InsureLink
REMOTE · IVNMSCUULJQUBUNQCGKH.SUPABASE.CO · SCANNED SEP 25
AI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 32 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability72
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 4077 tokens (~127/item across 32 items; 32 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "pay_then_call" implies "pay" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 32 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities40
- Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28. See how to fix → Fail
How do I install the InsureLink MCP server?
InsureLink is a hosted endpoint at https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · ivnmscuuljqubunqcgkh.supabase.co
claude mcp add --transport http skewing1-insurelink 'https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp'
{
"mcpServers": {
"skewing1-insurelink": {
"url": "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp"
}
}
} {
"servers": {
"skewing1-insurelink": {
"type": "http",
"url": "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp"
}
}
} [mcp_servers.skewing1-insurelink] url = "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"skewing1-insurelink": {
"type": "remote",
"url": "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp",
"enabled": true
}
}
} openclaw mcp add skewing1-insurelink --url 'https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp' --transport streamable-http
mcp_servers:
skewing1-insurelink:
url: "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp" {
"McpServers": {
"skewing1-insurelink": {
"Transport": "http",
"Url": "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp"
}
}
} assistant mcp add skewing1-insurelink -t streamable-http -u 'https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp'
{
"mcpServers": {
"skewing1-insurelink": {
"type": "http",
"url": "https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 0
- Stability: 0.97 → pass security
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 6 Aug 26 0
- Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 32 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
- Schema quality: unverified → fail ▼ functional
- Schema quality: unverified → fail ▼ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → good ▲ functional
- First check of Tool coverage: 100 functional
- New tool “attest_reputation” functional
- New tool “check_agent_insurance” functional
- New tool “claim_breach_credit” functional
- New tool “discover_capabilities” functional
- New tool “early_exit” functional
- New tool “get_activity” functional
- New tool “get_agent_claim_history” functional
- New tool “get_agent_risk_score” functional
- New tool “get_attestation” functional
- New tool “get_attestation_freshness” functional
- New tool “get_leaderboard” functional
- New tool “get_reputation” functional
- New tool “get_sla_history” functional
- New tool “insurelink_charge” functional
- New tool “list_attestation_freshness_subscriptions” functional
- New tool “micro_reset” functional
- New tool “mint_sla” functional
- New tool “mitigation_receipt” functional
- New tool “network_lookup” functional
- New tool “pay_then_call” functional
- New tool “renew_sla” functional
- New tool “simulate_action” functional
- New tool “simulate_paid_action” functional
- New tool “simulate_paid_action_batch” functional
- New tool “subscribe_attestation_freshness” functional
- New tool “subscribe_reputation_drift_alerts” functional
- New tool “unsubscribe_attestation_freshness” functional
- New tool “verify_attestation” functional
- New tool “verify_reputation_snapshot” functional
- New tool “verify_transaction_safety” functional
- New tool “voice_intent” functional
- New tool “wrap_usdc” functional
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 0
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Sept 2026 · Probed https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=supabase.co | CN=WE1,O=Google Trust Services,C=US | 26 Aug 2026 | 24 Nov 2026 | ECDSA 256 | ECDSA-SHA256 | 7c35296a896c0a6f13f8495266045d45 |
| SANs: supabase.co, *.supabase.co | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of ivnmscuuljqubunqcgkh.supabase.co. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| co. | present | 7786 | 8 | Verified |
| supabase.co. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp | Verified | 200 | |
| http (plaintext) | http://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp | HTTPS enforced | 301 | https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
attest_reputation ~130
Recomputes the live cross-chain reputation for a wallet, persists a fresh EIP-191 signed attestation in attestation_records (replacing any prior pin), and returns { attestation, canonical_payload, signature, signer } as a portable proof an agent can present to insurers, registries, or counterparty agents. Use when you need an on-the-record, timestamp-fresh credential rather than the cached free attestation. Requires x402 payment ($0.005). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | Wallet address to attest. Must have at least one SLA on InsureLink. |
No output schema declared.
No examples provided.
check_agent_insurance ~66
Checks whether an AI agent / wallet has active insurance coverage on InsureLink, including tier, caps, expiry, and covered events. Free. Standard HTTPS + JSON via the agent-assurance REST module.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Agent / wallet address (0x...) |
No output schema declared.
No examples provided.
claim_breach_credit ~91
Verifies the on-chain SLA agreement state for tokenId and, if active and the caller is a party, calls microResetInsurance to mitigate the breach. Use after a drift or expiry alert. Requires x402 payment ($0.005). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| reason | string | – | Optional human-readable breach reason for audit |
| tokenId | number | yes | SLA token ID to verify and mitigate |
No output schema declared.
No examples provided.
discover_capabilities ~32
Returns the full InsureLink capability manifest including supported actions, tokens, pricing, protection schedule, and framework compatibility.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
early_exit ~41
Exits an SLA early with protection adjustment. Requires x402 payment ($0.005). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| tokenId | number | yes | SLA token ID |
No output schema declared.
No examples provided.
get_activity ~30
Returns recent platform transactions.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max transactions (default 50, max 200) |
No output schema declared.
No examples provided.
get_agent_claim_history ~69
Returns recent insurance claim history for an AI agent / wallet on InsureLink, including filed, approved, partial, and denied claims. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Agent / wallet address (0x...) |
| limit | integer | – | Max claims to return. Default 25. |
No output schema declared.
No examples provided.
get_agent_risk_score ~70
Returns a 0..100 risk score plus LOW/MODERATE/ELEVATED/HIGH risk band for an AI agent / wallet, with the underlying signals (coverage status, daily spend, denied claim ratio). Free.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Agent / wallet address (0x...) |
No output schema declared.
No examples provided.
get_attestation ~82
Returns a signed, portable reputation credential (EIP-191 personal_sign) for an agent wallet. Includes score, tier, SLA summary, breach rate, signer address, and 30-day expiry. Issued only to wallets with at least one SLA on InsureLink (Bronze+). Free.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | Wallet address (0x...) |
No output schema declared.
No examples provided.
get_attestation_freshness ~135
Probes how fresh a wallet's reputation snapshot and persisted attestation are. Free preview returns thresholds and the paid endpoint URL; the actual freshness response (snapshot_age_seconds, attestation_age_seconds, expires_in_seconds, is_stale, stale_reasons[], next_action) requires x402 payment ($0.001) to GET /agent-orchestrator/attestation/{wallet}/freshness. Use this before paying for a fresh attestation mint ($0.005) — if is_stale=false you can skip the mint.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | Wallet address (0x...) to probe for freshness. |
No output schema declared.
No examples provided.
get_leaderboard ~23
Returns the top 25 most reliable agents ranked by reputation score.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_reputation ~36
Returns reputation score, tier, stats, and flags for a wallet address.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | Wallet address (0x...) |
No output schema declared.
No examples provided.
get_sla_history ~32
Returns the full SLA history for a wallet address.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | Wallet address (0x...) |
No output schema declared.
No examples provided.
insurelink_charge ~636
Lovable-friendly entry point: same x402 quote → pay → call loop as `pay_then_call`, plus vertical-aware pricing. Pass `vertical` (logistics, legal, oracles, banking, fintech, healthcare, insurance, government, defense, …) and the upstream x402 server re-prices each accepts[] entry by tier (standard 1× / regulated 1.5× / sovereign 2.5× / defense 3×). Pass `attestation: "pio:<id>"` (or fedramp:/soc2:) for a 20% compliance discount on regulated+ tiers. The signed receipt envelope is tagged `source: "lovable"` and includes a `vertical: { claimed_slug, attestation, quoted: { tier, multiplier, attested, ... } }` block recording the tier the upstream actually quoted — that is the audit trail for tier billing. Returns { paid, upstream_status, response, signed_context: { envelope, envelope_json, envelope_sha256, signature, signer, scheme: 'EIP-191' } }. Pass `idempotency_key` to safely retry without double-settling.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Calling agent wallet (logged in the signed receipt for downstream attribution). |
| attestation | string | – | Third-party compliance attestation in the form `pio:<id>` / `fedramp:<id>` / `soc2:<id>`. Grants a 20% discount on regulated/sovereign/defense tiers. Forwarded as `attestation` body field and `x-atte… |
| body | string | – | Raw request body. JSON-encode before passing. |
| headers | object | – | Extra request headers (Content-Type, Authorization, etc.). |
| idempotency_key | string | – | Client-supplied idempotency key. If provided, repeated calls with the same key return the cached response and never settle a second payment. A subsequent call with the same key but a different reques… |
| max_amount_usdc | number | – | Refuse to settle if the 402 quote exceeds this USDC amount. Default 10. |
| method | string | – | HTTP method. Default GET. |
| mode | string | – | `quote_only` returns the 402 quote without settling. Default `pay_and_call`. |
| purpose | string | – | Free-form audit string included in the signed receipt. |
| url | string | yes | Target paid endpoint. |
| vertical | string | – | Industry/sector slug. Drives the per-vertical pricing tier in accepts[] (standard 1× / regulated 1.5× / sovereign 2.5× / defense 3×). Forwarded to upstream as `vertical` body field and `x-vertical` h… |
| x_payment_header | string | – | Base64-encoded X-PAYMENT header (caller pre-builds settlement payload). Required unless mode='quote_only'. |
No output schema declared.
No examples provided.
list_attestation_freshness_subscriptions ~155
Lists all reputation-drift / attestation-freshness webhook subscriptions for a wallet. Returns id, callback_url, status (active/cancelled/exhausted/expired), notifications_sent vs max_notifications, last_attestation_event (none/expiring_soon/expired) with timestamp, attestation_expiry_warning_days, last_score/tier, last_checked_at, expires_at. Free. Use to audit what's being monitored and how many alerts have already fired before paying for another subscription.
| Name | Type | Req | Description |
|---|---|---|---|
| only_active | boolean | – | If true, return only status='active' subscriptions. Default false (returns all). |
| wallet | string | yes | Watched wallet address (0x...) to list subscriptions for. |
No output schema declared.
No examples provided.
micro_reset ~41
Resets the insurance window for an SLA. Requires x402 payment ($0.001). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| tokenId | number | yes | SLA token ID |
No output schema declared.
No examples provided.
mint_sla ~94
Creates a new ERC-721 SLA agreement NFT. Requires x402 payment ($0.01). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| bondAmount | string | yes | Bond amount in iUSDC base units |
| counterparty | string | yes | Counterparty wallet address |
| coverageLevel | number | – | Insurance coverage level (0-3) |
| duration | number | yes | Duration in years (5, 7, or 10) |
No output schema declared.
No examples provided.
mitigation_receipt ~76
Verifies a claim_breach_credit transaction by tx hash and returns a canonical mitigation receipt suitable for insurer/registry attestations. Reads from existing on-chain settlement records — no new state. Requires x402 payment ($0.001). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| txHash | string | yes | Transaction hash of the breach-mitigation call |
No output schema declared.
No examples provided.
network_lookup ~100
Discovers bonded agent-network providers (clean-IP proxy egress, private mempool relay) listed on InsureLink. Returns provider wallets, x402 payment URLs, prices, and Smart Wallet / EOA compatibility hints. Free preview via this tool; full directory requires x402 payment ($0.001) at the paid endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| template | string | – | Optional template slug filter (e.g. proxy-egress-provider, private-mempool-relay) |
No output schema declared.
No examples provided.
pay_then_call ~467
Wrap any paid HTTP endpoint in the x402 pay-then-call loop and return the downstream response plus an EIP-191 signed receipt proving InsureLink mediated the call. The signed context envelope contains: { request: {url, method, body_sha256}, payment: {asset, amount, network, settlement_id}, response: {status, sha256, content_type, length}, observed_at, mediator: 'insurelink' } and a signature recoverable to InsureLink's deployer key. Two modes: (a) caller_supplies_payment — pass `x_payment_header` (base64) so the upstream call is settled by your wallet; (b) `mode='quote_only'` — return only the 402 quote without paying. Pass `idempotency_key` to safely retry: identical requests return the cached signed receipt without settling a second payment, and conflicting payloads under the same key are rejected. Use this to give an LLM verifiable provenance for any paid agent call (banking, market data, gov endpoints).
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Calling agent wallet (logged in the signed receipt for downstream attribution). |
| body | string | – | Raw request body. JSON-encode before passing. |
| headers | object | – | Extra request headers (Content-Type, Authorization, etc.). |
| idempotency_key | string | – | Client-supplied idempotency key. If provided, repeated calls with the same key return the cached response and never settle a second payment. A subsequent call with the same key but a different reques… |
| max_amount_usdc | number | – | Refuse to settle if the 402 quote exceeds this USDC amount. Default 10. |
| method | string | – | HTTP method. Default GET. |
| mode | string | – | `quote_only` returns the 402 quote without settling. Default `pay_and_call`. |
| purpose | string | – | Free-form audit string included in the signed receipt. |
| url | string | yes | Target paid endpoint. |
| x_payment_header | string | – | Base64-encoded X-PAYMENT header (caller pre-builds settlement payload). Required unless mode='quote_only'. |
No output schema declared.
No examples provided.
renew_sla ~59
Renews an existing SLA agreement. Requires x402 payment ($0.005). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| duration | number | – | Renewal duration (5, 7, or 10 years) |
| tokenId | number | yes | SLA token ID |
No output schema declared.
No examples provided.
simulate_action ~112
Free dry-run for any paid action (mint_sla, renew_sla, wrap_usdc, micro_reset, early_exit). Validates params, x402 header shape, and simulates the contract call against Base. Never broadcasts. Returns { simulated: true, would_succeed, revertReason? } or a precise error. Use this before calling any paid tool.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Paid action name (kebab-case) |
| params | object | yes | Same params you would send to the paid tool |
No output schema declared.
No examples provided.
simulate_paid_action ~192
FREE dry-run for any paid action. Returns a deterministic shape: { would_succeed, exact_cost_usd (LIVE from /agent-pricing-oracle), gas_estimate, contract_call, reputation_delta, expected_receipt_schema, validation_errors[], pricing: { source, expected_value_usd, roi_ratio, recommended_priority, coupon? } }. Never broadcasts, never charges. Use BEFORE any paid tool to avoid wasted x402 settlements. Supported actions: wrap, mint-sla, renew, micro-reset, early-exit.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Paid action name (kebab-case) |
| params | object | yes | Same params you would send to the paid tool. Required keys vary by action — see expected_receipt_schema. Tip: include `wallet`, `bond_amount`, `duration_years`, `amount_usdc` so /agent-pricing-oracle… |
No output schema declared.
No examples provided.
simulate_paid_action_batch ~136
FREE batch dry-run. Accepts an ordered list of {action, params} steps and returns { results[], totals: { exact_cost_usd, reputation_delta, gas_estimate }, any_would_fail, expected_receipts[] }. Never broadcasts, never charges. Use to plan and price multi-step flows (e.g. wrap → mint-sla → renew) before executing.
| Name | Type | Req | Description |
|---|---|---|---|
| steps | array | yes | Ordered list of paid actions to simulate (max 20). |
| stop_on_first_failure | boolean | – | If true, stop simulating after the first step whose would_succeed=false. Default false: simulate all steps. |
No output schema declared.
No examples provided.
subscribe_attestation_freshness ~335
Subscribes a webhook URL to receive signed POST alerts whenever a watched wallet's persisted attestation is about to expire (attestation.expiring_soon, fires once when within attestation_expiry_warning_days of expires_at) or has expired (attestation.expired, fires once when expires_at crosses). Backed by the same paid drift subscription ($0.01) so the same callback also receives reputation.drift events unless threshold_tier_change=false and threshold_score is set high. 30-day paid window. Each POST includes X-InsureLink-Event header and the schema 'insurelink/attestation-event/v1'. Requires x402 payment ($0.01). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| attestation_expiry_warning_days | integer | – | How many days before expires_at to fire attestation.expiring_soon. Default 7. Set 0 to disable early warning and only fire on attestation.expired. |
| callback_url | string | yes | HTTPS endpoint that will receive POST attestation-expiry alerts. |
| duration_days | integer | – | Length of the paid monitoring window in days. Default 30. |
| max_notifications | integer | – | Cap on POST alerts before subscription auto-exhausts. Default 100. |
| threshold_score | integer | – | Reputation drift threshold reused on the same subscription. Default 5. Set 100 to mute drift events and only receive attestation events. |
| threshold_tier_change | boolean | – | If true (default), tier flips also fire reputation.drift events on this subscription. |
| wallet | string | yes | Wallet address whose attestation freshness to monitor. |
No output schema declared.
No examples provided.
subscribe_reputation_drift_alerts ~256
Subscribes a webhook URL to receive signed POST notifications whenever a watched wallet's reputation snapshot drifts beyond the configured threshold (score delta and/or tier change). 30-day paid window per subscription. The reputation-drift-monitor cron evaluates active subscriptions and POSTs { event:'reputation.drift', wallet, previous, current, drift, observed_at, subscription_id } to callback_url. Use to be notified the moment a counterparty's reputation degrades — replaces polling /cross-chain-reputation. Requires x402 payment ($0.01). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| callback_url | string | yes | HTTPS endpoint that will receive POST drift alerts. |
| duration_days | integer | – | Length of the paid monitoring window in days. Default 30. |
| max_notifications | integer | – | Cap on POST alerts before subscription auto-exhausts. Default 100. |
| threshold_score | integer | – | Minimum |score_delta| that triggers a POST. Default 5. |
| threshold_tier_change | boolean | – | If true (default), any tier flip (Bronze↔Silver↔Gold↔Platinum) fires regardless of score_delta. |
| wallet | string | yes | Wallet address to monitor for reputation drift. |
No output schema declared.
No examples provided.
unsubscribe_attestation_freshness ~113
Cancels a previously created attestation-freshness webhook subscription (also cancels the bundled reputation.drift channel on the same subscription). Free. Provide the subscription id returned by subscribe_attestation_freshness / POST /reputation-drift-subscribe. Remaining paid window is forfeited; no refund. Returns { ok, id, cancelled_at } on success.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Subscription id returned from subscribe_attestation_freshness or the paid /reputation-drift-subscribe response. |
No output schema declared.
No examples provided.
verify_attestation ~69
Verifies an InsureLink reputation attestation for a wallet. Re-derives the signed payload server-side, recovers the EIP-191 signer, and returns { valid, signer, recovered, expires_at, checks }. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | Wallet address (0x...) |
No output schema declared.
No examples provided.
verify_reputation_snapshot ~100
Compares a wallet's latest stored reputation_history snapshot against a fresh live cross-chain reputation computation. Returns { snapshot, live, match, drift, signature, signer } so counterparty agents can confirm an advertised score isn't stale before transacting. Signed EIP-191 by the InsureLink platform key. Requires x402 payment ($0.001). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| wallet | string | yes | Wallet address whose snapshot to verify against live reputation |
No output schema declared.
No examples provided.
verify_transaction_safety ~140
Pre-transaction safety check for an autonomous AI agent transaction. Returns verified, risk_level, coverage_available, transaction_limits, additional_verification_required, and a transaction_recommendation: APPROVED | APPROVED_WITH_ESCROW | REQUIRE_ADDITIONAL_VERIFICATION | BLOCKED_HIGH_RISK | BLOCKED_LIMIT_EXCEEDED.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | Logical action key (e.g. x402_call, a2a_transfer) |
| agent_id | string | yes | Agent / wallet about to transact |
| amount_usdc | number | yes | Transaction amount in USDC |
| counterparty | string | – | Optional counterparty 0x address |
No output schema declared.
No examples provided.
voice_intent ~112
Parses a natural-language command (e.g. 'renew my SLA #42 for 5 years', 'check reputation for 0x…', 'pay 1.50 USDC to 0x…') into a structured InsureLink action plan with endpoint, params, payment requirements, and confidence. Free preview returns the supported grammar; full classification requires x402 payment ($0.001) at the paid endpoint.
| Name | Type | Req | Description |
|---|---|---|---|
| utterance | string | – | Optional sample utterance to echo in the preview response. |
No output schema declared.
No examples provided.
wrap_usdc ~47
Wraps USDC into iUSDC. Requires x402 payment ($0.001). Returns payment instructions.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | string | yes | Amount of USDC to wrap (base units) |
No output schema declared.
No examples provided.
What is the InsureLink MCP server?
InsureLink is an MCP server listed in the public MCP registry as io.github.skewing1/insurelink. AI agent-to-agent SLA agreements on Base with insurance, reputation, and x402 payments. This page covers its hosted endpoint (https://ivnmscuuljqubunqcgkh.supabase.co/functions/v1/mcp-server/mcp).
Is the InsureLink MCP server safe to use?
InsureLink scores 76 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the InsureLink MCP server expose?
InsureLink exposes 32 tools: discover_capabilities, get_reputation, get_leaderboard, get_sla_history, get_activity, and 27 more. Their descriptions and schemas cost roughly 4,077 tokens of context every time the server is loaded.
Does the InsureLink MCP server require authentication?
No. We connected to InsureLink without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the InsureLink MCP server still maintained?
InsureLink is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.