Skip to main content
Glama

SALT19 x402 Authorization Handoff

x402-authorization-handoff
Read-only

Free handoff tool that generates a live PAYMENT-REQUIRED challenge for a concrete paid request, returns exact REST and MCP retry templates, and creates a correlation ID. It never signs or moves buyer funds.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
productYes
argumentsYesThe exact paid tool arguments that will be retried after authorization. Do not include private keys, seed phrases, or payment signatures.
session_idNo
operation_idNo

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds meaningful behavioral context beyond the annotations by stating it 'never signs or moves buyer funds' and that it creates a live challenge plus correlation ID. This reinforces the readOnlyHint and idempotentHint=false without contradicting the structured annotations, though it does not discuss challenge expiration or other lifecycle details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the core purpose and outputs, and the second sentence adds a valuable safety boundary. The word 'Free' adds little functional signal and could confuse agents into thinking cost is relevant, but overall the structure is tight and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With four parameters, no output schema, and several closely related sibling tools, the description covers core behavior but not enough to fully orient an agent: parameter roles are unexplained and usage boundaries versus preflight/reporting tools are absent. It provides a useful high-level picture but not complete invocation guidance.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 25%, and the tool description does not explain product, session_id, operation_id, or how arguments should be structured beyond what little the schema provides. The description mentions a 'concrete paid request' but does not connect that to the parameters, so an agent would have to guess key input semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb-resource-purpose: it generates a live PAYMENT-REQUIRED challenge, returns REST and MCP retry templates, and creates a correlation ID. It is clearly distinguishable from related siblings like x402-payment-preflight and report-x402-authorization-progress, which focus on preflight/checking rather than handoff challenge generation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'for a concrete paid request' implies when the tool should be used, but the description never explicitly contrasts it with alternatives such as x402-payment-preflight or report-x402-authorization-progress. There is no when-not-to-use or 'use X instead' guidance, leaving the agent to infer selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

B3.4/5.0
Disambiguation2/5

Multiple tools occupy the same decision space: agent-decision-preflight, dependency-go-no-go, repo-adoption-go-no-go, github-repo-preflight, and npm-package-intel all target install/adopt GO/WARN/BLOCK decisions with overlapping scope. Discovery tools like find-salt19-tool and salt19-pricing also blur together. Descriptions are detailed, but the boundaries between these tiers are not obvious enough for reliable agent selection.

Naming Consistency3/5

Names consistently use lowercase hyphenated tokens and domain prefixes, which gives some predictability. However, styles are mixed: some tools are verb-led (find-, report-, verify-), while others are noun-headed (github-repo-facts, salt19-pricing, nws-active-alerts), and product-tier suffixes like -preflight, -facts, -intel, and -go-no-go are applied inconsistently. The naming is readable but does not follow a single clear pattern.

Tool Count2/5

33 tools is well above the range where a toolset remains easy to navigate, even for a broadly scoped utility grid. The count includes multiple free routing/telemetry tools plus many paid data and decision tools, making the surface feel heavy. A more consolidated tiered design would reduce selection burden.

Completeness4/5

The server covers a wide range of claimed capabilities: live state/facts for Base, GitHub, npm, SEC, NWS, USGS, and URL; bounded decisions for dependencies, repos, plans, code changes, and commerce; plus x402 payment support and receipt verification. Minor gaps exist around actually executing payments or settlements, but that seems intentionally out of scope for a non-custodial utility grid.

Resources