Skip to main content
Glama

SALT19 x402 Authorization Handoff

x402-authorization-handoff
Read-only

Free handoff tool that generates a live PAYMENT-REQUIRED challenge for a concrete paid request, returns exact REST and MCP retry templates, and creates a correlation ID. It never signs or moves buyer funds.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
productYes
argumentsYesThe exact paid tool arguments that will be retried after authorization. Do not include private keys, seed phrases, or payment signatures.
session_idNo
operation_idNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds meaningful behavioral context beyond the annotations by stating it 'never signs or moves buyer funds' and that it creates a live challenge plus correlation ID. This reinforces the readOnlyHint and idempotentHint=false without contradicting the structured annotations, though it does not discuss challenge expiration or other lifecycle details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the core purpose and outputs, and the second sentence adds a valuable safety boundary. The word 'Free' adds little functional signal and could confuse agents into thinking cost is relevant, but overall the structure is tight and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With four parameters, no output schema, and several closely related sibling tools, the description covers core behavior but not enough to fully orient an agent: parameter roles are unexplained and usage boundaries versus preflight/reporting tools are absent. It provides a useful high-level picture but not complete invocation guidance.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 25%, and the tool description does not explain product, session_id, operation_id, or how arguments should be structured beyond what little the schema provides. The description mentions a 'concrete paid request' but does not connect that to the parameters, so an agent would have to guess key input semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb-resource-purpose: it generates a live PAYMENT-REQUIRED challenge, returns REST and MCP retry templates, and creates a correlation ID. It is clearly distinguishable from related siblings like x402-payment-preflight and report-x402-authorization-progress, which focus on preflight/checking rather than handoff challenge generation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'for a concrete paid request' implies when the tool should be used, but the description never explicitly contrasts it with alternatives such as x402-payment-preflight or report-x402-authorization-progress. There is no when-not-to-use or 'use X instead' guidance, leaving the agent to infer selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources