PHION Payments
Server Details
Agent-native payment safety, x402 quote comparison, route selection, reconciliation, duplicate-charge prevention and signed receipts.
- Status
- Healthy
- Uptime
- 99.7% over 21 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-06-18
- URL
TDQS
Scored across 29 tools
Multiple clusters of near-duplicate tools exist: three preflights (preflight, payment_preflight, payment_capability_preflight), several route/quote selectors (payment_optimizer, payment_route_selector, x402_v2_router, x402_quote_comparator), and transaction_recovery vs transaction_recovery_v2 which are difficult to choose between. Assurance/verification tools (transaction_assurance, rwa_transaction_assurance, payment_delivery_atomicity, journey_verify) also blur together, making misselection likely.
All names use snake_case, which is consistent at the surface level, but the conventions vary between verb-first (verify, preflight, payment_diagnose) and noun-first (payment_route_selector, transaction_risk_score). Bare 'preflight'/'verify' sit awkwardly beside qualified variants like 'payment_preflight', muddying the pattern.
29 tools is heavy for the domain, and the count is inflated by redundant variants (transaction_recovery/_v2, three preflights, multiple route selectors) rather than distinct capabilities. This volume increases selection cost without proportionate added scope.
The surface covers the payment lifecycle well: preflight validation, quoting/comparison, route selection, budget/policy guards, execution, receipt reconciliation, assurance, and recovery. Minor gaps exist (e.g. explicit refund/cancellation or dispute tooling), but core workflows appear fully supported.
Available Tools
29 toolsa2a_transaction_bridgeA2A Transaction BridgeCRead-onlyIdempotentInspect
Bind an A2A task to a transaction without silently transferring authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true and destructiveHint=false, indicating no side effects. The description states it 'Bind[s] an A2A task to a transaction' and charges '0.004 USDC', which implies a state-mutating action with a monetary side effect, directly contradicting the read-only annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loads the intended action, but it is fragmented and includes unexplained elements like '0.004 USDC' and a trailing adjective list. The semicolon creates an awkward break, reducing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although an output schema exists and annotations are present, the description is incomplete for a transaction-related bridge. It omits usage context, prerequisites, and any explanation of the binding behavior, which is essential given the tool's apparent financial and authority implications.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are 0 defined parameters per the context, so the baseline is 4. The description adds no parameter details, but there are no parameters to document beyond the free-form example in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a verb ('Bind') and two resources ('A2A task', 'transaction'), but the relationship and purpose remain opaque due to unexplained jargon. It does not differentiate from the many sibling payment/transaction tools, leaving the agent to infer the exact operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when or when not to use this tool, no prerequisites, and no alternatives mentioned. The description offers only a cryptic condition ('without silently transferring authority') that does not help an agent choose between this and the numerous sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agent_budget_guardCInspect
Enforce per-call, task, session and period budgets; 0.002 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It helpfully discloses the invocation cost (0.002 USDC), but for an enforcement tool it omits the critical semantics: what happens on a budget violation (deny, throw, or return a verdict), whether it is a dry-run or a hard gate, and any auth requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded clause with zero padding, but it is arguably under-specified rather than concise for a tool with three required nested inputs and no annotations. Nothing is wasted, yet little is delivered.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, but the description is still incomplete for a budget-gate tool: it never states enforcement behavior, the atomic-unit convention, or how the four scopes interact. An agent cannot confidently wire it into a payment flow from this text alone.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the schema includes a worked example, so the three required objects (request, usage, policy) and their atomic fields are already documented. The description adds no parameter meaning beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Enforce') and resource ('budgets') and enumerates the four budget scopes (per-call, task, session, period), so the function is unambiguous. It does not, however, differentiate itself from the many budget/spend siblings such as delegated_spend_policy or subscription_spend_guard, leaving the agent to infer the boundary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisites, and no named alternative among the ~28 sibling payment tools. The agent must guess whether this runs before a charge, as a preflight gate, or as an ongoing monitor.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delegated_spend_policyDelegated Spend PolicyCRead-onlyIdempotentInspect
Fail closed when delegated authority, per-call limit or remaining budget is insufficient.; 0.003 USDC. Deterministic, evidence-bounded and signed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds genuinely useful traits beyond that: 'fail closed', 'deterministic', 'evidence-bounded' and 'signed'. These are valuable but delivered as unconnected fragments rather than coherent behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The text is short but badly malformed: a dangling semicolon, an orphaned pricing fragment '0.003 USDC', and a trailing attribute list with no connective tissue. The fail-closed condition is front-loaded, but the fragments do not earn their place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists and annotations cover safety, so return values need not be described. Still, for a policy guard surrounded by near-identical siblings, the description never explains what it does, when to invoke it, or how it differs from agent_budget_guard or mandate_reserve, leaving the agent unable to route correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With zero declared parameters and 100% schema description coverage, the baseline is high. The description's references to 'delegated authority', 'per-call limit' and 'remaining budget' map onto the schema example fields (mandate.active, max_per_transaction_atomic, remaining_atomic), adding mild semantic anchoring for a free-form schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description conveys the domain (delegated authority, per-call limit, remaining budget) and a fail-closed behavior, so an agent can guess this is a spend-policy guard. However, it never states a clear verb or what the tool actually evaluates or returns, and it is confounded by stray fragments like '0.003 USDC'. Purpose is implied rather than stated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance and no routing to alternatives, despite many closely related siblings (agent_budget_guard, mandate_reserve, payment_capability_preflight). The only implied condition is that it fails closed on insufficient authority, which is a behavior, not a selection guideline.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
duplicate_charge_detectorDuplicate Charge DetectorBRead-onlyIdempotentInspect
Detect repeated transaction hashes, payment identifiers and idempotent intents; 0.003 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| charges | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description's real added value is the price disclosure ('0.003 USDC'), which is genuinely useful behavioral context, but it says nothing about return shape, detection thresholds, or what counts as a duplicate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with zero filler; the detection target leads and the cost trails. Nothing is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With one required parameter and annotations covering safety and idempotency, the definition is nearly callable, but with no output schema the description should say what a detection result looks like (matched pairs? boolean? report?) and it does not.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the single 'charges' parameter is typed only as an array of bare objects, so the schema gives almost nothing. The description partially compensates by naming the identifiers being compared (transaction hashes, payment identifiers, intents), but it does not define the item fields the example implies (amount, network, recipient, transaction).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Detect') and enumerates the resource being detected: repeated transaction hashes, payment identifiers, and idempotent intents. Clear on its own, but it does not differentiate itself from adjacent payment tools like payment_diagnose or payment_receipt_reconciler, so an agent must infer the boundary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use or when-not-to-use guidance, and no alternative tool is named despite ~28 payment-related siblings. The phrase 'idempotent intents' hints at a retry/double-spend scenario but never states the trigger condition explicitly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
execution_cost_estimatorExecution Cost EstimatorCRead-onlyIdempotentInspect
Execution Cost Estimator; deterministic signed assessment over supplied input.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint, idempotentHint, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds 'deterministic signed' assessment, hinting at repeatability and authenticity, but does not explain what signing means, what authentication is required, or what the assessment returns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The single sentence is front-loaded with the tool title and then uses vague filler ('deterministic signed assessment over supplied input'). It is under-specified rather than concise, and every part beyond the title fails to earn its place by adding actionable meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with required cost steps and a budget input, sitting among many payment/transaction siblings, the description does not explain what is estimated, how budget relates to the result, or when another tool should be used. The output schema and annotations cover some gaps, but the description remains incomplete for correct selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 100% description coverage and includes an example with steps and budget_atomic, though the description itself says nothing about these required inputs. With high schema coverage, the baseline of 3 is appropriate; the description does not compensate for any gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description restates the tool name/title as 'Execution Cost Estimator' and adds only the vague phrase 'deterministic signed assessment over supplied input.' It does not state a specific verb+resource beyond the title and gives no sibling differentiation against the many payment-related tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no indication of when to use this tool versus alternatives such as payment_preflight or payment_optimizer. No prerequisites, exclusions, or routing context are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
journey_verifyCRead-onlyIdempotentInspect
Verify hash continuity, timestamps and ordered intent→quote→payment→delivery lifecycle; 0.010 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| events | Yes | ||
| expected | No | ||
| journey_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered structurally. The description adds genuinely useful context by disclosing the cost (0.010 USDC) and the invariants checked, but says nothing about return behavior or how failures are reported. Adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single compact sentence that front-loads the verification targets before the cost. Nothing is wasted, though it is dense enough that the missing parameter guidance could not have fit without restructuring.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With three parameters, 0% schema coverage, nested objects, and no output schema, the description carries the full burden and leaves major gaps: the expected object contents, the meaning of journey_id, and what a verification result looks like. For a paid verification call, an agent cannot confidently construct the input from this alone.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the schema has nested objects (events, expected) with no field-level documentation. The mention of 'hash continuity' and 'timestamps' loosely maps to artifact_sha256/observed_at and 'ordered' hints at sequence, but journey_id, the expected object, and event kinds remain unexplained in both schema and description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (verify) and a precise resource (hash continuity, timestamps, ordered intent→quote→payment→delivery lifecycle), which sets it apart from generic siblings such as verify or preflight. It does not, however, explicitly name which sibling handles the adjacent cases (e.g. payment_diagnose, payment_receipt_reconciler).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use statement, no prerequisites, and no routing to alternatives among the many payment/transaction siblings. Usage is only implied by the lifecycle scope, leaving the agent to guess when this tool is preferable to verify or payment_diagnose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mandate_reserveCIdempotentInspect
Atomic spending reservation with cumulative cap and conflict-safe idempotency; 0.004 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| amount | Yes | ||
| mandate_id | Yes | ||
| ttl_seconds | No | ||
| idempotency_key | Yes | ||
| capability_token | Yes | ||
| cumulative_limit | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=true, and destructiveHint=false, so idempotency is partly structured data. The description adds genuine context by saying the idempotency is 'conflict-safe' and that the cap is cumulative, plus a price point (0.004 USDC). It omits what happens on failure, whether reserved funds must be released, TTL behavior, and the auth role of capability_token.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler, and the price is appended compactly. It is efficient, though the terseness partly reflects under-specification rather than disciplined brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 6-parameter, 5-required mutating payment tool with no output schema and no parameter documentation anywhere, the description leaves critical gaps: token requirements, amount/cap units and relationship, TTL default, and failure/release semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for six parameters, so the description is the only source of meaning and it covers almost nothing. It gestures at cumulative_limit ('cumulative cap') and idempotency_key ('idempotency'), but says nothing about amount units, mandate_id, the required capability_token, or ttl_seconds.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific resource and mechanism ('atomic spending reservation with cumulative cap and conflict-safe idempotency'), which is far more informative than the bare tool name mandate_reserve. It does not, however, distinguish this tool from dense siblings such as agent_budget_guard, delegated_spend_policy, or subscription_spend_guard, which occupy the same spending-control space.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisite/ordering information, and no named alternative among the ~28 sibling payment tools. An agent cannot tell from the description when a reservation is the right call versus a preflight/guard check.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mcp_transaction_gatewayMCP Transaction GatewayARead-onlyIdempotentInspect
Bind an MCP tool call to transaction evidence without granting undeclared authority.; 0.004 USDC. Deterministic, evidence-bounded and signed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered structurally. The description adds value beyond that by disclosing cost (0.004 USDC) and behavioral properties (deterministic, evidence-bounded, signed) that the annotations do not carry. It stops short of saying what the binding produces or what authority constraints mean operationally, so a 5 is not warranted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loads the core action before the price and property fragments. Structure is slightly harmed by telegraphic fragments and odd punctuation ('authority.; 0.004 USDC.'), which read as clipped slogans rather than complete statements, but nothing is padded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, and annotations cover the safety profile. What is missing is the operational role: with a permissive input schema and 28 closely related payment siblings, the agent still cannot tell what inputs to bind or when this gateway is the correct choice. Adequate but with a real routing gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool declares 0 named parameters (schema is a permissive object with minProperties 1 and additionalProperties true), so per the baseline this scores 4. The schema example hints at source.id / transaction.id shapes, and the description adds nothing to that, but with no properties to document the description is not obliged to compensate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and object — 'Bind an MCP tool call to transaction evidence' — plus a scope qualifier ('without granting undeclared authority'), so an agent can form a rough idea of the operation. However, it never differentiates itself from the large set of payment/transaction siblings (transaction_assurance, a2a_transaction_bridge, preflight, etc.), so an agent has no way to know why this gateway rather than those. Clear enough to score 4, but the missing sibling contrast blocks a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use statement, no precondition, and no named alternative despite 28 sibling tools in the same payment/transaction domain. The only contextual cue is the '0.004 USDC' price fragment, which implies a paid call but does not tell the agent when to route here versus a2a_transaction_bridge or transaction_assurance. Effectively no usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_capability_preflightDeclare Payment CapabilityBRead-onlyIdempotentInspect
Free anonymous non-blocking self-report of wallet, mandate, x402 v2, network, asset, account kind and funding readiness. Detects EVM account types incompatible with exact EIP-3009 before signature. Stores only a daily pseudonymous actor and normalized reason; never a wallet, balance, signature or request content.
| Name | Required | Description | Default |
|---|---|---|---|
| intent | Yes | ||
| service | Yes | ||
| funds_available | No | ||
| evm_account_kind | No | ||
| spend_authorized | No | ||
| supported_assets | No | ||
| supports_x402_v2 | No | ||
| wallet_available | No | ||
| supported_networks | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent and non-destructive, so the baseline is covered. Beyond that, the description discloses real behavioral traits: the call is non-blocking, it stores only a daily pseudonymous actor and normalized reason, and it never stores a wallet, balance, signature or request content, plus it detects incompatible EVM account types before signature. This privacy and detection detail materially exceeds what the annotations provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences, front-loaded with what the tool reports and then the safety/detection and data-handling guarantees. Dense but each clause carries distinct information with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description should ideally say what the caller receives back from this detection/report, and it does not. It is complete on privacy and behavior but silent on return semantics and on usage relative to sibling preflight tools, leaving an agent with reasonable but not full context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must carry parameter meaning, and it does enumerate the readiness dimensions (wallet, mandate, x402 v2, network, asset, account kind, funding) that map onto the nine inputs. However, it gives no format or value guidance, and the required 'service' and 'intent' parameters are never explained, leaving gaps for a 9-parameter schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Names a specific verb and resource: a self-report of wallet, mandate, x402 v2, network, asset, account kind and funding readiness, plus an EIP-3009 compatibility check. This is far more concrete than a tautology. It does not, however, distinguish itself from close siblings such as payment_preflight or preflight, so sibling differentiation is missing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says the call is 'free anonymous non-blocking,' which hints it is cheap and safe to invoke, but it never states when to use this instead of payment_preflight, preflight, or payment_diagnose. No prerequisites, no exclusions, no routing guidance is given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_delivery_atomicityPayment Delivery AtomicityCRead-onlyIdempotentInspect
Payment Delivery Atomicity; deterministic signed assessment over supplied input.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, and a closed-world scope, so the safety profile is covered. The description does add two behavioral facts beyond annotations — the assessment is deterministic and "signed" — but it never explains what the verdict looks like, what a mismatch implies, or what "signed" means in practice.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is short and free of padding, but the first clause is redundant with the name and the second is so compressed as to carry almost no information. Brevity here reflects under-specification rather than disciplined conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described. However, for a two-required-input verification tool with an untyped schema, the description omits the core semantics (what the inputs represent, what constitutes a passing/failing verdict) and any usage context, leaving the definition materially incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although the schema reports 100% description coverage, the schema defines no properties at all: it only lists required keys "payment" and "delivery", permits additionalProperties, and shows one example with settled/delivered/intent_id fields. The description contributes nothing about the expected shape or meaning of those two inputs, so it fails to compensate for a structurally empty schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description largely restates the name/title ("Payment Delivery Atomicity") and adds only the vague phrase "deterministic signed assessment over supplied input." It never states what is actually assessed — e.g., whether payment and delivery are atomic (both settled or neither) — nor how it differs from siblings like payment_preflight, transaction_assurance, or duplicate_charge_detector.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use, when-not-to-use, or alternative selection guidance at all. With 28 sibling tools covering payments, preflight, and transaction assurance, the absence of any routing hint leaves the agent to guess from the name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_diagnoseCInspect
Free diagnosis of the exact payment-funnel stage and machine-readable recovery actions for any PHION service.
| Name | Required | Description | Default |
|---|---|---|---|
| service | Yes | ||
| body_valid | No | ||
| error_code | No | ||
| http_status | No | ||
| x402_version | No | ||
| selected_network | No | ||
| has_payment_signature | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose two real traits beyond the schema: the call is free (a cost trait) and it returns machine-readable recovery actions. However, it omits whether the operation is read-only, what auth or rate limits apply, and what the recovery output looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single well-formed sentence with the key distinction (exact stage + recovery actions) front-loaded and no filler. It is efficient, though arguably too terse given the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 parameters, no annotations, and no output schema, one sentence leaves major gaps: parameter formats and interrelationships (body_valid, error_code, http_status) and any return-shape guidance are absent. A caller has only the bare purpose to work from.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Seven parameters with 0% schema description coverage and no enums, yet the description explains none of them. Concepts like service, error_code, x402_version, or has_payment_signature and their interplay are left entirely unaddressed, so it fails to compensate for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
It names a specific verb and resource ('diagnosis of the exact payment-funnel stage') plus the output ('machine-readable recovery actions'), which is far more informative than a tautology. It is not fully disambiguated from close siblings like payment_preflight or transaction_recovery, but an agent can reasonably tell it apart.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The only usage cue is the scope 'for any PHION service' and the word 'Free'. There is no statement of when to prefer this over payment_preflight, transaction_recovery, or try_service, and no prerequisites are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_optimizerPayment OptimizerBRead-onlyIdempotentInspect
Rank only integration-tested payment routes under explicit cost and latency constraints.; 0.003 USDC. Deterministic, evidence-bounded and signed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, openWorldHint=false and destructiveHint=false, so the safety profile is fully covered structurally. The description adds 'deterministic, evidence-bounded and signed,' which is genuine behavioral context about output trustworthiness, but it omits return-shape/pagination details (mitigated by the output schema).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is short and front-loads the core action, but the fragment '0.003 USDC.' is unexplained (tool cost? minimum amount?) and the stray semicolon makes the sentence structure sloppy. Each fragment does not clearly earn its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described, and annotations cover safety. However, for a tool sitting among several payment-routing siblings, the description leaves the routing decision itself unaddressed, which is the main missing context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Parameter count is 0 and schema description coverage is 100%, so per the rubric the baseline is 4. The description does not (and need not) elaborate on the policy/routes payload the schema already documents via its example.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (rank) and resource (payment routes) with a scope qualifier (only integration-tested) and operating constraints (cost and latency). Clear, but it never names or contrasts with the obvious sibling payment_route_selector or x402_v2_router, so an agent must infer which routing tool to pick.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'under explicit cost and latency constraints' plus 'only integration-tested' implies the condition for use, but there is no explicit when-to-use/when-not guidance and no mention of the alternative routing siblings. Usage is inferred rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_preflightBRead-onlyIdempotentInspect
Fail-closed x402 v2 firewall for network, asset, recipient, amount, scheme, resource host and expiry; 0.002 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| policy | Yes | ||
| intent_id | No | ||
| payment_requirement | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), but the description adds genuinely new behavioral context: the operation is 'fail-closed' (rejects unless every dimension passes) and carries a cost of 0.002 USDC. These are traits the structured fields do not convey and they materially affect invocation decisions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single tight sentence that front-loads the core identity ('fail-closed x402 v2 firewall') and then lists scope. The trailing '; 0.002 USDC' is a fragment whose meaning (per-call cost?) is left for the reader to infer, which slightly weakens an otherwise efficient structure.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The output schema exists, so return values need not be described, and the read-only nature is covered by annotations. But for a critical payment-gating tool with two required nested-object parameters at 0% schema coverage, the description omits when to call it relative to siblings and how pass/fail manifests, leaving meaningful gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the schema uses opaque nested objects, so the description has to compensate. It enumerates the policy check dimensions (network, asset, recipient, amount, scheme, resource host, expiry), which maps well onto the policy object's allowed_* fields. It says nothing about payment_requirement or intent_id, so coverage is partial.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific resource and behavior: a fail-closed x402 v2 firewall validating seven enumerated dimensions (network, asset, recipient, amount, scheme, resource host, expiry). An agent can tell it validates x402 payment requirements. It does not, however, distinguish itself from the many closely-named siblings (payment_capability_preflight, preflight, transaction_assurance), which is the main gap.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use or when-not-to-use statement, and no alternative is named despite a crowded preflight/assurance sibling family. The 'preflight' name and 'firewall' framing hint at a validation step before payment, so the intent is inferable, but nothing routes the agent between this and payment_capability_preflight or preflight.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_receipt_reconcilerPayment Receipt ReconcilerBRead-onlyIdempotentInspect
Compare canonical and common x402 payment/receipt aliases, settlement state and coverage; 0.003 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| payment | Yes | ||
| receipt | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds a genuinely useful behavioral fact, the 0.003 USDC cost, but omits what a mismatch produces, whether it settles or merely inspects, and any auth/network prerequisites.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence covering action, scope, and price with no padding. It is arguably too terse for a two-nested-object tool, but nothing in it is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description must at least imply the result shape; 'settlement state and coverage' gestures at the compared dimensions but never says whether the return is a boolean, a diff, or a coverage report. For a nested-object comparison tool with zero schema coverage, that leaves an agent guessing about the response.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and both parameters are undescribed nested objects, so the description carries real burden. It partially compensates by naming the two sides (payment and receipt) and flagging that canonical and common alias forms are both accepted, but it gives no field-level guidance beyond the schema's example.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Compare') and resource ('x402 payment/receipt aliases, settlement state and coverage'), which is enough to separate it from generic siblings like payment_diagnose or payment_preflight. It stops short of naming which sibling to use instead, and the 'aliases' phrasing is jargon that assumes x402 fluency.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use condition, no exclusions, and no routing to alternatives (e.g. duplicate_charge_detector or payment_diagnose) despite a crowded sibling set. The only contextual cue is the '0.003 USDC' price, which signals a paid call but says nothing about when it is warranted.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_route_selectorPayment Route SelectorCRead-onlyIdempotentInspect
Reject impossible x402 routes, rank safe eligible routes by policy and return the exact next payment action; read-only, deterministic, 0.002 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| policy | Yes | ||
| routes | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so 'read-only, deterministic' is largely redundant. The one genuinely additive fact is the cost ('0.002 USDC'), which annotations do not convey. It says nothing about what makes a route 'impossible,' error behavior, or the decision criteria, so beyond the price disclosure it adds little for a mutation-free tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, dense, front-loaded sentence with the operative verbs first and the cost/behavior facts after a semicolon. Every clause carries information, though the triple-verb construction ('reject/rank/return') packs distinct behaviors tightly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no exposition, and annotations carry the safety profile. But for a tool taking two complex nested-object parameters at 0% schema coverage, the description omits any parameter semantics, usage context, or explanation of the 'impossible vs safe eligible' decision rules that are the tool's core behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and both required parameters are nested objects with many sub-fields (route eligibility flags, policy constraints). The description references 'policy' only obliquely and never explains any field like allowed_networks, max_latency_ms, or the route eligibility flags, so it fails to compensate for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States specific verbs and resource: 'reject impossible x402 routes, rank safe eligible routes by policy and return the exact next payment action.' An agent can infer this is a deterministic route-selection/filter step in the payment pipeline. It does not, however, explicitly differentiate itself from close siblings like x402_v2_router or x402_quote_comparator, so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use, when-not-to-use, or alternative routing is given. With siblings such as x402_v2_router, payment_preflight, and x402_quote_comparator, the agent has no stated signal for choosing this tool over them, nor any prerequisites or ordering guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
phion_executeExecute a PHION ServiceAIdempotentInspect
Universal PHION execution gateway: enforce a budget and persistent idempotency, execute one selected PHION service, evaluate acceptance criteria, and return a signed completion envelope. No gateway surcharge; the selected service price applies.
| Name | Required | Description | Default |
|---|---|---|---|
| input | Yes | ||
| dry_run | No | ||
| objective | Yes | ||
| target_service | Yes | ||
| idempotency_key | Yes | ||
| max_budget_atomic | Yes | ||
| acceptance_criteria | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=true, openWorldHint=true, and destructiveHint=false, so the safety profile is partly covered. The description nonetheless adds real substance: budget enforcement, persistent idempotency, acceptance-criteria evaluation, a signed completion envelope, and the pricing note ('no gateway surcharge'). It stops short of describing failure/retry behavior or the dry-run semantics.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences, front-loaded with the gateway purpose and flow, with a pricing clause that earns its place. Dense but not padded; density does cost some readability for a 7-parameter tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 7-parameter, nested-object, no-output-schema mutation tool, the description leaves meaningful gaps: dry-run behavior, input shape, atomic budget units, acceptance-criteria pointer syntax, and what happens when criteria fail are all unaddressed. Both schema and description are thin on parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description carries the burden, and it only partially compensates. It conceptually covers budget (max_budget_atomic), idempotency (idempotency_key), acceptance criteria, and target_service, but says nothing about the 'atomic' unit format, the JSON-pointer syntax for acceptance criteria, the objective field, or what dry_run does.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('execute one selected PHION service') and frames the tool as a 'Universal PHION execution gateway' that also budgets, idempotency-checks, evaluates acceptance criteria, and returns a signed envelope. That is far more informative than restating the name, but it never explicitly contrasts itself with siblings like phion_preflight or verify, so an agent must infer the boundary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Execute one selected PHION service' implies this is the terminal step after discovery/selection, but no condition is given for choosing this over phion_preflight or verify, and no prerequisites or exclusions are stated. Usage is deducible from context rather than spelled out.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
preflightCInspect
Free URL safety and reachability check.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full disclosure burden, and it discloses almost nothing beyond 'free' — no auth requirements, no explanation of what makes a URL unsafe, no behavior on failure, and no rate limits. Calling something a safety check without saying what it inspects or returns leaves real ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One front-loaded sentence with no filler; the core action leads. It is efficient, though the terseness edges toward under-specification rather than tightness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with no output schema, the description still omits what a 'safety' verdict consists of and what the caller gets back, which is the main thing an agent needs to decide whether to gate a downstream action on the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for the single required url parameter, and the description only says a URL is checked. It does not clarify expected form (absolute? scheme? relative paths rejected?), which matters because the schema only declares format: uri with no prose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a concrete verb-plus-resource framing: it checks a URL for safety and reachability. That is enough for an agent to know what it does, but it never distinguishes itself from the sibling payment_preflight, which sounds nearly identical in kind.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this versus payment_preflight, verify, or the other siblings, and no prerequisites (e.g., authenticate first, call before payment). The agent is left to infer the workflow position of a 'preflight' entirely from the name.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
quote_freshness_guardQuote Freshness GuardCRead-onlyIdempotentInspect
Quote Freshness Guard; deterministic signed assessment over supplied input.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, openWorldHint=false and destructiveHint=false, so the safety profile is covered. The description adds two genuinely new traits: the assessment is deterministic and the result is signed, which is useful in a payment-verification context. It still says nothing about what the assessment actually evaluates or how a failure is reported.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is short, but the brevity is under-specification rather than economy: the first clause duplicates the title and the second is generic filler. No wasted words, yet almost no load-bearing content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return-value detail is not required, and annotations cover the safety profile. What remains missing is essential: what constitutes 'fresh', how minimum_validity_seconds is applied, and what happens when a quote fails the guard. For a verification tool in a payment pipeline this leaves the agent unable to call it with confidence.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although schema description coverage is reported as 100%, the schema contains no properties block at all — the shape of the required 'quote' object and the 'minimum_validity_seconds' threshold appear only in an example. The description mentions neither parameter, so it fails to compensate for a schema that leaves field meaning and units (e.g. seconds, eip155 network format) implicit.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description essentially restates the title ('Quote Freshness Guard') and adds only a vague clause, 'deterministic signed assessment over supplied input.' It never states the actual operation, e.g. that it checks whether a supplied quote is still valid against its expiry and a minimum validity threshold. An agent cannot distinguish it from siblings like payment_preflight or x402_quote_comparator on this text alone.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use, when-not-to-use, or alternative routing guidance. In a sibling set crowded with preflight/assurance/quote tools (payment_preflight, x402_quote_comparator, transaction_assurance), that omission is exactly where the description should earn its keep. Nothing here helps the agent choose this tool over its neighbours.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
rwa_transaction_assuranceCInspect
Verify an RWA asset, payment, delivery and transfer restrictions; 0.020 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| asset | Yes | ||
| policy | Yes | ||
| source_urls | No | ||
| transaction | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, yet it only discloses a price (0.020 USDC). It does not say whether verification is read-only, what a pass/fail result means, whether it has side effects, or what auth is required — critical for a tool operating on payments and transfers.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with zero filler, with the cost trailing at the end. It is efficient, though arguably too terse given the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 4 parameters, 3 required nested objects, no output schema, and no annotations, the description is far too thin. It neither explains how to populate the nested object structures nor what the verification returns, leaving the agent to guess at both inputs and outputs.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% across 4 parameters, three of which are required nested objects (asset, transaction, policy) whose internal fields are entirely undocumented. The description's list of 'asset, payment, delivery and transfer restrictions' only loosely gestures at those objects and provides no field-level or format meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a concrete verb ('Verify') and resource ('RWA asset, payment, delivery and transfer restrictions'), which is more specific than most siblings. The 'RWA' qualifier distinguishes it from the generic transaction_assurance, preflight, and verify siblings, though it never names an alternative explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states what is checked but gives no when-to-use guidance, no prerequisites, and no condition for choosing it over the many overlapping assurance/preflight siblings. The only routing-adjacent information is the cost, which tells the agent price but not fit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
schema_normalize_freeBInspect
Free, rate-limited payload validation and safe key normalization before payment. Payment-critical values are never changed.
| Name | Required | Description | Default |
|---|---|---|---|
| payload | Yes | ||
| target_service | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden; it does disclose genuine behavior beyond the schema: free tier, rate limiting, non-mutation of payment-critical values. But it omits error/invalid-payload behavior, what the rate limit actually is, and whether normalization mutates or returns a new payload.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the key guarantee front-loaded after the purpose clause; no filler. Slightly dense with unattributed modifiers ('Free, rate-limited') but appropriately sized.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema and no annotations, with a nested free-form payload object and an undocumented required target_service string. An agent cannot reliably construct a valid invocation from this description alone; payload shape, service identifiers, and failure behavior are all missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%: the nested 'payload' object has no field documentation, and 'target_service' is never mentioned in the description at all, so its expected values are entirely unknown. The description adds some intent ('payment-critical values are never changed') but does not compensate for the uncovered, required parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action pair (validation and safe key normalization) on a specific resource (payload) with scope (before payment). The adjectival 'Free, rate-limited' implicitly distinguishes it from the sibling schema_normalize, but the distinction is left for the agent to infer rather than stated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a clear timing context ('before payment'), which implies when to reach for it, but never names the alternative schema_normalize or states when to use the paid variant instead. No exclusions or prerequisites are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
subscription_spend_guardSubscription Spend GuardCRead-onlyIdempotentInspect
Bind one recurring charge to approval, merchant, due time and per-charge/period budgets; 0.003 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| usage | Yes | ||
| policy | Yes | ||
| subscription | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already disclose readOnly, idempotent, closed-world, and non-destructive behavior, so the safety profile is covered. The description adds the fee (0.003 USDC) and the guardrail dimensions being enforced, which is useful. But it never explains what 'binding' produces or what happens when a charge exceeds budget, and 'Bind' carries a faint write/state-change connotation that sits awkwardly beside readOnlyHint=true (a tension, though not a clear-cut contradiction).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence with the action front-loaded and the price appended, with no filler. It is dense and jargon-heavy ('per-charge/period budgets'), but every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with three required nested objects, 0% schema coverage, and no output schema, the description is too thin. It leaves the return value (verdict? guard handle?), amount units, behavior on rejection, and any side effects unexplained, so an agent cannot fully predict the call's outcome.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and all three parameters are nested objects, so the description must carry the semantic load. It partially does: 'merchant,' 'due time,' and 'per-charge/period budgets' map onto the policy and subscription sub-fields (merchant, max_charge_atomic, period_limit_atomic, next_charge_atomic). It still omits the usage/period_atomic input and gives no types, atomic-unit conventions, or field-to-parameter mapping.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a verb ('Bind') and a resource ('one recurring charge') and scopes it to approval, merchant, due time, and per-charge/period budgets, which differentiates it from the transaction- and payment-oriented siblings. However, 'bind' is non-standard and the operational effect is ambiguous: it is unclear whether the tool registers a persistent guard, returns an allow/deny verdict, or both. The purpose is recognizable but not crisply defined.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no conditions that select this over alternatives like agent_budget_guard or delegated_spend_policy, and no exclusions. The only extra signal is the price ('0.003 USDC'), which is a cost note rather than usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
transaction_assuranceCRead-onlyIdempotentInspect
End-to-end settlement, timestamp, delivery-hash and deterministic acceptance assurance; 0.015 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| offer | Yes | ||
| intent | Yes | ||
| payment | Yes | ||
| delivery | Yes | ||
| acceptance | No | ||
| transaction_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false and a closed world, so the safety profile is covered. The description adds the cost (0.015 USDC), which is genuinely useful context absent from the annotations, but it says nothing about what is checked, what happens on a failed assurance, or what the outcome means.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single compact sentence that front-loads the coverage list and appends the price. It wastes little, though the run-on list of domains is dense and would benefit from a stated action verb.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 6-parameter tool with 5 required nested objects, 0% schema description coverage, and no output schema, the one-line description is far too thin. An agent has no way to construct valid inputs or anticipate the response shape from what is provided.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the six parameters are nested objects with only bare type declarations. The description loosely gestures at some concepts (settlement→payment, timestamp→delivered_at/settled_at, delivery-hash→content_sha256, acceptance→acceptance) but never explains the structure or required fields of offer, intent, payment, or delivery, leaving the agent unable to build the payload.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description enumerates the domains covered (settlement, timestamp, delivery-hash, deterministic acceptance), which is more than a bare name, but it is a noun phrase with no verb — an agent cannot tell whether the tool verifies, registers, or issues assurance. It also fails to distinguish itself from the near-identical sibling rwa_transaction_assurance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisites, and no routing to alternatives despite several closely related siblings (rwa_transaction_assurance, payment_delivery_atomicity, transaction_risk_score). The 0.015 USDC cost is stated but without any condition telling the agent when paying it is warranted.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
transaction_recoveryCRead-onlyIdempotentInspect
Failure classification and non-repeating recovery plan with validated attempt history; 0.010 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| policy | Yes | ||
| payment | Yes | ||
| attempts | No | ||
| assurance | Yes | ||
| transaction_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is largely covered. The description adds two useful nuggets beyond that: a deterministic 'non-repeating' recovery plan and an explicit 0.010 USDC cost, which is non-obvious for a read-only tool. It still says nothing about determinism guarantees or what the plan contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is a single tight sentence with the cost front-loaded at the end and no filler. However, brevity here reads as under-specification rather than economy, so it cannot earn full marks.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
A complex tool with four required params, nested objects, and no output schema needs far more explanation than one clause. The description leaves the agent without argument guidance, return-shape expectations, or sibling differentiation, especially against transaction_recovery_v2.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 5 parameters, including three nested objects (policy, payment, assurance) with no field documentation. The description contributes nothing about any parameter, so it fails to compensate for a serious coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The phrase 'Failure classification and non-repeating recovery plan with validated attempt history' names a recognizable function, but it is a stacked noun phrase rather than a clear verb+resource statement. Critically, it does not distinguish itself from the sibling transaction_recovery_v2, leaving the agent unable to tell which recovery tool to pick.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use, when-not-to-use, or alternative routing guidance. With siblings like transaction_recovery_v2, payment_diagnose, and transaction_assurance, the absence of any selection criteria is a real gap.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
transaction_recovery_v2Transaction Recovery v2ARead-onlyIdempotentInspect
Recommend bounded recovery and reconcile ambiguous payments before retry.; 0.005 USDC. Deterministic, evidence-bounded and signed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish the safety profile (readOnlyHint=true, idempotentHint=true, destructiveHint=false, closed-world). The description adds traits annotations cannot express: the output is deterministic, evidence-bounded, cryptographically signed, and costs 0.005 USDC per call. This is real added value, though it omits what the signature guarantees or what happens on non-ambiguous failures.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The action statement is front-loaded and the whole entry is two short fragments, so scanning is fast. The stray ";" after "retry." and the mid-sentence price fragment make the structure slightly rougher than it needs to be.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described, and the annotations cover safety. What remains opaque is the input model: the schema is open (additionalProperties=true, no named fields beyond an example), and the description never explains what recovery actually operates on or how a caller prepares the transaction/failure payload.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The context reports 0 declared parameters, so the baseline of 4 applies. The only input signal is an example object, which the description does not interpret; it neither clarifies the shape of the `transaction` payload nor what `ambiguous_payment` toggles, but with no named parameters there is little for it to compensate for.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names specific actions (recommend a bounded recovery, reconcile ambiguous payments) and the resource (ambiguous payments), so the agent knows the tool produces a recovery recommendation rather than executing one. It does not, however, distinguish itself from the near-identical sibling `transaction_recovery`, which appears to cover the same ground.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"before retry" gives an implicit trigger condition, so an agent can infer this runs after a failure but prior to a retry attempt. There is no explicit when-not guidance and no named alternative (e.g., `payment_diagnose` or `payment_receipt_reconciler`) for cases where reconciliation is not the right move.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
transaction_risk_scoreTransaction Risk ScoreCRead-onlyIdempotentInspect
Estimate evidence-supported loss probability without selling insurance or assuming liability.; 0.004 USDC. Deterministic, evidence-bounded and signed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, closed-world, so the description is not required to carry the safety profile. It adds useful context about determinism, evidence-boundedness, signing, and a 0.004 USDC cost, but omits how the score is computed, what 'signed' means for the caller, and whether the payment is per-call. That is modest added value beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is terse, but the first sentence is a comma-spliced clause mixing a purpose claim with legal disclaimers, and the second sentence stacks price, determinism, and signing without structure. Roughly half the text is disclaimer rather than actionable information, so brevity comes at the cost of clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a paid, closed-world risk-scoring tool with a free-form schema and an output schema, but the description does not explain the free-form contract, what happens on insufficient evidence, or how signing/payment interact. Given 29 similar siblings, the definition is too thin for an agent to select and invoke it safely.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has no top-level named parameters (parameter count reported as 0) and the schema is described as free-form via additionalProperties/examples, so by the zero-param baseline this would be 4. The description does explain that scoring is 'evidence-supported' and 'evidence-bounded', which aligns with the evidence_refs pattern in the example, but it does not explain 'factors', 'weight', or 'amount_atomic', leaving the free-form schema's semantics to inference.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description says 'Estimate evidence-supported loss probability', which gives a verb and concept, but the name 'Risk Score' and this phrase overlap and the tool's actual service (a paid risk-scoring endpoint priced at 0.004 USDC) is only implied. Among 29 payment/transaction siblings, nothing in the description distinguishes it from transaction_assurance, rwa_transaction_assurance, or payment_preflight.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this versus the many sibling assurance/preflight/gateway tools. The only guidance-like phrases ('without selling insurance or assuming liability') read as disclaimers, not selection criteria, so an agent cannot infer the right trigger conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
try_serviceBInspect
Free representative preview, exact price and upgrade instructions for any PHION paid service; no wallet required.
| Name | Required | Description | Default |
|---|---|---|---|
| service | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does disclose two important traits: cost is zero ('Free') and no wallet/auth is needed. It stops short of other operational facts an agent needs — whether the preview is truncated/representative-only, rate limits, and whether calling it commits to anything.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One dense sentence that front-loads the key benefit ('Free representative preview') before the outputs and the 'no wallet required' constraint. Nothing is wasted, though the clause stacking makes it slightly harder to parse at a glance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a 120+ value enum, no output schema, and no annotations, the description is adequate on the basics (free, no wallet, returns price and upgrade path) but does not explain what the 'representative preview' actually contains or how it relates to the real paid response, which matters given the huge service surface.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. 'For any PHION paid service' does convey that the single parameter selects a service, which is useful, but it adds no format, naming, or constraint detail beyond the 120+ value enum, and gives no hint about the enum itself.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action ('free representative preview') plus a concrete scope ('any PHION paid service') and the extra outputs (exact price, upgrade instructions). It is clearly distinguishable from a generic execute tool, but it never names or contrasts any of the many related siblings such as phion_get_service, phion_preflight, or phion_discover.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'No wallet required' implies the usage context (pre-payment evaluation, cold-start without credentials), so the when-to-use is inferable. However, it never states when NOT to use it (e.g. when a paid call is actually intended) nor points at the alternative tool to use in that case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verifyVerify a PHION ReceiptCRead-onlyIdempotentInspect
Free verification of a PHION signed receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| content | No | ||
| receipt | Yes | ||
| sources | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false, and openWorldHint=false. The description adds only 'Free', which is a useful pricing trait not covered by annotations, but it omits what verification actually checks, what an invalid receipt produces, and any return behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The single sentence is front-loaded and free of filler. However, its extreme brevity borders on under-specification for a tool with three parameters and no schema descriptions.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and 0% schema description coverage, the description should explain return semantics and parameter roles. It does not, leaving an agent unclear about what verification produces and how to use the optional parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description only hints at the required 'receipt' parameter via the phrase 'signed receipt'. It says nothing about the optional 'content' or 'sources' parameters, so it does not compensate for the undocumented schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('verification') and resource ('PHION signed receipt'), and adds the pricing trait 'Free'. It does not explicitly differentiate itself from siblings such as phion_preflight or phion_resolve, so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no when-to-use guidance, prerequisites, or alternatives. An agent must infer usage entirely from the tool name and title, with no exclusions or context about when this is preferable to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
x402_quote_comparatorx402 Quote ComparatorCRead-onlyIdempotentInspect
Validate x402 v2 fields and compare only quotes sharing asset and decimals; 0.002 USDC.
| Name | Required | Description | Default |
|---|---|---|---|
| quotes | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, non-destructive and closed-world, so the safety profile is covered. The description adds a genuine behavioral rule: quotes are only compared when asset and decimals match, and x402 v2 fields are validated first. It does not say what happens to non-conforming quotes or what the comparison result contains, and the trailing '0.002 USDC' is never explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is a single front-loaded sentence, which is appropriately tight. However, the dangling '0.002 USDC' fragment is pure noise that cannot be parsed from context, so not every token earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a richly nested input schema, zero parameter documentation, and no output schema, the description is too thin: an agent cannot tell what the validation rejects, what the comparison returns, or how to interpret the trailing USDC figure. Only the grouping rule gives the agent anything actionable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% while the single `quotes` parameter is a nested array with required fields (network, asset, asset_decimals, amount, payTo), minItems 2 and maxItems 64, none of which are documented anywhere. The description gestures at asset/decimals and 'x402 v2 fields' but ignores amount, payTo, network, scheme, expires_at, and the array bounds, so it does not compensate for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names two actions (validate x402 v2 fields, compare quotes) on a recognizable resource, but it conflates them and closes with an unexplained fragment, '0.002 USDC', that reads like a price or threshold and muddies what the tool actually does. It does not differentiate itself from siblings such as x402_v2_router or payment_route_selector, which also operate on payment quotes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The only operational guidance is the comparison rule ('compare only quotes sharing asset and decimals'), which constrains behavior but not selection. There is no statement of when to reach for this tool over x402_v2_router, quote_freshness_guard, or payment_route_selector, and no prerequisites or exclusions are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
x402_v2_routerx402 v2 RouterBRead-onlyIdempotentInspect
Select an exactly compatible x402 v2 payment requirement without receiving private keys.; 0.003 USDC. Deterministic, evidence-bounded and signed.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds two useful behavioral notes beyond that: no private keys are received, and output is 'deterministic, evidence-bounded and signed' plus a 0.003 USDC cost. That extra context is real, but 'evidence-bounded and signed' is vague enough that it does not fully cash out as concrete behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The purpose is front-loaded and the text is short, but the structure is sloppy: a semicolon splice followed by two dangling fragments ('0.003 USDC.' and 'Deterministic, evidence-bounded and signed.'). The cost note earns its place; the marketing fragment is close to filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no explanation, and the tool takes no named params. What is missing is context for a payment-routing decision: when this router applies versus its siblings, and what 'exactly compatible' means for the accepts array in practice. Adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Parameter count is 0 and schema description coverage is 100%, so the schema carries the full contract (client_capabilities, payment_requirements). Per the rubric, zero params sets the baseline at 4; the description adds nothing here but is not required to.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: 'Select an exactly compatible x402 v2 payment requirement.' An agent can tell this is a routing/selection tool for payment requirements. However, it never differentiates itself from close siblings such as payment_route_selector or x402_quote_comparator, and 'exactly compatible' plus the trailing 'evidence-bounded and signed' phrase leave the scope slightly fuzzy.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisites, and no exclusions. With ~29 sibling tools, several of which (payment_route_selector, x402_quote_comparator, payment_preflight) plausibly overlap, the description provides nothing to help the agent choose this tool over them.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
22 tool updates
- Changed
a2a_transaction_bridge1 field changed- added
Input schema / examplesAdded value: +[ + { + "source": { + "id": "a2a-task-1" + }, + "transaction": { + "id": "tx-1" + } + } +]
- Changed
agent_budget_guard1 field changed- added
Input schema / examplesAdded value: +[ + { + "policy": { + "max_per_call_atomic": "2000", + "max_per_period_atomic": "20000", + "max_per_session_atomic": "10000", + "max_per_task_atomic": "5000" + }, + "request": { + "cost_atomic": "1000" + }, + "usage": { + "period_atomic": "4000", + "session_atomic": "3000", + "task_atomic": "2000" + } + } +]
- Changed
delegated_spend_policy1 field changed- added
Input schema / examplesAdded value: +[ + { + "action": { + "amount_atomic": 3000 + }, + "mandate": { + "active": true, + "max_per_transaction_atomic": 5000, + "remaining_atomic": 10000 + } + } +]
- Changed
duplicate_charge_detector1 field changed- added
Input schema / examplesAdded value: +[ + { + "charges": [ + { + "amount": "3000", + "network": "base", + "recipient": "seller", + "transaction": "tx1" + } + ] + } +]
- Changed
execution_cost_estimator1 field changed- added
Input schema / examplesAdded value: +[ + { + "budget_atomic": 6000, + "steps": [ + { + "id": "s1", + "max_cost_atomic": 2000 + }, + { + "id": "s2", + "max_cost_atomic": 3000 + } + ] + } +]
- Changed
journey_verify1 field changed- added
Input schema / examplesAdded value: +[ + { + "events": [ + { + "actor": "agent:buyer", + "artifact_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", + "kind": "intent", + "observed_at": 1700000000, + "sequence": 0 + }, + { + "actor": "agent:seller", + "artifact_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", + "kind": "delivery", + "observed_at": 1700000001, + "sequence": 1 + } + ], + "expected": { + "max_amount": "10000", + "network": "eip155:8453" + }, + "journey_id": "order-42" + } +]
- Changed
mandate_reserve1 field changed- added
Input schema / examplesAdded value: +[ + { + "amount": "4000", + "capability_token": "replace-with-32-or-more-random-characters", + "cumulative_limit": "100000", + "idempotency_key": "job-7", + "mandate_id": "budget-1" + } +]
- Changed
mcp_transaction_gateway1 field changed- added
Input schema / examplesAdded value: +[ + { + "source": { + "id": "mcp-call-1" + }, + "transaction": { + "id": "tx-1" + } + } +]
- Changed
payment_delivery_atomicity1 field changed- added
Input schema / examplesAdded value: +[ + { + "delivery": { + "delivered": true, + "intent_id": "i1" + }, + "payment": { + "intent_id": "i1", + "settled": true + } + } +]
- Changed
payment_optimizer1 field changed- added
Input schema / examplesAdded value: +[ + { + "policy": { + "max_latency_ms": 2000, + "max_total_atomic": 4000 + }, + "routes": [ + { + "amount_atomic": 3000, + "fee_atomic": 10, + "id": "base-usdc", + "latency_ms": 800, + "production_tested": true, + "success_rate": 0.98 + } + ] + } +]
- Changed
payment_preflight1 field changed- added
Input schema / examplesAdded value: +[ + { + "payment_requirement": { + "amount": "1000", + "asset": "USDC-contract", + "network": "eip155:8453", + "payTo": "seller-address", + "resourceUrl": "https://phion.systems/v1/paid/attest", + "scheme": "exact", + "x402Version": 2 + }, + "policy": { + "allowed_assets": [ + "USDC-contract" + ], + "allowed_networks": [ + "eip155:8453" + ], + "allowed_recipients": [ + "seller-address" + ], + "allowed_resource_hosts": [ + "phion.systems" + ], + "allowed_schemes": [ + "exact" + ], + "max_amount": "1000" + } + } +]
- Changed
payment_receipt_reconciler1 field changed- added
Input schema / examplesAdded value: +[ + { + "payment": { + "amount": "3000", + "asset": "USDC", + "network": "base", + "recipient": "seller", + "transaction": "tx1" + }, + "receipt": { + "amount": "3000", + "asset": "USDC", + "network": "base", + "recipient": "seller", + "transaction": "tx1" + } + } +]
- Changed
payment_route_selector1 field changed- added
Input schema / examplesAdded value: +[ + { + "policy": { + "allowed_networks": [ + "eip155:8453" + ], + "max_latency_ms": 1000, + "max_total_atomic": "3000", + "preferred_networks": [ + "eip155:8453" + ] + }, + "routes": [ + { + "amount_atomic": "2000", + "asset": "USDC", + "available": true, + "estimated_fee_atomic": "0", + "estimated_latency_ms": 100, + "facilitator_supported": true, + "gas_sufficient": true, + "network": "eip155:8453", + "scheme": "exact", + "wallet_balance_atomic": "10000", + "x402_version": 2 + } + ] + } +]
- Changed
quote_freshness_guard1 field changed- added
Input schema / examplesAdded value: +[ + { + "minimum_validity_seconds": 30, + "quote": { + "amount": "2000", + "expires_at": 4102444800, + "network": "eip155:8453" + } + } +]
- Changed
rwa_transaction_assurance1 field changed- added
Input schema / examplesAdded value: +[ + { + "asset": { + "contract": "0x...", + "network": "eip155:8453" + }, + "policy": { + "recipient_eligible": true + }, + "transaction": { + "amount": "1000000", + "recipient": "0x...", + "tx_hash": "0x..." + } + } +]
- Changed
subscription_spend_guard1 field changed- added
Input schema / examplesAdded value: +[ + { + "policy": { + "max_charge_atomic": "3000", + "merchant": "provider.example", + "period_limit_atomic": "10000" + }, + "subscription": { + "active": true, + "approved": true, + "merchant": "provider.example", + "next_charge_atomic": "3000" + }, + "usage": { + "period_atomic": "4000" + } + } +]
- Changed
transaction_assurance1 field changed- added
Input schema / examplesAdded value: +[ + { + "acceptance": [ + { + "expected": "ok", + "operator": "equals", + "path": "/result" + } + ], + "delivery": { + "content_sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc", + "delivered_at": 1700000002, + "output": { + "result": "ok" + }, + "status": 200 + }, + "intent": { + "asset": "USDC", + "buyer": "agent:buyer", + "deadline": 4102444800, + "max_amount": "15000", + "network": "eip155:8453", + "requested_at": 1700000000, + "seller": "agent:seller" + }, + "offer": { + "amount": "15000", + "asset": "USDC", + "network": "eip155:8453", + "seller": "agent:seller", + "valid_until": 4102444800 + }, + "payment": { + "amount": "15000", + "asset": "USDC", + "network": "eip155:8453", + "recipient": "agent:seller", + "settled": true, + "settled_at": 1700000001, + "transaction": "0xexample" + }, + "transaction_id": "purchase-42" + } +]
- Changed
transaction_recovery1 field changed- added
Input schema / examplesAdded value: +[ + { + "assurance": { + "acceptance_satisfied": false, + "delivery_verified": false, + "failed_checks": [ + "successful_status" + ], + "payment_settled": true, + "request_sha256": "64-hex-characters", + "verdict": "disputed" + }, + "attempts": [], + "payment": { + "amount": "15000", + "asset": "USDC-address", + "network": "eip155:8453", + "recipient": "seller", + "transaction": "0x..." + }, + "policy": { + "allowed_actions": [ + "retry", + "request_refund", + "escalate" + ], + "deadline": 4102444800, + "max_attempts": 1, + "refund_endpoint": "https://seller.example/refunds" + }, + "transaction_id": "purchase-42" + } +]
- Changed
transaction_recovery_v21 field changed- added
Input schema / examplesAdded value: +[ + { + "failure": { + "ambiguous_payment": false + }, + "transaction": { + "delivered": false, + "id": "tx-1", + "settled": true + } + } +]
- Changed
transaction_risk_score1 field changed- added
Input schema / examplesAdded value: +[ + { + "amount_atomic": 10000, + "factors": [ + { + "evidence_refs": [ + "receipt-1", + "receipt-2" + ], + "name": "delivery_history", + "probability": 0.2, + "weight": 0.7 + }, + { + "evidence_refs": [ + "settlement-1" + ], + "name": "payment_reliability", + "probability": 0.1, + "weight": 0.3 + } + ] + } +]
- Changed
x402_quote_comparator1 field changed- added
Input schema / examplesAdded value: +[ + { + "quotes": [ + { + "amount": "2000", + "asset": "USDC", + "asset_decimals": 6, + "network": "eip155:8453", + "payTo": "0xSeller", + "scheme": "exact", + "x402Version": 2 + }, + { + "amount": "3000", + "asset": "USDC", + "asset_decimals": 6, + "network": "eip155:137", + "payTo": "0xSeller", + "scheme": "exact", + "x402Version": 2 + } + ] + } +]
- Changed
x402_v2_router1 field changed- added
Input schema / examplesAdded value: +[ + { + "client_capabilities": { + "assets": [ + "usdc" + ], + "networks": [ + "eip155:8453" + ], + "schemes": [ + "exact" + ] + }, + "payment_requirements": { + "accepts": [ + { + "asset": "usdc", + "network": "eip155:8453", + "scheme": "exact" + } + ], + "x402Version": 2 + } + } +]
1 tool update
- Changed
try_service1 field changed- changed
Input schema / properties / service / enumPrevious value: -[ - "attest", - "payment-firewall", - "web-evidence", - "mandate-reserve", - "agent-inspection", - "commerce-journey", - "transaction-assurance", - "transaction-recovery", - "rwa-asset-due-diligence", - "rwa-compliance", - "rwa-nav-reserve", - "rwa-transaction-assurance", - "rwa-corporate-actions", - "schema-normalize", - "sanctions-screening-evidence", - "agent-reputation-evidence", - "counterparty-risk-preflight", - "tool-output-firewall", - "delegation-scope-guard", - "memory-write-guard", - "mcp-manifest-firewall", - "tool-call-policy-guard", - "data-egress-preflight", - "agent-budget-guard", - "idempotency-replay-guard", - "human-approval-policy", - "secret-redaction-preflight", - "oauth-token-audience-guard", - "redirect-callback-validator", - "tool-capability-drift-monitor", - "mcp-server-identity-evidence", - "agent-task-handoff-receipt", - "context-provenance-labeler", - "signed-result-comparator", - "service-sla-attestation", - "payment-route-selector", - "x402-quote-comparator", - "payment-receipt-reconciler", - "duplicate-charge-detector", - "subscription-spend-guard", - "webhook-verifier", - "delivery-evidence", - "inter-agent-policy-evaluator", - "concurrency-guard", - "resource-cycle-guard", - "abandoned-tool-detector", - "manifest-version-diff", - "dependency-provenance-assessment", - "conflict-resolution", - "data-freshness-certificate", - "domain-ownership-evidence", - "purpose-bound-consent", - "retention-deletion-receipt", - "interrupted-task-recovery", - "portable-observability-audit", - "index-feed", - "verified-web-extract", - "entity-enrichment-evidence", - "social-source-evidence", - "market-data-snapshot", - "onchain-evidence", - "verified-news-monitor", - "multi-source-fact-bundle", - "document-to-verified-json", - "source-backed-search", - "live-data-freshness", - "person-enrichment-evidence", - "company-enrichment-evidence", - "contact-enrichment-evidence", - "mcp-2026-compatibility-gateway", - "durable-agent-task", - "task-checkpoint-evidence", - "task-cancel-assurance", - "agent-approval-relay", - "capability-negotiation-preflight", - "mcp-catalog-cache-guard", - "oauth-issuer-binding-evidence", - "mcp-a2a-task-bridge", - "quote-freshness-guard", - "delegated-credential-guard", - "agent-session-continuity", - "task-lease-guard", - "tool-result-schema-validator", - "agent-memory-provenance", - "payment-delivery-atomicity", - "service-failover-selector", - "agent-rate-limit-negotiator", - "execution-cost-estimator", - "cross-agent-receipt-bundle", - "capability-verification", - "capability-benchmark", - "sybil-reputation-guard", - "agent-behavior-fingerprint", - "trust-anomaly-detector", - "economic-loop-detector", - "provider-quality-predictor", - "transaction-risk-score", - "payment-optimizer", - "x402-v2-router", - "erc8004-identity-evidence", - "erc8004-reputation-intelligence", - "delegated-spend-policy", - "ap2-mandate-bridge", - "a2a-transaction-bridge", - "mcp-transaction-gateway", - "proof-of-service", - "automated-dispute-bundle", - "transaction-recovery-v2", - "reputation-update-receipt", - "agent-economic-graph", - "market-demand-predictor", - "service-gap-detector", - "price-discovery-engine", - "sla-risk-predictor", - "dynamic-service-pricing", - "autonomous-procurement", - "multi-agent-escrow", - "cross-protocol-receipt", - "phion-inference", - "phion-search", - "phion-enrich", - "phion-intelligence" -]New value: +[ + "attest", + "payment-firewall", + "web-evidence", + "mandate-reserve", + "agent-inspection", + "commerce-journey", + "transaction-assurance", + "transaction-recovery", + "rwa-asset-due-diligence", + "rwa-compliance", + "rwa-nav-reserve", + "rwa-transaction-assurance", + "rwa-corporate-actions", + "schema-normalize", + "sanctions-screening-evidence", + "agent-reputation-evidence", + "counterparty-risk-preflight", + "tool-output-firewall", + "delegation-scope-guard", + "memory-write-guard", + "mcp-manifest-firewall", + "tool-call-policy-guard", + "data-egress-preflight", + "agent-budget-guard", + "idempotency-replay-guard", + "human-approval-policy", + "secret-redaction-preflight", + "oauth-token-audience-guard", + "redirect-callback-validator", + "tool-capability-drift-monitor", + "mcp-server-identity-evidence", + "agent-task-handoff-receipt", + "context-provenance-labeler", + "signed-result-comparator", + "service-sla-attestation", + "payment-route-selector", + "x402-quote-comparator", + "payment-receipt-reconciler", + "duplicate-charge-detector", + "subscription-spend-guard", + "webhook-verifier", + "delivery-evidence", + "inter-agent-policy-evaluator", + "concurrency-guard", + "resource-cycle-guard", + "abandoned-tool-detector", + "manifest-version-diff", + "dependency-provenance-assessment", + "conflict-resolution", + "data-freshness-certificate", + "domain-ownership-evidence", + "purpose-bound-consent", + "retention-deletion-receipt", + "interrupted-task-recovery", + "portable-observability-audit", + "index-feed", + "verified-web-extract", + "entity-enrichment-evidence", + "social-source-evidence", + "market-data-snapshot", + "onchain-evidence", + "verified-news-monitor", + "multi-source-fact-bundle", + "document-to-verified-json", + "source-backed-search", + "live-data-freshness", + "person-enrichment-evidence", + "company-enrichment-evidence", + "contact-enrichment-evidence", + "mcp-2026-compatibility-gateway", + "durable-agent-task", + "task-checkpoint-evidence", + "task-cancel-assurance", + "agent-approval-relay", + "capability-negotiation-preflight", + "mcp-catalog-cache-guard", + "oauth-issuer-binding-evidence", + "mcp-a2a-task-bridge", + "quote-freshness-guard", + "delegated-credential-guard", + "agent-session-continuity", + "task-lease-guard", + "tool-result-schema-validator", + "agent-memory-provenance", + "payment-delivery-atomicity", + "service-failover-selector", + "agent-rate-limit-negotiator", + "execution-cost-estimator", + "cross-agent-receipt-bundle", + "capability-verification", + "capability-benchmark", + "sybil-reputation-guard", + "agent-behavior-fingerprint", + "trust-anomaly-detector", + "economic-loop-detector", + "provider-quality-predictor", + "transaction-risk-score", + "payment-optimizer", + "x402-v2-router", + "erc8004-identity-evidence", + "erc8004-reputation-intelligence", + "delegated-spend-policy", + "ap2-mandate-bridge", + "a2a-transaction-bridge", + "mcp-transaction-gateway", + "proof-of-service", + "automated-dispute-bundle", + "transaction-recovery-v2", + "reputation-update-receipt", + "agent-economic-graph", + "market-demand-predictor", + "service-gap-detector", + "price-discovery-engine", + "sla-risk-predictor", + "dynamic-service-pricing", + "autonomous-procurement", + "multi-agent-escrow", + "cross-protocol-receipt", + "phion-inference", + "phion-search", + "phion-enrich-basic", + "phion-enrich", + "phion-intelligence" +]
1 tool update
- Changed
payment_capability_preflight1 field changed- added
Input schema / properties / evm_account_kindAdded value: +{ + "enum": [ + "standard_eoa", + "delegated_eip7702", + "smart_contract", + "unknown" + ] +}
Related MCP Servers
- AlicenseNot gradedqualityBmaintenancePerplexity for social: ask what competitors are running across social and get answers grounded in real ad and creative data, not guesses.2Apache 2.0
- AlicenseCqualityBmaintenanceCompetitor Monitor AI - MCP server providing AI-powered tools and automation by MEOK AI Labs119 npmMIT
- AlicenseAqualityCmaintenanceEnables brand visibility monitoring across major AI platforms like ChatGPT, Claude, Gemini, and Perplexity. It allows users to track visibility scores, analyze competitor data, and receive actionable insights to improve AI-generated brand recommendations.1611 npm1MIT

industrylens-mcpofficial
AlicenseNot gradedqualityBmaintenanceBrowse IndustryLens's published competitive-intelligence reports and head-to-head competitor comparisons from any AI agent — real, source-backed data.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.