Verdict L402
Ask if an action is safe before your agent runs it: injection, shell, MCP installs. Free samples.
| Endpoint | https://verdict.kechlab.com/mcp (streamable-http) |
|---|---|
| Registry version | 0.2.2 |
| Now | 5 tools · grade B (83) · pin ts_f839f7aba6abfe0a5b37274f715fac50 · protocol 2025-06-18 |
| First / last listed | 2026-11-13 00:47 UTC / 2026-11-13 00:47 UTC |
| Grade over time | 2026-11-13: B (83), 5 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: verdict_guard verdict_command_gate verdict_mcp_vet verdict_token_check verdict_firewall
verdict_guard | Free sample. Before your agent reads untrusted text (web page, email, document, tool output), check it for prompt injection, data exfiltration requests, secrets and toxic content. Returns allow, review or block with scores and reasons. Use it on text you did not write. Do not use it to judge an action: use verdict_firewall. params: text* |
verdict_command_gate | Free sample. Before a coding agent runs a shell command, ask whether to allow, review or block it: root deletion, download and run, privilege escalation, secret exfiltration. Pass the human intent when you know it. Not a sandbox: it reads the command, it does not run it. params: command*, intent |
verdict_mcp_vet | Free sample. Before installing an MCP server, skill or tool: is its description poisoned (hidden orders to the agent, excessive permissions, look-alike names)? Returns allow, review or block with reasons. params: name*, description*, tools, permissions |
verdict_token_check | Free sample. Before your agent buys or swaps an ERC-20 token on Base: static reading of its contract. Returns allow, review or block with facts: is it a contract, who controls it, can the owner mint, freeze or block, can the code be replaced, is there real liquidity, does the name imitate a known token. Not a buy-and-sell simulation and not a guarantee. params: address* |
verdict_firewall | Free sample. Before an agent acts on untrusted content (pay, send, delete, click, reply), give the human goal, the content it read and the action it proposes. Returns allow, review or block: it catches actions that follow orders hidden in the content. params: goal*, content*, action* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.