Skip to main content
Glama

FOXIFY Agent Authority + Payment Preflight

Server Details

x402 agent preflight: exact action authority plus payment mandate, destination, expiry and replay.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
99.9% over 40 days
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

B3.2/5.0

Scored across 3 tools

Disambiguation4/5

The three tools target different things: free metadata, exact-action authority preflight for tool calls, and transaction preflight for payments. The two verify_* tools share the word 'preflight' but are separated by action vs payment intent; the boundary is clear, though an agent skimming could momentarily conflate authority and payment checks.

Naming Consistency4/5

Two tools follow a clean verify_agent_{action|payment}_intent pattern that makes their relationship obvious. foxify_preflight_info deviates (prefixed, noun-style, describes metadata rather than an action), but it is still readable and clearly the odd-one-out info endpoint.

Tool Count4/5

Three tools is small but well-matched to a narrow preflight service: one discovery/info tool plus one verification per intent type. Nothing feels redundant or bolted on, though it sits at the thin end of the range.

Completeness3/5

The core surface (info, action preflight, payment preflight) is covered, but there is no way to retrieve or audit a prior verification result, check status of a submitted intent, or revoke/lookup an authority after issuance. These are notable gaps for a paid verification service where post-hoc proof matters.

Available Tools

3 tools
foxify_preflight_infoFOXIFY Preflight InfoC
Read-onlyIdempotent
Inspect

Free metadata for FOXIFY machine-payable authority preflight tools.

NameRequiredDescriptionDefault

No parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive, so the safety profile is covered structurally. The description's only added claim is 'Free', which hints at a pricing model but never explains it, and 'machine-payable authority' is unexplained jargon that leaves the actual behavior opaque.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single short sentence with no padding, so it is certainly concise. But brevity here comes from under-specification rather than economy — there is no front-loaded statement of what the agent actually gets back.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With zero parameters and no output schema, the description is the only source of information about the return value, and it never says what the 'metadata' contains. For a discovery/info tool where the payload is the entire product, that gap is significant.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is nothing for the description to disambiguate; the baseline of 4 applies. The empty schema is fully consistent with the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The sentence largely restates the title: 'FOXIFY Preflight Info' becomes 'metadata for FOXIFY ... preflight tools.' There is no specific verb or resource ('metadata' about what?) and nothing distinguishes it from verify_agent_action_intent or verify_agent_payment_intent beyond the vague word 'preflight'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No statement of when to call this versus the two sibling verify_* tools, no prerequisites, and no mention of whether it should be called before verification. The only hint is the word 'preflight', which implies ordering but is never made explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_agent_action_intentVerify Agent Action IntentAInspect

Paid exact-action authority preflight for consequential agent tool calls. Binds subject, tool, operation, target, canonical parameters, authority lifetime, retries and postcondition requirements. Costs $0.25 USDC on Base.

NameRequiredDescriptionDefault
nonceYesUnique anti-replay nonce
actionYes
subjectYes
action_idYesUnique action-intent identifier
authorityYes
executionNo
expires_atYesISO-8601 action-intent expiry
postconditionNo

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already disclose that the tool is not read-only, is open-world, is not idempotent, and is not destructive. The description adds important behavioral context by stating the $0.25 USDC cost on Base and the authority lifetime, retry, and postcondition binding scope. It stops short of describing the response shape or failure behavior, but meaningfully goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two dense, front-loaded sentences with no wasted text. It leads with the core purpose and pricing, then enumerates the binding scope.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a complex paid verification tool with no output schema and eight parameters, so the description should do more to explain the resulting decision or workflow. It covers purpose, cost, and binding scope, and annotations cover safety hints, but return semantics and operational prerequisites remain unclear.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is low at 38%, so the description must compensate. It does map several top-level concepts to parameters (subject, action fields, authority lifetime, retries, postcondition), but it omits key details for action_id, nonce, and the allowed-tools/operations/targets lists.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verification/preflight purpose for consequential agent tool calls and enumerates what it binds: subject, tool, operation, target, parameters, authority lifetime, retries, and postconditions. It is clear what the tool does, though it does not explicitly differentiate itself from the sibling verify_agent_payment_intent.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'for consequential agent tool calls' implies when to use the tool, but there is no explicit when-not guidance or routing to alternatives such as verify_agent_payment_intent or foxify_preflight_info. Usage is inferable but not fully specified.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_agent_payment_intentVerify Agent Payment IntentAInspect

Paid transaction preflight. Checks mandate, amount, destination, merchant, expiry and replay risk before an autonomous payment executes. Costs $0.05 USDC on Base.

NameRequiredDescriptionDefault
agentNo
nonceYesUnique anti-replay nonce
paymentYes
merchantYes
intent_idYesUnique payment-intent identifier
expires_atYesISO-8601 intent expiry
authorizationYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds genuinely non-structured information: the call costs $0.05 USDC on Base, and it consumes an anti-replay nonce, which explains the non-idempotent and non-readOnly annotations. It does not say what happens on a failed verification or whether the nonce is burned on failure, which is material for a paid, non-idempotent call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences with no filler; the purpose and the enforcement scope are front-loaded before the cost note, which is exactly the ordering an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a verification tool with no output schema, the description never indicates what a result looks like (pass/fail verdict, reason codes, whether a signed receipt is returned). Combined with 43% schema coverage and a nested six-required-parameter payload, an agent can decide when to call it but not how to interpret the response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 43%, so the description must compensate – and it does by mapping the enumerated checks onto parameter groups (authorization→mandate, payment.amount→amount, payment.recipient/destination, merchant, expires_at→expiry, nonce→replay risk). It still leaves nested optional fields such as human_confirmed and allowed_domains without meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('checks') and resource ('payment intent' preflight), and enumerates the exact facets verified (mandate, amount, destination, merchant, expiry, replay risk). Differentiation from siblings is only implicit – 'before an autonomous payment executes' distinguishes it from verify_agent_action_intent, but the sibling is never named.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Paid transaction preflight ... before an autonomous payment executes' gives a clear triggering context and sequencing constraint. It stops short of naming alternatives (e.g., when to use verify_agent_action_intent instead) or stating exclusions, so it does not reach a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updates
    • Changedverify_agent_action_intent14 fields changed
      • removedInput schema / additionalProperties
        Removed value: -false
      • changedInput schema / properties / action / additionalProperties
        Previous value: -trueNew value: +{}
      • addedInput schema / properties / action / properties / parameters / propertyNames
        Added value: +{
        +  "type": "string"
        +}
      • changedInput schema / properties / action / properties / target / additionalProperties
        Previous value: -trueNew value: +{}
      • changedInput schema / properties / authority / additionalProperties
        Previous value: -trueNew value: +{}
      • addedInput schema / properties / authority / properties / allowed_operations / maxItems
        Added value: +64
      • changedInput schema / properties / authority / properties / allowed_targets / items / additionalProperties
        Previous value: -trueNew value: +{}
      • addedInput schema / properties / authority / properties / allowed_targets / maxItems
        Added value: +64
      • addedInput schema / properties / authority / properties / allowed_tools / maxItems
        Added value: +64
      • addedInput schema / properties / authority / properties / max_attempts / maximum
        Added value: +9007199254740991
      • changedInput schema / properties / execution / additionalProperties
        Previous value: -trueNew value: +{}
      • addedInput schema / properties / execution / properties / attempt / maximum
        Added value: +9007199254740991
      • changedInput schema / properties / postcondition / additionalProperties
        Previous value: -trueNew value: +{}
      • changedInput schema / properties / subject / additionalProperties
        Previous value: -trueNew value: +{}
    • Changedverify_agent_payment_intent6 fields changed
      • removedInput schema / additionalProperties
        Removed value: -false
      • changedInput schema / properties / agent / additionalProperties
        Previous value: -trueNew value: +{}
      • changedInput schema / properties / authorization / additionalProperties
        Previous value: -trueNew value: +{}
      • addedInput schema / properties / authorization / properties / allowed_domains / maxItems
        Added value: +64
      • changedInput schema / properties / merchant / additionalProperties
        Previous value: -trueNew value: +{}
      • changedInput schema / properties / payment / additionalProperties
        Previous value: -trueNew value: +{}
  2. 1 tool update
    • Addedverify_agent_action_intent
  3. 2 tool updates
    • First observedfoxify_preflight_info
    • First observedverify_agent_payment_intent

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables autonomous agents to inspect and audit unfamiliar x402 endpoints before spending USDC, using bounded read-only probes to surface payment challenges, pricing, network, receiver, and operational signals without signing or spending funds.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to discover and safely call any x402/AgentCash pay-per-call endpoint with hard budget caps, idempotency keys, spend ledgers, pre-flight cost estimation, and offline-verifiable signed receipts. Exposes search, discovery, paid-call, spend, plan, and receipt tools, plus optional hosted-account balance, recharge, and proxy tools.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources