InsureLink
by skewing1 · remote · no sign-in to list tools · v1.0.0 · published by GitHub user skewing1
AI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments.
32 tools: 1 can delete or cancel things, 2 do something that can't be undone, 17 change things and 12 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone2Claude Code: ask: see these tools
- Changes things17Claude Code: ask: see these tools
- Only reads12Claude Code: allow: see these tools
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http insurelink https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcpFindings
Matches of fixed checks, with the text they matched.
- Infoget_attestation
The description mentions "credential".
What this check looks forMatched text
description: "Returns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wa..."
The description mentions "credential".
What this check looks forMatched text
description: "...need an on-the-record, timestamp-fresh credential rather than the cached free attestation..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
32 tools
Deletes or cancels 1Claude Code: deny
unsubscribe_attestation_freshnessCancels a previously created attestation-freshness webhook subscription (also cancels the bundled reputation.drift channel on the same subscription).No findings
Why it is in this group
- The name "unsubscribe_attestation_freshness" says "unsubscribe": a word for a change.
- The description's first verb is "cancel": a word for removing or ending something.
Description, as the server wrote it Cancels a previously created attestation-freshness webhook subscription (also cancels the bundled reputation.drift channel on the same subscription). Free. Provide the subscription id returned by subscribe_attestation_freshness / POST /reputation-drift-subscribe. Remaining paid window is forfeited; no refund. Returns { ok, id, cancelled_at } on success.
Can't be undone 2Claude Code: ask
insurelink_chargeLovable-friendly entry point: same x402 quote → pay → call loop as `pay_then_call`, plus vertical-aware pricing.No findings
Why it is in this group
- The name "insurelink_charge" says "charge": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Lovable-friendly entry point: same x402 quote → pay → call loop as `pay_then_call`, plus vertical-aware pricing. Pass `vertical` (logistics, legal, oracles, banking, fintech, healthcare, insurance, government, defense, …) and the upstream x402 server re-prices each accepts[] entry by tier (standard 1× / regulated 1.5× / sovereign 2.5× / defense 3×). Pass `attestation: "pio:<id>"` (or fedramp:/soc2:) for a 20% compliance discount on regulated+ tiers. The signed receipt envelope is tagged `source: "lovable"` and includes a `vertical: { claimed_slug, attestation, quoted: { tier, multiplier, attested, ... } }` block recording the tier the upstream actually quoted — that is the audit trail for tier billing. Returns { paid, upstream_status, response, signed_context: { envelope, envelope_json, envelope_sha256, signature, signer, scheme: 'EIP-191' } }. Pass `idempotency_key` to safely retry without double-settling.
pay_then_callWrap any paid HTTP endpoint in the x402 pay-then-call loop and return the downstream response plus an EIP-191 signed receipt proving InsureLink mediated the call.No findings
Why it is in this group
- The name "pay_then_call" says "pay": a word that usually means money moves, which cannot be taken back.
- The name "pay_then_call" also says "call": a word for a change.
Description, as the server wrote it Wrap any paid HTTP endpoint in the x402 pay-then-call loop and return the downstream response plus an EIP-191 signed receipt proving InsureLink mediated the call. The signed context envelope contains: { request: {url, method, body_sha256}, payment: {asset, amount, network, settlement_id}, response: {status, sha256, content_type, length}, observed_at, mediator: 'insurelink' } and a signature recoverable to InsureLink's deployer key. Two modes: (a) caller_supplies_payment — pass `x_payment_header` (base64) so the upstream call is settled by your wallet; (b) `mode='quote_only'` — return only the 402 quote without paying. Pass `idempotency_key` to safely retry: identical requests return the cached signed receipt without settling a second payment, and conflicting payloads under the same key are rejected. Use this to give an LLM verifiable provenance for any paid agent call (banking, market data, gov endpoints).
Changes things 17Claude Code: ask
attest_reputationRecomputes the live cross-chain reputation for a wallet, persists a fresh EIP-191 signed attestation in attestation_records (replacing any prior pin), and returns { attestation, ca…1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...need an on-the-record, timestamp-fresh credential rather than the cached free attestation..."
Description, as the server wrote it Recomputes the live cross-chain reputation for a wallet, persists a fresh EIP-191 signed attestation in attestation_records (replacing any prior pin), and returns { attestation, canonical_payload, signature, signer } as a portable proof an agent can present to insurers, registries, or counterparty agents. Use when you need an on-the-record, timestamp-fresh credential rather than the cached free attestation. Requires x402 payment ($0.005). Returns payment instructions.
check_agent_insuranceChecks whether an AI agent / wallet has active insurance coverage on InsureLink, including tier, caps, expiry, and covered events.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Checks whether an AI agent / wallet has active insurance coverage on InsureLink, including tier, caps, expiry, and covered events. Free. Standard HTTPS + JSON via the agent-assurance REST module.
claim_breach_creditVerifies the on-chain SLA agreement state for tokenId and, if active and the caller is a party, calls microResetInsurance to mitigate the breach.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verifies the on-chain SLA agreement state for tokenId and, if active and the caller is a party, calls microResetInsurance to mitigate the breach. Use after a drift or expiry alert. Requires x402 payment ($0.005). Returns payment instructions.
early_exitExits an SLA early with protection adjustment.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Exits an SLA early with protection adjustment. Requires x402 payment ($0.005). Returns payment instructions.
micro_resetResets the insurance window for an SLA.No findings
Why it is in this group
- The name "micro_reset" says "reset": a word for a change.
Description, as the server wrote it Resets the insurance window for an SLA. Requires x402 payment ($0.001). Returns payment instructions.
mint_slaCreates a new ERC-721 SLA agreement NFT.No findings
Why it is in this group
- The description's first verb is "create": a word for a change.
Description, as the server wrote it Creates a new ERC-721 SLA agreement NFT. Requires x402 payment ($0.01). Returns payment instructions.
mitigation_receiptVerifies a claim_breach_credit transaction by tx hash and returns a canonical mitigation receipt suitable for insurer/registry attestations.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verifies a claim_breach_credit transaction by tx hash and returns a canonical mitigation receipt suitable for insurer/registry attestations. Reads from existing on-chain settlement records — no new state. Requires x402 payment ($0.001). Returns payment instructions.
renew_slaRenews an existing SLA agreement.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Renews an existing SLA agreement. Requires x402 payment ($0.005). Returns payment instructions.
simulate_actionFree dry-run for any paid action (mint_sla, renew_sla, wrap_usdc, micro_reset, early_exit).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Free dry-run for any paid action (mint_sla, renew_sla, wrap_usdc, micro_reset, early_exit). Validates params, x402 header shape, and simulates the contract call against Base. Never broadcasts. Returns { simulated: true, would_succeed, revertReason? } or a precise error. Use this before calling any paid tool.
simulate_paid_actionFREE dry-run for any paid action.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it FREE dry-run for any paid action. Returns a deterministic shape: { would_succeed, exact_cost_usd (LIVE from /agent-pricing-oracle), gas_estimate, contract_call, reputation_delta, expected_receipt_schema, validation_errors[], pricing: { source, expected_value_usd, roi_ratio, recommended_priority, coupon? } }. Never broadcasts, never charges. Use BEFORE any paid tool to avoid wasted x402 settlements. Supported actions: wrap, mint-sla, renew, micro-reset, early-exit.
simulate_paid_action_batchFREE batch dry-run.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it FREE batch dry-run. Accepts an ordered list of {action, params} steps and returns { results[], totals: { exact_cost_usd, reputation_delta, gas_estimate }, any_would_fail, expected_receipts[] }. Never broadcasts, never charges. Use to plan and price multi-step flows (e.g. wrap → mint-sla → renew) before executing.
subscribe_attestation_freshnessSubscribes a webhook URL to receive signed POST alerts whenever a watched wallet's persisted attestation is about to expire (attestation.expiring_soon, fires once when within attes…No findings
Why it is in this group
- The name "subscribe_attestation_freshness" says "subscribe": a word for a change.
Description, as the server wrote it Subscribes a webhook URL to receive signed POST alerts whenever a watched wallet's persisted attestation is about to expire (attestation.expiring_soon, fires once when within attestation_expiry_warning_days of expires_at) or has expired (attestation.expired, fires once when expires_at crosses). Backed by the same paid drift subscription ($0.01) so the same callback also receives reputation.drift events unless threshold_tier_change=false and threshold_score is set high. 30-day paid window. Each POST includes X-InsureLink-Event header and the schema 'insurelink/attestation-event/v1'. Requires x402 payment ($0.01). Returns payment instructions.
subscribe_reputation_drift_alertsSubscribes a webhook URL to receive signed POST notifications whenever a watched wallet's reputation snapshot drifts beyond the configured threshold (score delta and/or tier change…No findings
Why it is in this group
- The name "subscribe_reputation_drift_alerts" says "subscribe": a word for a change.
Description, as the server wrote it Subscribes a webhook URL to receive signed POST notifications whenever a watched wallet's reputation snapshot drifts beyond the configured threshold (score delta and/or tier change). 30-day paid window per subscription. The reputation-drift-monitor cron evaluates active subscriptions and POSTs { event:'reputation.drift', wallet, previous, current, drift, observed_at, subscription_id } to callback_url. Use to be notified the moment a counterparty's reputation degrades — replaces polling /cross-chain-reputation. Requires x402 payment ($0.01). Returns payment instructions.
verify_attestationVerifies an InsureLink reputation attestation for a wallet.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verifies an InsureLink reputation attestation for a wallet. Re-derives the signed payload server-side, recovers the EIP-191 signer, and returns { valid, signer, recovered, expires_at, checks }. Free.
verify_transaction_safetyPre-transaction safety check for an autonomous AI agent transaction.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Pre-transaction safety check for an autonomous AI agent transaction. Returns verified, risk_level, coverage_available, transaction_limits, additional_verification_required, and a transaction_recommendation: APPROVED | APPROVED_WITH_ESCROW | REQUIRE_ADDITIONAL_VERIFICATION | BLOCKED_HIGH_RISK | BLOCKED_LIMIT_EXCEEDED.
voice_intentParses a natural-language command (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Parses a natural-language command (e.g. 'renew my SLA #42 for 5 years', 'check reputation for 0x…', 'pay 1.50 USDC to 0x…') into a structured InsureLink action plan with endpoint, params, payment requirements, and confidence. Free preview returns the supported grammar; full classification requires x402 payment ($0.001) at the paid endpoint.
wrap_usdcWraps USDC into iUSDC.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Wraps USDC into iUSDC. Requires x402 payment ($0.001). Returns payment instructions.
Only reads 12Claude Code: allow
discover_capabilitiesReturns the full InsureLink capability manifest including supported actions, tokens, pricing, protection schedule, and framework compatibility.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Returns the full InsureLink capability manifest including supported actions, tokens, pricing, protection schedule, and framework compatibility.
get_activityReturns recent platform transactions.No findings
Why it is in this group
- The name "get_activity" says "get": a word for reading.
Description, as the server wrote it Returns recent platform transactions.
get_agent_claim_historyReturns recent insurance claim history for an AI agent / wallet on InsureLink, including filed, approved, partial, and denied claims.No findings
Why it is in this group
- The name "get_agent_claim_history" says "get": a word for reading.
Description, as the server wrote it Returns recent insurance claim history for an AI agent / wallet on InsureLink, including filed, approved, partial, and denied claims. Free.
get_agent_risk_scoreReturns a 0..100 risk score plus LOW/MODERATE/ELEVATED/HIGH risk band for an AI agent / wallet, with the underlying signals (coverage status, daily spend, denied claim ratio).No findings
Why it is in this group
- The name "get_agent_risk_score" says "get": a word for reading.
Description, as the server wrote it Returns a 0..100 risk score plus LOW/MODERATE/ELEVATED/HIGH risk band for an AI agent / wallet, with the underlying signals (coverage status, daily spend, denied claim ratio). Free.
get_attestationReturns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wallet.1 finding
Why it is in this group
- The name "get_attestation" says "get": a word for reading.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "Returns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wa..."
Description, as the server wrote it Returns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wallet. Includes score, tier, SLA summary, breach rate, signer address, and 30-day expiry. Issued only to wallets with at least one SLA on InsureLink (Bronze+). Free.
get_attestation_freshnessProbes how fresh a wallet's reputation snapshot and persisted attestation are.No findings
Why it is in this group
- The name "get_attestation_freshness" says "get": a word for reading.
Description, as the server wrote it Probes how fresh a wallet's reputation snapshot and persisted attestation are. Free preview returns thresholds and the paid endpoint URL; the actual freshness response (snapshot_age_seconds, attestation_age_seconds, expires_in_seconds, is_stale, stale_reasons[], next_action) requires x402 payment ($0.001) to GET /agent-orchestrator/attestation/{wallet}/freshness. Use this before paying for a fresh attestation mint ($0.005) — if is_stale=false you can skip the mint.
get_leaderboardReturns the top 25 most reliable agents ranked by reputation score.No findings
Why it is in this group
- The name "get_leaderboard" says "get": a word for reading.
Description, as the server wrote it Returns the top 25 most reliable agents ranked by reputation score.
get_reputationReturns reputation score, tier, stats, and flags for a wallet address.No findings
Why it is in this group
- The name "get_reputation" says "get": a word for reading.
Description, as the server wrote it Returns reputation score, tier, stats, and flags for a wallet address.
get_sla_historyReturns the full SLA history for a wallet address.No findings
Why it is in this group
- The name "get_sla_history" says "get": a word for reading.
Description, as the server wrote it Returns the full SLA history for a wallet address.
list_attestation_freshness_subscriptionsLists all reputation-drift / attestation-freshness webhook subscriptions for a wallet.No findings
Why it is in this group
- The name "list_attestation_freshness_subscriptions" says "list": a word for reading.
Description, as the server wrote it Lists all reputation-drift / attestation-freshness webhook subscriptions for a wallet. Returns id, callback_url, status (active/cancelled/exhausted/expired), notifications_sent vs max_notifications, last_attestation_event (none/expiring_soon/expired) with timestamp, attestation_expiry_warning_days, last_score/tier, last_checked_at, expires_at. Free. Use to audit what's being monitored and how many alerts have already fired before paying for another subscription.
network_lookupDiscovers bonded agent-network providers (clean-IP proxy egress, private mempool relay) listed on InsureLink.No findings
Why it is in this group
- The name "network_lookup" says "lookup": a word for reading.
Description, as the server wrote it Discovers bonded agent-network providers (clean-IP proxy egress, private mempool relay) listed on InsureLink. Returns provider wallets, x402 payment URLs, prices, and Smart Wallet / EOA compatibility hints. Free preview via this tool; full directory requires x402 payment ($0.001) at the paid endpoint.
verify_reputation_snapshotCompares a wallet's latest stored reputation_history snapshot against a fresh live cross-chain reputation computation.No findings
Why it is in this group
- The name "verify_reputation_snapshot" says "snapshot": a word for reading.
Description, as the server wrote it Compares a wallet's latest stored reputation_history snapshot against a fresh live cross-chain reputation computation. Returns { snapshot, live, match, drift, signature, signer } so counterparty agents can confirm an advertised score isn't stale before transacting. Signed EIP-191 by the InsureLink platform key. Requires x402 payment ($0.001). Returns payment instructions.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http insurelink https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__insurelink__discover_capabilities",
"mcp__insurelink__get_reputation",
"mcp__insurelink__get_leaderboard",
"mcp__insurelink__get_sla_history",
"mcp__insurelink__get_activity",
"mcp__insurelink__get_attestation",
"mcp__insurelink__get_attestation_freshness",
"mcp__insurelink__list_attestation_freshness_subscriptions",
"mcp__insurelink__network_lookup",
"mcp__insurelink__get_agent_risk_score",
"mcp__insurelink__get_agent_claim_history",
"mcp__insurelink__verify_reputation_snapshot"
],
"ask": [
"mcp__insurelink__verify_attestation",
"mcp__insurelink__subscribe_attestation_freshness",
"mcp__insurelink__voice_intent",
"mcp__insurelink__check_agent_insurance",
"mcp__insurelink__verify_transaction_safety",
"mcp__insurelink__mint_sla",
"mcp__insurelink__renew_sla",
"mcp__insurelink__wrap_usdc",
"mcp__insurelink__micro_reset",
"mcp__insurelink__early_exit",
"mcp__insurelink__claim_breach_credit",
"mcp__insurelink__mitigation_receipt",
"mcp__insurelink__attest_reputation",
"mcp__insurelink__subscribe_reputation_drift_alerts",
"mcp__insurelink__simulate_action",
"mcp__insurelink__simulate_paid_action",
"mcp__insurelink__simulate_paid_action_batch",
"mcp__insurelink__pay_then_call",
"mcp__insurelink__insurelink_charge"
],
"deny": [
"mcp__insurelink__unsubscribe_attestation_freshness"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as insurelink. Review it before you use it.
