Skip to main content
Glama

Authorize an x402 payment before signing

guild_x402_payment_safety

PAID. Call this immediately BEFORE signing an x402 payment envelope.

Returns one short-lived, Guild-signed AGPD-1 allow/block credential bound to the exact target payment: scheme, CAIP-2 network, asset contract, atomic amount, payee and resource URL, plus optional capability and policy thresholds. Verify it offline with POST /wallet-binding/decision/verify.

This is the native MCP transport for the existing HTTP POST /wallet-binding/decision product. An unpaid call returns a complete x402 v2 challenge for the exact request digest. Retry with the official _meta['x402/payment'] carrier; adapters that cannot set request metadata may pass the identical signed PaymentPayload as x402_payment. Conflicting carriers fail closed before facilitator verification or settlement.

The decision is issued before metering, so malformed inputs or signing failures are never charged. api_key uses sandbox credits and is never external revenue. The free identity-only alternative is GET /wallet-binding/resolve.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
policyNo
api_keyNo
paymentYesThe exact target payment being authorized before wallet signing.
capabilityNo
ttl_secondsNo
x402_paymentNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description goes far beyond the annotations, revealing key behaviors: the credential is short-lived and bound to exact payment details, verification is offline via a specific endpoint, unpaid calls return a challenge, conflicting carriers fail closed, requests are never charged if malformed, and api_key uses sandbox credits. This is rich, non-obvious context that helps an agent understand side effects and failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Despite being long, every sentence delivers actionable information: timing, return value, verification endpoint, transport mapping, retry protocol, failure semantics, billing behavior, and alternative. The structure is front-loaded with the most critical call-to-action, followed by supporting details. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex tool with 6 parameters, nested objects, and an output schema, the description fully covers the operational workflow, security model, and alternatives. It explains what the tool returns, how to verify, how to retry, and what happens on failure. The output schema exists, so the description needn't document return values. This is a complete and self-sufficient description.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is low (17%), so the description compensates. It explains the core parameter 'payment' is bound to scheme, CAIP-2 network, asset, amount, payee, and resource URL. It clarifies 'x402_payment' as an alternative carrier for adapters, and notes 'api_key' uses sandbox credits. However, 'capability' and 'ttl_seconds' are not elaborated beyond their names, leaving minor gaps.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Call this immediately BEFORE signing an x402 payment envelope.' It specifies that it returns an authorization credential, distinguishing it from sibling envelope tools like guild_envelope_issue or guild_envelope_verify. The verb 'Authorize' in the title and the detailed behavior make it unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use: 'Call this immediately BEFORE signing.' It names an alternative: 'The free identity-only alternative is GET /wallet-binding/resolve.' It also identifies this as the native MCP transport for an existing HTTP product, giving clear context for integration. No competing MCP sibling is mentioned, but the timing and alternative are explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.1/5.0
Disambiguation4/5

Tools are grouped by prefix (ag_calc_, ag_data_, ag_json_, ag_table_, ag_text_), which helps disambiguate. However, some clusters like guild_search, guild_check, guild_risk_score, and guild_best_agent have overlapping goals (all find or evaluate agents), and guild_prove and guild_prove_verify are tightly coupled but distinct. Overall, most tools have clear purposes.

Naming Consistency4/5

The tools follow a consistent verb_noun or domain_verb pattern (e.g., ag_calc_stats, ag_data_dedupe, guild_search). The mix of ag_ and guild_ prefixes is slightly inconsistent, but within each group naming is uniform. No chaotic mixing of cases (all snake_case). Minor deduction for the split prefix.

Tool Count3/5

39 tools is on the high side for a single MCP server. While the tools are genuinely useful and cover distinct deterministic utilities plus guild trust operations, the count feels heavy. A more focused split (e.g., separate server for deterministic utilities vs. guild trust) could improve coherence.

Completeness5/5

The server covers a broad set of deterministic utilities (statistics, unit conversion, JSON, CSV, regex, date normalization) and a full trust/reputation workflow (register, search, check, risk score, escrow, attest, record, passport, verify, preflight). There are no obvious gaps: for the declared capabilities, the tool surface is comprehensive.