Assay A2A, MCP & x402 Pre-Flight Verifier & Observatory
Live behavioral security verifier, schema auditor, and trust oracle for A2A, MCP & x402 agents.
| Endpoint | https://assay.agentdiet.dev/mcp (streamable-http) |
|---|---|
| Registry version | 7.0.17 |
| Now | 4 tools · grade A (95) · pin ts_0d69a7130bc4b90eada5fd050ba2c96b · protocol 2025-06-18 |
| First / last listed | 2026-11-15 01:56 UTC / 2026-11-15 01:56 UTC |
| Grade over time | 2026-11-15: A (95), 4 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: assay_preflight assay_probe assay_verify_delivery assay_get_ledger_policy
assay_preflight | Gate a remote MCP, A2A, or x402 endpoint before calling or paying it by probing live JSON-RPC reachability, hashing tools/list (SHA-256), and scanning for prompt-injection poisoning. When expected_tools_hash is provided, any mismatch against the live tools/list digest forces verdict='deny' to block silent schema rug-pulls; when omitted, verdict reflects liveness and injection safety alone. Read-on params: target*, expected_tools_hash |
assay_probe | Register a new remote MCP, A2A, or x402 endpoint or refresh its public Assay Observatory dossier by running a live HTTP, agent-card, and JSON-RPC tools/list inspection without policy gating. Target must be a public HTTPS origin (private IPs are rejected with a 400 error); each call appends a timestamped observation and increments rug_pulls if tools_hash drifted since the prior stored observation. params: target* |
assay_verify_delivery | Audit a paid x402 or A2A provider after payment to confirm delivery or prove an SLA breach with an HMAC-SHA256 signed receipt. Passing status_code >= 500 forces verdict='sla_breach_confirmed' even if the live re-probe succeeds, while passing tx_hash cryptographically binds your Base or Solana payment signature into the receipt (omitting tx_hash still verifies liveness and issues a probe-bound rece params: target*, tx_hash, status_code |
assay_get_ledger_policy | Retrieve historical conformance observations and manage pinned SHA-256 tools/list policy hashes in the Assay ledger for a target endpoint. When expected_tools_hash is provided, it pins that 64-hex digest as the target's baseline policy and compares it against the latest stored observation; when omitted, it returns the stored dossier and last 20 drift observations without network probing unless the params: target*, expected_tools_hash |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.