SALT19 Agent Utility Grid
by GabrielAllit1 · remote · no sign-in to list tools · v0.5.1 · published by GitHub user GabrielAllit1
MCP/x402 tools with bounded decisions, adaptive pricing, and Proof402 machine-commerce receipts.
33 tools: 2 do something that can't be undone, 30 change things and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone2Claude Code: ask: see these tools
- Changes things30Claude Code: ask: see these tools
- Only reads1Claude Code: allow: see these tools
15 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http salt19-agent-utility-grid https://api.salt19.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "base-contract-state" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "inspect": a word for reading.
The server marks "base-token-allowance" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "read": a word for reading.
The server marks "base-token-balance" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "read": a word for reading.
The server marks "base-transaction-status" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "base-transaction-status" says "status": a word for reading.
The server marks "base-wallet-balance" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "read": a word for reading.
The server marks "github-repo-facts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
Show 9 more findingsShow fewer
The server marks "npm-package-facts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
The server marks "nws-active-alerts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
The server marks "sec-company-facts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
The server marks "sec-recent-filings" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
The server marks "url-to-llm-markdown" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
- Warnusgs-earthquakes
The server marks "usgs-earthquakes" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "query": a word for reading.
The server marks "dependency-upgrade-go-no-go" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "compare": a word for reading.
The server marks "url-http-preflight" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "inspect": a word for reading.
The server marks "x402-payment-preflight" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "x402-payment-preflight" says "payment": a word that usually means money moves, which cannot be taken back.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
33 tools
Can't be undone 2Claude Code: ask
report-payment-capabilityFree cooperative telemetry tool for reporting whether a client can use x402/Base/USDC or why it declined.No findings
Why it is in this group
- The name "report-payment-capability" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Free cooperative telemetry tool for reporting whether a client can use x402/Base/USDC or why it declined. Never submit private keys, payment signatures, or secret wallet material.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
x402-payment-preflightFree buyer-side compatibility preflight.1 finding
Why it is in this group
- The name "x402-payment-preflight" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "x402-payment-preflight" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "x402-payment-preflight" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Free buyer-side compatibility preflight. Returns the live SALT19 price, Base/USDC requirement, optional public wallet-balance sufficiency, and the exact next action without signing or moving funds.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Changes things 30Claude Code: ask
agent-claim-output-verifierMap an autonomous agent claim or output to supplied evidence and return SUPPORTED, PARTIALLY_SUPPORTED, NOT_PROVEN, or CONTRADICTED with explicit unsupported elements, contradictio…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Map an autonomous agent claim or output to supplied evidence and return SUPPORTED, PARTIALLY_SUPPORTED, NOT_PROVEN, or CONTRADICTED with explicit unsupported elements, contradictions, missing evidence, and recommended verification. Price: $0.50 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
agent-code-change-risk-gateStatic pre-merge risk gate for autonomous code changes: inspect a supplied unified diff for security-sensitive surfaces, destructive operations, architecture/constraint conflicts, …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Static pre-merge risk gate for autonomous code changes: inspect a supplied unified diff for security-sensitive surfaces, destructive operations, architecture/constraint conflicts, test requirements, rollback risk, and bounded breaking-change risk before an agent merges or deploys. Price: $1.25 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
agent-decision-preflightBefore an autonomous coding agent installs or adopts software, return a bounded GO, WARN, or BLOCK decision with evidence and a portable SALT19 verification receipt.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Before an autonomous coding agent installs or adopts software, return a bounded GO, WARN, or BLOCK decision with evidence and a portable SALT19 verification receipt. Price: $0.50 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
agent-plan-verifierVerify an autonomous agent plan before execution for missing preconditions, destructive steps, unsafe ordering, goal misalignment, constraint violations, and repair actions, return…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verify an autonomous agent plan before execution for missing preconditions, destructive steps, unsafe ordering, goal misalignment, constraint violations, and repair actions, returning a bounded GO/WARN/BLOCK result. Price: $0.75 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
base-contract-stateInspect whether a Base address currently has deployed bytecode and return code size plus best-effort ERC-20 metadata.1 finding
Why it is in this group
- The description's first verb is "inspect": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "base-contract-state" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "inspect": a word for reading.
Description, as the server wrote it Inspect whether a Base address currently has deployed bytecode and return code size plus best-effort ERC-20 metadata. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
base-token-allowanceRead a live ERC-20 allowance on Base for an owner/spender pair without an API key.1 finding
Why it is in this group
- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "base-token-allowance" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "read": a word for reading.
Description, as the server wrote it Read a live ERC-20 allowance on Base for an owner/spender pair without an API key. Returns the current block and raw token units. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
base-token-balanceRead a live ERC-20 token balance on Base and return raw units plus best-effort token decimals/symbol metadata without signup or an API key.1 finding
Why it is in this group
- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "base-token-balance" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "read": a word for reading.
Description, as the server wrote it Read a live ERC-20 token balance on Base and return raw units plus best-effort token decimals/symbol metadata without signup or an API key. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
base-transaction-statusCheck current Base transaction receipt state and return PENDING, CONFIRMED_SUCCESS, or CONFIRMED_REVERTED with block and gas evidence.1 finding
Why it is in this group
- The name "base-transaction-status" says "status": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "base-transaction-status" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "base-transaction-status" says "status": a word for reading.
Description, as the server wrote it Check current Base transaction receipt state and return PENDING, CONFIRMED_SUCCESS, or CONFIRMED_REVERTED with block and gas evidence. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
base-wallet-balanceRead a wallet's live native ETH balance on Base at the latest block without an API key.1 finding
Why it is in this group
- The description's first verb is "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "base-wallet-balance" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "read": a word for reading.
Description, as the server wrote it Read a wallet's live native ETH balance on Base at the latest block without an API key. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
commerce-decisionBefore an autonomous agent pays an x402 challenge, bind the request, accepted payment offer, and machine spending policy into a deterministic GO/WARN/BLOCK decision with SHA-256 co…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Before an autonomous agent pays an x402 challenge, bind the request, accepted payment offer, and machine spending policy into a deterministic GO/WARN/BLOCK decision with SHA-256 commitments. Price: $0.02 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
commerce-receiptVerify an x402 commercial state and persist a signed Ed25519 Proof402 receipt whose Commerce State Root commits request, offer, policy, payment, settlement, and delivery evidence; …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verify an x402 commercial state and persist a signed Ed25519 Proof402 receipt whose Commerce State Root commits request, offer, policy, payment, settlement, and delivery evidence; receipts are later Merkle-batched for public inclusion proofs. Price: $0.05 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
commerce-verifyVerify that an x402 v2 payment payload, settlement evidence, original request, accepted offer, spending policy, and delivered response are mutually bound; SALT19 operations can add…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verify that an x402 v2 payment payload, settlement evidence, original request, accepted offer, spending policy, and delivered response are mutually bound; SALT19 operations can additionally be checked against authoritative D1 commercial state. Price: $0.03 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
dependency-go-no-goDependency approval decision for coding agents: decide whether an npm dependency or package is safe to install or adopt and return GO, WARN, or BLOCK using vulnerabilities, securit…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Dependency approval decision for coding agents: decide whether an npm dependency or package is safe to install or adopt and return GO, WARN, or BLOCK using vulnerabilities, security, license, maintenance, deprecation, and package metadata. Price: $0.25 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
dependency-upgrade-go-no-goCompare current and target npm versions and return GO/WARN/BLOCK plus UPGRADE/DEFER/BLOCK guidance, bounded semver risk, OSV security implications, recommended tests, and explicit …1 finding
Why it is in this group
- The description's first verb is "compare": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "dependency-upgrade-go-no-go" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "compare": a word for reading.
Description, as the server wrote it Compare current and target npm versions and return GO/WARN/BLOCK plus UPGRADE/DEFER/BLOCK guidance, bounded semver risk, OSV security implications, recommended tests, and explicit NOT_PROVEN runtime, peer, migration, and ecosystem compatibility boundaries. Price: $0.20 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
github-repo-factsReturn current public GitHub repository facts such as archive state, license, stars, forks, branch and latest push without the premium adoption decision.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "github-repo-facts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
Description, as the server wrote it Return current public GitHub repository facts such as archive state, license, stars, forks, branch and latest push without the premium adoption decision. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
github-repo-preflightGitHub repository due diligence for coding agents: evaluate whether a public or open-source repository is safe and maintained enough to adopt using license, maintenance, release fr…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it GitHub repository due diligence for coding agents: evaluate whether a public or open-source repository is safe and maintained enough to adopt using license, maintenance, release freshness, activity, project health, and risk signals. Price: $0.10 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
model-memory-fitCan this AI model run on my graphics card?No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Can this AI model run on my graphics card? Estimate model memory requirements and check whether a quantized LLM fits available GPU VRAM before loading or local inference. Price: $0.05 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
npm-package-factsReturn live npm registry facts for the latest or requested package version without the higher-priced vulnerability and adoption decision layer.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "npm-package-facts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
Description, as the server wrote it Return live npm registry facts for the latest or requested package version without the higher-priced vulnerability and adoption decision layer. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
npm-package-intelCheck whether an npm package is deprecated or vulnerable before installing it, including vulnerabilities, license, maintenance, freshness, dependency health, and package.json risk …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check whether an npm package is deprecated or vulnerable before installing it, including vulnerabilities, license, maintenance, freshness, dependency health, and package.json risk signals. Price: $0.05 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
nws-active-alertsReturn current U.S.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "nws-active-alerts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
Description, as the server wrote it Return current U.S. National Weather Service active alerts for a state or territory as compact structured JSON. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
repo-adoption-go-no-goRepository adoption decision for autonomous coding agents using public GitHub maintenance, archive, license, and repository-health evidence, with explicit UNKNOWN and NOT_PROVEN bo…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Repository adoption decision for autonomous coding agents using public GitHub maintenance, archive, license, and repository-health evidence, with explicit UNKNOWN and NOT_PROVEN boundaries for dependency, security, compatibility, integration, and project-fit claims. Price: $0.35 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
report-x402-authorization-progressFree cooperative telemetry for the local buyer authorization path.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Free cooperative telemetry for the local buyer authorization path. Report stage metadata only; never include private keys, seed phrases, raw signatures, or PAYMENT-SIGNATURE values.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
salt19-pricingFREE catalog/pricing surface.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it FREE catalog/pricing surface. Returns current discoverable SALT19 products, live x402 prices, schemas, and Fresh-State acquisition roles so an agent can budget before choosing a paid call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
sec-company-factsReturn selected latest SEC XBRL company facts from EDGAR's live companyfacts feed with source dates and units.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "sec-company-facts" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
Description, as the server wrote it Return selected latest SEC XBRL company facts from EDGAR's live companyfacts feed with source dates and units. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sec-recent-filingsReturn recent SEC EDGAR filings for a company CIK from the live SEC submissions feed, normalized for agent consumption.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "sec-recent-filings" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "return": a word for reading.
Description, as the server wrote it Return recent SEC EDGAR filings for a company CIK from the live SEC submissions feed, normalized for agent consumption. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
url-http-preflightInspect a URL before an autonomous agent calls it, and preflight or verify a website or external API endpoint is healthy and safe to call by checking HTTP status, redirects, latenc…1 finding
Why it is in this group
- The description's first verb is "inspect": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "url-http-preflight" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "inspect": a word for reading.
Description, as the server wrote it Inspect a URL before an autonomous agent calls it, and preflight or verify a website or external API endpoint is healthy and safe to call by checking HTTP status, redirects, latency, and security headers. Price: $0.03 via x402. Generate one _salt19_operation_id per intended purchase, preserve it across retries, and add _x402_payment_signature after satisfying the challenge. A stable _salt19_operation_id is required and makes semantic retries at-most-once. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
url-to-llm-markdownFetch a public web page, remove scripts/styles/navigation noise, and return bounded LLM-friendly Markdown plus canonical URL and fetch provenance.1 finding
Why it is in this group
- The description's first verb is "fetch": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "url-to-llm-markdown" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
Description, as the server wrote it Fetch a public web page, remove scripts/styles/navigation noise, and return bounded LLM-friendly Markdown plus canonical URL and fetch provenance. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
usgs-earthquakesQuery recent USGS earthquake events by lookback window and minimum magnitude and return compact live event state.1 finding
Why it is in this group
- The description's first verb is "query": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "usgs-earthquakes" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "query": a word for reading.
Description, as the server wrote it Query recent USGS earthquake events by lookback window and minimum magnitude and return compact live event state. Price: $0.01 via x402. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
verify-decision-receiptFree integrity lookup for a SALT19 decision receipt.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free integrity lookup for a SALT19 decision receipt. verified=true proves the stored evidence still matches its recorded digest; it does not prove the underlying software is safe. _salt19_operation_id is recommended but optional for standard x402 compatibility.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
x402-authorization-handoffFree handoff tool that generates a live PAYMENT-REQUIRED challenge for a concrete paid request, returns exact REST and MCP retry templates, and creates a correlation ID.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free handoff tool that generates a live PAYMENT-REQUIRED challenge for a concrete paid request, returns exact REST and MCP retry templates, and creates a correlation ID. It never signs or moves buyer funds.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 1Claude Code: allow
find-salt19-toolFREE START-HERE ROUTER.No findings
Why it is in this group
- The name "find-salt19-tool" says "find": a word for reading.
Description, as the server wrote it FREE START-HERE ROUTER. Describe the fresh external fact, live state, developer intelligence, or bounded decision you need. Returns the best current SALT19 tool, live price, schema, alternatives, and exact x402 preflight next step. No payment is required for routing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.5.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http salt19-agent-utility-grid https://api.salt19.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__salt19-agent-utility-grid__find-salt19-tool"
],
"ask": [
"mcp__salt19-agent-utility-grid__salt19-pricing",
"mcp__salt19-agent-utility-grid__base-contract-state",
"mcp__salt19-agent-utility-grid__base-token-allowance",
"mcp__salt19-agent-utility-grid__base-token-balance",
"mcp__salt19-agent-utility-grid__base-transaction-status",
"mcp__salt19-agent-utility-grid__base-wallet-balance",
"mcp__salt19-agent-utility-grid__github-repo-facts",
"mcp__salt19-agent-utility-grid__npm-package-facts",
"mcp__salt19-agent-utility-grid__nws-active-alerts",
"mcp__salt19-agent-utility-grid__sec-company-facts",
"mcp__salt19-agent-utility-grid__sec-recent-filings",
"mcp__salt19-agent-utility-grid__url-to-llm-markdown",
"mcp__salt19-agent-utility-grid__usgs-earthquakes",
"mcp__salt19-agent-utility-grid__agent-claim-output-verifier",
"mcp__salt19-agent-utility-grid__agent-code-change-risk-gate",
"mcp__salt19-agent-utility-grid__agent-decision-preflight",
"mcp__salt19-agent-utility-grid__agent-plan-verifier",
"mcp__salt19-agent-utility-grid__commerce-decision",
"mcp__salt19-agent-utility-grid__commerce-receipt",
"mcp__salt19-agent-utility-grid__commerce-verify",
"mcp__salt19-agent-utility-grid__dependency-go-no-go",
"mcp__salt19-agent-utility-grid__dependency-upgrade-go-no-go",
"mcp__salt19-agent-utility-grid__github-repo-preflight",
"mcp__salt19-agent-utility-grid__model-memory-fit",
"mcp__salt19-agent-utility-grid__npm-package-intel",
"mcp__salt19-agent-utility-grid__repo-adoption-go-no-go",
"mcp__salt19-agent-utility-grid__url-http-preflight",
"mcp__salt19-agent-utility-grid__verify-decision-receipt",
"mcp__salt19-agent-utility-grid__x402-payment-preflight",
"mcp__salt19-agent-utility-grid__report-payment-capability",
"mcp__salt19-agent-utility-grid__x402-authorization-handoff",
"mcp__salt19-agent-utility-grid__report-x402-authorization-progress"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as salt19-agent-utility-grid. Review it before you use it.
