Skip to main content
Glama

Trust Preflight

trust_preflight
Idempotent

Before paying: who is paid, what's delivered, what changed — signed verdict against your policies. Free quote: dry_run=true. Endpoint verdict: trust_report. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/preflight/check.

Input Schema

NameRequiredDescriptionDefault
intentYesThe intended invocation: operation (required), params_summary (sha256 of canonical params), advertised_cost_usdc
policyNoPolicy strings (max 20)
contextNoprincipal_wallet + chain. Optional.
dry_runNotrue = free dry-run, intercepted before the payment gate
subjectYesThe spend target: server_id (required), artifact (mcpb:// | oci:// | https://), claimed_version
idempotency_keyYesIdempotency key: UUID v4, client-generated, one per logical request. Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first request's receipt wins even if you resend different inputs. Published example keys are rejected. Keys are scoped per tool and per payer account: a key never returns another wallet's receipt.

Output Schema

NameRequiredDescriptionDefault
howYesHow to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header
toolYesTool name, e.g. check_url_custom
assetYesSettlement asset
priceYesExact price, e.g. "$0.25"
networksYesEVM CAIP-2 network ids accepted
paid_urlYesx402-paid HTTPS URL to POST the tool inputs to
facilitatorYesx402 facilitator
payment_requiredYesAlways true: this MCP tool is a payment pointer; the tool itself is monetized via x402.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedOutput schema / properties / price / description
      Previous value: -"Exact price, e.g. \"$0.05\""New value: +"Exact price, e.g. \"$0.25\""
  2. Added

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds substantial context beyond annotations: the $0.25 USDC price on Base/Arbitrum One, the x402 v2 PAYMENT-SIGNATURE header requirement, POSTing inputs as JSON to paid_url, and that dry_run is intercepted before the payment gate. Annotations already declare openWorld/idempotent/non-destructive, so the remaining gap is minor (e.g., failure/timeout behavior on payment).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the core purpose and the free-vs-paid decision, then the transport details. Dense and mostly waste-free, though the raw URL and docs link add some visual clutter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists, so return values needn't be explained; the description supplies the payment protocol, endpoint, and the dry_run bypass. Given the 'Paid tool' claim it could say more about what happens if payment fails, but the essentials for correct invocation are covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents subject, intent, policy, context, dry_run and idempotency_key. The description echoes dry_run and the payment mechanics but adds no field-level syntax beyond what the schema states; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('preflight' check producing a 'signed verdict against your policies') and frames the decision it supports (who is paid, what's delivered, what changed). It explicitly distinguishes itself from the sibling trust_report ('Endpoint verdict: trust_report'), though the phrasing is somewhat compressed and sales-like.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Before paying') and names the alternative for a related need ('Endpoint verdict: trust_report'), plus the free path ('dry_run=true'). No explicit when-not guidance, but the routing information an agent needs is present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.