vet_agent
Verify safety of connecting to and paying an MCP agent by checking for four specific dangers without trusting the agent's description.
Instructions
Is this agent safe to connect to, and safe to pay? Four checkable dangers, none needing trust in a description. It does not exist — a listing is not a service, and paying an endpoint that never answers is the simplest loss available. Its tools can move money — a name is marketing, the input SCHEMA is the capability, and only a QUANTITY field proves a payment surface, because a message has a recipient exactly as a payment does but you cannot move value without saying how much. It asks for key material — a schema field for a private key or seed is the whole attack, declared in the open. Or it is paid to an address with no past. HTTP 401/403 returns unauditable rather than unreachable: the agent is running and gated, which is neither a pass nor a fail. Deliberately does NOT grade how good the description reads, because a well-written tool listing is free to fabricate and scoring prose would hand a forgery a good mark. Introspects and never calls a tool.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | the agent's HTTP MCP endpoint | |
| chain | No | base (default) | |
| payTo | No | optional: the address that would receive payment |