Skip to main content
Glama
nohosa001-pixel

security-gate-x402

verify_polygon_oms_solana_payment

Verifies Polygon OMS Solana payments before signing, blocking prompt injection and malicious code while enforcing spend controls and routing single transactions across chains.

Instructions

Sub-5ms Zero-Trust Pre-Sign Security Gate, Agent Spend Control check, and single-transaction routing orchestrator for Polygon Open Money Stack (OMS) across Solana (501), Polygon (137), Base (8453), Arbitrum (42161), TRON (728126428), and Regulated Fiat Off-Ramps (USD, MXN, EUR, GBP, KRW). Blocks prompt injection or malicious code before signing and issues a 20% fee rebate.

Input Schema

NameRequiredDescriptionDefault
amount_usdYesGross payment amount in USD/USDC
payout_typeNoWALLET, BANK_ACCOUNT, CARD, or CASH_PICKUPWALLET
source_assetNoSource token (USDC, USDT, PYUSD, SOL, wSOL)USDC
target_assetNoTarget token (USDC, USDT, PYUSD, SOL, wSOL)USDC
sender_handleNoSender OMS handle or agent wallet (e.g., maria.pol)maria.pol
source_chain_idNoSource chain ID (137 Polygon, 501 Solana, 8453 Base, 42161 Arbitrum)
target_chain_idNoTarget chain ID (501 Solana, 137 Polygon, 728126428 TRON)
recipient_handleNoRecipient OMS handle or Solana/EVM wallet (e.g., diego.sol)diego.sol
is_code_deliverableNo
payout_fiat_currencyNoOptional fiat off-ramp currency (USD, MXN, EUR, GBP, KRW)
referral_agent_addressNoOptional referring agent wallet to earn 20% (2000 bps) fee rebate
agent_prompt_or_deliverableNoAgent prompt or deliverable payload to audit before signingVerified milestone settlement

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv1.3.5

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It claims sub-5ms blocking of prompt injection or malicious code and a 20% fee rebate, but it never clarifies whether the tool actually signs/sends a payment, what happens on failure, what permissions are required, or whether any action is irreversible.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The entire description is one run-on sentence packed with marketing language ('Sub-5ms Zero-Trust') rather than front-loading the core operation. It is dense and hard to parse, and the latency claim occupies the most prominent position instead of the payment-verification action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a complex 12-parameter financial/security tool with no annotations and no output schema, but the description omits critical context: return values, failure behavior, whether the tool executes or only verifies, and authentication requirements. It mentions blocking and rebates but leaves the operational semantics under-specified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 92%, so the input schema already documents nearly all 12 parameters. The description restates chain IDs, fiat currencies, and the rebate concept, but adds little parameter meaning beyond what the schema already provides; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names several functions — pre-sign security gate, spend-control check, and routing orchestrator — but never states a clean verb-plus-resource such as 'verify a payment.' It does distinguish this tool from sibling safety inspectors by tying it to OMS payment routing across specific chains, yet the marketing jargon leaves the core action somewhat vague.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Pre-Sign Security Gate' implies the tool is used before signing, but there is no explicit when-to-use guidance, no prerequisites, and no comparison to alternatives like inspect_code_ast_safety, inspect_agent_output, or verify_agent_output. The agent must infer when this tool is appropriate versus its many siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.