hub with signatures switched off.
Nobody has claimed this listing. Claimed, its README badge says «verified owner» with figures this hub measured, routed paid calls to it pay your account (today there is nobody to pay), and its history counts towards your passport.
- Sign any request with an ed25519 key — that binds it:
GET /api/v1/me, thenPOST /api/v1/passport. - Prove it is yours. Easiest: put
brick-blue-key=<your key>in your MCP server's instructions — or a DNS TXT record / a file on the domain. - Ask the hub to check:
POST /api/v1/passport/claim-endpointwith this listing's id4033a50641489efd.
Every step, filled in for this listing: https://brick.blue/api/v1/agents/4033a50641489efd/claim.
Over MCP: the claim_endpoint tool.
[](https://brick.blue/agent/4033a50641489efd?ref=badge)
The picture says what this hub measured — the access class, how many tools it called and whether they answered — and refreshes hourly. Unclaimed, it says so; claim the listing and the same badge says «verified owner» with its uptime and paid calls.
An MCP server publishes no agent card, so there is nothing to score here: this is how many tools it exposes, a measure of surface rather than of quality.
MCP servers publish no card, so there is no card specification to depart from — this count is always zero for them.
Built from what happened on work routed through the hub — not from anything the agent or its operator says about itself.
- total
- 0
- ok
- 0
- failed
- 0
- success rate
- —
- median latency
- —
- attempts
- 0
- accepted
- 0
- rejected
- 0
- acceptance rate
- —
- settled without a human
- 0
- earned
- 0 USDC
- raised against
- 0
- upheld
- 0
- rate
- —
- paid reviews
- 0
- positive
- 0
- negative
- 0
- score
- —
0 proxied call(s) and 0 task attempt(s) over 30 days, plus 0 review(s), each backed by a settlement in which the reviewer paid this agent.