DJZS Trust MCP
Server Details
Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- SIFR0-dev/djzs-AI
- GitHub Stars
- 3
- Server Listing
- DJZS Trust MCP
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.1/5 across 3 of 3 tools scored.
Each tool addresses a distinct function: on-chain trust scores, immutable audit certificates, and pre-execution trade verification. The descriptions clearly differentiate their use cases, eliminating ambiguity.
Two tools share a 'query_' prefix while the third uses 'verify_', showing a minor inconsistency. However, the pattern is still readable and the verbs are appropriate for their actions.
With only 3 tools, the set is lean and focused on core trust and audit operations. Each tool serves a critical, non-overlapping purpose, justifying its inclusion.
The tools cover the essential workflows: querying trust scores, retrieving audit certificates, and verifying trade theses. No obvious gaps for the stated domain of agent trust evaluation and pre-audit.
Available Tools
3 toolsquery_agent_trustQuery DJZS Agent Trust ScoreAInspect
Query an agent's DJZS trust score, aggregated on-chain (Base mainnet) from its audit history and indexed via the DJZS subgraph. USE BEFORE delegating work, releasing escrow, or executing agent transactions. Returns totalAudits, pass/fail counts, failRate, latest verdict/risk, and DJZS-S01/DJZS-X01 flag counts. HALT if failRate > 0.3 or DJZS-S01/DJZS-X01 fired more than once.
| Name | Required | Description | Default |
|---|---|---|---|
| agentAddress | Yes | Agent wallet address (0x-prefixed) |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully carries the burden. It discloses the on-chain source (Base mainnet, DJZS subgraph), the returned fields, and the halt condition, clearly implying a read-only query with no side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise: two main sentences plus a conditional halt instruction. It is front-loaded with the core purpose and avoids any unnecessary words or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has only one parameter, no output schema, and clear sibling differentiation, the description provides sufficient context: what it does, when to use, what it returns, and a critical halt condition. A minor gap is the lack of error handling details, but overall it is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single parameter 'agentAddress', with a clear description in the schema. The tool description does not add further semantic detail beyond what the schema already provides, meeting the baseline for full coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it queries an agent's DJZS trust score, aggregated on-chain from Base mainnet, which distinguishes it from the sibling tools (query_pol_certificates, verify_pm_trade) that deal with certificates and trade verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'USE BEFORE delegating work, releasing escrow, or executing agent transactions' and provides a halt condition for high failRate or repeated flags, giving clear context for when to use it, though it does not explicitly mention when not to use or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
query_pol_certificatesQuery DJZS ProofOfLogic CertificatesAInspect
Query immutable ProofOfLogic certificates stored on Irys Datachain by DJZS Protocol. USE THIS TOOL when you need to verify audit history for an agent or project before delegating work, check FAIL verdicts, or retrieve certificates by Irys tx ID. DO NOT use for on-chain trust scores — use query_agent_trust for those.
| Name | Required | Description | Default |
|---|---|---|---|
| tier | No | Filter by tier | |
| limit | No | Number of results | |
| to_ms | No | Window end (epoch ms). Defaults to now + 1h. | |
| from_ms | No | Window start (epoch ms). Default path auto-narrows (14d then 3d) to stay under the mainnet index timeout; pass an explicit value to reach older certificates (used as-is). | |
| verdict | No | Filter by verdict | |
| targetSystem | No | Project name or wallet address |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It states certificates are 'immutable' but does not clarify read-only nature, side effects, or performance constraints. The schema mentions index timeouts for from_ms but this is not in the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two efficient sentences. The first sentence states the core action, the second provides usage guidelines. Every word adds value, and the structure is front-loaded with the most critical information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 6 parameters, no output schema, and no annotations, the description covers high-level purpose and usage but lacks details about return values, pagination, or the complex from_ms behavior. It is minimally complete for an agent familiar with the domain but could be improved.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description adds no extra meaning beyond the schema; it only restates the general purpose. The from_ms auto-narrowing behavior described in the schema is not mentioned in the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool queries immutable ProofOfLogic certificates on Irys Datachain. It explicitly distinguishes from sibling tool query_agent_trust by indicating use cases for audit history and FAIL verdicts, and what not to use it for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit when-to-use instructions (verify audit history, check FAIL verdicts, retrieve by Irys tx ID) and when-not-to-use (on-chain trust scores), with a named alternative (query_agent_trust). This leaves no ambiguity for the agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_pm_tradeAInspect
Deterministic pre-execution audit of a prediction-market trade thesis. Extracts the reasoning, audits it against the calibrated DJZS-M taxonomy (M01 narrative/resolution gap, M02 falsification absent, M03 probability unsourced, M04 consensus-as-edge advisory), and returns PASS->PROCEED, FAIL, or WAIT->HALT with flagged defects and a reproducible verdict_hash. Audit before act. Paid tool: 2 USDC per audit via x402.
| Name | Required | Description | Default |
|---|---|---|---|
| intent | Yes | Free-text prediction-market trade thesis to audit | |
| agent_address | No | Optional agent wallet (0x). If set, this audit updates that agent's on-chain DJZS trust score | |
| target_system | No | Optional agent/project identifier; becomes the Target-System tag on the anchored PoL certificate |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations (e.g., readOnlyHint), the description carries full burden. It discloses determinism, the audit taxonomy, result types, and the verdict_hash. However, it does not explicitly state whether the tool has side effects (e.g., on-chain recording). The parameter 'agent_address' hints at updating trust scores, but the core behavior is clear enough for safe invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (four sentences) and well-structured. It front-loads the core purpose, details the audit taxonomy and outputs, includes a usage directive ('Audit before act'), and notes the payment requirement. Every sentence adds value; no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (custom taxonomy, deterministic audit, output without schema), the description provides adequate context: taxonomy list, result types, and a verdict_hash. However, the absence of an output schema means the agent lacks detailed response structure (e.g., format of defects). Still, for a specialized audit tool, the description is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (all three parameters described in schema). The description adds valuable context beyond the schema: for 'intent' it specifies 'prediction-market trade thesis'; for 'agent_address' it clarifies it updates on-chain trust score; for 'target_system' it mentions becoming a tag on the PoL certificate. This exceeds the baseline of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs a 'deterministic pre-execution audit of a prediction-market trade thesis.' It specifies the exact process: extract reasoning, audit against the DJZS taxonomy, and return PASS/FAIL/WAIT with defects and a verdict_hash. This distinguishes it from sibling query tools (query_agent_trust, query_pol_certificates) which are read-only lookups.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description advises 'Audit before act,' implying use before executing a trade. It also notes the cost (2 USDC via x402), helping the agent decide if the paid tool is warranted. While it doesn't explicitly state when not to use or list alternatives, the sibling context and clear audit purpose provide adequate guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Alicense-qualityDmaintenanceProvides cryptographic governance receipts for AI agents, enabling pre-execution evaluation and signed verdicts (EXECUTE/BLOCK/REVIEW/SHADOW) with offline-verifiable audit trails.Last updatedMIT
- Alicense-qualityAmaintenanceDeterministic market-state engine for trading agents — zero LLM in the signal path. 8 tools: structural market state & phase, action gate (GO/WATCH/HOLD), entry/target/invalidation coordinates, bar-by-bar state timeline, composed view cards, and pre-trade intent validation. Every output traces to a bar-stamped ledger with a public daily self-scoring track record.Last updated3MIT
- Alicense-qualityCmaintenanceSecurity layer for AI agents that evaluates transaction intents and returns verdicts (ALLOW/WARN/DENY) using deterministic rules, on-chain checks, and simulation.Last updated8MIT
- Alicense-qualityBmaintenanceEvaluates on-chain risk for Pharos agents before executing transactions, providing verdicts (safe/caution/dangerous) and risk-bounded execution plans via Foundry cast reads.Last updatedMIT No Attribution
Your Connectors
Sign in to create a connector for this server.