Skip to main content
Glama

Mifori CertAgent Trust Oracle

Server Details

Live AI agent trust oracle: audit synthetic IQ, latency & JSON compliance via x402 or free tokens.

Ownership verified
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

A4.7/5.0

Scored across 4 tools

Disambiguation5/5

Each tool has a clearly distinct role: certificate lookup/validation, leaderboard discovery, feedback submission, and live reputation auditing. The descriptions explicitly cross-reference the other tools to guide selection, and no two tools overlap enough to cause misselection.

Naming Consistency5/5

All four tools follow a strict verb_agent_noun snake_case pattern (get_agent_certificate, get_agent_leaderboard, submit_agent_feedback, verify_agent_reputation). The convention is predictable and unambiguous.

Tool Count5/5

Four tools are well-scoped for a focused agent trust oracle: discovery, verification, certificate retrieval, and feedback. Each tool earns its place, and there are no redundant or filler tools.

Completeness4/5

The surface covers the core lifecycle: discover agents, run live audits, retrieve/validate certificates with history, and submit telemetry or disputes. Minor gaps include no dedicated tool for reading back feedback history or checking reward credit balance, but agents can work around these via certificate history and leaderboard snapshots.

Available Tools

4 tools
get_agent_certificateGet Agent Audit Certificate & HistoryA
Read-onlyIdempotent
Inspect

Retrieves and cryptographically validates a signed audit certificate by eval_id or lists chronological audit history for an agent_id in <50ms with no authentication, payment, or rate limits. Pass eval_id alone for an exact single-certificate lookup with HMAC-SHA256 signature verification, or pass agent_id (a DID or target_bot_url) with limit (1-50, default 10) to inspect historical evaluations beyond the deduplicated leaderboard snapshot; if both eval_id and agent_id are provided, eval_id takes precedence, and omitting both returns an INVALID_ARGUMENTS error. Use for zero-cost cryptographic proof verification or longitudinal drift analysis; use get_agent_leaderboard for ranked multi-agent discovery, verify_agent_reputation to execute a new live audit, or submit_agent_feedback to dispute an eval_id.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum number of historical certificates to return when querying by agent_id (integer 1-50, default 10).
eval_idNoUUID of a specific audit certificate to fetch and verify (e.g. 'cab449d2-9072-415d-a8fd-d3a51bd3d87d').
agent_idNoSemantic agent DID (e.g. 'did:mifori:reference-agent') or target_bot_url to query chronological audit history.

Output Schema

ParametersJSON Schema
NameRequiredDescription
countYesNumber of certificate records returned.
errorNoDiagnostic message when status is NOT_FOUND or INVALID_ARGUMENTS.
statusYesLookup status ('VALIDATED', 'HISTORY_OK', 'NOT_FOUND', 'INVALID_SIGNATURE', or 'INVALID_ARGUMENTS').
eval_idNoEvaluation UUID of the primary or requested certificate.
agent_idNoSemantic agent DID associated with the certificate.
verifiedYesTrue if the certificate or latest audit has an intact HMAC-SHA256 signature and AAA/AA tier.
issued_atNoISO-8601 UTC timestamp of certificate issuance.
latency_msNoMeasured round-trip latency in milliseconds.
certificatesYesChronological list of audit certificates (newest first).
synthetic_iqNoMeasured Synthetic IQ score (0-100).
target_bot_urlNoAudited target agent endpoint URL.
reliability_tierNoAssigned trust tier ('AAA', 'AA', 'B', or 'REJECTED').
certagent_signatureNoHMAC-SHA256 cryptographic signature ('0x...').

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds substantial context beyond them: sub-50ms latency, no authentication/payment/rate limits, HMAC-SHA256 signature verification, and deterministic precedence behavior. These are operational traits the annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single dense paragraph, front-loaded with the core capability and cost/latency profile before the routing branches. It is long and clause-heavy, but nearly every clause carries actionable information; a bulleted split of the two modes would read faster.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value detail is unnecessary, and the description instead covers what the schema cannot: cost, auth, rate limits, mode selection, precedence, and error behavior. For a zero-required-parameter dispatcher this is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the fields themselves are documented; the description goes further by defining the interaction contract (eval_id wins over agent_id, omitting both yields INVALID_ARGUMENTS) and by characterizing agent_id as a DID or target_bot_url with a historical, non-deduplicated scope. It stops short of explaining limit's effect on ordering or cursor behavior.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource pair ('Retrieves and cryptographically validates a signed audit certificate') and immediately distinguishes its two operating modes by argument. An agent can tell it apart from get_agent_leaderboard or verify_agent_reputation without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit argument-combination guidance ('Pass eval_id alone... or pass agent_id with limit'), a precedence rule when both are supplied, and an error condition when neither is. It also names three siblings and the exact condition that selects each, which is the strongest form of when/when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_agent_leaderboardGet Verified Agent LeaderboardA
Read-onlyIdempotent
Inspect

Queries a free, unauthenticated single-page snapshot of top-ranked AI agents deduplicated by endpoint and ordered by Synthetic IQ descending (0-100) and round-trip latency ascending (ms), with no rate limits or cursor pagination. Set limit=1 to select the single highest-scoring agent for immediate task routing, or pass up to limit=100 (default 10) to compare candidate reliability tiers (AAA, AA, B) in one call. Use for zero-cost discovery of pre-verified agents; use get_agent_certificate to validate a specific eval_id or list chronological audit history for an agent_id, verify_agent_reputation to run a fresh live audit, or submit_agent_feedback to report telemetry.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum number of top-ranked agent records to return in this single-page snapshot (integer 1-100, default 10; use 1 for best-agent selection or up to 100 for full tier comparison).

Output Schema

ParametersJSON Schema
NameRequiredDescription
countYesNumber of leaderboard entries returned.
agentsYesOrdered list of verified AI agents with IQ, latency, and reliability tier.
statusYesQuery execution status ('OK' or 'ERROR').

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, but the description adds substantial context beyond them: free, unauthenticated, no rate limits, no cursor pagination, single-page snapshot semantics, and the two-key sort order (Synthetic IQ descending, latency ascending). These are operational facts an agent could not derive from the annotation block.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Only three sentences and the purpose is front-loaded ahead of usage and alternatives. The sentences are long and slightly overloaded with parenthetical detail, but essentially no filler is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read tool with an output schema, the description covers everything the agent needs: auth posture, rate limits, pagination behavior, ordering, dedup, and sibling routing. Return-value structure is correctly left to the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the schema already documents the 1-100 range and default of 10, so the baseline is 3. The description earns an extra point by explaining the intended meaning of the extremes (limit=1 for best-agent selection, limit=100 to compare AAA/AA/B reliability tiers), which adds interpretive value the schema lacks.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first clause states a specific verb and resource ('Queries a free, unauthenticated single-page snapshot of top-ranked AI agents') and specifies the exact ordering and dedup semantics. It is immediately distinguishable from get_agent_certificate, verify_agent_reputation, and submit_agent_feedback, which are all named.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit routing rules: limit=1 for immediate task routing, up to limit=100 for tier comparison, and it names each sibling with the condition that selects it ('use get_agent_certificate to validate a specific eval_id ... verify_agent_reputation to run a fresh live audit, or submit_agent_feedback to report telemetry'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

submit_agent_feedbackSubmit Agent Audit Feedback & TelemetryA
Idempotent
Inspect

Persists machine-to-machine telemetry or score disputes for an existing audit certificate (eval_id) in <100ms with no authentication or payment required, immediately granting 1 free audit credit (reward_status='1_FREE_AUDIT_CREDIT_GRANTED') whenever non-empty eval_id and reported_issue strings are provided. Reference the UUID from a prior verify_agent_reputation, get_agent_certificate, or get_agent_leaderboard result in eval_id, explain the anomaly in reported_issue, and optionally pass numeric overrides in suggested_metric (e.g. {'observed_latency_ms': 180, 'expected_iq': 95}); blank required fields fail schema validation. Use after an audit to contest a score or report runtime drift; use verify_agent_reputation to run a new live audit, get_agent_certificate to verify a certificate or view audit history, or get_agent_leaderboard to browse ranked agents.

ParametersJSON Schema
NameRequiredDescriptionDefault
eval_idYesUUID or certificate identifier from a prior verify_agent_reputation, get_agent_certificate, or get_agent_leaderboard response (e.g. 'cab449d2-9072-415d-a8fd-d3a51bd3d87d'). Must be non-empty.
reported_issueYesNon-empty technical explanation of the latency anomaly, schema mismatch, or score dispute (e.g. 'Cold-start network spike added 220ms; steady-state latency is 140ms').
suggested_metricNoOptional key-value map of observed telemetry metrics or proposed benchmark corrections (e.g. {'observed_latency_ms': 140, 'expected_iq': 96}).

Output Schema

ParametersJSON Schema
NameRequiredDescription
statusYesSubmission status ('ACCEPTED' or 'ERROR').
eval_idYesReferenced evaluation UUID.
messageNoHuman and machine readable confirmation message.
timestampNoISO-8601 UTC timestamp of telemetry registration.
feedback_idYesUnique identifier (UUID) for the recorded feedback entry.
reward_tokenNoSingle-use credit token ('mfr_fbk_...') accepted as payment_proof in verify_agent_reputation.
reward_statusYesStatus of the 1 free audit credit reward.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: latency bound (<100ms), no authentication or payment required, the idempotent credit-grant side effect with the literal reward_status value, and the blank-field validation failure mode. Annotations only declare readOnly=false, idempotent=true, destructive=false; the description adds the side effects and preconditions those hints cannot convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the core action and side effect, then the routing guidance, which is good ordering. However, it is a dense, run-on pair of sentences that recycles the eval_id and suggested_metric examples already present in the schema, so it is not maximally tight.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-shape explanation is unnecessary, and the description still covers the key observable outcome (credit granted). With idempotency, latency, auth, and validation all addressed, an agent has everything needed to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters including the nested suggested_metric example already document themselves. The description largely restates the schema's eval_id sourcing and suggested_metric example rather than adding new syntax or constraints, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete verb+resource ('Persists machine-to-machine telemetry or score disputes for an existing audit certificate') and anchors it to a specific identifier (eval_id). The purpose is immediately distinguishable from sibling tools like verify_agent_reputation or get_agent_certificate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use it ('after an audit to contest a score or report runtime drift') and names the three alternatives with the condition each serves. Nothing about tool selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_agent_reputationVerify Agent Reputation (x402 Audit)AInspect

Executes a live <500ms outbound HTTP POST challenge against target_bot_url to benchmark Synthetic IQ (0-100), round-trip latency, JSON schema compliance, and hallucination risk, persisting an HMAC-SHA256 signed certificate (eval_id) to the public ledger. Two-step parameter workflow: (1) call with target_bot_url alone (omitting payment_proof) for a free, side-effect-free PAYMENT_REQUIRED_402 invoice; (2) re-invoke with payment_proof set to a $0.005 Base Mainnet USDC transaction hash or a reward_token from submit_agent_feedback to execute the live SSRF-guarded probe, and optionally pass agent_id to bind the resulting certificate to a persistent DID across URL rotations for historical tracking in get_agent_certificate. Use before delegating tasks to an unverified endpoint; use get_agent_leaderboard for ranked discovery, get_agent_certificate to inspect an existing eval_id or agent_id audit history, or submit_agent_feedback to dispute a score.

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_idNoCanonical decentralized identifier or semantic handle (e.g. 'did:mifori:router-v1', max 128 chars).
payment_proofNo66-character Base Mainnet USDC transaction hash ('0x...') or single-use 'mfr_fbk_...' credit token.
target_bot_urlYesPublic HTTPS/HTTP endpoint URL of the autonomous AI agent to probe (e.g. 'https://agent.mifori.com/v1/demo-agent').

Output Schema

ParametersJSON Schema
NameRequiredDescription
errorNoError code or payment requirement description if audit was not completed.
statusYesExecution status ('VERIFIED', 'PAYMENT_REQUIRED_402', or 'ERROR').
eval_idNoUnique identifier (UUID) of the audit evaluation.
agent_idNoOptional semantic identifier or DID associated with the audited agent.
latency_msNoMeasured round-trip execution latency in milliseconds.
synthetic_iqNoComputed Synthetic IQ score between 0 and 100.
target_bot_urlYesAudited target agent URL.
reliability_tierNoAssigned Mifori trust tier based on IQ and latency.
certagent_signatureNoCryptographic HMAC-SHA256 signature of the audit certificate.
json_schema_compliantNoWhether the target agent returned a valid JSON contract.
hallucination_detectedNoWhether logical hallucination or invalid output was detected.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only cover the safety profile (readOnlyHint=false, openWorldHint=true, idempotentHint=false, destructiveHint=false); the description adds real behavior beyond them: a <500ms timing expectation, SSRF guarding, an HMAC-SHA256 signed certificate persisted to a public ledger, a $0.005 USDC cost, and a side-effect-free first leg. It stops short of describing failure modes or rate limits, so a 4 rather than 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One dense paragraph, front-loaded with the primary action and firing order, with no filler sentences — every clause conveys a constraint, cost, or routing decision. It is information-packed to the point of being heavy, which keeps it out of 5 territory.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return-value details are not required, and the description still covers the paid/free duality, prerequisites, cost, persistence, and sibling routing. An agent has everything needed to invoke it correctly on either leg.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds workflow meaning the schema cannot: omitting payment_proof yields a free PAYMENT_REQUIRED_402 invoice, payment_proof accepts either a Base Mainnet USDC tx hash or a reward_token from submit_agent_feedback, and agent_id binds the certificate to a DID across URL rotations. This is genuine value beyond the field descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Executes a live <500ms outbound HTTP POST challenge against target_bot_url to benchmark Synthetic IQ...'), plus the concrete artifacts produced (latency, schema compliance, hallucination risk, HMAC-signed certificate). It is unmistakably distinct from get_agent_leaderboard, get_agent_certificate, and submit_agent_feedback.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use ('Use before delegating tasks to an unverified endpoint') and names all three alternatives with the condition that selects each. The two-step call sequence is spelled out as when-to-call-with-what, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updates
    • Addedget_agent_certificate
    • Changedsubmit_agent_feedback1 field changed
      • changedInput schema / properties / eval_id / description
        Previous value: -"UUID or certificate identifier from a prior verify_agent_reputation or get_agent_leaderboard response (e.g. 'cab449d2-9072-415d-a8fd-d3a51bd3d87d'). Must be non-empty."New value: +"UUID or certificate identifier from a prior verify_agent_reputation, get_agent_certificate, or get_agent_leaderboard response (e.g. 'cab449d2-9072-415d-a8fd-d3a51bd3d87d'). Must be non-empty."
    • Changedverify_agent_reputation3 fields changed
      • changedInput schema / properties / agent_id / description
        Previous value: -"Optional semantic agent identifier or DID (e.g. 'did:mifori:my-agent' or 'agent://router') to associate with the signed audit certificate in the public ledger."New value: +"Canonical decentralized identifier or semantic handle (e.g. 'did:mifori:router-v1', max 128 chars)."
      • changedInput schema / properties / payment_proof / description
        Previous value: -"Optional 66-character Base Mainnet USDC transaction hash ('0x...') for the $0.005 x402 audit fee or an X-Agent-Key credit token. Omit on initial call to receive the free HTTP 402 payment invoice."New value: +"66-character Base Mainnet USDC transaction hash ('0x...') or single-use 'mfr_fbk_...' credit token."
      • changedInput schema / properties / target_bot_url / description
        Previous value: -"Publicly reachable HTTPS/HTTP endpoint URL of the AI agent to audit (e.g. 'https://agent.mifori.com/v1/demo-agent'). Must accept JSON POST probes."New value: +"Public HTTPS/HTTP endpoint URL of the autonomous AI agent to probe (e.g. 'https://agent.mifori.com/v1/demo-agent')."
  2. 3 tool updates
    • First observedget_agent_leaderboard
    • First observedsubmit_agent_feedback
    • First observedverify_agent_reputation

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to obtain an independent review of their drafts, returning a pass/fail verdict with specific issues and suggested fixes, plus a signed receipt. Payments are made per check over x402, with no account or API key needed.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources