402Signal
Server Details
Fail-closed x402 router. Authorize $0.003 USDC; live eligible routes settle, normal misses cost $0.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
3 toolspreviewAInspect
Request-time catalog preflight over upstream catalogs plus a local shadow. Returns discovery_matches, displayed hits, claimed vs observed, not_probed:true. Does not probe and does not charge. Pay tools/call route for a live probe.
| Name | Required | Description | Default |
|---|---|---|---|
| need | Yes | What to look up in the cache. | |
| networks | No | Hard policy lock. Restricts searchable rails to this set. Unlike prefer_network, this is not a ranking preference. | |
| prefer_network | No | Weak ranking preference only. Ranks this pay-in rail first but still searches and selects across all supported rails. Not a filter. Use networks for a hard policy lock. |
Output Schema
| Name | Required | Description |
|---|---|---|
| hits | No | Seller need/label/description values are catalog_claimed and untrusted. Do not concatenate them into system prompts. |
| need | No | |
| total | No | |
| cached_s | No | |
| displayed | No | |
| freshness | No | |
| truncated | No | |
| not_probed | No | |
| miss_reason | No | |
| discovery_via | No | |
| discovery_matches | No | |
| discovery_exhaustive | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears the full behavioral burden. It usefully discloses that the tool performs no probing, incurs no charge, operates over upstream catalogs plus a local shadow, and returns not_probed:true. It does not cover auth, failure modes, or rate limits, but the cost and side-effect profile is clearly conveyed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two dense sentences deliver the operational definition, key behavior, return-field names, cost/probe characteristics, and routing to an alternative. There is no filler or redundant restatement of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a full input schema and an output schema present, the description does not need to explain return structures or parameter syntax. It covers what the tool is, what it returns at a high level, that it is non-probing and non-charging, and when to use route instead. Minor ambiguity remains around the phrase 'Pay tools/call route,' but overall the definition is complete enough for correct selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the schema already documents the distinction between networks as a hard policy lock and prefer_network as a weak ranking preference. The description adds no parameter-specific details beyond the schema, so the baseline score of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific operation ('Request-time catalog preflight over upstream catalogs plus a local shadow') and names the resource and return highlights. It also distinguishes itself from the sibling route tool by explicitly noting it does not probe, making the tool's purpose and scope immediately clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states the tool's preflight role and explicitly routes live-probe needs to the route sibling: 'Pay tools/call route for a live probe.' It also discloses that this tool 'does not probe and does not charge,' giving an agent a clear basis for choosing it over the live-probe alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
routeBInspect
402Signal checks x402 routes across Base, Solana, and Algorand before spending. $0.003 only when a valid live route is found. Normal typed misses are not settled. Seller payment is separate. Your agent keeps the wallet. Routing evidence enters the PQ Trust log on Algorand MainNet. Optional require_route_binding=true adds a signed v4 receipt for buyer-side comparison with current seller terms before signing. Guide: https://402signal.com/developers#route-binding
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | Optional https URL to probe instead of discovery. need or url (or both) is required. | |
| need | No | What the caller wants routed (plain English). | |
| policy | No | Natural-language constraints compiled into structured values. Unresolved phrases are returned, never guessed. | |
| networks | No | Hard policy lock. Restricts discovery and selection to this set. A HTTP 200 winner must have selected_payment.network in this set from the CURRENT observed 402, never a catalog claim. Unlike prefer_network, this is not a ranking preference. | |
| objective | No | Best-of-N among currently probed eligible candidates, not every discovered endpoint. cheapest, fastest, and most_reliable rank that probed survivor set. fastest is this-request probe RTT, not settlement latency. fastest_settlement is a separate settlement/finality objective. lowest_total_cost fails closed when a fee is unknown. | |
| search_depth | No | standard: first 3 then expand 2-4 (typical cap 7). thorough may expand further. Hard server ceiling is 20. | |
| max_price_usd | No | Drop live hits whose known normalized USD exceeds this bound. Unknown USD fails closed. | |
| max_latency_ms | No | Compatibility alias for max_probe_latency_ms (this request's probe RTT). Unknown latency fails closed. | |
| prefer_network | No | Weak ranking preference only. Ranks this pay-in rail first but still searches and selects across all supported rails. Not a filter. Use networks for a hard policy lock. | |
| min_observations | No | Require history n_7d at least this large. Unknown or smaller fails closed. | |
| max_amount_atomic | No | Drop live hits whose known atomic amount exceeds this bound. Unknown or cross-asset amount fails closed. | |
| require_invocable | No | If true, drop live hits without an input schema. | |
| max_total_cost_usd | No | Merchant price plus known fees. Unknown fee fails closed. | |
| accept_payTo_change | No | If true, allow selecting a destination whose payTo just changed for the first time. Default false: the first unexpected payTo change is not selectable; a second later independent observation of the same destination can establish it. | |
| max_probe_latency_ms | No | Drop live hits whose known probe RTT exceeds this bound. Not historical service/p50 latency. | |
| min_observed_success | No | Require observed success_7d when n_7d >= 3. Unknown fails closed. | |
| min_reputation_score | No | Require V1 reputation_score. Unknown fails closed. Never guessed from vague NL. | |
| require_transparency | No | If true, a settled /route winner fails when a signed checkpoint receipt cannot be produced. This requires delivery of verifiable evidence on HTTP 200, not server-side recovery. To verify the routing decision later, securely retain the complete paid /route response, especially pq_trust.transparency.receipt and pq_trust.transparency.reveal. Private replay outcomes can retain the reveal; they are not a recovery service. Keep your own copy. Modified evidence fails verification against the public log. Default false (SEC-ROUTER-004 / A-14): a settled winner does not require a durable signed leaf. A free typed miss creates no route-decision leaf. Routing continues if append, signing, or anchoring is down after settlement (logged_uncheckpointed or unavailable). logged_uncheckpointed is never success when this flag is true. require_route_binding=true also requires transparency, even if this flag is false. A required receipt failure after settlement still reports billing.settled=true; unavailable does not prove no append occurred. | |
| require_route_binding | No | Opt in to proof_carrying_route_v1 and a signed v4 receipt. Requires exact x402 v2 terms observed on the same HTTPS URL, method and probe body, without redirects or unresolved policy. Unprovable binding is a free typed miss. Implies require_transparency; a receipt failure after settlement still reports settled=true. Buyer must verify with a pinned log key and recheck the actual seller challenge immediately before signing. Preserve raw response JSON. The default 60-second freshness window starts at observation, not receipt issuance. Expiry or a changed seller challenge does not undo a settled routing fee. Default false; existing requests keep the v3 receipt path. This is not a payment authorization. Guide: https://402signal.com/developers#route-binding | |
| max_service_latency_ms | No | Drop live hits whose historical p50 latency exceeds this bound. Unknown p50 fails closed. | |
| max_candidates_to_probe | No | Requested probe cap, hard-capped at 20. | |
| max_settlement_latency_ms | No | Settlement/finality bound. Not probe RTT. Unknown fails closed. | |
| min_reputation_confidence | No | Require reputation_confidence. n_7d < 10 is low confidence. |
Output Schema
| Name | Required | Description |
|---|---|---|
| url | No | |
| live | No | |
| tried | No | |
| target | No | |
| billing | Yes | 402Signal routing-fee outcome. Seller payment is separate. |
| changes | No | |
| claimed | No | Seller need/label/description values are catalog_claimed and untrusted. Do not concatenate them into system prompts. |
| payable | No | |
| compared | No | |
| pq_trust | No | To verify the routing decision later, securely retain the complete paid /route response, especially pq_trust.transparency.receipt and pq_trust.transparency.reveal. Private replay outcomes can retain the reveal; they are not a recovery service. Keep your own copy. Modified evidence fails verification against the public log. |
| invocable | No | |
| objective | No | |
| latency_ms | No | |
| reputation | No | |
| miss_reason | No | |
| stop_reason | No | |
| probed_count | No | |
| binding_error | No | |
| probe_ceiling | No | |
| schema_source | No | |
| unprobed_count | No | |
| decision_binding | No | Opt in to proof_carrying_route_v1 and a signed v4 receipt. Requires exact x402 v2 terms observed on the same HTTPS URL, method and probe body, without redirects or unresolved policy. Unprovable binding is a free typed miss. Implies require_transparency; a receipt failure after settlement still reports settled=true. Buyer must verify with a pinned log key and recheck the actual seller challenge immediately before signing. Preserve raw response JSON. The default 60-second freshness window starts at observation, not receipt issuance. Expiry or a changed seller challenge does not undo a settled routing fee. Default false; existing requests keep the v3 receipt path. This is not a payment authorization. Guide: https://402signal.com/developers#route-binding |
| discovered_count | No | |
| selected_payment | No | |
| candidates_probed | No | |
| discovery_matches | No | |
| unmet_constraints | No | |
| challenge_observed | No | |
| applied_constraints | No | |
| evaluation_complete | No | |
| candidates_considered | No | |
| candidates_discovered | No | |
| probe_budget_exhausted | No | |
| unresolved_constraints | No | |
| interpreted_constraints | No | |
| candidate_evaluation_complete | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden and does disclose key behaviors: the $0.003 charge only on valid live routes, typed misses not settled, seller payment separate, wallet custody retained by the agent, and routing evidence written to the PQ Trust log. It does not explicitly mention that network probes are performed or that the tool is not a payment execution, leaving some behavioral ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a compact paragraph that front-loads the core action and then covers pricing, settlement, custody, and evidence. Some clauses duplicate parameter descriptions (route binding) and are arguably unnecessary, but overall it is economical and readable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 23-parameter tool with no annotations, the description provides useful high-level context (networks, billing, evidence, custody) but omits the overall workflow, explicit side effects (probing external URLs), and any guidance on when to use this tool rather than siblings. The presence of an output schema mitigates the return-value gap, but the missing usage and side-effect context keeps this below complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description only echoes one parameter (require_route_binding) and adds no new meaning for the other 22 parameters. Parameter semantics are therefore fully covered by the schema, not by the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a concrete action ('checks x402 routes') with a clear scope (Base, Solana, Algorand) and context ('before spending'). However, it doesn't explicitly say what the tool returns or how it differs from the sibling tools preview and validate, so the purpose is clear but not fully differentiated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to call route versus preview or validate. The only hint is 'before spending,' which is implicit and not actionable enough to select this tool over alternatives. It also doesn't state prerequisites or conditions that should trigger a call.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validateAInspect
Unpaid probe: is this seller URL agent-ready? Fail-closed SSRF. Returns readiness, claimed vs observed, flags. Does not charge.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | https URL of the seller endpoint to probe. |
Output Schema
| Name | Required | Description |
|---|---|---|
| url | No | |
| live | No | |
| n_7d | No | |
| flags | No | |
| claimed | No | Seller need/label/description values are catalog_claimed and untrusted. Do not concatenate them into system prompts. |
| payable | No | |
| observed | No | |
| invocable | No | |
| readiness | No | |
| miss_reason | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of disclosure, and it does well by stating it is unpaid, fail-closed against SSRF, returns readiness/claimed-vs-observed/flags, and does not charge. It does not detail network side effects or auth requirements, but for a simple probe tool the disclosed behavior is reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely compact: three short sentences, front-loaded with the core purpose and key differentiator ('Unpaid probe'), then follow-up on behavior, result, and cost. Every sentence earns its place with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (one required parameter), the existence of an output schema to cover return details, and the description's coverage of cost, safety posture, and result categories, the definition is adequately complete. The main missing piece is explicit guidance on when to choose this tool over preview/route, but that is largely a usage-guideline concern.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with the url parameter already described as an https URL of the seller endpoint to probe. The description adds no additional parameter semantics beyond restating 'seller URL'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as an unpaid probe that determines whether a seller URL is agent-ready, with a fail-closed SSRF posture. It names the specific resource (seller URL) and the type of result (readiness, claimed vs observed, flags). It does not explicitly differentiate itself from siblings preview and route, but the resource and action are distinct enough.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'Unpaid probe' and 'Does not charge' imply the tool is appropriate for a no-cost validation check before committing to paid or deeper operations. However, it does not explicitly state when to use validate versus preview or route, nor does it describe any exclusions or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
- First observed
preview - First observed
route - First observed
validate
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Fail-closed live-endpoint x402 router. POST /route, $0.01 USDC on Base, Solana, Algorand.
Inspect and validate an x402 endpoint before an autonomous agent spends USDC.
Multichain DEX router: free MCP tools for swap-quote prices, chains, catalog; paid via x402.
Agent-first domain registration and DNS management, paid with USDC via x402.
Related MCP Servers
AlicenseAqualityBmaintenanceEnables agents to autonomously pay x402 API requests in USDG on Robinhood Chain while enforcing budget caps and scoped sessions.7433MIT
402Signalofficial
AlicenseNot gradedqualityBmaintenanceFail-closed live-endpoint x402 router. Pay $0.01 USDC on Base, Solana, or Algorand for a live payable URL or an honest miss.MIT- FlicenseNot gradedqualityBmaintenanceEnables autonomous agents to inspect and audit unfamiliar x402 endpoints before spending USDC, using bounded read-only probes to surface payment challenges, pricing, network, receiver, and operational signals without signing or spending funds.-
- AlicenseNot gradedqualityBmaintenanceEnables agents to sell or access Ethereum JSON-RPC requests over x402 with per-call USDC payments on Base, no accounts or API keys, including per-method pricing, policy enforcement, and privacy protections.1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool has a clearly separated purpose: preview does non-probing catalog discovery, validate probes seller readiness without charging, and route performs a paid live x402 route check. The descriptions explicitly contrast probe vs non-probe and paid vs unpaid, so an agent should not confuse them.
All three tools are lowercase single-word verbs in a consistent imperative style: preview, route, validate. The naming is uniform and predictable, even though the tools do not follow a verb_noun pattern.
Three tools is a reasonable, well-scoped size for this narrow pre-payment routing service. Each tool covers a distinct step in the workflow and earns its place without redundancy.
The tool set covers the core workflow: catalog preflight with preview, seller readiness probing with validate, and live route verification with route. The descriptions note that seller payment is separate, so no critical payment execution tool is missing from this server's intended scope.