Skip to content

io.github.f-tiger/agiscorecard-web3-workbench

by f-tiger · remote · no sign-in to list tools · v1.7.0 · published by GitHub user f-tiger

AGI Scorecard Web3 Workbench: ten free deterministic review tools (stablecoin, gas, zkML, agents).

Final · 1Changes · 6

12 tools: 1 do something that can't be undone, 6 change things and 5 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agiscorecard-web3-workbench https://web3.agiscorecard.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • The server marks "plan_zkml_costs" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.statement), which can change anything it can reach.

    What this check looks for
  • The server marks "decode_token_call" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "decode_token_call" says "call": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Can't be undone 1Claude Code: ask
  • decode_token_callCall Lens decodes supported token-call shapes locally and compares the recipient, spender and atomic amount with your expectations.1 finding

    Why it is in this group

    • The name "decode_token_call" says "call": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "decode_token_call" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "decode_token_call" says "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Call Lens decodes supported token-call shapes locally and compares the recipient, spender and atomic amount with your expectations. It distinguishes ERC-20 allowances from ERC-721 token IDs using the declared standard. It never connects a wallet or evaluates contract safety. No chain simulation, malicious-contract detection, token identity lookup, balance inspection or safety verdict. Retrieve calls with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 6Claude Code: ask
  • check_data_permissionsData Permit compares an intended AI use with your recorded grant conditions: region, expiry, revocation and consent status.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Data Permit compares an intended AI use with your recorded grant conditions: region, expiry, revocation and consent status. It calculates a proposed split of received revenue and keeps incompatible shares unallocated. Matching fields does not establish a legal license. No legal opinion, rights verification, consent collection, access enforcement, token issuance or payment. Retrieve permit with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • model_contributor_rewardsIncentive Lab separates customer revenue from token subsidy, then allocates a declared reward budget using accepted work and quality weights.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Incentive Lab separates customer revenue from token subsidy, then allocates a declared reward budget using accepted work and quality weights. Contributor caps and exact budget conservation keep the scenario inspectable. The worksheet does not establish Sybil resistance or distribute tokens. No live subnet data, fraud detection, Bittensor emission replication, staking recommendation or token distribution. Retrieve incentives with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • plan_fallback_routesRoute Lab compares short supplier sequences using entered cost, success and latency assumptions.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Route Lab compares short supplier sequences using entered cost, success and latency assumptions. It checks the worst-case total against your budget before sorting feasible options by expected cost. It is an offline planning tool; no model or payment is called. Offline planning only. No live requests, model judge, payment, dynamic bandit or production routing. Retrieve route with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • plan_zkml_costsProof Plan estimates proving compute and onchain verification costs from your own measurements.1 finding

    Why it is in this group

    • The input takes a statement or command to run (input.statement), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "plan_zkml_costs" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input takes a statement or command to run (input.statement), which can change anything it can reach.

      What this check looks for
    Description, as the server wrote it
    Proof Plan estimates proving compute and onchain verification costs from your own measurements. It checks a per-job latency target and preserves model, input and verification-key hashes. It plans an integration; it does not generate or verify a zero-knowledge proof. No ZK proof generation or cryptographic verification. File hashing verifies bytes only; it is not proof of model correctness. Retrieve proof with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • reconcile_stablecoin_recordsStable Reconcile compares your declared invoices with recorded stablecoin transfers.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Stable Reconcile compares your declared invoices with recorded stablecoin transfers. It separates partial payments, pending transfers and wrong-network records, with exact decimal totals. Use it for a local exception review before updating your books. No wallet sync, automatic matching, FX, refund processing, tax accounting or independent finality checks. Retrieve reconcile with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • review_agent_evidenceAgent Evidence reviews imported task outcomes within one task, version and date window.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Agent Evidence reviews imported task outcomes within one task, version and date window. It deduplicates sample labels and shows failures, exclusions and uncertainty. It helps review a supplier comparison; it does not run evaluations or verify reviewer identities. No public reputation ranking, identity verification, calibrated prediction or Sybil detection. Retrieve evidence with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 5Claude Code: allow
  • compare_compute_costsCompute Lens compares measured workload runs using total entered compute, setup, storage and egress costs per accepted output.No findings

    Why it is in this group

    • The name "compare_compute_costs" says "compare": a word for reading.
    Description, as the server wrote it
    Compute Lens compares measured workload runs using total entered compute, setup, storage and egress costs per accepted output. It filters mismatched workload labels, currencies, quality and memory limits. All examples are fictional; no live GPU quotes are supplied. No live GPU inventory, automatic benchmarking, reservation, infrastructure management or verified savings. Retrieve compute with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • compare_rwa_disclosuresRWA Notes compares two sets of supplied asset disclosure fields while retaining units, dates and source references.No findings

    Why it is in this group

    • The name "compare_rwa_disclosures" says "compare": a word for reading.
    Description, as the server wrote it
    RWA Notes compares two sets of supplied asset disclosure fields while retaining units, dates and source references. It flags missing values and incompatible comparisons. It does not verify reserves, issuer solvency or redemption rights. No live asset feed, reserve audit, redemption verification, credit rating or investment recommendation. Retrieve disclosures with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • fetchRetrieve a public tool reference by the ID returned from search.No findings

    Why it is in this group

    • The name "fetch" says "fetch": a word for reading.
    Description, as the server wrote it
    Retrieve a public tool reference by the ID returned from search. Contains methodology, limits, official source links and fictional worked examples; no user records. Cite the returned canonical URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • read_protocol_profilesProtocol Ledger is a free, dated reference for five payment, agent-identity and token interfaces.No findings

    Why it is in this group

    • The name "read_protocol_profiles" says "read": a word for reading.
    Description, as the server wrote it
    Protocol Ledger is a free, dated reference for five payment, agent-identity and token interfaces. Each record preserves its official specification, review date and interpretation limits. Filter the same snapshot in the browser or retrieve it through the JSON API. Five initial profiles; no market prices, exhaustive schema coverage, real-time protocol monitoring or paid endpoint. Retrieve protocol with fetch or read its example resource to obtain exact inputs. Parameters are processed remotely without application persistence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.7.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agiscorecard-web3-workbench https://web3.agiscorecard.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agiscorecard-web3-workbench__search",
      "mcp__agiscorecard-web3-workbench__fetch",
      "mcp__agiscorecard-web3-workbench__read_protocol_profiles",
      "mcp__agiscorecard-web3-workbench__compare_compute_costs",
      "mcp__agiscorecard-web3-workbench__compare_rwa_disclosures"
    ],
    "ask": [
      "mcp__agiscorecard-web3-workbench__reconcile_stablecoin_records",
      "mcp__agiscorecard-web3-workbench__review_agent_evidence",
      "mcp__agiscorecard-web3-workbench__plan_fallback_routes",
      "mcp__agiscorecard-web3-workbench__check_data_permissions",
      "mcp__agiscorecard-web3-workbench__model_contributor_rewards",
      "mcp__agiscorecard-web3-workbench__plan_zkml_costs",
      "mcp__agiscorecard-web3-workbench__decode_token_call"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agiscorecard-web3-workbench. Review it before you use it.