Skip to content

AgentResolver — Agent Commerce Health Monitoring

by waxsway · remote · no sign-in to list tools · v0.2.4 · published by GitHub user waxsway

Free API/MCP/x402 health checks plus $19 hourly managed monitoring for agent services.

Final · 2Changes · 28
CompareRegistry entry

36 tools: 2 do something that can't be undone, 28 change things and 6 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agentresolver https://agentresolver.vercel.app/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • Warnprocure

    The server marks "procure" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

    What this check looks for
  • Warnpayment_guard

    The server marks "payment_guard" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "payment_guard" says "payment": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • Warnx402_payment_preflight

    The server marks "x402_payment_preflight" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "x402_payment_preflight" says "payment": a word that usually means money moves, which cannot be taken back.

    What this check looks for
  • Warnopenapi_select

    The server marks "openapi_select" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "openapi_select" says "select": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

36 tools

Can't be undone 2Claude Code: ask
  • payment_guardPaid $0.001 USDC fail-closed payment authorization preflight.1 finding

    Why it is in this group

    • The name "payment_guard" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "payment_guard" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "payment_guard" says "payment": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Paid $0.001 USDC fail-closed payment authorization preflight. Use immediately before an autonomous agent signs a target x402 payment. Returns eligible/blocked, exact observed payment terms, reason codes, evidence receipt and stable fingerprints. The caller retains sole spending authority.

    Annotations the server declares

    • title: AgentResolver Guard — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • x402_payment_preflightPaid $0.001 USDC on Base or Solana transaction-path gate for autonomous buyers.1 finding

    Why it is in this group

    • The name "x402_payment_preflight" says "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "x402_payment_preflight" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "x402_payment_preflight" says "payment": a word that usually means money moves, which cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana transaction-path gate for autonomous buyers. Returns eligible/blocked, exact target payment terms, fail-closed reason codes and verifiable evidence before caller authorization. AgentResolver never requests a private key, signs the target payment, or custodies/forwards target funds.

    Annotations the server declares

    • title: X402 preflight — verify endpoint before paying — endpoint safety — USDC payment check — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Changes things 28Claude Code: ask
  • abi_decodePaid $0.005 USDC on Base or Solana exact Ethereum ABI decoding into JSON-safe typed values.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.005 USDC on Base or Solana exact Ethereum ABI decoding into JSON-safe typed values.

    Annotations the server declares

    • title: Ethereum ABI decode — $0.005
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • abi_encodePaid $0.005 USDC on Base or Solana exact Ethereum ABI encoding from Solidity typed JSON values to calldata-ready hex.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.005 USDC on Base or Solana exact Ethereum ABI encoding from Solidity typed JSON values to calldata-ready hex.

    Annotations the server declares

    • title: Ethereum ABI encode — $0.005
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • agent_distribution_packPaid $5 USDC seller-side agent distribution pack for API/MCP discoverability: live discovery audit, ready-to-commit agent-readable artifacts, and a prioritized API/MCP distribution…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $5 USDC seller-side agent distribution pack for API/MCP discoverability: live discovery audit, ready-to-commit agent-readable artifacts, and a prioritized API/MCP distribution sequence.

    Annotations the server declares

    • title: Agent distribution pack — $5
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • agent_readinessPaid $0.005 USDC on Base or Solana audit of a public website for agent discoverability and machine-readable integration signals.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.005 USDC on Base or Solana audit of a public website for agent discoverability and machine-readable integration signals. x402-aware MCP clients can authorize and settle inside this tool call.

    Annotations the server declares

    • title: Agent-readiness audit — $0.005
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • base64_decodePaid $0.001 USDC on Base or Solana Base64 to UTF-8 decoding.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana Base64 to UTF-8 decoding.

    Annotations the server declares

    • title: Base64 decode — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • base64_encodePaid $0.001 USDC on Base or Solana UTF-8 to Base64 encoding.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana UTF-8 to Base64 encoding.

    Annotations the server declares

    • title: Base64 encode — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • eip712_hashPaid $0.005 USDC on Base or Solana exact EIP-712 typed-data digest for signing and verification workflows.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.005 USDC on Base or Solana exact EIP-712 typed-data digest for signing and verification workflows.

    Annotations the server declares

    • title: EIP-712 typed-data hash — $0.005
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • ens_namehashPaid $0.01 USDC on Base or Solana ENSIP-15 normalization, exact ENS namehash and label hashes.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.01 USDC on Base or Solana ENSIP-15 normalization, exact ENS namehash and label hashes.

    Annotations the server declares

    • title: ENS namehash — $0.01
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • evm_address_checksumPaid $0.003 USDC on Base or Solana exact EIP-55 address validation and checksum normalization.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.003 USDC on Base or Solana exact EIP-55 address validation and checksum normalization.

    Annotations the server declares

    • title: EVM address checksum — $0.003
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • evm_unitsPaid $0.005 USDC on Base or Solana exact decimal/base-unit conversion with arbitrary token decimals.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.005 USDC on Base or Solana exact decimal/base-unit conversion with arbitrary token decimals.

    Annotations the server declares

    • title: EVM units convert — $0.005
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hash_encodePaid $0.001 USDC on Base or Solana deterministic SHA-256, SHA-512, HMAC-SHA256, Base64 encode/decode, or non-verifying JWT decode.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana deterministic SHA-256, SHA-512, HMAC-SHA256, Base64 encode/decode, or non-verifying JWT decode. x402-aware MCP clients can authorize and settle inside this tool call.

    Annotations the server declares

    • title: Hash & encode — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hmac_sha256Paid $0.001 USDC on Base or Solana HMAC-SHA256 hex digest.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana HMAC-SHA256 hex digest.

    Annotations the server declares

    • title: HMAC SHA-256 — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • json_normalizePaid $0.001 USDC on Base or Solana canonical JSON normalization plus SHA-256 digest.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana canonical JSON normalization plus SHA-256 digest.

    Annotations the server declares

    • title: JSON normalize — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • jwt_decodePaid $0.001 USDC on Base or Solana non-verifying JWT header/payload decode.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana non-verifying JWT header/payload decode.

    Annotations the server declares

    • title: JWT decode — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keccak256Paid $0.004 USDC on Base or Solana exact Ethereum keccak256 digest for UTF-8 text or hex bytes.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.004 USDC on Base or Solana exact Ethereum keccak256 digest for UTF-8 text or hex bytes.

    Annotations the server declares

    • title: Keccak-256 — $0.004
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • mcp_preflightPaid $0.001 USDC on Base or Solana live MCP endpoint preflight for reachability, compatibility, latency, server metadata and tool inventory.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana live MCP endpoint preflight for reachability, compatibility, latency, server metadata and tool inventory. x402-aware MCP clients can authorize and settle inside this tool call.

    Annotations the server declares

    • title: MCP live preflight — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • openapi_selectPaid $0.005 USDC on Base or Solana selection of the best operation from one public JSON OpenAPI spec for a stated goal.1 finding

    Why it is in this group

    • The name "openapi_select" says "select": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "openapi_select" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "openapi_select" says "select": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Paid $0.005 USDC on Base or Solana selection of the best operation from one public JSON OpenAPI spec for a stated goal. Returns a compact execution-ready contract. x402-aware MCP clients can authorize and settle inside this tool call.

    Annotations the server declares

    • title: OpenAPI operation selection — $0.005
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • procureCALL THIS when the agent's installed tools do not clearly satisfy the current task.1 finding

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "procure" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "call": a word for a change.

      What this check looks for
    Description, as the server wrote it
    CALL THIS when the agent's installed tools do not clearly satisfy the current task. Free open-world procurement across APIs, MCP, x402, L402 and MPP. Required compatibility evidence fails closed: AgentResolver returns no selected provider rather than guessing. When supported unknowns remain, the response can recommend the paid $0.02 verified_resolve step. Never authorizes spend.

    Annotations the server declares

    • title: Procure a compatible capability
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • provider_bootstrapFree zero-state provider onboarding.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free zero-state provider onboarding. Reads the fixed AgentResolver well-known manifest on one HTTPS origin, live-verifies selected same-origin x402 payment identities, returns an immediate providerOrigins procurement seed, and prepares caller-owned durable 402 Index registration actions. AgentResolver does not persist provider state or send the external registration.

    Annotations the server declares

    • title: Bootstrap a domain-controlled provider
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • provider_launch_checkPaid $0.05 USDC seller-side agent-distribution entry check: verify provider readiness and the live x402 contract, then use the $5 Distribution Pack when discoverability artifacts o…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.05 USDC seller-side agent-distribution entry check: verify provider readiness and the live x402 contract, then use the $5 Distribution Pack when discoverability artifacts or launch fixes are needed.

    Annotations the server declares

    • title: Provider launch check — $0.05
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • sha256Paid $0.001 USDC on Base or Solana SHA-256 digest of bounded UTF-8 text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana SHA-256 digest of bounded UTF-8 text.

    Annotations the server declares

    • title: SHA-256 hash — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • sha512Paid $0.001 USDC on Base or Solana SHA-512 digest of bounded UTF-8 text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana SHA-512 digest of bounded UTF-8 text.

    Annotations the server declares

    • title: SHA-512 hash — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • slugifyPaid $0.001 USDC on Base or Solana deterministic slug generation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana deterministic slug generation.

    Annotations the server declares

    • title: Slugify — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • solidity_selectorPaid $0.01 USDC on Base or Solana exact 4-byte Solidity selector and full keccak256 signature hash.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.01 USDC on Base or Solana exact 4-byte Solidity selector and full keccak256 signature hash.

    Annotations the server declares

    • title: Solidity selector — $0.01
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • sponsorship_infoFree read-only information for tool/API/MCP providers about AgentResolver's explicitly labeled sponsorship pilot.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free read-only information for tool/API/MCP providers about AgentResolver's explicitly labeled sponsorship pilot. Organic ranking remains independent; applying creates no purchase or financial commitment.

    Annotations the server declares

    • title: Provider sponsorship information
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • tool_contractPaid $0.005 USDC on Base or Solana deterministic JSON-schema compatibility check between one tool output and the next tool input.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.005 USDC on Base or Solana deterministic JSON-schema compatibility check between one tool output and the next tool input. Returns exact incompatibility reasons and conservative normalized mappings. x402-aware MCP clients can authorize and settle inside this tool call.

    Annotations the server declares

    • title: Tool contract fit — $0.005
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • url_parsePaid $0.001 USDC on Base or Solana absolute URL parser.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana absolute URL parser.

    Annotations the server declares

    • title: URL parse — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • uuid_v4Paid $0.001 USDC on Base or Solana UUID v4 generation, up to 20 IDs.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana UUID v4 generation, up to 20 IDs.

    Annotations the server declares

    • title: UUID v4 — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 6Claude Code: allow
  • batch_verified_resolvePaid $0.05 USDC on Base or Solana batch live verification for 2–4 capability decisions using unpaid MCP and x402/HTTP evidence.No findings

    Why it is in this group

    • The name "batch_verified_resolve" says "resolve": a word for reading.
    Description, as the server wrote it
    Paid $0.05 USDC on Base or Solana batch live verification for 2–4 capability decisions using unpaid MCP and x402/HTTP evidence. x402-aware MCP clients can authorize and settle inside this tool call.

    Annotations the server declares

    • title: Batch verified resolve — $0.05
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • http_inspectPaid $0.001 USDC on Base or Solana verify-before-pay endpoint safety check: payTo verification, quote price, network, asset, resource binding and x402 challenge compliance before a…No findings

    Why it is in this group

    • The name "http_inspect" says "inspect": a word for reading.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana verify-before-pay endpoint safety check: payTo verification, quote price, network, asset, resource binding and x402 challenge compliance before an agent authorizes spend. POST probes require explicit caller opt-in because an unprotected endpoint could have side effects.

    Annotations the server declares

    • title: x402 payment preflight + PayTo verification — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • json_schema_validatePaid $0.001 USDC on Base or Solana deterministic JSON Schema subset validation.No findings

    Why it is in this group

    • The name "json_schema_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana deterministic JSON Schema subset validation.

    Annotations the server declares

    • title: JSON Schema validate — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • resolveFree exploratory discovery.No findings

    Why it is in this group

    • The name "resolve" says "resolve": a word for reading.
    Description, as the server wrote it
    Free exploratory discovery. Use only when browsing possible tools/APIs/MCP services without needing a trustworthy execution choice yet. For an actual missing capability, prefer procure so required evidence fails closed and unresolved candidates can escalate to verification.

    Annotations the server declares

    • title: Resolve a missing capability
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • verified_resolvePAID $0.02 USDC verification step.No findings

    Why it is in this group

    • The name "verified_resolve" says "resolve": a word for reading.
    Description, as the server wrote it
    PAID $0.02 USDC verification step. Use after procure returns no proven selection / eligible_with_unknowns, or immediately before trusting an unfamiliar external candidate when live evidence is required. Re-checks supported endpoint, MCP, x402 and contract evidence and returns a fail-closed recommendation. Call only when the host independently authorizes the displayed spend.

    Annotations the server declares

    • title: Live verified resolve — $0.02
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • x402_pingPaid $0.001 USDC on Base or Solana no-body settlement canary for funded agents.No findings

    Why it is in this group

    • The name "x402_ping" says "ping": a word for reading.
    Description, as the server wrote it
    Paid $0.001 USDC on Base or Solana no-body settlement canary for funded agents. Returns a timestamped pong only after successful x402 payment to verify wallet, facilitator, payment, and delivery end-to-end.

    Annotations the server declares

    • title: x402 settlement test — wallet facilitator payment test — $0.001
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http agentresolver https://agentresolver.vercel.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agentresolver__resolve",
      "mcp__agentresolver__x402_ping",
      "mcp__agentresolver__json_schema_validate",
      "mcp__agentresolver__http_inspect",
      "mcp__agentresolver__verified_resolve",
      "mcp__agentresolver__batch_verified_resolve"
    ],
    "ask": [
      "mcp__agentresolver__sponsorship_info",
      "mcp__agentresolver__provider_bootstrap",
      "mcp__agentresolver__procure",
      "mcp__agentresolver__abi_encode",
      "mcp__agentresolver__abi_decode",
      "mcp__agentresolver__eip712_hash",
      "mcp__agentresolver__ens_namehash",
      "mcp__agentresolver__evm_address_checksum",
      "mcp__agentresolver__keccak256",
      "mcp__agentresolver__solidity_selector",
      "mcp__agentresolver__evm_units",
      "mcp__agentresolver__sha256",
      "mcp__agentresolver__sha512",
      "mcp__agentresolver__hmac_sha256",
      "mcp__agentresolver__base64_encode",
      "mcp__agentresolver__base64_decode",
      "mcp__agentresolver__jwt_decode",
      "mcp__agentresolver__json_normalize",
      "mcp__agentresolver__url_parse",
      "mcp__agentresolver__uuid_v4",
      "mcp__agentresolver__slugify",
      "mcp__agentresolver__hash_encode",
      "mcp__agentresolver__payment_guard",
      "mcp__agentresolver__x402_payment_preflight",
      "mcp__agentresolver__tool_contract",
      "mcp__agentresolver__openapi_select",
      "mcp__agentresolver__mcp_preflight",
      "mcp__agentresolver__agent_readiness",
      "mcp__agentresolver__agent_distribution_pack",
      "mcp__agentresolver__provider_launch_check"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agentresolver. Review it before you use it.