NOMOS Cross-Border Broker
Server Details
Cross-border preflight, x402 quote and evidence receipts for A2A/MCP agent workflows.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
5 toolsnomos_asia_market_scanDaily Market Scan (Local Artifact)ARead-onlyIdempotentInspect
Read-only view of the most recent local daily scan artifact covering 6 regions: Japan, Singapore/China, India, Korea, Brazil/LatAm, Africa. Returns MCP-ready companies, funded entities, compliance signals. The artifact is written once per day by a separate scanner job; this tool performs no live scanning and no network requests.
| Name | Required | Description | Default |
|---|---|---|---|
| tag | No | Filter by signal type (optional) | |
| limit | No | Max results (default 10, max 30) | |
| region | No | Filter by region (optional) |
Output Schema
| Name | Required | Description |
|---|---|---|
| items | Yes | |
| stale | No | |
| total | Yes | |
| filters | No | |
| timestamp | Yes | |
| cache_age_hours | No | |
| cache_timestamp | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly, idempotent, non-destructive, so the description doesn't repeat those. It adds the context that no network requests are made and that the artifact updates once daily. Brief mention of return content is included, but still light on edge cases like freshness or failure behavior, so it earns a 3 rather than higher.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, dense with accurate info. It front-loads the core value and then clarifies constraints. Slightly more context than strictly needed, but still efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only tool with three optional filtering params and an output schema, the description covers the essentials: what, when, and what it never does. Enough for an agent to invoke it effectively without over-explaining.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and all three parameters have clear enums/descriptions and defaults. The description adds the crucial 'no live scanning' nuance, which complements, rather than repeats, the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description has a clear verb ('Returns...'), specifies the resource ('read-only view of the most recent local daily scan artifact'), and zooms in on the six regions covered. It also sets expectations by noting it's a local artifact, not live scanning.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives the key context: the artifact is written once a day by a separate job, so users know this is a bounded, cached view. It doesn't outline explicit when-not-to-use cases, but the daily-update note helps prevent misuse.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
nomos_crossborder_preflightCross-Border Regulatory PreflightARead-onlyIdempotentInspect
Cross-border regulatory preflight for agent data flows. Checks jurisdiction pair (EU, JP, IN, KR, SG, CN, BR, NG, ZA, MX) and data category against a local policy matrix. Returns verdict: ALLOW / ALLOW_PUBLIC_SIGNAL_ONLY / REVIEW / BLOCK (or ERROR for unsupported input), plus blocked_fields, sccs_required, risk_level, matrix_coverage and evidence_hash. Local lookup only — no network access, no legal advice.
| Name | Required | Description | Default |
|---|---|---|---|
| data_category | Yes | Type of data being transferred | |
| source_regime | Yes | Source jurisdiction code: EU, JP, IN, KR, SG, CN, BR, NG, ZA, MX | |
| target_regime | Yes | Target jurisdiction code |
Output Schema
| Name | Required | Description |
|---|---|---|
| note | No | |
| policy | No | |
| verdict | Yes | |
| timestamp | Yes | |
| risk_level | No | |
| data_category | No | |
| evidence_hash | Yes | |
| sccs_required | No | |
| source_regime | No | |
| target_regime | No | |
| blocked_fields | No | |
| canonical_pair | No | |
| adequacy_status | No | |
| matrix_coverage | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds behavioral constraints beyond the annotations (readOnlyHint=true, idempotentHint=true, destructiveHint=false). It explicitly states 'Local lookup only — no network access, no legal advice,' which is critical operational context. It also discloses the full set of return fields and the ERROR case for unsupported input, providing transparent expectations without contradicting any annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core purpose, followed by the output summary and constraints. Every sentence provides essential information without redundancy. The structure is efficient and scannable, ideal for quick decision by an agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (3 required params, all enums, existing output schema), the description provides complete context: what it does, what it returns (including ERROR case), and its constraints (local lookup, no legal advice). The presence of the output schema means the description doesn't need to enumerate every return field, but it still highlights the key outputs. This is a complete and self-sufficient description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with detailed parameter descriptions and enums for each of the three parameters. The description reinforces the 'jurisdiction pair' and 'data category' but does not add new semantic depth beyond what the schema already provides. This matches the baseline of 3 for well-covered schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a clear specific verb+resource: 'Cross-border regulatory preflight for agent data flows.' It explicitly states the checks (jurisdiction pair, data category) against a policy matrix and the output verdicts. This clearly distinguishes it from the sibling tools, which handle market scans, tool discovery, receipt verification, and X402 quoting — all different domains.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly indicates when this tool is used: for regulatory preflight of agent data flows between jurisdictions. It specifies the exact inputs (jurisdiction pair, data category) and the output (verdict, blocked_fields, etc.). While it doesn't explicitly mention when NOT to use it or name alternative tools, the distinct purpose makes the usage context evident. It could have added a sentence like 'Use this before any cross-border transfer to assess compliance' but the context is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
nomos_mcp_tool_discoveryOracleNet Tool Catalog (Static)ARead-onlyIdempotentInspect
Search a small static curated catalog of OracleNet MCP tools by keyword and category. Returns tool names, endpoints, protocol support. Local data only — does not probe, crawl or contact any network endpoint.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Search keyword (e.g. 'compliance', 'x402', 'sanctions') | |
| category | No | Tool category filter |
Output Schema
| Name | Required | Description |
|---|---|---|
| query | No | |
| tools | Yes | |
| category | No | |
| timestamp | Yes | |
| catalog_size | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive behavior. The description adds valuable beyond-annotation context: it is local-only and will not contact any network endpoint. This meaningfully prevents misuse as a network scanner and clarifies the static nature of the catalog.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the action and search dimensions. The second sentence delivers output details and a safety-relevant constraint. No filler or redundant restatement of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple catalog-search tool with rich annotations and an output schema, this description covers purpose, search dimensions, result contents, and the key local-only/no-network behavior. There are no significant contextual gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both 'query' and 'category' already described in the schema. The description only restates the filtering role of keyword and category without adding new semantic detail, syntax guidance, or edge-case behavior, so it stays at the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Search') and a specific resource ('small static curated catalog of OracleNet MCP tools'), and clearly states what it returns: tool names, endpoints, and protocol support. This distinguishes it from the sibling domain-specific tools, which are actual operations rather than catalog discovery.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context by stating this is a local, static catalog search and explicitly excludes probing, crawling, or network contact. It implies when to use this vs. operational sibling tools, though it does not explicitly name alternatives or state 'use X instead when you need to perform an actual operation.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
nomos_signed_receipt_verifyReceipt Record Lookup (Audit Log)ARead-onlyIdempotentInspect
Look up a NOMOS operation record by its exact SHA-256 receipt hash in the local handshake audit log. Requires a full 64-hex hash, optionally 'sha256:'-prefixed; matching is exact against the stored receipt_hash/entry_hash fields. This is a record lookup, NOT cryptographic signature verification — the response always reports cryptographically_verified: false.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_hash | Yes | Full SHA-256 receipt hash from a previous NOMOS operation (64 hex chars, optional 'sha256:' prefix) |
Output Schema
| Name | Required | Description |
|---|---|---|
| message | No | |
| receipt | No | |
| verified | No | |
| timestamp | Yes | |
| record_found | Yes | |
| verification_method | No | |
| cryptographically_verified | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description adds behavioral nuance beyond these: exact matching against stored fields, the optional 'sha256:' prefix, and the critical caveat that the response always reports cryptographically_verified: false. This prevents a major misunderstanding, though it doesn't cover all possible edge cases (e.g., not found behavior).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a tight three sentences: first states the action and target, second provides format and matching details, and third clarifies a likely misconception. No wasted words, all information is pertinent, and it is front-loaded with the key verb and object.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter, read-only lookup tool with robust annotations and an output schema, the description covers all necessary aspects: purpose, input format, matching behavior, and a warning about common confusion. There are no missing behaviors that an agent would need to know for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers the single parameter fully (100% coverage) with a description including the 64-hex requirement and optional prefix. The description reinforces the format and clarifies matching semantics ('matching is exact against the stored receipt_hash/entry_hash fields'). It adds a slight enhancement over the schema by linking the parameter to both hash fields, but the core semantics were already well-documented in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb+resource construction: 'Look up a NOMOS operation record by its exact SHA-256 receipt hash in the local handshake audit log.' It clearly differentiates from cryptographic verification, which is a likely point of confusion, and leaves no ambiguity about its scope (exact-match lookup).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use the tool (exact receipt hash lookup) and firmly excludes misuse ('NOT cryptographic signature verification'). While it doesn't name an alternative tool, the negative guidance plus the format requirement ('Requires a full 64-hex hash') gives clear usage context. A minor gap is the absence of a mention of an alternative tool for verification.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
nomos_x402_quotex402 Price Quote (Stateless, Unsigned)ARead-onlyIdempotentInspect
Get a stateless, unsigned, informational x402 price quote for NOMOS services. Tier 1: $0.02 simple verdict | Tier 2: $0.05 verdict + evidence | Tier 3: $0.10 full packet. Returns payTo address, network (Base mainnet), amount in USDC atomic units, and a deterministic quote digest (not a signature). No payment is initiated and nothing is signed, persisted or reserved; expiry is informational only.
| Name | Required | Description | Default |
|---|---|---|---|
| tier | No | Pricing tier: 1 (simple), 2 (with evidence), 3 (full packet) | |
| service | Yes | Service to quote |
Output Schema
| Name | Required | Description |
|---|---|---|
| note | No | |
| tier | No | |
| payTo | Yes | |
| signed | No | |
| network | Yes | |
| service | No | |
| currency | No | |
| issued_at | No | |
| timestamp | No | |
| expires_at | No | |
| quote_hash | Yes | |
| amount_usdc | Yes | |
| ttl_seconds | No | |
| amount_atomic | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds behavioral specifics beyond the annotations: it states no payment, signing, persistence, or reservation, and clarifies that the digest is not a signature. It also notes the expiry is informational only. This aligns with annotations (readOnly, idempotent) and provides valuable context, especially given the openWorldHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficient, with each sentence carrying information: the purpose, tier pricing, and behavior. It is slightly longer than the ideal two-sentence version but remains well-structured and front-loaded with the core purpose. No fluff or redundant phrasing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has only 2 parameters, an output schema (not shown but present), and comprehensive annotations. The description covers behavior (stateless, unsigned), return fields (payTo, network, amount, digest), and constraints (expiry informational). It fully addresses the tool's complexity and adds value where needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for both parameters, but the description adds concrete cost details for the tier enum ($0.02, $0.05, $0.10), which the schema only describes qualitatively. This adds meaningful meaning beyond the schema, but the service parameter is not further elaborated. Baseline 3 is elevated due to the price addition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Get a stateless, unsigned, informational x402 price quote for NOMOS services.' It specifies the verb (Get), resource (price quote), and scope (stateless, unsigned, informational). It also lists the tiers and return elements, making it distinct from sibling tools that perform actual operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description conveys when to use the tool (before payment, for informational quotes) and explicitly states what it does NOT do ('No payment is initiated and nothing is signed, persisted or reserved'). However, it does not explicitly contrast with sibling tools or mention when to avoid it, though the context makes it clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user or an account that owns the GitHub organization, then choose Claim with GitHub.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Workflow diagnostics, capability routing, and x402 settlement for MCP-compatible agents.
Self-facilitated x402/MCP payments for hosted endpoints, rail proofs, receipts, and agents.
Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools.
Remote MCP for A2A failure replay MCP, structured receipts, audit logs, and reviewer-ready evidence.
Related MCP Servers
- FlicenseNot gradedqualityAmaintenanceRead-only MCP server that performs deterministic local preflights of agent-payment boundary documents and x402 v2 PaymentRequired JSON, and prepares unsubmitted public quote-request drafts without network calls or fund movement.

Amalgixofficial
FlicenseNot gradedqualityDmaintenanceCross-model evidence pipeline for financial filings and contracts, providing source-grounded claims with verification via MCP and REST, with x402 pay-per-call.- AlicenseNot gradedqualityDmaintenanceFoundational MCP/A2A-native core platform for secure credential injection, native x402 micropayments, and Agent-to-Agent routing.2MIT
- AlicenseNot gradedqualityCmaintenanceDual-rail MCP server for initiating and verifying MPP and x402 payments, plus MPP-attested identity claims, enabling agent-native financial settlement.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool serves a clear, non-overlapping function: market data lookup, regulatory preflight, MCP tool catalog search, receipt hash lookup, and pricing quote. No two tools could be easily confused, and the descriptions reinforce distinct boundaries.
All tools share the 'nomos_' prefix and use lowercase with underscores, creating a recognizable pattern. However, the second part varies between noun phrases (mcp_tool_discovery, signed_receipt_verify) and verb-like words (asia_market_scan, crossborder_preflight), so it isn't a uniform verb_noun convention.
With 5 tools, the set is concise and well-scoped for a cross-border broker's core needs: market intelligence, compliance checks, tool discovery, auditing, and pricing. Each tool earns its place without redundancy or bloat.
The domain is covered adequately for a broker: scanning markets, preflighting regulations, discovering MCP tools, verifying receipts, and quoting prices. Minor gaps exist (e.g., no tool to initiate an actual transaction or list all operations), but these are not essential for the server's stated informational and audit purposes.