aegis
Server Details
Trust layer for the x402 economy - check any service before you pay. Scores, discovery, routing.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
7 toolsdiscoverCInspect
Search the Aegis registry of agent-payable services, ranked by verification-backed trust. Free.
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | ||
| category | No | ||
| min_trust | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It adds two traits: 'ranked by verification-backed trust' and 'Free', but does not state whether the operation is read-only, whether authentication is required, how results are paginated, or any potential side effects. For a search tool this is a notable gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise: two sentences, each contributing value. It efficiently communicates the core function and a key differentiator ('Free') without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given three undocumented parameters, no output schema, and no annotations, the description is insufficient. It does not clarify expected result format, filter semantics, trust thresholds, or how this relates to sibling tools. Users are left with significant uncertainty about how to invoke the tool effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides three parameters (query, category, min_trust) with zero description coverage. The description does not explain any of these parameters, their formats, allowed values, or how they influence the search. Since schema coverage is 0%, the description was expected to compensate but does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Search the Aegis registry of agent-payable services, ranked by verification-backed trust.' This provides a specific verb (Search), resource (Aegis registry), and distinct method (ranked by trust). However, it does not differentiate from the sibling tool 'smart_discover', which likely surfaces similar registry data.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description offers no guidance on when to use this tool versus alternatives like 'smart_discover' or 'trust_check'. The only contextual hint is 'Free', which implies a cost benefit but does not clarify selection criteria, necessary conditions, or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
erc8004_reputationCInspect
On-chain ERC-8004 reputation for any registered agent (Base IdentityRegistry) + Aegis probe cross-check + divergence flag. Paid $0.005 via x402 (_meta['x402/payment']).
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | ||
| agent_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of disclosing behavioral traits. It discloses the $0.005 payment via x402, which is a critical side effect, and mentions the Aegis probe cross-check and divergence flag. However, it does not state whether the operation is read-only, what the divergence flag represents, or how failures (e.g., unregistered agent) are handled.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, consisting of two sentences that are front-loaded with the primary purpose. The payment information is included as a separate sentence, which is important and earns its place. The style is slightly noun-heavy, lacking a direct verb, but there is no wasted wording. It could be improved by starting with 'Get' or 'Fetch.'
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations and output schema, and the sparse parameter documentation, the description is not complete enough. It explains what the tool does at a high level and notes the cost, but it does not describe the return value, the exact meaning of parameters, or edge-case behavior. An agent would need more information to invoke this tool correctly, especially regarding the 'domain' parameter.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has two parameters, domain and agent_id, with zero description coverage (0%). The description does not explain either parameter explicitly. It hints that 'agent_id' corresponds to an agent in the Base IdentityRegistry, but 'domain' remains ambiguous. With no schema descriptions, the description should compensate but does not provide sufficient per-parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as providing on-chain ERC-8004 reputation for agents on the Base IdentityRegistry, plus an Aegis probe cross-check and divergence flag. It lacks an explicit verb like 'Get' or 'Fetch,' but the noun-phrase style still conveys the purpose. It distinguishes from siblings by referencing ERC-8004 and Aegis, though it doesn't explicitly compare to 'trust_check.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus alternatives. The description mentions 'any registered agent' and a payment requirement, but it does not state scenarios where this should be preferred over sibling tools such as 'trust_check' or 'discover.' It only implies that it is used when ERC-8004 reputation is needed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
procureAInspect
TASK+BUDGET procurement: describe what you need in plain language + max spend; Aegis picks the best verified service, executes with failover, captures only on delivery, returns data + Ed25519-signed receipt. Never over budget. Dynamic x402 via _meta.
| Name | Required | Description | Default |
|---|---|---|---|
| need | Yes | ||
| budget | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It discloses several key behaviors: service selection, execution with failover, payment only on delivery, signed receipt, and budget enforcement ('Never over budget'). This goes beyond basic mutation but does not cover potential errors, auth, or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise at two sentences, front-loading the purpose with 'TASK+BUDGET procurement'. While it includes jargon ('Aegis', 'x402', '_meta') that may require prior knowledge, every sentence contributes valuable information about behavior and constraints.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple 2-parameter tool with no output schema, the description is relatively complete. It indicates the return value ('returns data + Ed25519-signed receipt') and key behavioral guarantees. However, 'data' is vague, and the term 'x402 via _meta' is unexplained, leaving some gaps in understanding the full context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must explain the parameters. It does this directly: 'need' is described as 'what you need in plain language' and 'budget' as 'max spend'. This adds essential meaning beyond the bare type declarations in the schema, fully compensating for the lack of schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs 'TASK+BUDGET procurement' with a specific verb and resource. It distinguishes itself from sibling tools by focusing on executing a purchase/service engagement, unlike discovery or routing tools, with details like 'picks the best verified service' and 'executes with failover'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: 'describe what you need in plain language + max spend' tells the agent how to invoke the tool. However, it does not explicitly state when not to use this tool or mention alternatives, leaving the when-to-use versus siblings implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
routeAInspect
Pay THROUGH Aegis: we buy the best verified service for you (by url or capability) and relay the data, failing over if one is down. One integration reaches the whole registry; not charged if nothing delivers. Dynamic x402 price via _meta.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | ||
| capability | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses meaningful behaviors: failover if a service is down, no charge if nothing delivers, and dynamic pricing via '_meta'. However, it omits other relevant traits such as authentication requirements, rate limits, or whether the operation has side effects beyond paying and relaying data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences long and every sentence adds value: the first explains the core mechanism, the second highlights the integration scope, and the third addresses pricing. It is information-dense without fluff, and the structure front-loads the most important action first.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema and no annotations, so the description must cover both behavior and return expectations. It explains the process well but does not mention what the response looks like or how failures are signaled beyond failover. Given the moderate complexity and the presence of sibling tools, some guidance on distinguishing use cases would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema shows two bare string parameters with 0% description coverage, but the description compensates by explaining that the tool operates 'by url or capability,' indicating that these are alternative selection methods. This adds essential meaning beyond the schema, though it does not specify formats or precedence.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: paying through Aegis to buy a verified service and relay data, with parameters 'url' or 'capability'. It identifies a specific resource and action, but it does not explicitly distinguish itself from the sibling 'route_batch', making its differentiation somewhat unclear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'One integration reaches the whole registry' implies this is a primary access point, but no explicit guidance is given on when to use this tool versus alternatives like 'discover' or 'route_batch'. There are no stated exclusions or conditions for when not to use it, so the usage context is only implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
route_batchBInspect
Pay ONCE, Aegis fulfills MANY verified services with per-item failover. items=[{url|capability, params?}]. Charged only if all deliver. Dynamic x402 via _meta.
| Name | Required | Description | Default |
|---|---|---|---|
| items | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and discloses key behaviors: 'Pay ONCE', 'Charged only if all deliver', 'per-item failover', and 'Dynamic x402 via _meta'. This gives meaningful insight into payment semantics and failure handling, though it could still mention what happens on partial success in more explicit detail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single dense sentence that packs a lot of information: payment, batch, item format, failover, conditional charge, and x402 mechanism. It is concise and front-loaded, but the heavy jargon ('Aegis', 'x402', 'via _meta') may reduce clarity for agents unfamiliar with the domain.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema and no annotations, so the description must explain the full invocation context, including return/response behavior. It explains input shape and payment conditions but never says what the agent should expect as a result, what happens upon partial failure, or how to interpret the response. This is a significant gap for a financial transaction tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% and the schema only defines items as an array of empty objects, so the description's 'items=[{url|capability, params?}]' provides essential structure not available in the schema. It explains the shape of each item (url or capability, optional params) and thus compensates well for the lack of schema detail, though the notation is terse and could be more explicit.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description says 'Aegis fulfills MANY verified services', indicating a batch fulfillment tool, but it does not explicitly state 'route' or 'batch routing' as the core action. It distinguishes from siblings by emphasizing 'MANY' vs. single, but lacks a clear verb+resource statement that would make the tool's purpose obvious on its own.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies batch usage through 'MANY' and 'per-item failover', but never explicitly states when to use this tool instead of the sibling 'route' or others. There is no mention of alternatives, exclusions, or context like 'use for multiple items; use route for a single item.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
smart_discoverAInspect
Describe what you need in plain language; Aegis maps it to the best verified services (LLM intent matching). Paid $0.01 via x402.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It usefully discloses the cost ($0.01 via x402) and the LLM intent-matching mechanism, but it does not explain the return format, what 'verified services' means, or any side effects or security considerations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that immediately tells the user what to do, followed by the mapping mechanism and cost. Every word earns its place, with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple (one parameter, no nested objects), and the description covers the basic input and pricing. However, there is no output schema and no description of what the tool returns, which is a notable gap for an agent selecting and invoking the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one query parameter with no description, and schema coverage is 0%. The description adds meaning by explaining that the user should 'describe what you need in plain language', which maps directly to the query parameter. However, it lacks examples, constraints, or details about accepted formats.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool maps plain-language requests to verified services via LLM intent matching, giving a specific verb and resource. It does not explicitly distinguish from the sibling tool 'discover', so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'Describe what you need in plain language' implies the primary use case, but there is no explicit guidance on when to use this tool versus siblings like discover, procure, or route. No exclusions or alternatives are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
trust_checkAInspect
Paid-delivery-verified trust verdict BEFORE you pay: score, tier, recommendation, and explainable confidence+reasons+evidence (Aegis pays real money to confirm delivery; coverage-only scores cannot). Paid $0.01 via x402 (_meta['x402/payment']).
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full responsibility for behavioral disclosure. It explicitly states that the tool costs $0.01 via x402, mentions the _meta['x402/payment'] field, and explains that Aegis pays real money to confirm delivery. This is a critical side effect made transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core purpose, followed by essential differentiation and cost information. It is dense but every clause adds useful context, though the jargon-heavy phrasing makes it slightly harder to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the key output categories, the paid side effect, and why this tool differs from coverage-only alternatives. It does not specify the expected response format or clarify the URL parameter, but for a single-parameter tool with no output schema, it is reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a required url parameter but zero description coverage, and the tool description does not explain what the URL should represent or how it is used. Because schema coverage is 0%, the description needed to compensate for the missing parameter semantics but does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states what trust_check does: it returns a paid-delivery-verified trust verdict with score, tier, recommendation, and explainable confidence, reasons, and evidence. It also differentiates itself from coverage-only scores, which helps distinguish it from sibling reputation tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'BEFORE you pay' gives clear timing context, and 'coverage-only scores cannot' explains a key limitation and when this tool is the better choice. It does not name specific sibling tools explicitly, but the contextual contrast is strong enough to guide selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
1 tool update
- Added
erc8004_reputation
1 tool update
- Added
procure
1 tool update
- Added
route_batch
4 tool updates
- First observed
discover - First observed
route - First observed
smart_discover - First observed
trust_check
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
The trust layer for the x402 agent economy: verifiable agent identity, payment & audit.
x402 payment firewall + Agent Credit Bureau. Invoice/verify/score via RLUSD on XRPL.
Live x402 endpoint trust/diligence check before you pay it. $0.02/call via x402.
Counterparty risk scoring for agentic commerce via x402 micropayments.
Related MCP Servers
- FlicenseNot gradedqualityBmaintenanceFind and vet paid x402 API services before an agent spends money on them, with live reliability scores and recency-weighted probing.-
- AlicenseAqualityCmaintenanceDiscovers and routes across 251+ x402-enabled payment services with smart routing strategies (cheapest, fastest, most trusted) and signed attestations. Provides real-time health monitoring, facilitator compatibility checks, and service quality scoring for the x402 agent payment ecosystem.54MIT
- AlicenseNot gradedqualityDmaintenanceVerify x402 endpoints before your agent spends. Three tools: verify (SPEND/CAUTION/INVESTIGATE/DO NOT SPEND backed by 50K+ services), passport (full trust identity), risk_check (deep assessment). No API keys, no signup.12MIT
- AlicenseNot gradedqualityDmaintenanceDiscovers and queries x402-payable APIs at runtime — enables autonomous agents to find, evaluate, and pay for services via USDC micropayments on Base without API keys or subscriptions.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
discover and smart_discover overlap as discovery mechanisms, differing mainly in query style. procure and route both involve paying Aegis to fulfill a service with failover, so an agent could struggle to choose between them despite different framing.
Most names use lowercase with underscores and verb-like prefixes, but erc8004_reputation and trust_check are noun-phrase names while discover, procure, route, and route_batch are imperative verbs. The mixed conventions are readable but not predictable.
Seven tools cover the core facets of the Aegis service registry, discovery, procurement, routing, batch execution, and trust verification. This is a well-scoped size for the server's stated purpose.
The set covers discovery, on-chain reputation, trust checking, single routing, batch routing, and budget-based procurement. Minor gaps like explicit payment status or account balance checks exist, but agents can complete primary workflows without dead ends.