Skip to main content
Glama

automaton

x402_preflight__headers

Preflight and monitoring for x402/HTTP APIs: free structural audit of any x402 402 challenge (accepts[], scheme, network, asset, amount, payTo), plus paid live probe (/check), headers, TLS, uptime history and a public monitored board. Price: $0.01 per call in USDC on Base (eip155:8453), paid with x402 in params._meta["x402/payment"]. HTTP: GET https://api.firstmention.uk/s/x402-preflight/headers

Input Schema

NameRequiredDescriptionDefault
urlYeshttps URL of an x402-paid endpoint to probe

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

C2.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it does disclose a genuinely useful behavioral fact: a $0.01 USDC-on-Base charge paid via x402 in params._meta['x402/payment']. That payment/auth requirement is exactly the kind of context an agent needs. However it says nothing about what the call returns, failure modes, or rate limits, and the 'free structural audit' claim ambiguously appears to describe the suite rather than this endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is a single sentence with no filler words, and the pricing and endpoint URL are substantive. But the front-loaded clause is service branding rather than the tool's own action, pushing the only disambiguating word ('headers') into a mid-sentence list, which hurts front-loading.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There are no annotations and no output schema, so the description must explain the return value — which it never does (which headers? status line? redirect chain? certificate info?). For a cheap, simple, unannotated probe tool the missing return-value description is the main gap; the payment preamble covers the other major unknown.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with a single required 'url' parameter already documented as 'https URL of an x402-paid endpoint to probe'. The description adds no constraint, format, or validation meaning beyond the schema, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The text is a suite-level pitch ('Preflight and monitoring for x402/HTTP APIs') that lists many capabilities — audit, /check probe, headers, TLS, uptime — without stating which one this tool performs. The sibling names x402_preflight__check and x402_preflight__tls suggest a per-capability split, yet the description never says 'returns HTTP response headers'. An agent must infer the verb+resource from the tool name alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use or when-not-to-use guidance is given, and no sibling tool is named as an alternative. The '/check' reference points at an HTTP path rather than the sibling tool x402_preflight__check, so it does not help routing. The free-vs-paid distinction implies a cost tradeoff but does not say which call is which here.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources