Wever Labs Agentic Rails
Server Details
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
- Status
- Healthy
- Uptime
- 55.4% over 44 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 5 tools
Each tool targets a distinct action: building briefs, checking evidence inventories, fetching service catalogs, preparing work orders, and reviewing MCP manifests. There is no overlap in purpose or ambiguity between them.
All tool names follow a consistent verb_noun pattern in snake_case (build_operator_brief, check_evidence_inventory, get_service_catalog, prepare_work_order, review_mcp_manifest), making the set predictable and easy to navigate.
With exactly 5 tools, the server is well-scoped for its domain of preparation, review, and cataloging operations. Each tool has a clear purpose and contributes to the overall workflow without redundancy or bloat.
The tool surface covers core lifecycle operations for the stated domain: building summaries, checking inventories, reading catalogs, preparing work orders, and reviewing manifests. Minor gaps like update/delete for work orders are not critical given that submission and execution are deliberately kept separate.
Available Tools
5 toolsbuild_operator_briefARead-onlyIdempotentInspect
Summarize supplied service health and queue observations into deterministic priorities. No private records are fetched and no activity is invented.
| Name | Required | Description | Default |
|---|---|---|---|
| as_of | Yes | A valid UTC calendar timestamp with whole seconds, supplied by the caller. | |
| queues | Yes | Unique queue names. Empty queues must have a null or zero oldest age. | |
| services | Yes | Unique service_id values. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| result | Yes | |
| version | Yes | |
| execution | Yes | |
| operation | Yes | |
| provenance | Yes | |
| service_id | Yes | |
| input_sha256 | Yes | |
| result_sha256 | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description adds valuable context beyond these by stating 'No private records are fetched and no activity is invented,' which addresses data privacy and the deterministic nature of the output. This is consistent with the annotations and provides additional behavioral guarantees.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, highly concise, and front-loaded with the core purpose. The behavioral notes ('No private records are fetched and no activity is invented') are valuable additions without redundancy. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has an output schema (true), the description does not need to explain return values. It covers the purpose, behavioral guarantees, and implies the input structure. It does not explicitly mention that all three parameters are required, but the schema already marks them as required, so this is not a significant gap. The description is adequate for an agent to understand what the tool does and its key constraints.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with each parameter (as_of, services, queues) having a description in the schema. The tool description itself does not add any parameter-specific semantics, so the baseline score of 3 applies. It does not elaborate on formats or constraints beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Summarize'), a clear resource ('supplied service health and queue observations'), and a defined outcome ('into deterministic priorities'). It distinguishes itself from siblings like 'prepare_work_order' and 'get_service_catalog' by focusing on summarization and prioritization rather than retrieval or action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies its use when one has service health and queue observations and needs priorities, but it does not explicitly state when to use this tool versus alternatives, nor does it mention any exclusions or conditions. The guidance is implicit rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_evidence_inventoryARead-onlyIdempotentInspect
Compare explicit submitted evidence labels and return exact matched and missing items. This does not read or verify document contents.
| Name | Required | Description | Default |
|---|---|---|---|
| expected_evidence | Yes | ||
| available_evidence | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| result | Yes | |
| version | Yes | |
| execution | Yes | |
| operation | Yes | |
| provenance | Yes | |
| service_id | Yes | |
| input_sha256 | Yes | |
| result_sha256 | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the safety profile is covered. The description adds useful behavioral context beyond the annotations: it performs exact label matching and deliberately does not inspect or verify document contents.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler, with the core function first and the key limitation second. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter comparison tool, the description plus schema plus annotations is mostly sufficient. It names the return categories and the important limitation, though a brief note on which list is expected and which is available would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for missing property-level explanations. It describes the overall comparison but does not explain which array is the supplied set versus the required set, nor does it explicitly map 'matched' and 'missing' to available_evidence and expected_evidence.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Compare explicit submitted evidence labels'), a clear resource ('evidence labels'), and a precise outcome ('return exact matched and missing items'). It also differentiates itself from content-review tools by explicitly stating 'This does not read or verify document contents.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description makes clear this is for label-level inventory comparison, not for verifying document contents. The negative scope in the second sentence gives the agent a concrete condition for when to avoid using this tool, though it does not name an alternative like review_mcp_manifest.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_service_catalogARead-onlyIdempotentInspect
Read the four supported Labs computation contracts and connection instructions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the description only needs to add context beyond safety. It adds that the tool returns exactly four contracts and connection instructions, which is useful, but it doesn't disclose other behavioral details like response format or potential edge cases. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with the verb and resource front-loaded. Every word earns its place, and there is no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no parameters, full annotation coverage, and no output schema, this description tells an agent exactly what will be returned (four contracts and connection instructions). Nothing an agent needs to call it correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the schema coverage is 100% (empty object). Per the baseline for 0-parameter tools, a score of 4 applies because there are no parameter semantics to clarify; the description correctly omits any param details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Read') and names the exact resource ('the four supported Labs computation contracts and connection instructions'). It clearly distinguishes this tool from siblings like build_operator_brief or check_evidence_inventory, none of which are about retrieving a catalog.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied rather than explicit: an agent can infer that if it needs the supported Labs contracts, this is the tool to use. However, the description does not explicitly state when to use it versus alternatives, nor does it mention any exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
prepare_work_orderARead-onlyIdempotentInspect
Prepare a validated DiligenceOps task for a specific Connect recipient. Submission, recipient permission and execution remain separate steps.
| Name | Required | Description | Default |
|---|---|---|---|
| service_id | Yes | ||
| recipient_id | Yes | ||
| expected_evidence | Yes | ||
| available_evidence | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| result | Yes | |
| version | Yes | |
| execution | Yes | |
| operation | Yes | |
| provenance | Yes | |
| service_id | Yes | |
| input_sha256 | Yes | |
| result_sha256 | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds that this is a validation/preparation step and that submission and execution are separate, which clarifies the tool's non-executing behavior beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no waste. The core action and the key scoping constraint (preparation only, not submission/execution) are front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for a preparation tool with rich annotations and an output schema. It doesn't explain return values, but the output schema exists, so that's not required. It could mention what 'validated' entails, but the schema's detailed constraints cover much of that.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description carries the burden, but it only mentions 'validated' without explaining parameter semantics. The schema itself has detailed constraints (patterns, lengths, const for service_id), but the description adds no meaning beyond the schema. Baseline 3 applies because the schema is rich even though the description doesn't compensate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('prepare') and resource ('validated DiligenceOps task for a specific Connect recipient'), and clarifies that submission, permission, and execution are separate steps. It doesn't explicitly differentiate from siblings like build_operator_brief, but the resource and validation focus are clear enough.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is a preparation step, not a submission or execution step, and notes that submission/recipient permission/execution remain separate. It doesn't name alternative tools or explicit when-not-to-use conditions, but the separation of concerns gives clear context for when to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
review_mcp_manifestBRead-onlyIdempotentInspect
Inventory submitted MCP tool declarations and flag missing or consequential annotations. This does not connect to a server or grant authority.
| Name | Required | Description | Default |
|---|---|---|---|
| tools | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| result | Yes | |
| version | Yes | |
| execution | Yes | |
| operation | Yes | |
| provenance | Yes | |
| service_id | Yes | |
| input_sha256 | Yes | |
| result_sha256 | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description adds meaningful behavioral context beyond those annotations by stating that the tool does not connect to a server or grant authority, which helps an agent understand side-effect and permission implications. This is valuable added transparency with no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler. The primary purpose is front-loaded, and the behavioral caveat is a single useful second sentence. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter, read-only, idempotent tool with a detailed input schema and an output schema, the description is mostly adequate. It lacks usage guidance and deeper parameter semantics, but the combination of annotations, schema, and description covers the core operational and safety aspects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description carries the burden of explaining the 'tools' parameter. It only refers obliquely to 'submitted MCP tool declarations' and does not describe the array structure, required 'name' field, or annotation object expectations. Some semantic value is present, but it does not meaningfully compensate for the lack of schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs ('Inventory', 'flag') and a clear resource ('submitted MCP tool declarations'), making the tool's purpose unambiguous. It does not explicitly differentiate from sibling tools like check_evidence_inventory, but the subject matter is distinct enough that an agent can infer its role.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no guidance on when to use this tool versus siblings or when to choose an alternative. The sentence 'This does not connect to a server or grant authority' clarifies limitations but not usage context, so the agent is left without selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
94 tool updates
- Removed
activate_external_directory_credentials - Removed
adapt_directory_submission - Removed
bind_x402_facilitator_settlement - Removed
build_a2a_callback_envelope - Removed
build_agent_discovery_distribution_plan - Removed
build_external_agent_client_package - Removed
build_external_agent_client_runner - Removed
build_external_discovery_submission_pack - Removed
build_mcp_package_metadata - Added
build_operator_brief - Removed
build_public_agent_client_repo - Added
check_evidence_inventory - Removed
complete_agent_self_serve_paid_rail_run - Removed
complete_paid_rail_run_with_callback - Removed
create_a2a_task_lifecycle - Removed
create_payment_challenge - Removed
create_stripe_movement_fee_checkout - Removed
create_x402_payment_challenge - Removed
credential_aware_mcp_write - Removed
draft_authority_mandate - Removed
enforce_agent_credential - Removed
evaluate_agent_commerce_proof - Removed
evaluate_authority_action - Removed
execute_delegated_action - Removed
execute_directory_submission - Removed
execute_external_registry_submission_run - Removed
execute_first_paid_production_run - Removed
fetch_return_package - Removed
find_services - Removed
get_active_rail_catalog - Removed
get_free_agent_tools_index - Removed
get_movement_fee_schedule - Removed
get_run_status - Added
get_service_catalog - Removed
get_tool_costs - Removed
inspect_authority_mandate - Removed
inspect_service - Removed
issue_agent_credential - Removed
list_rails - Added
prepare_work_order - Removed
promote_benchmark_report - Removed
publish_public_repo_ci_badge - Removed
publish_verified_commerce_proof - Removed
quote_movement_fee - Removed
quote_run - Removed
read_agent_self_serve_paid_rail_loop - Removed
read_callback_receipt_records - Removed
read_delegated_authority - Removed
read_directory_status_console - Removed
read_live_supabase_verification - Removed
read_payment_settlement_records - Removed
read_receipt_ledger - Removed
read_recent_regressions - Removed
read_verified_commerce_activity - Removed
record_receipt - Removed
register_issued_credential - Removed
request_service_use - Added
review_mcp_manifest - Removed
rotate_signing_secret - Removed
run_agent_to_agent_test - Removed
run_autonomous_atlas_research_cycle - Removed
run_claude_evidence_analysis - Removed
run_claude_proof_relay - Removed
run_credential_enforcement_dry_run - Removed
run_directory_submission_adapter - Removed
run_durable_usage_ledger_event - Removed
run_external_agent_client_runner - Removed
run_external_agent_invocation_test - Removed
run_investor_demo_v2 - Removed
run_live_supabase_verification - Removed
run_multi_agent_rail_benchmark - Removed
run_release_gate_automation - Removed
run_service - Removed
run_stripe_receipt_completion - Removed
run_synthetic_agent_regression - Removed
sign_directory_submission_receipt - Removed
sign_receipt - Removed
start_agent_self_serve_paid_rail_loop - Removed
start_rail_run - Removed
store_callback_receipt_record - Removed
store_receipt_ledger_entry - Removed
store_regression_report - Removed
update_directory_status_record - Removed
validate_a2a_agent_card - Removed
validate_directory_submission_credentials - Removed
validate_persistent_store - Removed
validate_production_write - Removed
validate_supabase_rls_policy_pack - Removed
verify_live_registry_listing - Removed
verify_managed_receipt_signature - Removed
verify_receipt - Removed
verify_signature_by_version - Removed
verify_stripe_movement_fee_payment - Removed
write_persistence_test_record
4 tool updates
- Added
find_services - Added
inspect_service - Added
request_service_use - Added
run_service
1 tool update
- Added
run_autonomous_atlas_research_cycle
5 tool updates
- Added
draft_authority_mandate - Added
evaluate_authority_action - Added
execute_delegated_action - Added
inspect_authority_mandate - Added
read_delegated_authority
3 tool updates
- Added
evaluate_agent_commerce_proof - Added
publish_verified_commerce_proof - Added
read_verified_commerce_activity
1 tool update
- Added
run_durable_usage_ledger_event
1 tool update
- Added
run_stripe_receipt_completion
2 tool updates
- Added
run_claude_proof_relay - Added
run_investor_demo_v2
1 tool update
- Added
run_claude_evidence_analysis
2 tool updates
- Added
complete_paid_rail_run_with_callback - Added
run_credential_enforcement_dry_run
3 tool updates
- Added
complete_agent_self_serve_paid_rail_run - Added
read_agent_self_serve_paid_rail_loop - Added
start_agent_self_serve_paid_rail_loop
66 tool updates
- First observed
activate_external_directory_credentials - First observed
adapt_directory_submission - First observed
bind_x402_facilitator_settlement - First observed
build_a2a_callback_envelope - First observed
build_agent_discovery_distribution_plan - First observed
build_external_agent_client_package - First observed
build_external_agent_client_runner - First observed
build_external_discovery_submission_pack - First observed
build_mcp_package_metadata - First observed
build_public_agent_client_repo - First observed
create_a2a_task_lifecycle - First observed
create_payment_challenge - First observed
create_stripe_movement_fee_checkout - First observed
create_x402_payment_challenge - First observed
credential_aware_mcp_write - First observed
enforce_agent_credential - First observed
execute_directory_submission - First observed
execute_external_registry_submission_run - First observed
execute_first_paid_production_run - First observed
fetch_return_package - First observed
get_active_rail_catalog - First observed
get_free_agent_tools_index - First observed
get_movement_fee_schedule - First observed
get_run_status - First observed
get_tool_costs - First observed
issue_agent_credential - First observed
list_rails - First observed
promote_benchmark_report - First observed
publish_public_repo_ci_badge - First observed
quote_movement_fee - First observed
quote_run - First observed
read_callback_receipt_records - First observed
read_directory_status_console - First observed
read_live_supabase_verification - First observed
read_payment_settlement_records - First observed
read_receipt_ledger - First observed
read_recent_regressions - First observed
record_receipt - First observed
register_issued_credential - First observed
rotate_signing_secret - First observed
run_agent_to_agent_test - First observed
run_directory_submission_adapter - First observed
run_external_agent_client_runner - First observed
run_external_agent_invocation_test - First observed
run_live_supabase_verification - First observed
run_multi_agent_rail_benchmark - First observed
run_release_gate_automation - First observed
run_synthetic_agent_regression - First observed
sign_directory_submission_receipt - First observed
sign_receipt - First observed
start_rail_run - First observed
store_callback_receipt_record - First observed
store_receipt_ledger_entry - First observed
store_regression_report - First observed
update_directory_status_record - First observed
validate_a2a_agent_card - First observed
validate_directory_submission_credentials - First observed
validate_persistent_store - First observed
validate_production_write - First observed
validate_supabase_rls_policy_pack - First observed
verify_live_registry_listing - First observed
verify_managed_receipt_signature - First observed
verify_receipt - First observed
verify_signature_by_version - First observed
verify_stripe_movement_fee_payment - First observed
write_persistence_test_record
Related MCP Connectors
Agentic workflow budget approvals with usage receipts.
Agent-native MCP for governed commerce, x402 payments, paid capabilities, and verifiable receipts.
Paid remote MCP for agent design system guard MCP, structured receipts, audit logs, and reviewer-rea
Non-custodial stablecoin bill-pay rails on Celo & Base for AI agents, settled on-chain via MCP.
Related MCP Servers
- AlicenseAqualityCmaintenanceCryptographic accountability for AI agents. Ed25519-signed receipts for every MCP tool call. Constraints, chains, AI judgment, invoicing, and local dashboard included.247 npm1MIT
- FlicenseNot gradedqualityDmaintenanceUniversal agentic payment router that gives AI agents the ability to pay across multiple payment rails through a single MCP interface, with cross-rail budget enforcement and a unified audit trail.-
- FlicenseNot gradedqualityDmaintenanceEnables AI agents to create intent contracts, check boundaries, record completions, and export receipts for structured agent workflows-

attestify-mcpofficial
AlicenseAqualityBmaintenanceMCP server exposing Attestify OS agents as callable tools, enabling governed AI agent runs for financial, compliance, and regulated workflows with immutable receipts and on-chain settlement.154 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.