DropEngine x402 Agent Services
AI Agent Utility Layer for agent safety, web monitoring, crypto research and tool discovery.
| Endpoint | https://mcp.dropenginehq.com/api/agent-services (streamable-http) |
|---|---|
| Registry version | 1.8.1 |
| Now | 24 tools · grade F (27) · pin ts_49766f5c00653064c60d33fbf2949eb2 · protocol 2025-06-18 |
| First / last listed | 2026-11-07 01:06 UTC / 2026-11-07 01:06 UTC |
| Grade over time | 2026-11-07: F (27), 24 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: action_lock agent_spend_governor agent_permission_vault agent_outcome_receipt invoice_preflight_quote mcp_server_inspect check_url scan_content simulate_transaction check_wallet check_package route_tool get_live_quote extract_structured check_change verify_claim analyze_whale_activity scan_arbitrage backtest_strategy preflight_action token_security_audit invoice_preflight invoice_preflight_10_pages invoice_preflight_50_pages
action_lock | Action Lock ($0.001 USDC): Prevent duplicate side effects across agent retries, crashes, and concurrent workers. If an action has side effects and may be retried or executed concurrently, acquire before execution. Complete after confirmed success; release after confirmed failure. Use before payments, purchases, orders, emails, transactions, writes, and external tool actions. Avoid pure reads or eq params: none |
agent_spend_governor | Enforce autonomous-agent budgets before paid actions. Call before spending; authorize, commit, release, or inspect an opaque reservation. Do not use for free operations or an equivalent trusted budget system. Price: $0.001 USDC per call.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use params: none |
agent_permission_vault | Check whether an owner-configured policy authorizes this capability for the verified caller. Permission check only; agents cannot grant themselves permission. This is authorization, not action safety. Price: $0.001 USDC per call.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /ap params: operation*, capability*, resource, scope, context |
agent_outcome_receipt | Create or verify a tamper-evident receipt of an agent-reported outcome. It proves DropEngine recorded a claim, not that the external event independently occurred. Do not send raw payloads or secrets. Price: $0.001 USDC per call.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api params: none |
invoice_preflight_quote | FREE, no wallet or document upload: choose the lowest priced Invoice Preflight tool from document type, PDF page count, and optional byte size. Call this before a paid invoice tool when the tier is uncertain. It does not inspect or validate the document.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capabilit params: document_type*, page_count, file_size_bytes |
mcp_server_inspect | MCP server health check ($0.01 USDC on Base): connect to any public MCP endpoint over HTTPS, confirm it is reachable, list its tool names and input-schema summaries, compare against expected tool names, and flag risky or misleading tool descriptions. Read-only: inspected tools are never called. Use it before wiring an unknown MCP server into an agent, or to verify your own deployment. Pair with ch params: endpoint*, expected_tools |
check_url | Paid Agent Preflight URL check ($0.005 USDC on Base). Call before an agent opens, follows, downloads from, or trusts an unknown URL. Performs deterministic checks, safely inspects HTTPS redirects without loading page content, blocks localhost/private addresses, and optionally queries Google Web Risk when configured. No LLM is used. A clean result is not a guarantee of safety.
Agent entry points: params: url* |
scan_content | Paid Untrusted Content Security Layer ($0.005 USDC on Base). Scan untrusted text, HTML, Markdown, email, document text, API responses, and tool outputs before your agent adds them to context, follows their instructions, or acts. Returns risk score, risk categories, recommendation, and sanitized plain text when possible. Bounded deterministic local scanning; no external LLM or provider call. Maximu params: content*, content_type, source |
simulate_transaction | Paid Transaction Preflight ($0.02 USDC on Base). Simulates an unsigned Base transaction before an autonomous agent signs or broadcasts it. Returns RPC execution/revert status, gas estimate, known top-level method decoding, direct ERC-20 transfer/approval calldata, unlimited approval warnings, and machine-readable risk. Standard JSON-RPC does not expose full internal token state changes; do not tre params: chain*, from*, to*, value*, data* |
check_wallet | Paid Wallet Risk Check ($0.02 USDC on Base). Call before an agent sends funds to, accepts value from, grants an approval to, or interacts with an unfamiliar address. Checks whether the address is a wallet or contract and reads basic on-chain metadata. Sanctions, scam, drainer, mixer, and malicious-address intelligence are unknown unless a trusted provider is configured; without one, the result is params: chain*, address* |
check_package | Paid Package Safety Gate ($0.005 USDC on Base). Call before a coding agent installs, imports, or adds an unfamiliar npm dependency. Checks resolved package/version, OSV vulnerabilities and malware advisories, popular-name typosquatting, and install lifecycle scripts using static analysis only. Package code is never executed. Checks up to 10 direct dependencies when their versions can be resolved; params: ecosystem*, package*, version |
route_tool | Paid Agent Tool Router ($0.002 USDC on Base). Finds and ranks machine-payable MCP services and x402 HTTP endpoints before your agent chooses or pays a provider. Uses structured capability matching, hard constraints, price, observed latency/reliability, and cold-start trust confidence; no LLM call is required. Returns the best tool, confidence, reason, price, relevant workflow, next-best option, an params: capability*, query, constraints, preferences, completed_tools |
get_live_quote | Paid Live Product Quote ($0.01 USDC). Retrieves explicitly published product price and stock from a public HTTPS product page before an agent buys; shipping, tax and unknown values remain null. Never purchases.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constra params: url*, quantity, destination, variant |
extract_structured | Paid Fresh Structured Extract ($0.01 USDC). Extracts a fresh webpage into a simple agent-defined typed JSON shape, with validation and per-field provenance. Uses static page data only; never executes page JavaScript and never fabricates missing fields.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/ params: url*, schema |
check_change | Paid Change / Diff Check ($0.001 USDC). Checks normalized text on a public HTTPS page against a previous SHA-256 hash, returning a compact diff when a prior snapshot is available.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callabl params: url*, previous_hash* |
verify_claim | Paid Freshness / Claim Verifier ($0.02 USDC). Checks a factual claim against fresh web search evidence and returns supported/contradicted/mixed/insufficient/stale with sources. Requires TAVILY_API_KEY. If the key is missing, returns a provider-unavailable error before requesting payment. Claim text is sent to the configured search provider.
Agent entry points: risky external action → use Agent Ac params: claim*, freshness_days, preferred_domains |
analyze_whale_activity | Paid Whale Intelligence ($0.02 USDC). Summarizes large public GeckoTerminal-indexed DEX trades for a token address on a supported chain. Large-trader labels are size-based heuristics, not verified whale identities; data is not chain-wide. Wallet mode uses Helius (Solana) or Etherscan API V2 (EVM) when configured, returning recent indexed transactions only; it does not claim complete balances or wh params: none |
scan_arbitrage | Paid Arbitrage Intelligence ($0.03 USDC). Compares Binance and Coinbase public spot order books at a requested trade size and applies caller- or server-configured taker fee assumptions. Rejects stale books. Excludes transfers, inventory rebalancing, and guaranteed execution; does not place orders.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific sa params: asset*, quote_asset, venues, trade_size_usd*, min_net_spread_bps, fee_bps_by_venue |
backtest_strategy | Paid Strategy Backtest ($0.10 USDC). Tests built-in long-only spot strategies against bounded public Binance OHLCV history. Signals form at candle close and execute at the next candle open. Applies configured fees/slippage; accepts declarative parameters only and never executes user code. Historical results are not predictions.
Agent entry points: risky external action → use Agent Action Gate whe params: market*, timeframe*, start*, end*, initial_capital*, fee_bps, slippage_bps, strategy* |
preflight_action | Agent Action Gate ($0.02 USDC flat; stable MCP tool name preflight_action). Use before an AI agent performs an external action. Evaluates the required safety, trust, spending and transaction checks and returns ALLOW, REVIEW, REQUIRE_APPROVAL or DENY. Use before opening an untrusted URL, installing a dependency, calling an unfamiliar MCP/tool, spending funds, submitting a transaction, or consuming params: action_type*, intent*, target, expected_cost, context |
token_security_audit | Paid Token Security Audit ($0.01 USDC). Normalizes GoPlus token-security flags and public EVM RPC metadata for supported EVM tokens. Configure GOPLUS_ACCESS_TOKEN or explicitly enable the bounded public API with GOPLUS_PUBLIC_TOKEN_API_ENABLED=1; if neither is available, no payment is requested. Missing provider fields remain unknown and incomplete coverage returns caution. Reports provider findin params: chain*, token_address* |
invoice_preflight | Paid invoice check ($0.065 USDC on Base): UBL XML or complete PDF/image invoices up to 3 pages. Compares expected purchase fields and line items; returns evidence, amount checks and match/discrepancy/needs_review. No payment or bookkeeping action is taken.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capabil params: document_xml, document_url, document_base64, mime_type, expected |
invoice_preflight_10_pages | Paid invoice OCR ($0.13 USDC on Base): process complete PDF/image invoices up to 10 pages. Oversized PDFs are rejected before OCR.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known singl params: document_url, document_base64, mime_type, expected |
invoice_preflight_50_pages | Paid invoice OCR ($0.475 USDC on Base): process complete PDF/image invoices up to 50 pages. Oversized PDFs are rejected before OCR.
Agent entry points: risky external action → use Agent Action Gate when a combined action-specific safety assessment is needed; unclear capability/provider → use free /api/discover; constrained comparison between callable alternatives → use paid route_tool; known sing params: document_url, document_base64, mime_type, expected |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.