402oracle
Server Details
Signed verification attestations for agent decisions: business, price, freshness, claim checks.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
4 toolsverify_businessAInspect
Verify a business or domain is real and established before your agent pays an invoice, onboards a vendor, or trusts it. A business-verification oracle for KYB, vendor screening, and fraud checks: RDAP registration age, DNS (A/MX/NS), email posture (SPF/DMARC), and HTTPS reachability. Returns a signed attestation with a 0-100 trust score and evidence URLs. Checking several domains? /verify/business/batch verifies up to 5 in one signed call at a flat $0.15, cheaper from four domains up. Free tier is unsigned and rate-limited. For a cryptographically signed attestation with no daily limit ($0.05 USDC), add an x402 payment header to THIS SAME tool call (PAYMENT-SIGNATURE for v2, X-PAYMENT for v1) or POST /verify/business over HTTP. Same price on either transport.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain to verify, e.g. example.com |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure, and it delivers: it discloses that the free tier returns unsigned, rate-limited results, that the paid tier yields a signed attestation with no daily limit, and that output is a signed 0-100 trust score with evidence URLs. It also surfaces the payment-header mechanism and transport equivalence. It could add failure semantics for unverifiable domains, but the disclosure is unusually thorough for a tool with zero annotation support.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The purpose is front-loaded in the first sentence, which is excellent, but the description runs long with dense commercial detail — batch pricing thresholds, x402 header format variants (PAYMENT-SIGNATURE v2 vs X-PAYMENT v1), USDC amounts, and transport equivalence. Much of this is actionable for invocation but is more than an agent needs to decide whether to call the tool, and some is inessential overhead for selection.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool of moderate complexity with a trivial one-parameter schema and no output schema, the description is unusually complete: it covers invocation, return shape (signed attestation, trust score 0-100, evidence URLs), free vs paid auth paths, rate-limit behavior, and the batch alternative. The only gap relative to siblings is the absence of explicit disambiguation against verify_claim/verify_freshness/verify_price, but nothing an agent needs to call it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and there is only one parameter (domain), which the schema already documents clearly with an example. The description adds behavioral context about what happens to the domain (RDAP, DNS, SPF/DMARC, HTTPS checks) but no additional format or constraint details beyond the schema's 'example.com'. With full coverage, baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource ('Verify a business or domain is real and established') plus concrete trigger scenarios ('pays an invoice, onboards a vendor, or trusts it'). The verification methods are enumerated (RDAP age, DNS, email posture, HTTPS), which clearly distinguishes it from siblings like verify_claim, verify_freshness, and verify_price — those are all different verification facets, so an agent can tell this apart without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states when to use the tool (before paying invoices, vendor onboarding, fraud/KYB checks) and explicitly routes multi-domain workloads to the batch endpoint with a cost comparison ('cheaper from four domains up'). It also delineates free vs paid tiers by signing and rate-limit needs. It lacks an explicit 'use verify_claim instead when...' exclusion against its siblings, but the use-case context is strong enough to guide selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_claimAInspect
Fact-check a single factual claim against web evidence before your agent relies on it. A fact-checking oracle and hallucination guard: returns a verdict (supported / contradicted / insufficient), a confidence score, and citations, as a signed attestation. Free tier is unsigned and rate-limited. For a cryptographically signed attestation with no daily limit ($0.25 USDC), add an x402 payment header to THIS SAME tool call (PAYMENT-SIGNATURE for v2, X-PAYMENT for v1) or POST /verify/claim over HTTP. Same price on either transport.
| Name | Required | Description | Default |
|---|---|---|---|
| claim | Yes | A single factual claim, 8-600 characters |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and discloses the verdict types, confidence score, citations, signed/unsigned tiers, rate-limiting, and payment mechanics. The only slight imprecision is saying the result comes 'as a signed attestation' when the free tier is explicitly described as unsigned, but the following sentence clarifies.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is tightly written: the core verb and resource appear in the first sentence, and every subsequent sentence adds necessary pricing, transport, or output context. There is no filler or restatement of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no annotations and no output schema, this description covers the key things an agent needs: what inputs to use, what output to expect, whether it is safe/read-only, and when telemetry or payment are required. The only minor caveat is the signed/unsigned confusion, but the detailed caveats make the behavior actionable in all common scenarios.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single 'claim' parameter is already documented as 'A single factual claim, 8-600 characters.' The description reinforces that the input should be a factual claim and connects it to fact-checking behavior, but it does not add substantial parameter-level meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('fact-check'), a specific resource ('a single factual claim'), and the method ('against web evidence'), so an agent can immediately distinguish this from sibling verification tools. The 'claim' scope also differentiates it clearly from verify_business, verify_freshness, and verify_price.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says when to use it — 'before your agent relies on it' — and explains the context of being a hallucination guard. It does not explicitly state which sibling to prefer for non-claim verification tasks, but the claim-oriented framing implies the boundary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_freshnessAInspect
Check that a URL is live and its data is fresh before your agent acts on its contents. A freshness oracle: returns HTTP status, Last-Modified/ETag, a content SHA-256, and whether the content changed versus a prior hash. Returns a signed attestation. Free tier is unsigned and rate-limited. For a cryptographically signed attestation with no daily limit ($0.02 USDC), add an x402 payment header to THIS SAME tool call (PAYMENT-SIGNATURE for v2, X-PAYMENT for v1) or POST /verify/freshness over HTTP. Same price on either transport.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL including https:// | |
| prior_hash | No | Optional prior SHA-256 hex to compare against |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does an excellent job: it discloses rate limiting, unsigned vs. signed attestations, required payment headers for signing, and the fact that the same tool call can be upgraded. It also enumerates the returned data, giving an agent a solid behavioral model beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact for the amount of behavior it conveys. It front-loads the core purpose, then lists concrete return values, then adds rate-limit/payment details. Every sentence pulls weight and even the nested payment/transport details are clearly scoped to when you need a signed attestation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there is no output schema, the description compensates by listing the relevant return data (HTTP status, Last-Modified/ETag, SHA-256, change flag, attestation). It also covers the key operational context: free tier limitations, rate limits, and pricing. The sibling tools are obviously different in scope, so little about invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already covers both parameters at 100%, and the description adds value by explaining how prior_hash is used ('whether the content changed versus a prior hash') and connecting the URL to HTTP status/ETag/Last-Modified. This goes beyond the schema's terse field descriptions and reinforces the mechanics of the comparison.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb+resource: 'Check that a URL is live and its data is fresh before your agent acts on its contents.' It names concrete outputs (HTTP status, Last-Modified/ETag, content SHA-256) and frames the tool as a 'freshness oracle,' which clearly sets it apart from the sibling verification tools focused on business, claims, and prices.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: use this tool to verify URL liveness/freshness before acting on content. It also mentions an alternative and equal path (POST /verify/freshness over HTTP) and the condition for the paid tier. It does not explicitly say 'use verify_business/claim/price for those domains,' but the domain-specific wording makes the intended use unmistakable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_priceAInspect
Confirm a crypto asset's price before your agent trades, quotes, or settles on it. A signed price oracle: cross-checks Coinbase, Kraken, and OKX for a median and flags divergence when sources disagree. Returns a signed attestation your agent can cite. Free tier is unsigned and rate-limited. For a cryptographically signed attestation with no daily limit ($0.02 USDC), add an x402 payment header to THIS SAME tool call (PAYMENT-SIGNATURE for v2, X-PAYMENT for v1) or POST /verify/price over HTTP. Same price on either transport.
| Name | Required | Description | Default |
|---|---|---|---|
| symbol | Yes | Ticker symbol, e.g. BTC, ETH, SOL |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full responsibility for behavioral disclosure, and it does so thoroughly. It reveals the oracle mechanism, exchange sources, median cross-checking, divergence flags, signed attestation output, unsigned free tier behavior, rate-limiting, and payment-based upgrade path. This is exceptionally transparent for a tool with no annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The tool description is clear and front-loaded, with the core purpose in the first sentence. It is somewhat long because it covers the free tier, signing, payment headers, and alternate transport, but nearly every sentence conveys necessary operational context. Slight trimming could improve, but it is not bloated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no output schema and no annotations, this description is unusually complete. It tells the agent what the tool returns (signed attestation), how to use it, what restrictions apply, how to upgrade to signed mode, and how the free tier behaves. Nothing critical is missing for correct selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameter is already well documented as a ticker symbol such as BTC, ETH, SOL. The description supports this without adding new parameter-specific semantics beyond sample tickers and usage context. That matches the baseline for full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action (verify/confirm price), a clear resource (a crypto asset price), and a distinctive capability (signed price oracle from multiple exchanges). It clearly differs from the verification siblings, which are about business, claims, and freshness rather than price.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly frames when to invoke the tool: before the agent trades, quotes, or settles on a price. It also gives concrete usage alternatives such as adding an x402 payment header or using POST /verify/price over HTTP, but it does not explicitly say when not to use it or contrast with the sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
4 tool updates
- First observed
verify_business - First observed
verify_claim - First observed
verify_freshness - First observed
verify_price
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Signed attestations for agents, $0.01/call via x402: URL witness, AI permission, tx finality, JWKS.
Signed agent discovery, security attestations, paid work, and verified settlement reputation.
Verify before your agent acts on data it paid for. Signed verdicts, checkable offline, via x402.
Verified memory for AI agents. Signed assertions, billing attestation, session continuity.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables verification of AI agent identity, authority, and integrity at transaction time, returning signed verdicts for allow, step-up, review, or block.MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to verify proposed actions through federated adversarial consensus among multiple LLMs, providing Ed25519-signed attestations to prevent hallucinations, unverified counterparties, and compliance risks before execution.1MIT

Synpareia Trust Toolkitofficial
AlicenseAqualityAmaintenanceVerifiable dealings with other agents: prove what you did, vet who you deal with, bind agreements36Apache 2.0- AlicenseNot gradedqualityDmaintenanceProvides cryptographic governance receipts for AI agents, enabling pre-execution evaluation and signed verdicts (EXECUTE/BLOCK/REVIEW/SHADOW) with offline-verifiable audit trails.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool verifies a distinctly different type of entity: business, factual claim, URL freshness, and crypto price. There is no overlap in their purposes, so an agent can reliably select the correct tool based on the object being verified.
All tools follow the exact same verb_noun pattern (verify_<target>), with targets being business, claim, freshness, and price. This is perfectly consistent and predictable.
With 4 tools, the server is tightly scoped to a clear purpose—verification oracles—and each tool covers a major distinct domain. This count is well within the ideal range and not excessive or thin.
The four verification areas cover business, claims, freshness, and price, which are common needs for agent trust decisions. Minor gaps exist (e.g., identity or email verification), but the core verification surface is coherent and mostly complete for the stated purpose.