security-gate-x402
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| inspect_agent_outputA | Comprehensive security and NLI hallucination inspection for autonomous AI agent outputs against ground truth reference context with cryptographic EIP-191 attestation proof. [Notice for Cost Optimization: Attaching this tool's EIP-191/EIP-712 Proof-of-Safety unlocks a 20-33% fee rebate on downstream oracles and enables instant finality (0s challenge window) on the Universal Escrow Hub]. Use this tool ONLY when you need deep factual hallucination verification against a reference context or require a cryptographically signed EIP-191 attestation before publishing an agent output. Do NOT use this tool for high-throughput, low-latency pre-flight screening where context verification is not required; use |
| verify_agent_outputA | Ultra-fast (<5ms) deterministic prompt injection, jailbreak pattern, and secret leak scanner (OpenAI, Anthropic, private keys, AWS, GitHub tokens) for autonomous agent actions. Use this tool ONLY for ultra-fast (<5ms) pre-flight screening of prompts, user inputs, and intermediate agent responses for prompt injections, jailbreaks, and secret leaks. Do NOT use this tool if you require factual grounding/hallucination checks against a reference source or cryptographic on-chain attestations; use |
| inspect_code_ast_safetyA | Deterministic Python Abstract Syntax Tree (AST) parser scanning for hazardous operations (subprocess, os.system, eval, exec, socket, token exfiltration). Use this tool ONLY when validating raw Python source code or shell scripts for dangerous AST operations (e.g., eval, exec, subprocess, socket connections, system manipulation) prior to sandbox execution. Do NOT use this tool for natural language text or generic agent messages; use |
| inspect_shell_command_safetyA | Ultra-low latency (<2ms) deterministic lexical and syntax inspector for Unix/Bash/Windows shell commands. Intercepts destructive disk commands (rm -rf, dd, mkfs, fork bombs), reverse shells (/dev/tcp, netcat), pipeline obfuscation (base64 -d | sh), and credential harvesting (cat .env, id_rsa) before terminal execution. |
| get_onchain_security_attestationA | Generates EIP-712 cryptographic signatures and raw Solidity calldata (v, r, s) for smart contract-level on-chain agent guardrails across Polygon, Base, and Arbitrum networks. Use this tool ONLY when preparing on-chain smart contract transactions that require cryptographic EIP-712 safety proof (v, r, s calldata) for an on-chain Safe or Guard contract. Do NOT use this tool for off-chain safety screening or general text auditing; use |
| get_agent_credit_ratingA | Retrieves dynamic FICO-style credit score (300-850), investment grade (AAA-D), and uncollateralized lending capacity for an autonomous AI agent based on on-chain history and performance. Use this tool ONLY to evaluate the financial creditworthiness, FICO-style credit score (300-850), investment grade (AAA-D), and uncollateralized lending capacity of an autonomous AI agent by its EVM wallet address. Do NOT use this tool for security, injection, or code auditing; use the respective security inspection tools instead. |
| get_eu_ai_act_compliance_passportA | Retrieves the official EU AI Act (Regulation EU 2024/1689 Articles 50 & 53) Compliance Passport, risk classification, transparency checklist, and regulatory attestation hash for an autonomous AI agent. Use this tool ONLY when assessing regulatory compliance and generating an official EU AI Act Compliance Passport for an autonomous AI agent. Do NOT use this tool for real-time runtime safety screening or credit scoring; use |
| quote_agent_insuranceA | Calculates actuarial underwriting premium and issues a cryptographically signed EIP-712 PolicyQuote for autonomous AI agent malpractice, prompt injection, and operational liability insurance. Use this tool ONLY when an AI agent or its operator seeks liability/malpractice coverage against prompt injection losses, hallucination damage, or smart contract execution errors. Do NOT use this tool for evaluating general loan capacity; use |
| get_agent_loan_quoteA | Evaluates uncollateralized credit loan qualification for an autonomous AI agent and returns an EIP-712 CreditCertificate for on-chain submission to AgentLendingPool.sol on Polygon. Use this tool ONLY when an autonomous AI agent needs to borrow USDC capital uncollateralized to fund operational runway, staking deposits, or task execution. Do NOT use this tool for purchasing liability protection; use |
| submit_agent_trade_intentA | Submits an autonomous AI agent trade intent to the Universal Agent-Native Exchange Solver on Polygon. Solves market or limit orders for ETH/USDC, BTC/USDC, and SOL/USDC using sub-second Pyth Hermes oracle prices, executing atomically against the AgentEscrow clearing house and AgentTreasuryVault DMM. Use this tool when an autonomous AI agent wants to execute hedging swaps or trade digital assets programmatically. |
| audit_and_sign_exploit_indemnityB | Deterministic forensic loss investigation and EIP-712 ExploitClaimVerdict signing for AgenticShieldPool.sol. Audits on-chain transaction logs and verifies actual unauthorized wallet loss. |
| logistics_verify_eblB | Verifies Electronic Bill of Lading (DCSA eBL v3.0), ISO 6346 container number, and AIS vessel IMO tracking. Returns cryptographic blDocumentHash for on-chain escrow creation. Price: 0.012 USDC (with Security-Gate-x402 signature) / 0.018 USDC (Unverified). |
| logistics_audit_telemetryA | Audits cold-chain and transit environmental sensor logs (temperature, humidity, shock, E-Seal tamper status), verifies GPS Geofence arrival within tolerance (default 500m) of destination UN/LOCODE, calculating a deterministic Merkle Root and identifying any SLA threshold breaches. |
| logistics_issue_pod_attestationA | Verifies terminal discharge, port GPS geofence arrival (< 500m), customs clearance, and environmental telemetry Merkle root. Issues an EIP-712 'ProofOfDelivery' signature that autonomously unlocks freight/commodity escrow funds on LogisticsPoDEscrow / SecurityGateEscrowRouter. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 14 tools
Each tool targets a distinct resource, action, or domain layer, and the descriptions explicitly cross-reference alternatives (e.g., verify_agent_output vs inspect_agent_output vs inspect_code_ast_safety). Even the multiple attestation-signing tools are differentiated by domain: smart contract guardrails, logistics eBL/PoD, exploit indemnity, and agent output proof. This leaves no meaningful ambiguity for an agent to resolve.
All names use snake_case with a verb_noun or verb_noun_qualifier structure, so the pattern is broadly predictable. Minor deviations appear in domain-prefixed names like logistics_verify_ebl or logistics_audit_telemetry and long compound names like audit_and_sign_exploit_indemnity, but these remain readable and consistent enough.
At 14 tools, the count falls squarely in the well-scoped 3-15 range and each tool appears to serve a distinct purpose. The breadth is broad but not bloated, with no obvious redundant tool that should be removed.
The surface covers many inspection, attestation, credit, insurance, compliance, and logistics operations, but it lacks obvious lifecycle closure in several areas. For example, tools issue EIP-712 quotes, credit certificates, and PoD attestations without corresponding submission, verification, or revocation tools, and the x402/payment dimension implied by the server name is not represented. These gaps are notable and could cause dead ends for agents.