SignalLayer
by xavierleterrible-hub · remote · no sign-in to list tools · v2.1.1 · published by GitHub user xavierleterrible-hub
Machine-native tools for autonomous agents with free routing and x402 USDC pay-per-call.
5 tools: 3 change things and 2 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads2Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http signallayer https://signallayer.floot.app/_api/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
5 tools
Changes things 3Claude Code: ask
signal_layer_catalogFree inventory returning service, version, defaultEntryPoint and the four actionable primitives with capabilities and prices; the catalog tool itself is omitted.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free inventory returning service, version, defaultEntryPoint and the four actionable primitives with capabilities and prices; the catalog tool itself is omitted. This is not a task router. If the correct tool is uncertain, prefer signal_layer_router.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
signal_layer_routerFree deterministic task-to-tool router, not a full catalog.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free deterministic task-to-tool router, not a full catalog. Returns match, recommendedTool, routingConfidence, reason, missingRequiredInputs and readyToCall HTTP/MCP arguments for the best eligible primitive, or an explicit no_match when nothing fits. It may recommend a paid tool but never authorizes payment; check the live x402 challenge and obtain user approval before spending.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
structured_extractExtracts requested fields from public webpages, returning structured values, field-level evidence, confidence, freshness and partial-result warnings.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Extracts requested fields from public webpages, returning structured values, field-level evidence, confidence, freshness and partial-result warnings. Missing facts remain null. When requested facts exist on a public webpage but compact structured JSON is needed instead of browsing and parsing the page. Do NOT use when: The source is already structured or the task is generic web search. Price: $0.02 USDC via x402. Use signal_layer_router for free tool selection.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
Only reads 2Claude Code: allow
agent_preflightInspects public x402 terms or a Base recipient and returns decision.verdict, score, confidence, payment observations, evidence, warnings, freshness and nextActions.No findings
Why it is in this group
- The description's first verb is "inspect": a word for reading.
Description, as the server wrote it Inspects public x402 terms or a Base recipient and returns decision.verdict, score, confidence, payment observations, evidence, warnings, freshness and nextActions. It identifies observable mismatches but cannot guarantee safety or authorize spending. Before paying, transferring to, or interacting with an unfamiliar machine resource, x402 endpoint, recipient, or Base address. Do NOT use when: You only need market execution conditions or webpage extraction. Price: $0.01 USDC per call via x402 V2 with separately authorized payment. If unsure, use the free signal_layer_router.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
market_execution_intelAnalyzes current Base ERC-20 exact-in swap quotes without executing trades.No findings
Why it is in this group
- The description's first verb is "analyze": a word for reading.
Description, as the server wrote it Analyzes current Base ERC-20 exact-in swap quotes without executing trades. Returns quote-derived buy amount, network-cost bps, size-impact estimate, decision, evidence, warnings and freshness. Quotes can change; no signing or investment advice. Before an exact-in ERC-20 swap on Base when current quote-derived execution conditions, network cost, and size sensitivity matter. Do NOT use when: You need generic historical prices, personalized investment advice, or a signed transaction. Price: $0.03 USDC per call via x402 V2 with separately authorized payment. If unsure, use the free signal_layer_router.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 2.1.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http signallayer https://signallayer.floot.app/_api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__signallayer__agent_preflight",
"mcp__signallayer__market_execution_intel"
],
"ask": [
"mcp__signallayer__signal_layer_router",
"mcp__signallayer__signal_layer_catalog",
"mcp__signallayer__structured_extract"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as signallayer. Review it before you use it.
