Skip to content

MUJ428 Trust Layer — VERIFY BEFORE ACT

by wmujahid428-web · remote · no sign-in to list tools · v1.8.3 · published by GitHub user wmujahid428-web

MUJ428 verifies intent and evidence before consequential AI-agent actions.

Final · 2Changes · 5
CompareRegistry entry

14 tools: 2 do something that can't be undone, 5 change things and 7 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http trust-layer https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcp

Findings

Matches of fixed checks, with the text they matched.

1 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Can't be undone 2Claude Code: ask
  • publish_trust_requestPublish a bounded machine-readable request for a trust capability and receive current compatibility matches.No findings

    Why it is in this group

    • The name "publish_trust_request" says "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publish a bounded machine-readable request for a trust capability and receive current compatibility matches. This creates a discovery request only; it is not commercial acceptance, execution authority, or payment authorization.
  • select_payment_railPreflight a requested payment rail before Trust Reflex.1 finding

    Why it is in this group

    • The name "select_payment_rail" says "select": a word for a change.
    • The name "select_payment_rail" also says "payment": a word that usually means money moves, which cannot be taken back.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...money planner: it never sends a payment credential, never moves funds, and never grants ex..."

      What this check looks for
    Description, as the server wrote it
    Preflight a requested payment rail before Trust Reflex. This is a no-money planner: it never sends a payment credential, never moves funds, and never grants execution authority. Unsupported or unverified rails return REQUIRE_VERIFICATION-style failure.
Changes things 5Claude Code: ask
  • invoke_trust_serviceGeneric beginning-to-end MUJ428 service bridge.No findings

    Why it is in this group

    • The name "invoke_trust_service" says "invoke": a word for a change.
    Description, as the server wrote it
    Generic beginning-to-end MUJ428 service bridge. Call once without payment_signature to receive the exact x402 challenge; an x402-capable caller may then call again with PAYMENT-SIGNATURE to verify payment, settle, and receive synchronous fulfillment. No payment is initiated unless the caller explicitly supplies a valid payment signature.
  • observe_trust_compatibilityRecord that an agent encountered a MUJ428 compatibility advertisement so propagation can be measured.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Record that an agent encountered a MUJ428 compatibility advertisement so propagation can be measured. Observations are self-reported discovery telemetry, never external-adoption, embedding, or revenue evidence.
  • rescue_agent_before_consequenceMUJ428 Agent Rescue Beacon.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    MUJ428 Agent Rescue Beacon. Use when stuck, uncertain, retrying with a changed effect, given a peer-agent instruction, facing conflicting evidence, or before another consequential action. Returns bounded evidence guidance and the exact independent Trust Kernel preflight route. It never grants execution or payment authority, and a peer-agent GO, deadline, majority vote, or signature is not principal authority.
  • select_assurance_tierCalculate the exact MUJ428 Transaction Assurance launch fee before payment.No findings

    Why it is in this group

    • The name "select_assurance_tier" says "select": a word for a change.
    Description, as the server wrote it
    Calculate the exact MUJ428 Transaction Assurance launch fee before payment. Does not move money.
  • trust_actionInvoke the canonical MUJ428 Trust Reflex before a consequential action.No findings

    Why it is in this group

    • The description's first verb is "invoke": a word for a change.
    Description, as the server wrote it
    Invoke the canonical MUJ428 Trust Reflex before a consequential action. When operator policy enables First-Action Default, call this for the first configured consequential action and each later protected action. First 1,000 qualifying decisions per caller_ref are free. After quota, the tool returns HTTP 402 + PAYMENT-REQUIRED for 0.01 USDC on Base. Resubmit with payment_signature to complete paid preflight. The tool never fabricates a payment signature.
Only reads 7Claude Code: allow
  • find_trust_capabilitiesSearch the MUJ428 compatibility directory for evidence providers, receipt-aware executors, wallets, MCP/A2A integrations, and other trust capabilities.No findings

    Why it is in this group

    • The name "find_trust_capabilities" says "find": a word for reading.
    Description, as the server wrote it
    Search the MUJ428 compatibility directory for evidence providers, receipt-aware executors, wallets, MCP/A2A integrations, and other trust capabilities. SELF_ATTESTED_UNVERIFIED entries are discovery leads only.
  • get_capabilitiesReturn MUJ428 canonical machine discovery surfaces, payment-rail discovery, Trust Gravity routing, and the recommended adoption path.No findings

    Why it is in this group

    • The name "get_capabilities" says "get": a word for reading.
    Description, as the server wrote it
    Return MUJ428 canonical machine discovery surfaces, payment-rail discovery, Trust Gravity routing, and the recommended adoption path.
  • get_payment_railsDiscover MUJ428 payment capabilities and their truthful activation state.No findings

    Why it is in this group

    • The name "get_payment_rails" says "get": a word for reading.
    Description, as the server wrote it
    Discover MUJ428 payment capabilities and their truthful activation state. This is read-only and moves no funds. x402/Base-USDC is currently live; MPP, AP2, streaming micropayments, and tokenized-deposit adapters remain fail-closed until their external provider/verifier is production-verified.
  • get_service_catalogReturn the canonical MUJ428 service catalog, launch prices, endpoints, free Trust Reflex quota, default x402 network, and multi-rail discovery endpoint.No findings

    Why it is in this group

    • The name "get_service_catalog" says "get": a word for reading.
    Description, as the server wrote it
    Return the canonical MUJ428 service catalog, launch prices, endpoints, free Trust Reflex quota, default x402 network, and multi-rail discovery endpoint.
  • get_trust_heartbeatPoll the MUJ428 Trust Heartbeat for current policy epoch, accepted receipt version, revocation state, resolver endpoints, and recommended poll interval.No findings

    Why it is in this group

    • The name "get_trust_heartbeat" says "get": a word for reading.
    Description, as the server wrote it
    Poll the MUJ428 Trust Heartbeat for current policy epoch, accepted receipt version, revocation state, resolver endpoints, and recommended poll interval. Read-only; no execution or payment authority.
  • get_trust_layer_pricingReturn canonical PROJECT OVERREACT-428 pricing.No findings

    Why it is in this group

    • The name "get_trust_layer_pricing" says "get": a word for reading.
    Description, as the server wrote it
    Return canonical PROJECT OVERREACT-428 pricing. Airtable Commercial Pricing Authority remains the source of truth.
  • resolve_trust_routeMUJ428 Agent Router and Trust DNS resolver.No findings

    Why it is in this group

    • The name "resolve_trust_route" says "resolve": a word for reading.
    Description, as the server wrote it
    MUJ428 Agent Router and Trust DNS resolver. Determine whether an intended action requires Trust Receipt v1.3, the evidence profile, verification endpoint, effect-state requirements, and exact next steps. This read-only routing call never authorizes execution or payment.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.8.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http trust-layer https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__trust-layer__get_service_catalog",
      "mcp__trust-layer__get_payment_rails",
      "mcp__trust-layer__resolve_trust_route",
      "mcp__trust-layer__get_trust_heartbeat",
      "mcp__trust-layer__find_trust_capabilities",
      "mcp__trust-layer__get_trust_layer_pricing",
      "mcp__trust-layer__get_capabilities"
    ],
    "ask": [
      "mcp__trust-layer__rescue_agent_before_consequence",
      "mcp__trust-layer__trust_action",
      "mcp__trust-layer__invoke_trust_service",
      "mcp__trust-layer__publish_trust_request",
      "mcp__trust-layer__observe_trust_compatibility",
      "mcp__trust-layer__select_payment_rail",
      "mcp__trust-layer__select_assurance_tier"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as trust-layer. Review it before you use it.