Skip to content

InsureLink

by skewing1 · remote · no sign-in to list tools · v1.0.0 · published by GitHub user skewing1

AI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments.

Deletes · 1Final · 2Changes · 17

32 tools: 1 can delete or cancel things, 2 do something that can't be undone, 17 change things and 12 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http insurelink https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp

Findings

Matches of fixed checks, with the text they matched.

2 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

32 tools

Deletes or cancels 1Claude Code: deny
  • unsubscribe_attestation_freshnessCancels a previously created attestation-freshness webhook subscription (also cancels the bundled reputation.drift channel on the same subscription).No findings

    Why it is in this group

    • The name "unsubscribe_attestation_freshness" says "unsubscribe": a word for a change.
    • The description's first verb is "cancel": a word for removing or ending something.
    Description, as the server wrote it
    Cancels a previously created attestation-freshness webhook subscription (also cancels the bundled reputation.drift channel on the same subscription). Free. Provide the subscription id returned by subscribe_attestation_freshness / POST /reputation-drift-subscribe. Remaining paid window is forfeited; no refund. Returns { ok, id, cancelled_at } on success.
Can't be undone 2Claude Code: ask
  • pay_then_callWrap any paid HTTP endpoint in the x402 pay-then-call loop and return the downstream response plus an EIP-191 signed receipt proving InsureLink mediated the call.No findings

    Why it is in this group

    • The name "pay_then_call" says "pay": a word that usually means money moves, which cannot be taken back.
    • The name "pay_then_call" also says "call": a word for a change.
    Description, as the server wrote it
    Wrap any paid HTTP endpoint in the x402 pay-then-call loop and return the downstream response plus an EIP-191 signed receipt proving InsureLink mediated the call. The signed context envelope contains: { request: {url, method, body_sha256}, payment: {asset, amount, network, settlement_id}, response: {status, sha256, content_type, length}, observed_at, mediator: 'insurelink' } and a signature recoverable to InsureLink's deployer key. Two modes: (a) caller_supplies_payment — pass `x_payment_header` (base64) so the upstream call is settled by your wallet; (b) `mode='quote_only'` — return only the 402 quote without paying. Pass `idempotency_key` to safely retry: identical requests return the cached signed receipt without settling a second payment, and conflicting payloads under the same key are rejected. Use this to give an LLM verifiable provenance for any paid agent call (banking, market data, gov endpoints).
Changes things 17Claude Code: ask
  • attest_reputationRecomputes the live cross-chain reputation for a wallet, persists a fresh EIP-191 signed attestation in attestation_records (replacing any prior pin), and returns { attestation, ca…1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...need an on-the-record, timestamp-fresh credential rather than the cached free attestation..."

      What this check looks for
    Description, as the server wrote it
    Recomputes the live cross-chain reputation for a wallet, persists a fresh EIP-191 signed attestation in attestation_records (replacing any prior pin), and returns { attestation, canonical_payload, signature, signer } as a portable proof an agent can present to insurers, registries, or counterparty agents. Use when you need an on-the-record, timestamp-fresh credential rather than the cached free attestation. Requires x402 payment ($0.005). Returns payment instructions.
  • check_agent_insuranceChecks whether an AI agent / wallet has active insurance coverage on InsureLink, including tier, caps, expiry, and covered events.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Checks whether an AI agent / wallet has active insurance coverage on InsureLink, including tier, caps, expiry, and covered events. Free. Standard HTTPS + JSON via the agent-assurance REST module.
  • claim_breach_creditVerifies the on-chain SLA agreement state for tokenId and, if active and the caller is a party, calls microResetInsurance to mitigate the breach.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verifies the on-chain SLA agreement state for tokenId and, if active and the caller is a party, calls microResetInsurance to mitigate the breach. Use after a drift or expiry alert. Requires x402 payment ($0.005). Returns payment instructions.
  • early_exitExits an SLA early with protection adjustment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Exits an SLA early with protection adjustment. Requires x402 payment ($0.005). Returns payment instructions.
  • micro_resetResets the insurance window for an SLA.No findings

    Why it is in this group

    • The name "micro_reset" says "reset": a word for a change.
    Description, as the server wrote it
    Resets the insurance window for an SLA. Requires x402 payment ($0.001). Returns payment instructions.
  • mint_slaCreates a new ERC-721 SLA agreement NFT.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Creates a new ERC-721 SLA agreement NFT. Requires x402 payment ($0.01). Returns payment instructions.
  • mitigation_receiptVerifies a claim_breach_credit transaction by tx hash and returns a canonical mitigation receipt suitable for insurer/registry attestations.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verifies a claim_breach_credit transaction by tx hash and returns a canonical mitigation receipt suitable for insurer/registry attestations. Reads from existing on-chain settlement records — no new state. Requires x402 payment ($0.001). Returns payment instructions.
  • renew_slaRenews an existing SLA agreement.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Renews an existing SLA agreement. Requires x402 payment ($0.005). Returns payment instructions.
  • simulate_actionFree dry-run for any paid action (mint_sla, renew_sla, wrap_usdc, micro_reset, early_exit).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Free dry-run for any paid action (mint_sla, renew_sla, wrap_usdc, micro_reset, early_exit). Validates params, x402 header shape, and simulates the contract call against Base. Never broadcasts. Returns { simulated: true, would_succeed, revertReason? } or a precise error. Use this before calling any paid tool.
  • simulate_paid_actionFREE dry-run for any paid action.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    FREE dry-run for any paid action. Returns a deterministic shape: { would_succeed, exact_cost_usd (LIVE from /agent-pricing-oracle), gas_estimate, contract_call, reputation_delta, expected_receipt_schema, validation_errors[], pricing: { source, expected_value_usd, roi_ratio, recommended_priority, coupon? } }. Never broadcasts, never charges. Use BEFORE any paid tool to avoid wasted x402 settlements. Supported actions: wrap, mint-sla, renew, micro-reset, early-exit.
  • simulate_paid_action_batchFREE batch dry-run.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    FREE batch dry-run. Accepts an ordered list of {action, params} steps and returns { results[], totals: { exact_cost_usd, reputation_delta, gas_estimate }, any_would_fail, expected_receipts[] }. Never broadcasts, never charges. Use to plan and price multi-step flows (e.g. wrap → mint-sla → renew) before executing.
  • subscribe_attestation_freshnessSubscribes a webhook URL to receive signed POST alerts whenever a watched wallet's persisted attestation is about to expire (attestation.expiring_soon, fires once when within attes…No findings

    Why it is in this group

    • The name "subscribe_attestation_freshness" says "subscribe": a word for a change.
    Description, as the server wrote it
    Subscribes a webhook URL to receive signed POST alerts whenever a watched wallet's persisted attestation is about to expire (attestation.expiring_soon, fires once when within attestation_expiry_warning_days of expires_at) or has expired (attestation.expired, fires once when expires_at crosses). Backed by the same paid drift subscription ($0.01) so the same callback also receives reputation.drift events unless threshold_tier_change=false and threshold_score is set high. 30-day paid window. Each POST includes X-InsureLink-Event header and the schema 'insurelink/attestation-event/v1'. Requires x402 payment ($0.01). Returns payment instructions.
  • subscribe_reputation_drift_alertsSubscribes a webhook URL to receive signed POST notifications whenever a watched wallet's reputation snapshot drifts beyond the configured threshold (score delta and/or tier change…No findings

    Why it is in this group

    • The name "subscribe_reputation_drift_alerts" says "subscribe": a word for a change.
    Description, as the server wrote it
    Subscribes a webhook URL to receive signed POST notifications whenever a watched wallet's reputation snapshot drifts beyond the configured threshold (score delta and/or tier change). 30-day paid window per subscription. The reputation-drift-monitor cron evaluates active subscriptions and POSTs { event:'reputation.drift', wallet, previous, current, drift, observed_at, subscription_id } to callback_url. Use to be notified the moment a counterparty's reputation degrades — replaces polling /cross-chain-reputation. Requires x402 payment ($0.01). Returns payment instructions.
  • verify_attestationVerifies an InsureLink reputation attestation for a wallet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verifies an InsureLink reputation attestation for a wallet. Re-derives the signed payload server-side, recovers the EIP-191 signer, and returns { valid, signer, recovered, expires_at, checks }. Free.
  • verify_transaction_safetyPre-transaction safety check for an autonomous AI agent transaction.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Pre-transaction safety check for an autonomous AI agent transaction. Returns verified, risk_level, coverage_available, transaction_limits, additional_verification_required, and a transaction_recommendation: APPROVED | APPROVED_WITH_ESCROW | REQUIRE_ADDITIONAL_VERIFICATION | BLOCKED_HIGH_RISK | BLOCKED_LIMIT_EXCEEDED.
  • voice_intentParses a natural-language command (e.g.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Parses a natural-language command (e.g. 'renew my SLA #42 for 5 years', 'check reputation for 0x…', 'pay 1.50 USDC to 0x…') into a structured InsureLink action plan with endpoint, params, payment requirements, and confidence. Free preview returns the supported grammar; full classification requires x402 payment ($0.001) at the paid endpoint.
  • wrap_usdcWraps USDC into iUSDC.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Wraps USDC into iUSDC. Requires x402 payment ($0.001). Returns payment instructions.
Only reads 12Claude Code: allow
  • discover_capabilitiesReturns the full InsureLink capability manifest including supported actions, tokens, pricing, protection schedule, and framework compatibility.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns the full InsureLink capability manifest including supported actions, tokens, pricing, protection schedule, and framework compatibility.
  • get_activityReturns recent platform transactions.No findings

    Why it is in this group

    • The name "get_activity" says "get": a word for reading.
    Description, as the server wrote it
    Returns recent platform transactions.
  • get_agent_claim_historyReturns recent insurance claim history for an AI agent / wallet on InsureLink, including filed, approved, partial, and denied claims.No findings

    Why it is in this group

    • The name "get_agent_claim_history" says "get": a word for reading.
    Description, as the server wrote it
    Returns recent insurance claim history for an AI agent / wallet on InsureLink, including filed, approved, partial, and denied claims. Free.
  • get_agent_risk_scoreReturns a 0..100 risk score plus LOW/MODERATE/ELEVATED/HIGH risk band for an AI agent / wallet, with the underlying signals (coverage status, daily spend, denied claim ratio).No findings

    Why it is in this group

    • The name "get_agent_risk_score" says "get": a word for reading.
    Description, as the server wrote it
    Returns a 0..100 risk score plus LOW/MODERATE/ELEVATED/HIGH risk band for an AI agent / wallet, with the underlying signals (coverage status, daily spend, denied claim ratio). Free.
  • get_attestationReturns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wallet.1 finding

    Why it is in this group

    • The name "get_attestation" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "Returns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wa..."

      What this check looks for
    Description, as the server wrote it
    Returns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wallet. Includes score, tier, SLA summary, breach rate, signer address, and 30-day expiry. Issued only to wallets with at least one SLA on InsureLink (Bronze+). Free.
  • get_attestation_freshnessProbes how fresh a wallet's reputation snapshot and persisted attestation are.No findings

    Why it is in this group

    • The name "get_attestation_freshness" says "get": a word for reading.
    Description, as the server wrote it
    Probes how fresh a wallet's reputation snapshot and persisted attestation are. Free preview returns thresholds and the paid endpoint URL; the actual freshness response (snapshot_age_seconds, attestation_age_seconds, expires_in_seconds, is_stale, stale_reasons[], next_action) requires x402 payment ($0.001) to GET /agent-orchestrator/attestation/{wallet}/freshness. Use this before paying for a fresh attestation mint ($0.005) — if is_stale=false you can skip the mint.
  • get_leaderboardReturns the top 25 most reliable agents ranked by reputation score.No findings

    Why it is in this group

    • The name "get_leaderboard" says "get": a word for reading.
    Description, as the server wrote it
    Returns the top 25 most reliable agents ranked by reputation score.
  • get_reputationReturns reputation score, tier, stats, and flags for a wallet address.No findings

    Why it is in this group

    • The name "get_reputation" says "get": a word for reading.
    Description, as the server wrote it
    Returns reputation score, tier, stats, and flags for a wallet address.
  • get_sla_historyReturns the full SLA history for a wallet address.No findings

    Why it is in this group

    • The name "get_sla_history" says "get": a word for reading.
    Description, as the server wrote it
    Returns the full SLA history for a wallet address.
  • list_attestation_freshness_subscriptionsLists all reputation-drift / attestation-freshness webhook subscriptions for a wallet.No findings

    Why it is in this group

    • The name "list_attestation_freshness_subscriptions" says "list": a word for reading.
    Description, as the server wrote it
    Lists all reputation-drift / attestation-freshness webhook subscriptions for a wallet. Returns id, callback_url, status (active/cancelled/exhausted/expired), notifications_sent vs max_notifications, last_attestation_event (none/expiring_soon/expired) with timestamp, attestation_expiry_warning_days, last_score/tier, last_checked_at, expires_at. Free. Use to audit what's being monitored and how many alerts have already fired before paying for another subscription.
  • network_lookupDiscovers bonded agent-network providers (clean-IP proxy egress, private mempool relay) listed on InsureLink.No findings

    Why it is in this group

    • The name "network_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Discovers bonded agent-network providers (clean-IP proxy egress, private mempool relay) listed on InsureLink. Returns provider wallets, x402 payment URLs, prices, and Smart Wallet / EOA compatibility hints. Free preview via this tool; full directory requires x402 payment ($0.001) at the paid endpoint.
  • verify_reputation_snapshotCompares a wallet's latest stored reputation_history snapshot against a fresh live cross-chain reputation computation.No findings

    Why it is in this group

    • The name "verify_reputation_snapshot" says "snapshot": a word for reading.
    Description, as the server wrote it
    Compares a wallet's latest stored reputation_history snapshot against a fresh live cross-chain reputation computation. Returns { snapshot, live, match, drift, signature, signer } so counterparty agents can confirm an advertised score isn't stale before transacting. Signed EIP-191 by the InsureLink platform key. Requires x402 payment ($0.001). Returns payment instructions.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http insurelink https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__insurelink__discover_capabilities",
      "mcp__insurelink__get_reputation",
      "mcp__insurelink__get_leaderboard",
      "mcp__insurelink__get_sla_history",
      "mcp__insurelink__get_activity",
      "mcp__insurelink__get_attestation",
      "mcp__insurelink__get_attestation_freshness",
      "mcp__insurelink__list_attestation_freshness_subscriptions",
      "mcp__insurelink__network_lookup",
      "mcp__insurelink__get_agent_risk_score",
      "mcp__insurelink__get_agent_claim_history",
      "mcp__insurelink__verify_reputation_snapshot"
    ],
    "ask": [
      "mcp__insurelink__verify_attestation",
      "mcp__insurelink__subscribe_attestation_freshness",
      "mcp__insurelink__voice_intent",
      "mcp__insurelink__check_agent_insurance",
      "mcp__insurelink__verify_transaction_safety",
      "mcp__insurelink__mint_sla",
      "mcp__insurelink__renew_sla",
      "mcp__insurelink__wrap_usdc",
      "mcp__insurelink__micro_reset",
      "mcp__insurelink__early_exit",
      "mcp__insurelink__claim_breach_credit",
      "mcp__insurelink__mitigation_receipt",
      "mcp__insurelink__attest_reputation",
      "mcp__insurelink__subscribe_reputation_drift_alerts",
      "mcp__insurelink__simulate_action",
      "mcp__insurelink__simulate_paid_action",
      "mcp__insurelink__simulate_paid_action_batch",
      "mcp__insurelink__pay_then_call",
      "mcp__insurelink__insurelink_charge"
    ],
    "deny": [
      "mcp__insurelink__unsubscribe_attestation_freshness"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as insurelink. Review it before you use it.