IntentFence Agent Action Firewall
Fail-closed action authorization, MCP risk scanning, x402 checks, and signed receipts.
| Endpoint | https://agentpass-protocol.rmalka06.chatgpt.site/api/mcp (streamable-http) |
|---|---|
| Registry version | 0.16.0 |
| Now | 10 tools · grade C (71) · pin ts_a0a37a453bccd918446af848a4801cd7 · protocol 2025-06-18 |
| First / last listed | 2026-11-13 01:13 UTC / 2026-11-13 01:13 UTC |
| Grade over time | 2026-11-13: C (71), 10 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: intentfence_authorize_action intentfence_agent_risk_scan intentfence_checkout intentfence_preflight intentfence_policy_pack intentfence_verified_preflight intentfence_x402_assessment intentfence_x402_readiness intentfence_wallet_risk intentfence_us_cpi
intentfence_authorize_action | Authorize an exact agent action against an explicit allowlist, spend ceiling, retention ceiling, and optional action-bound approval. Returns a five-minute ES256 receipt and never executes the downstream action. Callers must verify the receipt and fail closed if the action changes. params: subject*, action*, context, policy*, approval |
intentfence_agent_risk_scan | Free metadata-only scan of caller-supplied MCP tool definitions for missing schemas, unsafe annotations, approval binding, and cost boundaries. Does not execute tools or certify security. params: server_name*, tools* |
intentfence_checkout | Free machine checkout builder. Select a paid IntentFence outcome and receive the exact endpoint, validated request, USDC cap, shell-safe Agentic Wallet argv, MCP tool call, and opt-in local auto-payment budget. It never signs or initiates payment. params: product*, input |
intentfence_preflight | Free declared-input preview with no signed receipt, authorization proof, or enforcement guarantee. Returns safe_to_proceed, needs_review, or denied. params: subject*, action*, constraints, proofs |
intentfence_policy_pack | Paid self-service integration pack (1 USDC on Base). Generates a runtime-specific TypeScript guard, signed action and policy receipt, negative test vectors, and a fail-closed deployment checklist for Cloudflare Agents, Coinbase AgentKit, or an MCP gateway. No meeting or account is required. params: project_name*, runtime*, authorization* |
intentfence_verified_preflight | Paid production preflight ($0.005 USDC on Base). Settles through x402 and returns a signed ES256 audit receipt plus settlement metadata. params: subject*, action*, constraints, proofs |
intentfence_x402_assessment | Paid assessment ($0.005 USDC on Base). Forward the exact base64 or base64url PAYMENT-REQUIRED header observed by the caller. IntentFence validates the quote, canonical Base USDC asset, price ceiling, payee allowlist, timeout, and resource binding without contacting the target, then returns a short-lived ES256 receipt bound to the quote hash. Supply allowed_payees for safe_to_proceed; omission yiel params: subject*, target_url*, method, payment_required*, policy* |
intentfence_x402_readiness | Paid live endpoint check ($0.002 USDC on Base). Makes one bounded credential-free request to a public HTTPS target, blocks private networks and redirects, never pays the target, validates the returned x402 challenge, and returns a signed five-minute receipt. params: subject, target_url*, method, body, max_price_usdc, allowed_payees, policy |
intentfence_wallet_risk | Paid AML/KYT wallet screening ($0.002 USDC on Base) before sending funds or approving a transaction. Checks live Base activity plus GoPlus sanctions, phishing, mixer, money-laundering, dark-web, blacklist, and related counterparty-risk flags, then returns a five-minute ES256 receipt. A low-risk result is not proof of identity, ownership, authorization, or future behavior. params: address* |
intentfence_us_cpi | Paid official U.S. CPI and core CPI data ($0.001 USDC on Base), retrieved from the Bureau of Labor Statistics with a six-hour edge cache and returned with an ES256 provenance receipt. Optionally request a YYYY-MM period. params: month |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.