Agent Transaction Trust
Server Details
Authorize and prove autonomous x402/AP2 agent payments with cryptographic receipts.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 5 tools
Each tool targets a distinct step or resource: manifest retrieval, challenge creation, authorization, settlement verification, and token verification. The two verify tools have clearly different scopes (on-chain settlement vs. token signature/expiry), leaving no ambiguity.
All names use snake_case with a verb_noun pattern, making the set predictable. Minor inconsistency appears in protocol-specific suffixes (x402_ap2, ap2_challenge) within otherwise standard names.
Five tools is well-scoped for a specialized authorization and trust server. Each tool covers a necessary step in the AP2/x402 transaction lifecycle, with no redundant or trivial entries.
The surface covers capability discovery, challenge creation, authorization, settlement verification, and token verification. Minor gaps exist around lifecycle management such as revoking or querying past authorizations, but core workflows are supported.
Available Tools
5 toolsauthorize_x402_ap2CInspect
Verify AP2 authority and authorize a live x402 purchase. Machine price: $0.001 via x402. A denied authorization is not settled/charged.
| Name | Required | Description | Default |
|---|---|---|---|
| nonce | No | ||
| payer | Yes | ||
| request | Yes | ||
| category | Yes | ||
| merchant_id | Yes | ||
| ap2_authority | Yes | ||
| payment_required | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It usefully discloses the failure semantics ('A denied authorization is not settled/charged') and the machine price ($0.001 via x402), which are real behavioral facts. However, it says nothing about authorization requirements, idempotency/replay handling for the nonce, or what a successful authorization returns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences with the core purpose front-loaded and no filler. Every sentence contributes something (purpose, cost, failure semantics). It is arguably under-sized for the schema's complexity, but there is no wasted text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 6 required parameters, a nested authority object, no annotations, and no output schema, three sentences are far too thin. The description gives purpose and one behavioral note but leaves the agent without guidance on the AP2 mandate structure, the request payload, or the expected result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and there are 7 parameters (6 required), including a nested ap2_authority object with a JWKS array. The description explains none of them — not payment_required, merchant_id, payer, category, request, nonce, or the mandate chain/challenge token. For a high-complexity nested schema, this is a severe gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names two specific verbs and resources: 'Verify AP2 authority' and 'authorize a live x402 purchase.' This clearly differentiates it from siblings like verify_settlement and get_trust_manifest, which handle different stages. It stops short of a 5 only because the relationship to create_ap2_challenge (the presumed prerequisite) is left implicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit statement of when to use this tool versus the four siblings, nor any prerequisites (e.g., that an AP2 challenge must be created first). The phrase 'live x402 purchase' implies a production context, but the agent must infer the workflow ordering entirely on its own.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_ap2_challengeCInspect
Create the short-lived audience/nonce challenge required for AP2-native authorization.
| Name | Required | Description | Default |
|---|---|---|---|
| ttl_seconds | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the full behavioral burden. Beyond 'short-lived,' it doesn't state the default TTL, whether the challenge is single-use, whether it requires prior authentication, or what happens on expiry. 'Short-lived' gestures at lifetime but is too vague to act on.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler. It is efficiently sized, though brevity here comes at the cost of the missing behavioral and parameter detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an auth-adjacent tool with no annotations, no output schema, and an undocumented parameter, the definition is far too thin. An agent cannot determine TTL semantics, challenge lifecycle, or the expected next step after creation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is one parameter (ttl_seconds) with 0% schema description coverage and no enum. The description says 'short-lived' but never explains the parameter's unit, bounds (30-300), default, or interaction with the challenge's own lifetime, leaving the only parameter effectively undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Create) and resource (the audience/nonce challenge) and names the context (AP2-native authorization), which distinguishes it from verification-oriented siblings like verify_settlement. The acronym-heavy phrasing assumes familiarity, but the action is clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage by calling the challenge 'required for AP2-native authorization,' but never explicitly says when to call this versus authorize_x402_ap2 or verify_trust_token, nor what the caller must do with the result. Context is implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_trust_manifestAInspect
Read Agent Transaction Trust capabilities, proof key, supported authority modes, and endpoints.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral burden; 'Read' signals a non-mutating operation and the sentence enumerates the returned contents (capabilities, proof key, authority modes, endpoints), which is genuinely useful. It does not say whether authentication is required, whether the manifest is cached/versioned, or how failures surface.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler; the verb and the payload contents come first and every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description correctly enumerates what the manifest returns, which is the main thing an agent needs. It stops short of stating the calling context (entry point for trust flows) or any auth/prerequisite condition, leaving a small gap for a zero-param discovery tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, which is the baseline-4 case, and the 100% schema coverage leaves nothing for the description to compensate for.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Names a specific verb ('Read') and a specific resource (Agent Transaction Trust capabilities, proof key, authority modes, endpoints), so the agent knows this is a discovery/metadata fetch. It does not, however, distinguish itself from siblings like verify_trust_token or create_ap2_challenge, so a 4 rather than a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this versus the other trust/settlement tools, and no mention that it is the natural first step for discovering authority modes or the proof key. The only guidance is implicit in the word 'Read'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_settlementCInspect
Verify the authorized Base USDC settlement on-chain and issue a signed settlement receipt. This tool does not charge an additional Trust fee.
| Name | Required | Description | Default |
|---|---|---|---|
| payment_response | No | ||
| authorization_token | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses the chain/asset (Base USDC), that verification is on-chain, that a signed receipt is produced, and that no extra Trust fee is charged. However it omits auth/permission requirements, whether the call mutates state or is idempotent, and failure behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences with no filler; the core action leads and the fee clarification follows. The fee sentence is somewhat tangential but does add practical value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no annotations, no output schema, and 0% parameter coverage, the description is too thin: it does not describe the receipt's contents, error/retry behavior, or how to obtain the required token. An agent lacks enough to call it confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description should compensate but does not. Neither authorization_token nor the optional payment_response is explained — their format, source, or relationship to the verification flow is left entirely to the caller's inference.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Verify) plus resource (authorized Base USDC settlement on-chain) and a secondary effect (issue a signed settlement receipt). It is distinguishable from verify_trust_token and authorize_x402_ap2, though it never explicitly names or contrasts those siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The word 'authorized' implies a prior authorization step, but the description gives no explicit when-to-use condition, no prerequisites (which token, which flow), and no guidance on when to prefer this over verify_trust_token. Usage must be inferred entirely.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_trust_tokenBInspect
Verify the signature and expiry of an Agent Transaction Trust policy, authorization, or settlement receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose the verification dimensions (signature and expiry), which is real behavioral content beyond the name. It stops short of stating the outcome of a failed check (error vs. boolean), read-only nature, or any auth/rate constraints, leaving meaningful gaps for a tool with zero annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One front-loaded sentence with the verb first and zero filler; every clause earns its place and nothing is padded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description should explain the pass/fail result shape, which it omits entirely. Combined with no annotations and no parameter format details, an agent cannot predict what a successful or failed verification returns.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for the single required `token` parameter, so the description must compensate. It partially does by enumerating what the token may encode (a trust policy, authorization, or settlement receipt), adding semantic meaning the bare `string` schema lacks, but it says nothing about format, encoding, or validity requirements.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (verify) and the exact facets checked (signature and expiry) plus the resource types (policy, authorization, settlement receipt), so the operation is unambiguous. It does not, however, distinguish itself from the sibling verify_settlement, an overlap the description never resolves.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance, no prerequisites, and no mention of alternatives. Given the close sibling verify_settlement, an agent has no signal for choosing between the two beyond inference from the token type wording.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
- First observed
authorize_x402_ap2 - First observed
create_ap2_challenge - First observed
get_trust_manifest - First observed
verify_settlement - First observed
verify_trust_token
Related MCP Connectors
Agent-native MCP for governed commerce, x402 payments, paid capabilities, and verifiable receipts.
Governed agent execution: x402 payments, budgets, receipts, verification, and audit.
External counterparty-risk checks and signed receipts for autonomous agents and machine payments.
Agent-native double-entry accounting ledger with x402 micropayments
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables autonomous agents to calculate deterministic profit and loss, attribute revenue and costs, and generate signed operational reports using x402 micropayments.MIT
- AlicenseAqualityBmaintenanceEnables AI agents to create cryptographically verifiable receipts of their delegated work, with capabilities for multi-party approval and offline verification.1160 npmApache 2.0
- FlicenseNot gradedqualityBmaintenanceEnables auditing x402 payment logs against delivery logs to issue signed proof-of-delivery receipts and verify payer spend health.-

EVIDIQ Notary MCPofficial
AlicenseNot gradedqualityBmaintenanceCryptographic receipt layer for AI inferences. Enables notarization and verification of AI outputs with on-chain proofs via x402 payment.1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.