Skip to main content
Glama

Pre-spend check (pay / caution / avoid)

settled_preflight
Read-onlyIdempotent

Pass required. The call to make right before paying an unfamiliar x402 endpoint: a fresh probe, parsed quote, payability, payTo on-chain history, seller integrity, the scout’s real-payment delivery result and a honeypot scan, as one signed answer with a recommendation (pay, caution or avoid) and reasons. Use when: real money is about to leave your wallet and settled_check was stale or not enough. Not for: browsing (settled_find_endpoints) or endpoints you already verified. After: compare pay_to and price with the 402 you receive, pay, then call settled_report.

Input Schema

NameRequiredDescriptionDefault
urlYesFull URL of the x402 endpoint, e.g. https://api.example.com/search
passNoSettled day pass token, if you did not send it as the x-settled-pass header
forceNotrue to probe the endpoint now instead of reusing a result up to 5 minutes old

Output Schema

NameRequiredDescriptionDefault
urlNoThe endpoint
errorNoPresent only when the call failed or needs another step: an error code such as pass_required, next to the fields that explain it
flagsNoRisk flags
payeeNoWhether the payTo exists on-chain, and the seller's other endpoints and settlement integrity
quoteNoThe parsed 402 quote Settled sees: network, asset, price_usd, pay_to
cachedNoWhether the probe came from Settled's 5-minute cache
onchainNoSettlements and unique payers over the last 30 days
qualityNoQuality score breakdown
reasonsNoWhy, in plain words
reportsNoPaying agents' reports
deliveryNoThe scout's last real purchase and whether it matched the listing
honeypotNoHoneypot scan of the listing text
livenessNoFresh probe results
checked_atNoWhen this check ran
payabilityNoPayability verdict and the verb that pays
attestationNoEIP-191 signature over the answer; verify it with settled_verify or any EVM library
attested_atNoWhen Settled signed this answer (ISO 8601)
descriptionNoThe listing's description
seller_claimNoThe seller's claim and profile, if claimed
recommendationNopay, caution or avoid

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover safety (readOnly, idempotent, openWorld, non-destructive), but the description adds context they do not: authentication ('Pass required'), the freshness model behind force (probe now vs. reuse a result up to 5 minutes old), and that the output is a signed answer with a pay/caution/avoid recommendation. It stops short of stating failure modes or rate limits, so a 4 rather than 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the critical constraint ('Pass required'), then intent, then Use when / Not for / After in a scannable structure. It is dense and slightly long, but nearly every clause carries operative information rather than filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no elaboration; the description still flags that the response is a signed recommendation with reasons. Combined with the use-when/not-for/after guidance and the auth requirement, an agent has everything needed to decide, invoke, and sequence this call correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds meaning beyond the schema: 'Pass required' ties the pass parameter to an auth gate, and 'a fresh probe' explains the semantics of force (probing now rather than reusing a cached result). The url parameter is left to the schema's own description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific action (a pre-spend probe/check) on a specific resource (an x402 endpoint about to be paid) and enumerates exactly what the check composes: fresh probe, parsed quote, payability, payTo on-chain history, seller integrity, scout delivery result, honeypot scan. It clearly separates itself from settled_check ('stale or not enough') and from settled_find_endpoints.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit 'Use when: real money is about to leave your wallet and settled_check was stale or not enough' and 'Not for: browsing (settled_find_endpoints) or endpoints you already verified', plus a named follow-up sequence ('compare pay_to and price ... pay, then call settled_report'). Alternatives and exclusion conditions are stated directly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources