FOXIFY Agent Authority + Payment Preflight
Server Details
x402 agent preflight: exact action authority plus payment mandate, destination, expiry and replay.
- Status
- Healthy
- Uptime
- 99.9% over 40 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 3 tools
The three tools target different things: free metadata, exact-action authority preflight for tool calls, and transaction preflight for payments. The two verify_* tools share the word 'preflight' but are separated by action vs payment intent; the boundary is clear, though an agent skimming could momentarily conflate authority and payment checks.
Two tools follow a clean verify_agent_{action|payment}_intent pattern that makes their relationship obvious. foxify_preflight_info deviates (prefixed, noun-style, describes metadata rather than an action), but it is still readable and clearly the odd-one-out info endpoint.
Three tools is small but well-matched to a narrow preflight service: one discovery/info tool plus one verification per intent type. Nothing feels redundant or bolted on, though it sits at the thin end of the range.
The core surface (info, action preflight, payment preflight) is covered, but there is no way to retrieve or audit a prior verification result, check status of a submitted intent, or revoke/lookup an authority after issuance. These are notable gaps for a paid verification service where post-hoc proof matters.
Available Tools
3 toolsfoxify_preflight_infoFOXIFY Preflight InfoCRead-onlyIdempotentInspect
Free metadata for FOXIFY machine-payable authority preflight tools.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and non-destructive, so the safety profile is covered structurally. The description's only added claim is 'Free', which hints at a pricing model but never explains it, and 'machine-payable authority' is unexplained jargon that leaves the actual behavior opaque.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single short sentence with no padding, so it is certainly concise. But brevity here comes from under-specification rather than economy — there is no front-loaded statement of what the agent actually gets back.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With zero parameters and no output schema, the description is the only source of information about the return value, and it never says what the 'metadata' contains. For a discovery/info tool where the payload is the entire product, that gap is significant.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is nothing for the description to disambiguate; the baseline of 4 applies. The empty schema is fully consistent with the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The sentence largely restates the title: 'FOXIFY Preflight Info' becomes 'metadata for FOXIFY ... preflight tools.' There is no specific verb or resource ('metadata' about what?) and nothing distinguishes it from verify_agent_action_intent or verify_agent_payment_intent beyond the vague word 'preflight'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No statement of when to call this versus the two sibling verify_* tools, no prerequisites, and no mention of whether it should be called before verification. The only hint is the word 'preflight', which implies ordering but is never made explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_agent_action_intentVerify Agent Action IntentAInspect
Paid exact-action authority preflight for consequential agent tool calls. Binds subject, tool, operation, target, canonical parameters, authority lifetime, retries and postcondition requirements. Costs $0.25 USDC on Base.
| Name | Required | Description | Default |
|---|---|---|---|
| nonce | Yes | Unique anti-replay nonce | |
| action | Yes | ||
| subject | Yes | ||
| action_id | Yes | Unique action-intent identifier | |
| authority | Yes | ||
| execution | No | ||
| expires_at | Yes | ISO-8601 action-intent expiry | |
| postcondition | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose that the tool is not read-only, is open-world, is not idempotent, and is not destructive. The description adds important behavioral context by stating the $0.25 USDC cost on Base and the authority lifetime, retry, and postcondition binding scope. It stops short of describing the response shape or failure behavior, but meaningfully goes beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two dense, front-loaded sentences with no wasted text. It leads with the core purpose and pricing, then enumerates the binding scope.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a complex paid verification tool with no output schema and eight parameters, so the description should do more to explain the resulting decision or workflow. It covers purpose, cost, and binding scope, and annotations cover safety hints, but return semantics and operational prerequisites remain unclear.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is low at 38%, so the description must compensate. It does map several top-level concepts to parameters (subject, action fields, authority lifetime, retries, postcondition), but it omits key details for action_id, nonce, and the allowed-tools/operations/targets lists.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verification/preflight purpose for consequential agent tool calls and enumerates what it binds: subject, tool, operation, target, parameters, authority lifetime, retries, and postconditions. It is clear what the tool does, though it does not explicitly differentiate itself from the sibling verify_agent_payment_intent.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'for consequential agent tool calls' implies when to use the tool, but there is no explicit when-not guidance or routing to alternatives such as verify_agent_payment_intent or foxify_preflight_info. Usage is inferable but not fully specified.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_agent_payment_intentVerify Agent Payment IntentAInspect
Paid transaction preflight. Checks mandate, amount, destination, merchant, expiry and replay risk before an autonomous payment executes. Costs $0.05 USDC on Base.
| Name | Required | Description | Default |
|---|---|---|---|
| agent | No | ||
| nonce | Yes | Unique anti-replay nonce | |
| payment | Yes | ||
| merchant | Yes | ||
| intent_id | Yes | Unique payment-intent identifier | |
| expires_at | Yes | ISO-8601 intent expiry | |
| authorization | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds genuinely non-structured information: the call costs $0.05 USDC on Base, and it consumes an anti-replay nonce, which explains the non-idempotent and non-readOnly annotations. It does not say what happens on a failed verification or whether the nonce is burned on failure, which is material for a paid, non-idempotent call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two dense sentences with no filler; the purpose and the enforcement scope are front-loaded before the cost note, which is exactly the ordering an agent needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a verification tool with no output schema, the description never indicates what a result looks like (pass/fail verdict, reason codes, whether a signed receipt is returned). Combined with 43% schema coverage and a nested six-required-parameter payload, an agent can decide when to call it but not how to interpret the response.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 43%, so the description must compensate – and it does by mapping the enumerated checks onto parameter groups (authorization→mandate, payment.amount→amount, payment.recipient/destination, merchant, expires_at→expiry, nonce→replay risk). It still leaves nested optional fields such as human_confirmed and allowed_domains without meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('checks') and resource ('payment intent' preflight), and enumerates the exact facets verified (mandate, amount, destination, merchant, expiry, replay risk). Differentiation from siblings is only implicit – 'before an autonomous payment executes' distinguishes it from verify_agent_action_intent, but the sibling is never named.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Paid transaction preflight ... before an autonomous payment executes' gives a clear triggering context and sequencing constraint. It stops short of naming alternatives (e.g., when to use verify_agent_action_intent instead) or stating exclusions, so it does not reach a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- Changed
verify_agent_action_intent14 fields changed- removed
Input schema / additionalPropertiesRemoved value: -false - changed
Input schema / properties / action / additionalPropertiesPrevious value: -trueNew value: +{} - added
Input schema / properties / action / properties / parameters / propertyNamesAdded value: +{ + "type": "string" +} - changed
Input schema / properties / action / properties / target / additionalPropertiesPrevious value: -trueNew value: +{} - changed
Input schema / properties / authority / additionalPropertiesPrevious value: -trueNew value: +{} - added
Input schema / properties / authority / properties / allowed_operations / maxItemsAdded value: +64 - changed
Input schema / properties / authority / properties / allowed_targets / items / additionalPropertiesPrevious value: -trueNew value: +{} - added
Input schema / properties / authority / properties / allowed_targets / maxItemsAdded value: +64 - added
Input schema / properties / authority / properties / allowed_tools / maxItemsAdded value: +64 - added
Input schema / properties / authority / properties / max_attempts / maximumAdded value: +9007199254740991 - changed
Input schema / properties / execution / additionalPropertiesPrevious value: -trueNew value: +{} - added
Input schema / properties / execution / properties / attempt / maximumAdded value: +9007199254740991 - changed
Input schema / properties / postcondition / additionalPropertiesPrevious value: -trueNew value: +{} - changed
Input schema / properties / subject / additionalPropertiesPrevious value: -trueNew value: +{}
- Changed
verify_agent_payment_intent6 fields changed- removed
Input schema / additionalPropertiesRemoved value: -false - changed
Input schema / properties / agent / additionalPropertiesPrevious value: -trueNew value: +{} - changed
Input schema / properties / authorization / additionalPropertiesPrevious value: -trueNew value: +{} - added
Input schema / properties / authorization / properties / allowed_domains / maxItemsAdded value: +64 - changed
Input schema / properties / merchant / additionalPropertiesPrevious value: -trueNew value: +{} - changed
Input schema / properties / payment / additionalPropertiesPrevious value: -trueNew value: +{}
1 tool update
- Added
verify_agent_action_intent
2 tool updates
- First observed
foxify_preflight_info - First observed
verify_agent_payment_intent
Related MCP Connectors
Hosted x402 preflight for action authority, payment mandate, destination, expiry and replay.
Governed agent execution: x402 payments, budgets, receipts, verification, and audit.
Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools.
Authorize and prove autonomous x402/AP2 agent payments with cryptographic receipts.
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables agents and developers to check x402 endpoints, assess scores and wallet risks, authorize payments with spending rules, and report outcomes before an agent pays.6MIT
- AlicenseAqualityAmaintenanceThis tool library gives AI agents a discovery and "know before you pay" layer to find and check the historic reputation of endpoints in the x402 ecosystem.415203 npm1MIT
- FlicenseNot gradedqualityBmaintenanceEnables autonomous agents to inspect and audit unfamiliar x402 endpoints before spending USDC, using bounded read-only probes to surface payment challenges, pricing, network, receiver, and operational signals without signing or spending funds.-
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to discover and safely call any x402/AgentCash pay-per-call endpoint with hard budget caps, idempotency keys, spend ledgers, pre-flight cost estimation, and offline-verifiable signed receipts. Exposes search, discovery, paid-call, spend, plan, and receipt tools, plus optional hosted-account balance, recharge, and proxy tools.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.