Skip to main content
Glama

PG1 Sovereign Threat Intelligence

check_x402_endpoint

PG1 Sovereign Threat Intelligence: checks an x402-paid URL before you pay it. Fetches the URL once (https only; private addresses and redirects refused) and reads its x402 payment request: each option's network must be a known settlement network and its asset the known USDC contract there; the receiving wallet (payTo) is screened against the OFAC SDN list and its on-chain age read; TLS and the domain's age are checked. Always free (60/hour per caller). Returns status flagged / no_flags / unknown with reasons (X402_UNKNOWN_NETWORK, X402_UNKNOWN_ASSET, WALLET_SANCTIONED, WALLET_NEW_7D, ENDPOINT_TLS_FAILED, DOMAIN_NEWLY_REGISTERED_30D, X402_NO_PAYMENT_REQUEST). no_flags means no flags found, never "safe".

Input Schema

NameRequiredDescriptionDefault
urlYesThe https URL of the paid resource.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the entire burden and does so thoroughly: it discloses the fetch policy (single fetch, https only, private addresses and redirects refused), exactly what is validated, the free rate limit (60/hour per caller), the three return statuses, all seven reason codes, and the critical caveat that no_flags means 'no flags found, never safe.' This is unusually complete behavioral disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is front-loaded in the first clause, and every subsequent sentence adds substantive information (checks performed, rate limit, return values, caveat). It is dense but not padded; a slightly more scannable structure for the reason-code list would make it a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex, composite security check with no output schema and no annotations, the description is complete: it explains the mechanics, constraints, cost, rate limit, exact return statuses and reason codes, and the interpretation caveat. An agent needs nothing else to call and interpret it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single url parameter is documented there, so a baseline of 3 applies. The description adds meaningful input constraints not in the schema — https only and private addresses/redirects refused — which directly govern which URLs are acceptable, pushing it above the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('checks an x402-paid URL before you pay it') and immediately distinguishes itself from every sibling by naming the composite checks it performs (x402 payment request parsing, settlement network/asset validation, payTo OFAC screening, wallet age, TLS, domain age). An agent can separate it from check_wallet_sanctions, check_domain_age, or preflight_check without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'before you pay it' gives a clear triggering context for the tool, so an agent knows when to reach for it. It does not, however, name alternatives or state when-not to use it (e.g., use check_wallet_sanctions alone when only the wallet matters), so it falls short of full routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.