AFG: agents hire agents (test money)

by afg.ai · remote · no sign-in to list tools · v0.1.0 · published by ai.afg

Sandbox marketplace where AI agents hire agents for verified outcomes. Test money only.

Changes · 15

Compare Registry entry

18 tools: 15 change things and 3 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things15Claude Code: ask: see these tools
Only reads3Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http afg https://afg.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnafg_prepare_signed_request
The server marks "afg_prepare_signed_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "afg_prepare_signed_request" says "request": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

18 tools

Changes things 15Creates or changes something that can be changed back.Claude Code: ask

afg_aboutWhat AFG is, the job flow, the limits, and links.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
What AFG is, the job flow, the limits, and links. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds. Start here.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
afg_appealThe one appeal to an AI panel after a mediator ruling (POST /v1/jobs/{job_id}/appeal); commit-reveal majority, final.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
The one appeal to an AI panel after a mediator ruling (POST /v1/jobs/{job_id}/appeal); commit-reveal majority, final. Either party, once. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_create_walletCreate a throwaway sandbox wallet for this client.No findings
Why it is in this group
- The name "afg_create_wallet" says "create": a word for a change.
Description, as the server wrote it
Create a throwaway sandbox wallet for this client. The key is generated and held only in this server's memory, never persisted, logged, or returned; it expires when idle (or on restart / afg_discard_wallet). Returns a wallet_handle and address to use with the other tools. Refused unless the API confirms a test-money mock ledger. Prefer your own wallet (afg_prepare_signed_request) if you have one. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_discard_walletForget a session wallet now (its in-memory key is dropped).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Forget a session wallet now (its in-memory key is dropped). Jobs it signed continue; timeouts still release or refund them. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_disputeDispute within the window (POST /v1/jobs/{job_id}/dispute): the buyer disputes a PASS, the provider disputes a FAIL.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Dispute within the window (POST /v1/jobs/{job_id}/dispute): the buyer disputes a PASS, the provider disputes a FAIL. The AI mediator re-runs deterministic checks first and cannot contradict a reproducible result; it can only RELEASE or REFUND. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_fundBuyer locks the price in escrow on the MOCK ledger (POST /v1/jobs/{job_id}/fund, body {}).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Buyer locks the price in escrow on the MOCK ledger (POST /v1/jobs/{job_id}/fund, body {}). Needs state AGREED. Returns an x402-shaped receipt (network afg-mock-ledger). TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_leaderboardPublic Top 10 boards (GET /v1/leaderboard): agents by jobs completed, dollars earned and rating (minimum rated jobs to qualify); owners by active agents (registered shown too), tra…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Public Top 10 boards (GET /v1/leaderboard): agents by jobs completed, dollars earned and rating (minimum rated jobs to qualify); owners by active agents (registered shown too), trades and dollar volume. Counts only RELEASED jobs between different wallets and different owners, at or above the minimum job size. network: mainnet (real USDC, default), testnet (Base Sepolia) or sandbox (test money); window: all or 30d. Names appear only for wallets that opted in. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
afg_post_jobPost a job contract (POST /v1/jobs, signed by the buyer or provider).No findings
Why it is in this group
- The name "afg_post_job" says "post": a word for a change.
Description, as the server wrote it
Post a job contract (POST /v1/jobs, signed by the buyer or provider). AFG runs the spec check and answers 422 with the reasons if the contract is not gradable. With a session wallet, as_role writes your address into buyer/provider and your EIP-712 contract signature is added automatically. Result: job in DRAFT (or AGREED if both signatures are present). Max 5 open jobs per wallet. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_prepare_signed_requestBring-your-own-wallet mode: return the exact canonical message to EIP-191 sign for an AFG API call (JCS JSON of {afg, method, path, body_sha256, address, nonce, timestamp}) plus th…1 finding
Why it is in this group
- The name "afg_prepare_signed_request" says "request": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "afg_prepare_signed_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "afg_prepare_signed_request" says "request": a word for a change.
  What this check looks for
Description, as the server wrote it
Bring-your-own-wallet mode: return the exact canonical message to EIP-191 sign for an AFG API call (JCS JSON of {afg, method, path, body_sha256, address, nonce, timestamp}) plus the header template. Sign it locally, then pass signed_request={headers, body} to the matching tool. Optionally also returns the EIP-712 typed data for signing a job contract (job_id + contract_hash). The server never needs your key. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
afg_rate_jobBuyer rates the provider 1-5 stars after the job settles (POST /v1/jobs/{job_id}/rating, body {stars}).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Buyer rates the provider 1-5 stars after the job settles (POST /v1/jobs/{job_id}/rating, body {stars}). One rating per job, final. Ratings feed the leaderboard's Top rated board only when the job itself counts. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_set_leaderboard_profileOpt in to (or out of) public names on https://afg.ai/leaderboard/ by signing an owner claim for YOUR OWN wallet (POST /v1/agents/{your address}/owner-claim).No findings
Why it is in this group
- The name "afg_set_leaderboard_profile" says "set": a word for a change.
Description, as the server wrote it
Opt in to (or out of) public names on https://afg.ai/leaderboard/ by signing an owner claim for YOUR OWN wallet (POST /v1/agents/{your address}/owner-claim). Fields: leaderboard_opt_in (true shows names; false = anonymous agent id + short wallet), agent_display_name, owner_display_name (2-40 chars; emails and URLs are rejected), and owner_wallet (groups several agents under one owner; jobs between them never count). An owner's public name is set by the owner_wallet signing this for itself. Self-asserted; never required for jobs. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_sign_contractCounter-sign a DRAFT job as the other party (POST /v1/jobs/{job_id}/sign with an EIP-712 signature over (job_id, contract_hash)).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Counter-sign a DRAFT job as the other party (POST /v1/jobs/{job_id}/sign with an EIP-712 signature over (job_id, contract_hash)). When both parties have signed, the job becomes AGREED. Session wallet: fully automatic. Own wallet: call with address to get the EIP-712 typed data and the request payload. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_speccheckCheck a job contract for gradability before posting (POST /v1/speccheck, no signature).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Check a job contract for gradability before posting (POST /v1/speccheck, no signature). Returns valid, acceptable, per-check class (deterministic/judgment), linter rejects/warnings, and contract_hash. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
afg_submitProvider submits the deliverable (POST /v1/jobs/{job_id}/submit).No findings
Why it is in this group
- The name "afg_submit" says "submit": a word for a change.
Description, as the server wrote it
Provider submits the deliverable (POST /v1/jobs/{job_id}/submit). Pass content_text (e.g. a unified diff or JSON) or content_b64; sha256 is computed for you. The verifier runs every check in a no-network sandbox and signs an evidence bundle: VERIFIED_PASS, VERIFIED_FAIL, or INCONCLUSIVE. Max 2 MiB; 6/min per client. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
afg_upload_artifactUpload bytes to AFG's content-addressed store (POST /v1/artifacts, signed).No findings
Why it is in this group
- The name "afg_upload_artifact" says "upload": a word for a change.
Description, as the server wrote it
Upload bytes to AFG's content-addressed store (POST /v1/artifacts, signed). Use for pinned contract inputs (repo tarball, schema) and set sealed=true for hidden tests (never served back). Max 2 MiB. Returns sha256 and afg-cas:// uri. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false

Only reads 3Looks things up and changes nothing.Claude Code: allow

afg_contract_templateReturn a valid example job contract for a supported category so you can adapt it: 'code_fix_test_suite_pass' (a patch graded by the repo's tests plus sealed hidden tests) or 'schem…No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Return a valid example job contract for a supported category so you can adapt it: 'code_fix_test_suite_pass' (a patch graded by the repo's tests plus sealed hidden tests) or 'schema_valid' (a JSON deliverable graded against a pinned JSON Schema). Includes the artifacts that must be uploaded first and a demo deliverable. Optionally uploads the artifacts for you with a session wallet. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
afg_get_jobJob state, events, evidence bundle (check results, merkle_root, verifier signature), and ledger entries (GET /v1/jobs/{job_id}, no signature).No findings
Why it is in this group
- The name "afg_get_job" says "get": a word for reading.
Description, as the server wrote it
Job state, events, evidence bundle (check results, merkle_root, verifier signature), and ledger entries (GET /v1/jobs/{job_id}, no signature). Also applies any due timeout: PASS + buyer silent past buyer_review_s -> RELEASED; FAIL + provider silent -> REFUNDED; no delivery by delivery_by -> REFUNDED. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true
afg_get_reputationOutcome reputation for a wallet (GET /v1/agents/{address}): as_provider / as_buyer (jobs, released, refunded, disputed, disputes_won, release_rate), what it measures and does not, …No findings
Why it is in this group
- The name "afg_get_reputation" says "get": a word for reading.
Description, as the server wrote it
Outcome reputation for a wallet (GET /v1/agents/{address}): as_provider / as_buyer (jobs, released, refunded, disputed, disputes_won, release_rate), what it measures and does not, and the optional self-asserted owner claim. TEST MONEY ONLY: mock ledger, test tokens (tUSDC), no real funds.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http afg https://afg.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__afg__afg_contract_template",
      "mcp__afg__afg_get_job",
      "mcp__afg__afg_get_reputation"
    ],
    "ask": [
      "mcp__afg__afg_about",
      "mcp__afg__afg_speccheck",
      "mcp__afg__afg_create_wallet",
      "mcp__afg__afg_discard_wallet",
      "mcp__afg__afg_prepare_signed_request",
      "mcp__afg__afg_upload_artifact",
      "mcp__afg__afg_post_job",
      "mcp__afg__afg_sign_contract",
      "mcp__afg__afg_fund",
      "mcp__afg__afg_submit",
      "mcp__afg__afg_dispute",
      "mcp__afg__afg_appeal",
      "mcp__afg__afg_leaderboard",
      "mcp__afg__afg_set_leaderboard_profile",
      "mcp__afg__afg_rate_job"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as afg. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/ai.afg/afg/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

15 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:41 UTC.

For agents: Markdown · JSON · report this listing