# `io.github.jdhart81/agent-offset-clearinghouse` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.github.jdhart81/agent-offset-clearinghouse - JSON: https://anlyon.dev/api/v1/servers/io.github.jdhart81/agent-offset-clearinghouse - Version: 0.6.0 (active) - Publisher: io.github.jdhart81 (GitHub account) - Runs: remote (streamable-http) - Sign-in to list tools: none - Repository: https://github.com/jdhart81/viridis-agent-fleet - Metadata from the official MCP Registry, synced 2026-10-21T18:36:43.063Z Title and description, as the publisher wrote them: ```untrusted-server-text Verified conservation credits matched to agent compute emissions — the conservation flywheel of the ``` Scanned 2026-10-21T19:34:23.304Z over streamable-http. **19 tools: 2 do something that can't be undone, 12 change things and 5 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 2 | ask | | Changes things | write | 12 | ask | | Only reads | read | 5 | allow | ## Findings No check matched anything in these tool definitions. ## Can't be undone (2) Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask. ### `certify_disbursement` - The name "certify_disbursement" says "disbursement": a word that usually means money moves, which cannot be taken back. Description, as the server wrote it: ```untrusted-server-text Freeze the current disbursement schedule into a certified, tamper-evident batch (content-addressed, hash-chained). Idempotent on batch_id; only newly-accrued proceeds for verified projects are certified (never disbursed twice). This is the certified investment record the CEO executes the actual Stripe transfers against. ``` ### `verify_disbursement` - The name "verify_disbursement" says "disbursement": a word that usually means money moves, which cannot be taken back. Description, as the server wrote it: ```untrusted-server-text Recompute the disbursement certificate hash chain and confirm whole-book conservation of disbursed proceeds. Any party can audit disbursements. ``` ## Changes things (12) Creates or changes something that can be changed back. Claude Code: ask. ### `book` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text The full credit book with per-credit and book-wide mass conservation totals. ``` ### `buy_offset` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Retire mass_g of verified credits for a buyer: cheapest-first matching, exactly-once (idempotent on purchase_id), returns a content-addressed offset certificate with per-fill costs. Payment settles via escrow. dry_run=true previews the exact fills/cost without mutating the book. ``` ### `buy_offset_budget` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Money-denominated offset purchase: retire the maximum cheapest-first verified mass whose exact cost fits inside budget_minor (never overspends). Built for callers whose restoration obligation is a currency amount — e.g. a revenue share accrued in a ledger. Idempotent on purchase_id; dry_run=true previews without mutating. ``` ### `delist_credit` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Admin operation: remove a credit from the active fill path while retaining its listing and retirement history for audit. Idempotent for an already-delisted credit. Gateway state-change authentication is required. ``` ### `disbursement_schedule` - The name "disbursement_schedule" says "schedule": a word for a change. Description, as the server wrote it: ```untrusted-server-text Automated disbursement preview: for each verified restoration project, splits its newly-accrued proceeds into the Viridis Conservation withhold (default 15%, seeds the software/business) and the project payout (85%). Read-only. Funded-but-unregistered projects are surfaced separately as pending_registration (can't pay an unverified project). ``` ### `net_position` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Buyer's carbon position: emitted (from agent-compute-ledger) minus retired. carbon_accountable == true when fully offset. ``` ### `project_funding` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Supply-side disbursement ledger: how much each restoration project has earned from retirements and is owed (gross_proceeds_minor + retired_g). Pass a project_id for one project, else all. Read-only — the CEO settles the actual payout. This is what makes the clearinghouse fund restoration. ``` ### `register_project` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Register a VERIFIED restoration project so retirements against its credits can be funded. verification_ref (D-Score / land-verification / registry id) is required — only verified conservation is funded. project_id is immutable once registered. ``` ### `verify_certificate` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Verify an offset certificate: recompute its hash and check the ledger. ``` ### `verify_retirement` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text x402-C C4 check: confirm a retirement (offset_ref = purchase_id) actually retires at least required_g grams of verified conservation credit — the check that lets a carbon receipt's neutrality claim be honored. Returns covered / retired_g / shortfall_g and the backing credits. Read-only. ``` ### `verra_retirement_record` - The description's first verb is "generate": a word for a change. Description, as the server wrote it: ```untrusted-server-text Generate the Verra-portal-ready retirement record(s) for a retirement made against Verra supply — VCS project id, serial, vintage, methodology, quantity (tCO2e), beneficiary, and the registry.verra.org cross-reference. Read-only. Submit these under the Viridis Verra account to finalize the on-registry retirement (portal today; auto-posts when Verra's transaction API is live). ``` ### `verra_supply` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text The tradeable Verra VCS book: verified credits carrying genuine Verra provenance (project id + serial + vintage), cross-referenceable on registry.verra.org. Read-only. Every retirement nets the project 85% and Viridis the 15% marketplace take. ``` ## Only reads (5) Looks things up and changes nothing. Claude Code: allow. ### `describe_agent` - The name "describe_agent" says "describe": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fleet-standard self-description. ``` ### `get_purchase` - The name "get_purchase" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch a past purchase / offset certificate by id. ``` ### `list_credit` - The name "list_credit" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List a conservation credit on the book. verification_ref (a D-Score / land-verification attestation) is REQUIRED — unverified credits cannot enter the book. To trade on the Verra network, pass registry="verra" with the VCS provenance (vcs_project_id, serial_number, vintage, methodology) so retirements are cross-referenceable on registry.verra.org. ``` ### `list_projects` - The name "list_projects" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text List all registered restoration projects with their metadata. ``` ### `settlement_batch` - The description's first verb is "read": a word for reading. Description, as the server wrote it: ```untrusted-server-text Read-only cash-settlement summary for a buyer: the list + exact sums (purchases, mass_g, cost_minor) of their retirements, optionally since an ISO-8601 timestamp — the statement a human settles in one transfer. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `agent-offset-clearinghouse`: ```json { "permissions": { "allow": [ "mcp__agent-offset-clearinghouse__list_credit", "mcp__agent-offset-clearinghouse__settlement_batch", "mcp__agent-offset-clearinghouse__get_purchase", "mcp__agent-offset-clearinghouse__list_projects", "mcp__agent-offset-clearinghouse__describe_agent" ], "ask": [ "mcp__agent-offset-clearinghouse__delist_credit", "mcp__agent-offset-clearinghouse__verra_supply", "mcp__agent-offset-clearinghouse__verra_retirement_record", "mcp__agent-offset-clearinghouse__buy_offset", "mcp__agent-offset-clearinghouse__buy_offset_budget", "mcp__agent-offset-clearinghouse__net_position", "mcp__agent-offset-clearinghouse__verify_certificate", "mcp__agent-offset-clearinghouse__book", "mcp__agent-offset-clearinghouse__verify_retirement", "mcp__agent-offset-clearinghouse__register_project", "mcp__agent-offset-clearinghouse__project_funding", "mcp__agent-offset-clearinghouse__disbursement_schedule", "mcp__agent-offset-clearinghouse__certify_disbursement", "mcp__agent-offset-clearinghouse__verify_disbursement" ], "deny": [] } } ```