Skip to main content
Glama
Sign In

XGuard — Agent Execution Gateway

by io.github.moelayyan90
OverviewDiscussionsAdmin

Server Details

Scoped agent execution. Server-side credentials, policy, budgets and verifiable receipts.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
Repository
moelayyan90/XGuard
GitHub Stars
0
Server Listing
XGuard Secretless Agent Gateway
ChatGPT
–
Claude
–

TDQS

B3.1/5.0

Scored across 18 tools

Disambiguation2/5

Several clusters are genuinely hard to separate: xguard.fact vs xguard.fact.get, xguard.crawl vs xguard.extract vs xguard.web.fetch, xguard.discover vs xguard.platform_discovery vs xguard.route_resolve vs xguard.route_compare, and xguard.task vs xguard.schedule all sound like the same underlying operation. Descriptions do contain cross-references and disclaimers that partially help, but an agent must read long paragraphs to pick correctly, and the free/paid and free-vs-paid-quote variants of the same action invite misselection.

Naming Consistency2/5

The namespace separator is inconsistent: dotted hierarchies (xguard.authority.catalog, xguard.fact.get, xguard.web.fetch) mixed with underscored compounds (xguard.route_compare, xguard.platform_discovery, xguard.route_resolve) and even mixed within one name (xguard.authority.verify_receipt). Verb-only names (crawl, discover, extract, fact, schedule, task, verify) coexist with noun.noun.verb forms, so the pattern is not predictable.

Tool Count3/5

18 tools is on the heavy side for what is essentially a paid fetch/extract/verify gateway, and the extra weight comes largely from near-duplicate routing and discovery variants rather than distinct capabilities. The domain is complex enough to justify more than a handful, but several tools do not clearly earn a separate slot.

Completeness3/5

The surface covers discovery, quoting, preflight, fetch, extract, verify, scheduling, tasks, authority and receipts, which is broad. However, xguard.task advertises a persistent task ID with checkpoints and failover yet there is no tool to retrieve or poll task results later, and schedules cannot be listed or cancelled; receipts likewise have verify but no listing. These gaps create dead ends for multi-step workflows.

Available Tools

18 tools
xguard.authority.catalogC
Read-onlyIdempotent
Inspect

Inspect the signed delegation sandbox, limits and unactivated service-fee contract.

Inputs: no named parameters.

xguard.authority.commandB
DestructiveIdempotent
Inspect

Submit an owner/agent-signed authority envelope. Requires explicit key-holder authorization; the tool cannot sign for the caller. Sandbox is not a payment.

Inputs: envelope (required), organization_token (required).

xguard.authority.verify_receiptA
Read-onlyIdempotent
Inspect

Verify a financial authority receipt against the existing ProofRail key, without charging.

Inputs: receipt (required).

xguard.capabilitiesDiscover XGuard capabilitiesA
Read-onlyIdempotent
Inspect

Return the enabled and disabled XGuard tools, their security boundary, and canonical discovery URLs. Free.

Inputs: no named parameters.

xguard.crawlA
Idempotent
Inspect

Fetch and extract one public HTTPS page after checking robots.txt. No JavaScript rendering, login, CAPTCHA bypass or unlimited crawl. Price: 0.015 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: url (required), idempotency_key (required), max_amount_atomic (required), expected_status.

xguard.discoverB
Idempotent
Inspect

Find matching curated services and check up to three official documentation resources now. A documentation check is not proof of provider execution. Price: 0.01 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: query (required), idempotency_key (required), max_amount_atomic (required).

xguard.extractA
Idempotent
Inspect

Extract main text, titles, metadata and links from 1–3 public HTTPS pages into one deduplicated, attributed result. No JavaScript rendering, private pages or web search. Up to 6,000 text characters per page; partial source coverage is explicit. Price: 0.012 USDC on Base. Uses x402 v2 HTTP payment headers: retry identical arguments and idempotency key with Payment-Signature and X-XGuard-Quote; the authorization is for the canonical HTTP API resource. No source is fetched before payment.

Inputs: urls (required), idempotency_key (required), max_amount_atomic (required).

xguard.factA
Idempotent
Inspect

Read a current npm package version or official publisher service summary from its primary JSON endpoint. Includes retrieval time and source digest. Price: 0.01 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: kind (required), identifier (required), idempotency_key (required), max_amount_atomic (required).

xguard.fact.getA
Read-onlyIdempotent
Inspect

Read one free published software fact by canonical ID. Returns the primary source, verification status and timestamp. Use xguard.web.fetch for a separate paid fetch of a public URL.

Inputs: factId (required).

xguard.platform_discoveryA
Idempotent
Inspect

Inspect up to three same-origin public metadata paths from one supplied HTTPS platform. Returns attributed candidate metadata, never trusts self-description as verified capability. Price: 0.015 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: url (required), idempotency_key (required), max_amount_atomic (required), expected_status.

xguard.preflightPreflight a guarded paid requestA
Read-onlyIdempotent
Inspect

Free, read-only safety gate for xguard.web.fetch. Validates the public HTTPS target, SSRF policy, DNS reachability and selected payment path without contacting the target or attempting payment. On allow, call xguard.web.fetch directly; it creates the signed quote and returns the mandatory x402 v2 PaymentRequired result.

xguard.pricing.quoteGet a signed execution quoteA
Read-only
Inspect

Get an optional signed quote for xguard.web.fetch. Call xguard.web.fetch directly to receive the price in an HTTP 402 challenge.

xguard.route_compareB
Idempotent
Inspect

Compare cheapest, fastest, highest-evidence and recommended paths against the same current capability catalog. Unknown prices and probabilities remain null. Price: 0.005 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: intent (required), idempotency_key (required), max_amount_atomic (required), country.

xguard.route_resolveA
Idempotent
Inspect

Resolve a bounded intent against the capability catalog. Returns four route rankings, dependencies, explicit unknowns and executable coverage. No universal task execution claim. Price: 0.005 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: intent (required), idempotency_key (required), max_amount_atomic (required), country.

xguard.scheduleB
Idempotent
Inspect

Schedule up to three bounded public read-only steps. One-shot time, bounded interval or HTTP-health condition; at most three total attempts/runs, included in the quoted price. Price: 0.03 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: steps (required), budget_atomic (required), idempotency_key (required), max_amount_atomic (required), +4 more.

xguard.taskA
Idempotent
Inspect

Run up to three public read-only fetch, extraction or HTTP verification steps with persistent task ID, checkpoints, bounded retry, failover and acceptance checks. Fee breakdown is included. No third-party paid actions. Price: 0.03 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: steps (required), budget_atomic (required), idempotency_key (required), max_amount_atomic (required).

xguard.verifyA
Idempotent
Inspect

Verify the current HTTP status of one public HTTPS resource against an explicit expected status. It cannot verify responsive layout, payment capture or arbitrary task completion. Price: 0.01 USDC on Base. Sign only the canonical HTTP x402 offer and preserve the idempotency key and original quote.

Inputs: url (required), idempotency_key (required), max_amount_atomic (required), expected_status.

xguard.web.fetchFetch a public HTTPS resourceA
Read-onlyIdempotent
Inspect

Fetch one public HTTPS resource after x402 v2 payment and on-chain settlement verification. Retry the identical MCP call with Payment-Signature and X-XGuard-Quote. A completed retry returns the prior receipt.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • OmniBridge MCP Server

      SyedDaiam9101
      A
      license
      Not graded
      quality
      D
      maintenance
      Provides isolated sandbox environments for AI agents to execute code securely, generating signed receipts for every execution to ensure auditability and trust.
      11 npm
      4
      MIT

    • AgentPay MCP Server

      Rumblingb
      F
      license
      Not graded
      quality
      B
      maintenance
      Provides a trust and governance layer for AI agents, enabling secure API access, credential vaulting, paid execution with human approval, and automatic call resume.
      4 npm
      2
      -

    • veor

      winterbim
      A
      license
      Not graded
      quality
      B
      maintenance
      Provides a governed execution boundary for AI agents, enforcing deterministic policy, one-shot human approvals, and signed receipts for MCP tool effects.
      MIT
    Try in Browser
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources