Skip to main content
Glama

Verify Agent Reputation (Multi-Protocol Audit)

verify_agent_reputation

Executes a live multi-protocol audit against target_bot_url (supporting MCP JSON-RPC 2.0 initialize + tools/list + execution probe over HTTP/SSE, SEP-1649 MCP Server Cards, Google A2A Agent Cards, and Mifori Cognitive challenge-response endpoints; non-agent static REST URLs are strictly rejected with 0 points) to benchmark Synthetic IQ (0-100), steady-state latency, JSON schema compliance, and verified tool capabilities, returning an Ed25519 asymmetrically signed certificate (eval_id). Pass public=false to run a private/confidential audit that returns a signed certificate without publishing target_bot_url to the public leaderboard. Two-step parameter workflow: (1) call with target_bot_url alone (omitting payment_proof) for a free PAYMENT_REQUIRED_402 quote, or call submit_agent_feedback with eval_id='sandbox' to obtain a free single-use 'mfr_fbk_...' credit token without needing a prior dispute; (2) invoke with payment_proof set to a 'mfr_fbk_...' token or a verified $0.005 Base Mainnet USDC transaction hash ('0x...').

Input Schema

NameRequiredDescriptionDefault
publicNoIf true (default), publishes the audit result to the public leaderboard. Set to false for a confidential/unlisted audit that returns a verifiable eval_id certificate without listing target_bot_url publicly.
agent_idNoCanonical decentralized identifier or semantic handle (e.g. 'did:mcp:deepwiki-public', max 128 chars).
payer_walletNoOptional 0x... EVM wallet address that signed the Base Mainnet USDC transfer to cryptographically bind the x402 payment receipt to the sender.
payment_proofNoSingle-use 'mfr_fbk_...' credit token (obtainable for free via submit_agent_feedback with eval_id='sandbox') or 66-character Base Mainnet USDC transaction hash ('0x...').
target_bot_urlYesPublic HTTPS/HTTP endpoint URL of the MCP server or autonomous AI agent to probe (e.g. 'https://mcp.deepwiki.com/mcp' or 'https://agent.mifori.com/v1/demo-agent').
target_bearer_tokenNoOptional ephemeral Bearer token (held strictly in-memory, never stored or logged) to authenticate the audit probe against protected MCP servers or agents.

Output Schema

NameRequiredDescriptionDefault
errorNoError code or payment requirement description if audit was not completed.
publicNoWhether this audit is listed on the public leaderboard.
statusYesExecution status ('VERIFIED', 'PAYMENT_REQUIRED_402', or 'ERROR').
eval_idNoUnique identifier (UUID) of the audit evaluation.
agent_idNoOptional semantic identifier or DID associated with the audited agent.
latency_msNoMeasured steady-state round-trip execution latency in milliseconds.
synthetic_iqNoComputed Synthetic IQ / protocol & schema quality score between 0 and 100.
target_bot_urlYesAudited target agent URL.
reliability_tierNoAssigned Mifori trust tier based on IQ and latency.
protocol_detectedNoDetected agent protocol ('MCP 2.0', 'SEP-1649 MCP Card', 'Google A2A', 'Mifori Cognitive v1', or 'UNVERIFIED').
certagent_signatureNoAsymmetric Ed25519 signature of the canonical audit certificate ('0x...').
json_schema_compliantNoWhether the target agent returned a valid protocol/schema contract.
verified_capabilitiesNoSummary of verified MCP tools, A2A skills, or cognitive benchmark result.
hallucination_detectedNoWhether logical hallucination or non-agent static output was detected.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed14 schema fields changed
    • changedInput schema / properties / agent_id / description
      Previous value: -"Canonical decentralized identifier or semantic handle (e.g. 'did:mifori:router-v1', max 128 chars)."New value: +"Canonical decentralized identifier or semantic handle (e.g. 'did:mcp:deepwiki-public', max 128 chars)."
    • addedInput schema / properties / payer_wallet
      Added value: +{
      +  "description": "Optional 0x... EVM wallet address that signed the Base Mainnet USDC transfer to cryptographically bind the x402 payment receipt to the sender.",
      +  "maxLength": 42,
      +  "type": "string"
      +}
    • changedInput schema / properties / payment_proof / description
      Previous value: -"66-character Base Mainnet USDC transaction hash ('0x...') or single-use 'mfr_fbk_...' credit token."New value: +"Single-use 'mfr_fbk_...' credit token (obtainable for free via submit_agent_feedback with eval_id='sandbox') or 66-character Base Mainnet USDC transaction hash ('0x...')."
    • addedInput schema / properties / public
      Added value: +{
      +  "default": true,
      +  "description": "If true (default), publishes the audit result to the public leaderboard. Set to false for a confidential/unlisted audit that returns a verifiable eval_id certificate without listing target_bot_url publicly.",
      +  "type": "boolean"
      +}
    • addedInput schema / properties / target_bearer_token
      Added value: +{
      +  "description": "Optional ephemeral Bearer token (held strictly in-memory, never stored or logged) to authenticate the audit probe against protected MCP servers or agents.",
      +  "maxLength": 1024,
      +  "type": "string"
      +}
    • changedInput schema / properties / target_bot_url / description
      Previous value: -"Public HTTPS/HTTP endpoint URL of the autonomous AI agent to probe (e.g. 'https://agent.mifori.com/v1/demo-agent')."New value: +"Public HTTPS/HTTP endpoint URL of the MCP server or autonomous AI agent to probe (e.g. 'https://mcp.deepwiki.com/mcp' or 'https://agent.mifori.com/v1/demo-agent')."
    • changedOutput schema / properties / certagent_signature / description
      Previous value: -"Cryptographic HMAC-SHA256 signature of the audit certificate."New value: +"Asymmetric Ed25519 signature of the canonical audit certificate ('0x...')."
    • changedOutput schema / properties / hallucination_detected / description
      Previous value: -"Whether logical hallucination or invalid output was detected."New value: +"Whether logical hallucination or non-agent static output was detected."
    • changedOutput schema / properties / json_schema_compliant / description
      Previous value: -"Whether the target agent returned a valid JSON contract."New value: +"Whether the target agent returned a valid protocol/schema contract."
    • changedOutput schema / properties / latency_ms / description
      Previous value: -"Measured round-trip execution latency in milliseconds."New value: +"Measured steady-state round-trip execution latency in milliseconds."
    • addedOutput schema / properties / protocol_detected
      Added value: +{
      +  "description": "Detected agent protocol ('MCP 2.0', 'SEP-1649 MCP Card', 'Google A2A', 'Mifori Cognitive v1', or 'UNVERIFIED').",
      +  "type": "string"
      +}
    • addedOutput schema / properties / public
      Added value: +{
      +  "description": "Whether this audit is listed on the public leaderboard.",
      +  "type": "boolean"
      +}
    • changedOutput schema / properties / synthetic_iq / description
      Previous value: -"Computed Synthetic IQ score between 0 and 100."New value: +"Computed Synthetic IQ / protocol & schema quality score between 0 and 100."
    • addedOutput schema / properties / verified_capabilities
      Added value: +{
      +  "description": "Summary of verified MCP tools, A2A skills, or cognitive benchmark result.",
      +  "type": "string"
      +}
  2. Changed3 schema fields changed
    • changedInput schema / properties / agent_id / description
      Previous value: -"Optional semantic agent identifier or DID (e.g. 'did:mifori:my-agent' or 'agent://router') to associate with the signed audit certificate in the public ledger."New value: +"Canonical decentralized identifier or semantic handle (e.g. 'did:mifori:router-v1', max 128 chars)."
    • changedInput schema / properties / payment_proof / description
      Previous value: -"Optional 66-character Base Mainnet USDC transaction hash ('0x...') for the $0.005 x402 audit fee or an X-Agent-Key credit token. Omit on initial call to receive the free HTTP 402 payment invoice."New value: +"66-character Base Mainnet USDC transaction hash ('0x...') or single-use 'mfr_fbk_...' credit token."
    • changedInput schema / properties / target_bot_url / description
      Previous value: -"Publicly reachable HTTPS/HTTP endpoint URL of the AI agent to audit (e.g. 'https://agent.mifori.com/v1/demo-agent'). Must accept JSON POST probes."New value: +"Public HTTPS/HTTP endpoint URL of the autonomous AI agent to probe (e.g. 'https://agent.mifori.com/v1/demo-agent')."
  3. Changed2 schema fields changed
    • addedInput schema / properties / agent_id
      Added value: +{
      +  "description": "Optional semantic agent identifier or DID (e.g. 'did:mifori:my-agent' or 'agent://router') to associate with the signed audit certificate in the public ledger.",
      +  "maxLength": 128,
      +  "type": "string"
      +}
    • addedOutput schema / properties / agent_id
      Added value: +{
      +  "description": "Optional semantic identifier or DID associated with the audited agent.",
      +  "type": [
      +    "string",
      +    "null"
      +  ]
      +}
  4. Changed1 schema field changed
    • changedOutput schema / properties / latency_ms / type
      Previous value: -"integer"New value: +"number"
  5. Changed2 schema fields changed
    • changedInput schema / properties / payment_proof / description
      Previous value: -"Optional Base Mainnet USDC transaction hash (0x...) or x402 payment proof ($0.005 USDC). If omitted, the tool returns the HTTP 402 payment invoice."New value: +"Optional 66-character Base Mainnet USDC transaction hash ('0x...') for the $0.005 x402 audit fee or an X-Agent-Key credit token. Omit on initial call to receive the free HTTP 402 payment invoice."
    • changedInput schema / properties / target_bot_url / description
      Previous value: -"Valid HTTPS/HTTP URL of the target AI bot endpoint to audit (e.g. https://agent.mifori.com/v1/demo-agent)."New value: +"Publicly reachable HTTPS/HTTP endpoint URL of the AI agent to audit (e.g. 'https://agent.mifori.com/v1/demo-agent'). Must accept JSON POST probes."
  6. First observed

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare non-read-only, open-world, non-idempotent, non-destructive; the description adds the behavior that matters: this is a paid, meterable operation with a two-step quote/pay flow, returns an Ed25519-signed certificate, publishes to a public leaderboard unless public=false, rejects non-agent REST URLs with 0 points, and holds bearer tokens strictly in-memory. This is far richer than the annotations alone and consistent with them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The main action is front-loaded and every clause carries load-bearing information (protocols, payment, privacy, rejection rule). It is, however, a single dense paragraph with heavy nested parentheticals and semicolon chaining, which makes it harder to scan than a segmented version would be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, yet the description still summarizes the return artifact (Ed25519-signed eval_id certificate) and covers payment, auth via target_bearer_token, privacy, and protocol scope. For a six-parameter, payment-gated operation, nothing an agent needs to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds real meaning: it explains the two-step workflow in which omitting payment_proof yields a 402 quote and setting it to an 'mfr_fbk_...' token or Base USDC hash accepts payment, and it clarifies the consequence of public=false. That is genuine semantic value beyond the schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Executes a live multi-protocol audit against target_bot_url') and enumerates exactly what is benchmarked (Synthetic IQ, latency, schema compliance, tool capabilities) and what is returned (signed certificate with eval_id). It also names the sibling submit_agent_feedback as the route to a free credit token, so an agent can differentiate it from get_agent_certificate/get_agent_leaderboard without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use routing: (1) call with target_bot_url alone for a free PAYMENT_REQUIRED_402 quote, or call submit_agent_feedback with eval_id='sandbox' for a free token; (2) call again with payment_proof. It also states the condition that selects the confidentiality path (public=false) and that static REST URLs are rejected, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources