Skip to main content
Glama
agents-trust

Agents Trust MCP

by agents-trust

Agents Trust MCP

Find APIs for your task from Claude Desktop, Cursor or Claude Code. Recommendations include URLs, prices and call details. Inspect returns the stored evidence for one exact endpoint URL. This stdio server runs on your computer. Paid calls use your own wallet; Agents Trust holds no wallet keys.

Runtime requires Node.js 20 or later; development/build tooling requires Node.js 22.13+ or 24 and npm.

Use a build shell without AGENTS_TRUST_WALLET_PRIVATE_KEY; the build and bundle commands refuse that variable even when it is empty. Supply a wallet only to the runtime launcher after building.

git clone https://github.com/agents-trust/agents-trust-mcp.git
cd agents-trust-mcp
npm ci
npm run build
node dist/index.js

Your MCP host starts Node with the absolute path to this checkout's dist/index.js and communicates over standard input/output. Keep the checkout and its installed dependencies available to the host.

Tools and cost

Tool

Input

Result

Fee

recommend

need; optional limit, live, max_price_usd, chain, view

APIs for your task and call details

0.01 USDC outside the free demos

inspect

url; optional view

Stored endpoint evidence without calling the provider

1% of the endpoint's lowest quoted price, minimum 0.001 USDC

receipt

payment_attempt_id

Eventual settlement result

Free

health

none

Service version

Free

Ask your host to call inspect with an exact endpoint URL from a recommendation. Preserve its fixed query parameters. view accepts legacy, compact, evidence or debug. Omitting it uses the API's legacy response. An unknown URL returns an unpaid 404. The API rejects malformed, credential-bearing and private URLs before payment. Inspect never calls or purchases the provider's service.

Example: ask your host to call recommend with {"need":"weather","view":"compact"}. Free demos may change. max_price_usd limits a recommended provider's price; it does not limit the recommendation fee. Calling a recommended API is a separate purchase.

A paid answer includes payment_attempt_id when available. Use receipt to check settlement; receiving an answer does not confirm settlement. A pending receipt can be looked up again for free.

Related MCP server: nohumans-mcp

Configuration

Environment variable

Default

Purpose

AGENTS_TRUST_ENABLE_PAYMENTS

unset / disabled

Owner opt-in: exact true grants at most one payment authorization per server process

AGENTS_TRUST_WALLET_PRIVATE_KEY

unset

Your EVM private key, with 0x prefix; needed for paid calls

AGENTS_TRUST_MAX_CALL_USDC

0.01

Maximum fee for one Recommend or Inspect call in USDC

AGENTS_TRUST_SESSION_CAP_USDC

0.01

Maximum reserved spend for one server process

Payments stay disabled even when a wallet key is present. The wallet owner can explicitly supply AGENTS_TRUST_ENABLE_PAYMENTS=true in the local launcher or select the bundle’s payment opt-in. This grants the process one authorization within the monetary caps; there is no per-call human confirmation. An agent tool argument, service response or provider instruction cannot grant payment authority. Use a dedicated low-balance wallet with USDC on Base mainnet. The server signs x402 authorizations locally and sends them only to https://api.agents-trust.com. It accepts the published Base USDC asset and Agents Trust payment address. A changed address requires a server update. Other payment networks are unsupported.

Limits accept non-negative decimal strings with up to six decimal places. Zero disables paid calls. Reservations count signing attempts, including failed or uncertain requests, and remain reserved until the process exits. The process consumes its single authorization before signing, even if signing or the request fails. Raising a monetary cap does not allow a second authorization. Free calls and receipts remain available. Restarting the server resets both the session cap and the authorization grant. Stop the host from automatically restarting with payment opt-in until the wallet owner has reconciled prior attempts. Recommend and Inspect share the same grant, reservation cap and serialized payment queue, including concurrent calls. Paid submissions are never automatically repeated. On an uncertain result, check your wallet and any receipt before making another paid call.

Without a key, free tools and free demo recommendations work. A paid Recommend or Inspect request returns a message explaining which variable to configure. Keep keys out of chat, version control and shell history. Have your local secret manager or host supply the wallet variable to the child process.

Claude Desktop

Merge this into claude_desktop_config.json, replacing both absolute paths with your local Node executable and built checkout. The free configuration requires no key:

{
  "mcpServers": {
    "agents-trust": {
      "command": "/absolute/path/to/node",
      "args": ["/absolute/path/to/agents-trust-mcp/dist/index.js"],
      "env": {
        "AGENTS_TRUST_MAX_CALL_USDC": "0.01",
        "AGENTS_TRUST_SESSION_CAP_USDC": "0.01"
      }
    }
  }
}

For paid calls, explicitly grant AGENTS_TRUST_ENABLE_PAYMENTS=true and supply AGENTS_TRUST_WALLET_PRIVATE_KEY to this process through your secure local launcher. GUI applications need the full path to your Node executable and do not always inherit your terminal environment.

Cursor

Use the same mcpServers block in ~/.cursor/mcp.json or .cursor/mcp.json, adding "type": "stdio" to the server entry (Cursor configuration). To read a key already injected into Cursor's environment, add this entry to the server's env object:

"AGENTS_TRUST_WALLET_PRIVATE_KEY": "${env:AGENTS_TRUST_WALLET_PRIVATE_KEY}"

Keep wallet configuration local; do not commit it.

Claude Code

claude mcp add --transport stdio agents-trust -- /absolute/path/to/node /absolute/path/to/agents-trust-mcp/dist/index.js

See Claude Code MCP configuration. Launch Claude Code with payment opt-in chosen by the wallet owner and the wallet variable supplied by your secret manager. The server inherits it from the host.

Development

npm ci
npm run typecheck
npm run lint
npm test
npm run build

Run the local server with node dist/index.js. Standard output carries MCP messages only. Tests generate throwaway keys in memory and make no payments. Development tests require Node.js 22.13+ or 24; CI also checks the built stdio server on Node.js 20.

npm run test:paid is an offline cryptographic authorization test using a generated throwaway key and mocked HTTP. No test reads a funded wallet or submits a real payment. Dependency installation scripts are disabled by .npmrc; use npm ci to preserve the reviewed lockfile. The bundle packer is also locked locally.

MIT licensed. See LICENSE.

Available Tools

4 tools
healthA
Read-only

Read the Agents Trust service version. Free.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare readOnlyHint=true and openWorldHint=true, covering the safety profile. The description adds that the call is 'Free' (a cost/likely rate consideration) and that it returns a version, which is modest but real value beyond the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, front-loaded with the core verb+resource, with zero padding. The fragment 'Free.' is terse but does carry information about cost.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-parameter, read-only version endpoint with no output schema, the description supplies the essential fact (it returns the service version) and its cost profile. Only minor detail, such as exact return format or error behavior, is absent, which is acceptable for a trivial health probe.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is nothing for the description to disambiguate; the baseline is 4. No parameter-level gaps exist.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Read') and resource ('Agents Trust service version'), so an agent knows exactly what it retrieves. It does not reference the sibling tools (recommend, inspect, receipt), but their domains are distinct enough that confusion is unlikely.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: a version/health read is naturally used to verify service availability or version compatibility. There is no explicit when-to-use or when-not-to-use guidance and no named alternative, though 'Free' hints that cost is not a concern.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

inspectA

Read stored evidence for one exact API endpoint URL, without calling or paying that provider. The Inspect fee is 1% of the endpoint's lowest quoted price, with a 0.001 USDC floor. Read the actual quote. Payment requires owner opt-in and shares the process's single authorization and USDC limits with Recommend.

NameRequiredDescriptionDefault
urlYesExact endpoint URL, including its fixed query parameters. The API rejects private URLs before payment.
viewNo

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description provides rich behavioral context that goes far beyond the annotations. It explains the financial constraints (1% fee, 0.001 USDC floor), the authorization requirements (owner opt-in, shared process limits), which are essential for an agent to execute this stateful operation safely.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very dense and heavily weighted toward policy and financial disclosure. While all content is necessary, the sentence structure is complex and requires the agent to parse multiple nested constraints (fee, floor, opt-in, shared authorization) in a single block of text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite lacking an output schema, the description successfully covers the 'cost' and 'governance' aspects of the tool. By detailing the fee structure and authorization prerequisites, it provides almost all necessary context for a complex operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds crucial domain knowledge to the 'url' parameter, specifying that 'API rejects private URLs before payment.' This nuance is vital and not captured in the schema, significantly improving parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly defines the purpose: reading stored evidence for a specific endpoint URL without initiating a new call or payment. It distinguishes itself from siblings like 'recommend' or 'receipt' by focusing specifically on the act of 'inspect[ting]' and quoting.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

While it doesn't provide a direct 'if-then' usage guide, it strongly implies usage by detailing the payment mechanism, fee structure (1% floor), and the need for owner opt-in. This gives the AI sufficient context on when the operation is applicable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

receiptB
Read-only

Look up payment settlement by payment attempt ID. Free.

NameRequiredDescriptionDefault
payment_attempt_idYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety and external-lookup profile is covered structurally. The description adds the useful detail that the lookup is free (no cost/rate concern), but says nothing about behavior when the payment attempt ID is unknown, whether settlement records can be pending, or what data is returned.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, front-loaded with the action and resource; nothing is padded. The trailing 'Free.' is a fragment, but it carries non-obvious information about cost, so it earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only lookup with no output schema, an agent still lacks any indication of what a 'payment settlement' result contains (status, amount, timestamps) or how a missing/invalid attempt ID is surfaced. Annotations cover the safety profile, so this is adequate but not complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%: the schema only declares a UUID-format string named payment_attempt_id, with no prose. The description clarifies that this ID refers to a payment attempt and is the lookup key, which adds meaning beyond the field name. It does not explain where the agent should obtain such an ID, but for a single required parameter the gap is modest.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('Look up payment settlement') plus the lookup key ('by payment attempt ID'), which is far more informative than the bare name 'receipt'. It does not distinguish itself from the listed siblings (recommend, inspect, health), but those appear to operate on entirely different resources, so the risk of confusion is low.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit statement of when to use this tool versus alternatives, nor any prerequisites or exclusions. Usage is only implied by the object of the lookup; the agent must infer that this is the settlement-lookup tool and not, for example, a payment-status tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recommendB

Find APIs for your task, with URLs, prices and call details. Payment requires owner opt-in and consumes the process’s single authorization, up to the configured USDC limit.

NameRequiredDescriptionDefault
liveNo
needYes
viewNo
chainNo
limitNo
max_price_usdNoMaximum provider price; separate from the recommendation fee.

TDQS

B3.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without this sentence the agent would assume a plain lookup; instead it learns that payment may occur, that it requires owner opt-in, that it consumes the process's single authorization irreversibly, and that there is a USDC cap. That is strong non-obvious disclosure consistent with readOnlyHint=false and idempotentHint=false. It stops short of saying what happens if opt-in is missing or the fee exceeds the limit.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with the discovery capability front-loaded and the payment/auth constraint second. Dense but every clause adds information; 'up to the configured USDC limit' is the only mildly vague phrasing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must convey return shape — 'URLs, prices and call details' does so only at a high level. The payment and authorization consequences are well covered, but the six-parameter input surface is largely unaddressed, leaving the agent guessing on most call arguments.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 17% — five of six parameters (need, live, view, chain, limit) have no schema description and no mention in the prose. The description hints at output richness ('URLs, prices, call details') which loosely relates to the view enum, but it never explains need format, the chain identifier pattern, the limit cap of 5, or what 'live: 1' does. It does not compensate for the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a clear verb+resource: it finds APIs matching a stated need and returns URLs, prices, and call details. This is much more specific than the opaque name 'recommend'. It does not, however, contrast itself against its siblings (inspect, receipt, health), so the agent must infer the boundary.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'for your task' implies the general context but states no when-to-use or when-not-to-use conditions. Nothing tells the agent how this differs from 'inspect' (presumably for a single already-known API) or when to prefer receipt/health.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv0.1.0
    • First observedhealth
    • First observedinspect
    • First observedreceipt
    • First observedrecommend

TDQS

A3.6/5.0

Scored across 4 tools

Disambiguation4/5

The four tools mostly target distinct actions: recommend discovers APIs, inspect reads stored evidence for one exact endpoint, receipt looks up settlement, and health reports version. Recommend and inspect could be mildly confused because both deal with API endpoint information, but the descriptions clearly separate discovery/pricing from evidence retrieval without provider calls.

Naming Consistency3/5

Recommend and inspect are imperative verbs, while receipt and health are nouns. The names are concise and readable, but the set does not follow a consistent verb_noun or single-convention pattern.

Tool Count5/5

Four tools is well-scoped for a focused trust/payment service: discovery, evidence inspection, receipt lookup, and health checking each have a clear role. There is no obvious tool bloat or thinness.

Completeness4/5

The surface covers the core lifecycle of finding APIs, inspecting stored evidence, checking payment settlement, and verifying service health. Minor gaps may exist around broader payment/authorization management or listing receipts, but core workflows appear workable.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    F
    maintenance
    Enables agents to search and inspect live service offerings, generate x402 payment snippets, and understand blockchain-only balance policies.
    4
    32 npm
    4
    MIT
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to search and verify machine-payable HTTP 402/x402 APIs using live probe data, providing ranked results by liveness, uptime, price, and trustworthiness.
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    Lets agents discover, verify, and inspect x402/B402 payment endpoints on BNB Chain, with read-only tools to list skills, check live counter behavior, and review the settlement tape.
    3 npm
    MIT