Skip to main content
Glama

Server Details

Authorize and prove autonomous x402/AP2 agent payments with cryptographic receipts.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

B3.4/5.0

Scored across 5 tools

Disambiguation5/5

Each tool targets a distinct step or resource: manifest retrieval, challenge creation, authorization, settlement verification, and token verification. The two verify tools have clearly different scopes (on-chain settlement vs. token signature/expiry), leaving no ambiguity.

Naming Consistency4/5

All names use snake_case with a verb_noun pattern, making the set predictable. Minor inconsistency appears in protocol-specific suffixes (x402_ap2, ap2_challenge) within otherwise standard names.

Tool Count5/5

Five tools is well-scoped for a specialized authorization and trust server. Each tool covers a necessary step in the AP2/x402 transaction lifecycle, with no redundant or trivial entries.

Completeness4/5

The surface covers capability discovery, challenge creation, authorization, settlement verification, and token verification. Minor gaps exist around lifecycle management such as revoking or querying past authorizations, but core workflows are supported.

Available Tools

5 tools
authorize_x402_ap2CInspect

Verify AP2 authority and authorize a live x402 purchase. Machine price: $0.001 via x402. A denied authorization is not settled/charged.

ParametersJSON Schema
NameRequiredDescriptionDefault
nonceNo
payerYes
requestYes
categoryYes
merchant_idYes
ap2_authorityYes
payment_requiredYes

TDQS

C2.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It usefully discloses the failure semantics ('A denied authorization is not settled/charged') and the machine price ($0.001 via x402), which are real behavioral facts. However, it says nothing about authorization requirements, idempotency/replay handling for the nonce, or what a successful authorization returns.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences with the core purpose front-loaded and no filler. Every sentence contributes something (purpose, cost, failure semantics). It is arguably under-sized for the schema's complexity, but there is no wasted text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 6 required parameters, a nested authority object, no annotations, and no output schema, three sentences are far too thin. The description gives purpose and one behavioral note but leaves the agent without guidance on the AP2 mandate structure, the request payload, or the expected result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and there are 7 parameters (6 required), including a nested ap2_authority object with a JWKS array. The description explains none of them — not payment_required, merchant_id, payer, category, request, nonce, or the mandate chain/challenge token. For a high-complexity nested schema, this is a severe gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names two specific verbs and resources: 'Verify AP2 authority' and 'authorize a live x402 purchase.' This clearly differentiates it from siblings like verify_settlement and get_trust_manifest, which handle different stages. It stops short of a 5 only because the relationship to create_ap2_challenge (the presumed prerequisite) is left implicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit statement of when to use this tool versus the four siblings, nor any prerequisites (e.g., that an AP2 challenge must be created first). The phrase 'live x402 purchase' implies a production context, but the agent must infer the workflow ordering entirely on its own.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_ap2_challengeCInspect

Create the short-lived audience/nonce challenge required for AP2-native authorization.

ParametersJSON Schema
NameRequiredDescriptionDefault
ttl_secondsNo

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the full behavioral burden. Beyond 'short-lived,' it doesn't state the default TTL, whether the challenge is single-use, whether it requires prior authentication, or what happens on expiry. 'Short-lived' gestures at lifetime but is too vague to act on.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler. It is efficiently sized, though brevity here comes at the cost of the missing behavioral and parameter detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an auth-adjacent tool with no annotations, no output schema, and an undocumented parameter, the definition is far too thin. An agent cannot determine TTL semantics, challenge lifecycle, or the expected next step after creation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is one parameter (ttl_seconds) with 0% schema description coverage and no enum. The description says 'short-lived' but never explains the parameter's unit, bounds (30-300), default, or interaction with the challenge's own lifetime, leaving the only parameter effectively undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Create) and resource (the audience/nonce challenge) and names the context (AP2-native authorization), which distinguishes it from verification-oriented siblings like verify_settlement. The acronym-heavy phrasing assumes familiarity, but the action is clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies usage by calling the challenge 'required for AP2-native authorization,' but never explicitly says when to call this versus authorize_x402_ap2 or verify_trust_token, nor what the caller must do with the result. Context is implied rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_trust_manifestAInspect

Read Agent Transaction Trust capabilities, proof key, supported authority modes, and endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must carry the behavioral burden; 'Read' signals a non-mutating operation and the sentence enumerates the returned contents (capabilities, proof key, authority modes, endpoints), which is genuinely useful. It does not say whether authentication is required, whether the manifest is cached/versioned, or how failures surface.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler; the verb and the payload contents come first and every clause carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description correctly enumerates what the manifest returns, which is the main thing an agent needs. It stops short of stating the calling context (entry point for trust flows) or any auth/prerequisite condition, leaving a small gap for a zero-param discovery tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, which is the baseline-4 case, and the 100% schema coverage leaves nothing for the description to compensate for.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb ('Read') and a specific resource (Agent Transaction Trust capabilities, proof key, authority modes, endpoints), so the agent knows this is a discovery/metadata fetch. It does not, however, distinguish itself from siblings like verify_trust_token or create_ap2_challenge, so a 4 rather than a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to call this versus the other trust/settlement tools, and no mention that it is the natural first step for discovering authority modes or the proof key. The only guidance is implicit in the word 'Read'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_settlementCInspect

Verify the authorized Base USDC settlement on-chain and issue a signed settlement receipt. This tool does not charge an additional Trust fee.

ParametersJSON Schema
NameRequiredDescriptionDefault
payment_responseNo
authorization_tokenYes

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It usefully discloses the chain/asset (Base USDC), that verification is on-chain, that a signed receipt is produced, and that no extra Trust fee is charged. However it omits auth/permission requirements, whether the call mutates state or is idempotent, and failure behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short, front-loaded sentences with no filler; the core action leads and the fee clarification follows. The fee sentence is somewhat tangential but does add practical value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no annotations, no output schema, and 0% parameter coverage, the description is too thin: it does not describe the receipt's contents, error/retry behavior, or how to obtain the required token. An agent lacks enough to call it confidently.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description should compensate but does not. Neither authorization_token nor the optional payment_response is explained — their format, source, or relationship to the verification flow is left entirely to the caller's inference.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Verify) plus resource (authorized Base USDC settlement on-chain) and a secondary effect (issue a signed settlement receipt). It is distinguishable from verify_trust_token and authorize_x402_ap2, though it never explicitly names or contrasts those siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The word 'authorized' implies a prior authorization step, but the description gives no explicit when-to-use condition, no prerequisites (which token, which flow), and no guidance on when to prefer this over verify_trust_token. Usage must be inferred entirely.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_trust_tokenBInspect

Verify the signature and expiry of an Agent Transaction Trust policy, authorization, or settlement receipt.

ParametersJSON Schema
NameRequiredDescriptionDefault
tokenYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it does disclose the verification dimensions (signature and expiry), which is real behavioral content beyond the name. It stops short of stating the outcome of a failed check (error vs. boolean), read-only nature, or any auth/rate constraints, leaving meaningful gaps for a tool with zero annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One front-loaded sentence with the verb first and zero filler; every clause earns its place and nothing is padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description should explain the pass/fail result shape, which it omits entirely. Combined with no annotations and no parameter format details, an agent cannot predict what a successful or failed verification returns.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% for the single required `token` parameter, so the description must compensate. It partially does by enumerating what the token may encode (a trust policy, authorization, or settlement receipt), adding semantic meaning the bare `string` schema lacks, but it says nothing about format, encoding, or validity requirements.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (verify) and the exact facets checked (signature and expiry) plus the resource types (policy, authorization, settlement receipt), so the operation is unambiguous. It does not, however, distinguish itself from the sibling verify_settlement, an overlap the description never resolves.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance, no prerequisites, and no mention of alternatives. Given the close sibling verify_settlement, an agent has no signal for choosing between the two beyond inference from the token type wording.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 5 tool updates
    • First observedauthorize_x402_ap2
    • First observedcreate_ap2_challenge
    • First observedget_trust_manifest
    • First observedverify_settlement
    • First observedverify_trust_token

Related MCP Connectors

Related MCP Servers

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources