Skip to main content
Glama

SpendPreflight

ERC-8478 Draft Payee Verification

verify_payee_binding
Read-only

ERC-8478 Draft payee verification: endpoint origin and ERC-8004 agent wallet or EIP-712 delegation at one pinned registry block. Nine explicit outcomes; not-read is uncharged. Signed JSON observation, not payment approval or a safety guarantee. Shared trial may apply. Price: 0.01 USDC. Minimal input example: {"requirement":{"scheme":"exact","network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","amount":"10000","payTo":"0xBf4164e07552e4c1b1B1597E72C7acAA3F0a1c58"},"resource_url":"https://api.spendpreflight.com/v1/check"}. Illustrative output excerpt: {"result":{"kind":"payee_binding","outcome":"no-identity","block_number":null,"block_timestamp":null},"jws":"illustrative-not-a-live-signature"}. Illustrative output excerpt, not a live result, signature, approval or guarantee. Freshness/data/availability checks still apply. How to pay (MCP): First use the existing shared allowance of 3 eligible calls per IP per UTC day, without payment metadata. This is shared with eligible HTTP trials, not a new allowance. Use an x402-capable MCP client. A generic MCP connector without payment support cannot complete a paid continuation. On payment required, STOP. Inspect the exact accepts amount, asset, network and payTo; obtain explicit wallet/budget approval before continuing. Only after approval, let the configured x402 MCP client attach its signed payload in _meta["x402/payment"] and retry the same tools/call arguments. Never send a separate USDC transfer or paste keys into tool arguments. Never silently fall back from free access to payment. If a signed attempt has an unknown outcome, inspect that authorization/transaction; do not create another automatically.

Input Schema

NameRequiredDescriptionDefault
agentIdNo
registryNo
requirementYes
resource_urlNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Well beyond the annotations, the description discloses cost (0.01 USDC), a shared trial of 3 calls per IP per UTC day, that 'not-read is uncharged', that there are nine explicit outcomes, that the result is a signed JSON observation rather than an approval, and that payment requires explicit wallet/budget approval with no silent fallback. These are exactly the side-effect and failure-mode details annotations cannot convey. It stops short of enumerating the nine outcomes or saying what triggers each, which would be the full 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and the pinned-block scope are front-loaded, which is good, but the body is bloated: the illustrative-output disclaimer is stated twice ('not a live result, signature, approval or guarantee'), and the x402 payment walkthrough runs several sentences longer than needed. Dense but padded with repeated caveats.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, and the description compensates by showing an illustrative result object with kind/outcome/block_number/block_timestamp plus a jws field, which is genuinely useful. However, with a nested requirement object, an undocumented agentId/registry, and nine unenumerated outcomes, an agent still lacks enough to predict what it will get back or how to fill the optional fields.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry the parameter burden, and it only partially does. The inline example illustrates the nested requirement object (scheme/network/asset/amount/payTo) and resource_url, but agentId and registry — including that registry expects an eip155:chainId:0x... form — are never explained in prose.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening clause names a specific verb and resource: verify a payee binding via endpoint origin plus ERC-8004 agent wallet or EIP-712 delegation at a pinned registry block. That is far more specific than a restated title. It does not, however, distinguish itself from sibling tools such as check_payee, preflight_payment, or security_check, which an agent would need to choose between.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: the tool verifies payee binding before paying, and the description says the result is 'not payment approval' and that freshness/data checks still apply. No sentence says when to call this instead of check_payee or preflight_payment. The bulk of the 'how' text is payment-transport mechanics, not tool-selection guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources