Agent Zero — ERC-8004 Trust Filter
Server Details
Trust filter for ERC-8004: only ~3.8% of x402 endpoints hit 5+ payers/30d. Free MCP; x402 upgrade.
- Status
- Healthy
- Uptime
- 92.2% over 75 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 6 tools
agent_trust_teaser and get_agent_summary both take the same optional chain/agent_id args and return per-agent data from the same index, with the teaser being a redacted derivative of the paid endpoint — an agent could plausibly pick either before understanding the distinction. The other four tools (coverage stats, leaderboards, network graph teaser, x402 endpoint directory) are clearly distinct.
Four tools follow verb_noun (get_agent_summary, get_coverage_stats, get_leaderboards, list_payable_x402_endpoints) but the two agent/network tools use a noun_teaser pattern with no verb, breaking the convention. The pattern is readable but mixed.
Six tools is a sensible scope for a trust/intel server covering per-agent vetting, market sizing, discovery, and payment graph preview. Slightly lean, and the teaser/summary pair could arguably be one tool, but nothing is bloated.
The set covers per-agent checks, market coverage, ranked discovery, network preview, and payable-endpoint discovery, with clear paid counterparts documented for each gap. Free-tier gaps (full verdicts, payment amounts, owner identity) are intentional monetization rather than dead ends.
Available Tools
6 toolsget_agent_summaryAInspect
Objective, counts-only signals for one ERC-8004 agent.
Args (BOTH OPTIONAL — call with {} to see Agent Zero itself):
chain: one of "base", "ethereum". Default: "base".
agent_id: the numeric ERC-8004 agent id. Default: 19353 (Agent Zero, the agent serving this MCP endpoint).
Example: {} returns Agent Zero on base; {"chain": "base", "agent_id": 19353} is the explicit form.
Returns reachability, TLS validity, x402 support, payments to the owner wallet and to the agent's own address (booleans only: payments_to_owner_wallet, payments_to_agent_address, payment_attribution; payments_received is deprecated, sunset 2026-11-07), MCP tool count, OpenAPI method count, well-known presence, owner-named (boolean), and a neutral status label (status_label_v2: Reachable, payment signals / Reachable, no payment signals / Stub or unreachable; the old status_label is deprecated, sunset 2026-11-07). No owner identity string and no payment amounts — those are paid. Returns an error field if the agent is not indexed. Use this to vet a counterparty agent before transacting.
Paid counterpart: GET /v1/intel/agent/{agent_id}?chain={chain} (x402, USDC on base-mainnet) unlocks trust_verdict (safe_to_transact / caution / avoid / insufficient_data), readiness_score, Sybil-adjusted reputation, and the reviews-from-paid-jobs (commerce-backed) breakdown — the decision-driving values this free response returns as null inside a locked map. Every response carries an unlock block with the exact paid endpoint, price, and payment discovery.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | base | |
| agent_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so: it discloses that the response is booleans-only, that locked fields come back as null inside a `locked` map, that an `error` field appears when the agent is not indexed, and it flags two deprecated fields with explicit sunset dates (2026-11-07). That is well beyond what structured fields provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the purpose, then a clean Args block, then returns, then the paid upsell. It is dense rather than padded, but the defaults are stated twice (in Args and again in the Example sentence), and the paid-counterpart paragraph is long relative to the free tool's behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description must enumerate return fields — and it does, listing reachability, TLS validity, x402 support, the three payment booleans, MCP/OpenAPI counts, well-known presence, owner-named, and status_label_v2 values. Combined with the error-field and locked-map notes, an agent has everything needed to call it and interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate and it does fully: `chain` is documented as one of "base" or "ethereum" with default "base" (an enum constraint the schema lacks), and `agent_id` is described as the numeric ERC-8004 id defaulting to 19353 (Agent Zero). The worked example `{"chain": "base", "agent_id": 19353}` makes the call shape unambiguous.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource — counts-only objective signals for one ERC-8004 agent — and immediately bounds scope with the explicit exclusion 'No owner identity string and no payment amounts — those are paid.' An agent can tell exactly what this returns versus the paid intel endpoint without any ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a concrete usage directive ('Use this to vet a counterparty agent before transacting') and names the paid alternative with the condition that selects it (when you need trust_verdict, readiness_score, Sybil-adjusted reputation). It does not differentiate from the similarly named sibling agent_trust_teaser, which an agent could plausibly confuse with this tool, so it falls just short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_coverage_statsAInspect
Live coverage of the ERC-8004 agent economy across Base and Ethereum.
Returns counts only: how many agents are indexed, how many expose a live MCP server / OpenAPI / well-known card, total MCP tools and OpenAPI methods observed, contracts verified, EOAs and owners identified, plus a per-chain breakdown. No names, addresses, or handles. Use this to size the market and see where capability density is growing.
Paid counterpart: GET /v1/intel/market (x402, USDC on base-mainnet) returns the full capability market map — which capabilities are saturated vs open, per-capability agent lists, and momentum. Every response from this free tool carries an unlock block with the exact paid endpoint, price, and payment discovery.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Since there are no annotations, the description must carry the full burden. It discloses that the tool is read-only (returns data) and details what is NOT included (e.g., no names/addresses), which is useful. It also mentions a unique behavior: every response includes an 'unlock' block with pricing info for a paid endpoint, which is helpful. It doesn't specify rate limits or error cases, but for a no-parameter read tool, this is sufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is moderately concise with two paragraphs. The first paragraph states the primary function and output format, which is good front-loading. The second adds the paid counterpart and unlock block, which is useful but slightly verbose. Each sentence contributes value, though the second paragraph could be tightened without losing key info. It is structured but not overly long.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no parameters, no output schema, and no annotations, the description is complete enough for an agent to call it correctly. It explains what to expect in the response (counts, per-chain breakdown) and the paid upgrade. There is no missing information that would prevent correct usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With zero parameters and 100% schema coverage, the schema itself doesn't provide any parameter details. The description compensates by explaining the type of data returned (counts, breakdowns, per-chain) and the additional unlock block. This is valid because the tool takes no arguments, so the description effectively clarifies what the tool provides given no inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Live coverage of the ERC-8004 agent economy' with specific output details. It distinguishes itself by emphasizing it returns counts only, not actual names or addresses, which differentiates it from siblings like get_agent_summary. The verb 'get' and the resource 'coverage stats' are explicit and precise.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear guidance on when to use this tool: to 'size the market' and see where capability density is growing. It also mentions a paid counterpart for more detailed data for those needing capability-level specifics. However, it does not explicitly state when NOT to use this tool or mention alternatives like get_agent_summary, though the definition implies the free/paid distinction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_leaderboardsAInspect
Top ERC-8004 agents by live capability, plus the most recently indexed.
Three ranked lists — top by live MCP tool count, top by OpenAPI method count, and most-recently indexed — each with agent_id, chain, public name, a shareable detail URL, and the relevant count. Names and counts only: no owner wallets, handles, or endpoint URLs. Use this to find the most capable / most active agents to integrate or watch.
Paid counterpart: GET /v1/intel/trending (x402, USDC on base-mainnet) returns trending intel — top earners, fastest-rising agents, and integration candidates ranked with the signals behind the ranking. Every response from this free tool carries an unlock block with the exact paid endpoint, price, and payment discovery.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries the full burden. It discloses exactly what fields are returned (agent_id, chain, public name, shareable URL, relevant count), what is excluded (owner wallets, handles, endpoint URLs), and that every response includes an 'unlock' block with paid endpoint/price/payment discovery. Minor omissions like pagination or rate limits are not critical for a no-parameter read-only tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence adds value: it fronts the main purpose, then details the lists, then gives usage guidance and notes the paid alternative. No filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and no annotations, the description fully explains what the response contains, what it omits, and the response's unlock block. For a zero-argument tool, this is sufficient for correct invocation and interpretation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has 0 parameters, so there is nothing to clarify. Baseline for 0 params is 4; the description adds no unnecessary parameter commentary, which is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific resource ('leaderboards' of ERC-8004 agents) and a clear action (returns three ranked lists). It details exactly what the lists rank (live MCP tool count, OpenAPI method count, most-recently indexed), which distinguishes it from sibling tools like get_coverage_stats or get_agent_summary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use this to find the most capable / most active agents to integrate or watch.' It also names a paid alternative (GET /v1/intel/trending) and explains what that returns, giving the agent both a when-to-use and a when-not-to-use reference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_payable_x402_endpointsAInspect
Directory of ERC-8004 agents that answered a well-formed HTTP 402 x402 challenge during our last field probe. OBSERVATION ONLY — not a score, ranking, or endorsement.
Args (ALL OPTIONAL — call with {} for the top 10 across both chains):
chain: one of "base", "ethereum" (omit for both). Default: null.
limit: 1..10 rows (free-tier cap). Default: 10.
Returns per-row raw probe facts: agent_id, chain, endpoint_url, http_402_ok, network, asset, price_usd as the challenge advertised, payTo_present (boolean — the actual address is paid), sibling_agent_ids (other ERC-8004 ids served by the same gateway row — the 'shared operator' cue), probed_at. Plus total_endpoints_valid_402 and total_agents_valid_402 so a caller can see what fraction of the surface this free slice covers.
Source: the 0946 field-test one-shot probe (unauthenticated, read-only, no payment signed). See the field_test_url field for the full writeup.
Paid counterpart: the paid x402 /v1/intel/* endpoints return the same-origin enriched intel on any single agent in this list — owner identity, payment history, peers, trust verdict, Sybil-adjusted reputation. Every response from this free tool carries an unlock + paid_upgrade block with the exact paid endpoint, price, and payment discovery.
| Name | Required | Description | Default |
|---|---|---|---|
| chain | No | ||
| limit | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does: it states the probe is unauthenticated and read-only with no payment signed, discloses the free-tier row cap, and notes the total counts so the caller can gauge how partial the slice is. It also explains that every response embeds an unlock/paid_upgrade block, which is exactly the kind of side effect annotations could not convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The text is dense but well-structured and front-loaded: purpose first, then args, then returns, then source/paid-upgrade. A few clauses are repetitive (the free-tier cap is implied twice) and it is longer than strictly needed, but almost every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description enumerates the return fields (agent_id, chain, endpoint_url, http_402_ok, network, asset, price_usd, payTo_present, sibling_agent_ids, probed_at) plus the totals, which is exactly what the agent needs to interpret results. It even names the provenance probe, though field_test_url is referenced but omitted from the row list — a trivial gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate and it does: `chain` is documented as one of "base" or "ethereum" with omit-for-both semantics (the schema declares no enum), and `limit` is bounded to 1..10 with the free-tier cap and default of 10. This adds essential meaning the bare schema lacks.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Names a concrete resource (a directory of ERC-8004 agents that passed an HTTP 402 x402 challenge) with the qualifying condition, so the agent knows exactly what surface it enumerates. The explicit 'OBSERVATION ONLY — not a score, ranking, or endorsement' line draws a boundary against ranking-style siblings like get_leaderboards. Verb+resource+scope is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear calling context: all args optional, `{}` returns the top 10 across both chains, and the free tier caps at 10 rows. It also explains the paid counterpart and when enrichment is warranted, but it never routes the agent to a specific sibling by name. Strong context without explicit alternative selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Added
list_payable_x402_endpoints
1 tool update
- Added
agent_trust_teaser
1 tool update
- Changed
get_agent_summary3 fields changed- added
Input schema / properties / agent_id / defaultAdded value: +19353 - added
Input schema / properties / chain / defaultAdded value: +"base" - removed
Input schema / requiredRemoved value: -[ - "chain", - "agent_id" -]
4 tool updates
- First observed
get_agent_summary - First observed
get_coverage_stats - First observed
get_leaderboards - First observed
get_network_teaser
Related MCP Connectors
Free signed trust report on an x402 endpoint: lint, signed offers, ERC-8004, payer mix.
Paid MCP tools for URL payment-safety scanning and provider recommendations; USDC on Base via x402.
x402-paid MCP data: trend feed + visibility audit. USDC/Base. No API key. No PII.
x402 MCP with exact and batched payments for recurring wallet, trading, market and web workflows.
Related MCP Servers
- AlicenseAqualityBmaintenanceBefore an AI agent pays an x402 endpoint, checks whether it's safe to pay: liveness, scam/anomaly scan (payTo hijack, bait-and-switch, honeypot), and on-chain receiver verification. ~70% of x402 endpoints are dead or scams.3MIT
- AlicenseAqualityDmaintenanceMCP server for assessing counterparty risk in x402 payments using on-chain data, providing risk scores, decisions, and wallet spending policies to prevent fraud and unauthorized payments.10132 npm1MIT
- AlicenseNot gradedqualityBmaintenanceEnables users to run read-only trust checks on an x402 endpoint and receive a signed report covering endpoint lint, signed offers, ERC-8004 identity, and payer mix before paying.MIT

tereno-mcpofficial
AlicenseNot gradedqualityFmaintenanceMCP server for verifying blockchain safety on Base via x402, with free pricing/receipt tools and paid per-call guard, contract, and metadata checks settled in USDC.21 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.