io.github.tacticalnoot/agent-embassy
REMOTE · AGENT-EMBASSY.FLY.DEV · SCANNED SEP 25
Agents pay for work and prove it. Verified checks $0.15, recovery $1.00. USDC on Base via x402.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability62
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 5619 tokens (~351/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 16 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.tacticalnoot/agent-embassy MCP server?
io.github.tacticalnoot/agent-embassy is a hosted endpoint at https://agent-embassy.fly.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · agent-embassy.fly.dev
claude mcp add --transport http tacticalnoot-agent-embassy 'https://agent-embassy.fly.dev/mcp'
{
"mcpServers": {
"tacticalnoot-agent-embassy": {
"url": "https://agent-embassy.fly.dev/mcp"
}
}
} {
"servers": {
"tacticalnoot-agent-embassy": {
"type": "http",
"url": "https://agent-embassy.fly.dev/mcp"
}
}
} [mcp_servers.tacticalnoot-agent-embassy] url = "https://agent-embassy.fly.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"tacticalnoot-agent-embassy": {
"type": "remote",
"url": "https://agent-embassy.fly.dev/mcp",
"enabled": true
}
}
} openclaw mcp add tacticalnoot-agent-embassy --url 'https://agent-embassy.fly.dev/mcp' --transport streamable-http
mcp_servers:
tacticalnoot-agent-embassy:
url: "https://agent-embassy.fly.dev/mcp" {
"McpServers": {
"tacticalnoot-agent-embassy": {
"Transport": "http",
"Url": "https://agent-embassy.fly.dev/mcp"
}
}
} assistant mcp add tacticalnoot-agent-embassy -t streamable-http -u 'https://agent-embassy.fly.dev/mcp'
{
"mcpServers": {
"tacticalnoot-agent-embassy": {
"type": "http",
"url": "https://agent-embassy.fly.dev/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 25 Sept 26 +6
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 0
- Tool “research_paper” rewrote its description, which is the text the model reads security
- Schema quality: pass → fail ▼ functional
- Destructive annotations: pass → 100 functional
- New tool “agentid_issue” functional
- New tool “agentid_renew” functional
- New tool “agentid_revoke” functional
- New tool “agentid_verify” functional
- New tool “correct_copy” functional
- New tool “prove_it” functional
- “research_paper” added an optional parameter “bundle” cosmetic
- 23 Sept 26 +8
- HSTS header: unverified → fail ▼ security
- Authorization: unverified → partial ▲ security
- Tool “compute_spot_prices” rewrote its description, which is the text the model reads security
- Schema quality: 757 → 863 ▼ functional
- New tool “assurance_check” functional
- “research_paper” added an optional parameter “buyer_alias” cosmetic
- 22 Sept 26 −4
- HSTS header: fail → unverified ▼ security
- Authorization: unverified → partial ▲ security
- Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
- Tool “compute_alerts” rewrote its description, which is the text the model reads security
- Tool “compute_history” rewrote its description, which is the text the model reads security
- Tool “trust_report” rewrote its description, which is the text the model reads security
- Tool “compute_spot_prices” rewrote its description, which is the text the model reads security
- Tool “register_recovery” rewrote its description, which is the text the model reads security
- Tool “verified_check” rewrote its description, which is the text the model reads security
- Tool coverage: 28% → 19% ▼ functional
- Schema quality: 328 → 361 ▼ functional
- Tool coverage: 28% → 100% ▲ functional
- Stability: unverified → 0.03 ▲ functional
- Schema quality: fail → pass ▲ functional
- Tool “compute_spot_prices” now declares an output schema ▲ functional
- Tool “register_recovery” now declares an output schema ▲ functional
- Tool “verified_check” now declares an output schema ▲ functional
- First check of Tool coverage: 100 functional
- Schema quality: excellent → poor functional
- New tool “research_paper” functional
- New tool “compute_alerts” functional
- New tool “compute_history” functional
- New tool “trust_report” functional
- “compute_alerts” reworded the description of “agent_wallet” cosmetic
- “compute_alerts” reworded the description of “gpu” cosmetic
- “compute_alerts” reworded the description of “idempotency_key” cosmetic
- “compute_alerts” reworded the description of “limit” cosmetic
- “compute_history” reworded the description of “agent_wallet” cosmetic
- “compute_history” reworded the description of “gpu” cosmetic
- “compute_history” reworded the description of “idempotency_key” cosmetic
- “compute_history” reworded the description of “limit” cosmetic
- “compute_spot_prices” reworded the description of “type” cosmetic
- “compute_spot_prices” reworded the description of “verified” cosmetic
- “trust_report” reworded the description of “agent_wallet” cosmetic
- “trust_report” reworded the description of “idempotency_key” cosmetic
- “trust_report” reworded the description of “url” cosmetic
- “compute_spot_prices” reworded the description of “gpu” cosmetic
- “compute_spot_prices” reworded the description of “max_results” cosmetic
- “compute_spot_prices” reworded the description of “min_gpus” cosmetic
- “register_recovery” reworded the description of “agent_wallet” cosmetic
- “register_recovery” reworded the description of “contact_handle” cosmetic
- “register_recovery” reworded the description of “contact_name” cosmetic
- “register_recovery” reworded the description of “idempotency_key” cosmetic
- “register_recovery” reworded the description of “quorum_rules” cosmetic
- “register_recovery” reworded the description of “recovery_blob” cosmetic
- “verified_check” reworded the description of “agent_wallet” cosmetic
- “verified_check” reworded the description of “expect_body_contains” cosmetic
- “verified_check” reworded the description of “expect_json_equals” cosmetic
- “verified_check” reworded the description of “expect_json_path” cosmetic
- “verified_check” reworded the description of “expect_status” cosmetic
- “verified_check” reworded the description of “idempotency_key” cosmetic
- “verified_check” reworded the description of “url” cosmetic
- Tool “trust_report” changed its title: Compute History → Trust Report cosmetic
- Tool “compute_spot_prices” changed its title: Compute Spot Prices cosmetic
- Tool “register_recovery” changed its title: Register Recovery cosmetic
- Tool “verified_check” changed its title: Verified Check cosmetic
- 21 Sept 26 56
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 25 Sept 2026 · Probed https://agent-embassy.fly.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.fly.dev | CN=YE1,O=Let's Encrypt,C=US | 21 Aug 2026 | 19 Nov 2026 | ECDSA 256 | ECDSA-SHA384 | 688c4daf5300c51e0a5c1f6837a3a67a868 |
| SANs: *.fly.dev | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of agent-embassy.fly.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| fly.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://agent-embassy.fly.dev/mcp | Verified | 200 | |
| http (plaintext) | http://agent-embassy.fly.dev/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
agentid_issue Agent ID — Issue ~441
Use agentid_issue when you want to issue an Agent ID: a signed identity attestation binding an agent's public key to a verified accountable principal, with operator details and an expiry. Issuance is refused when the principal cannot be verified — that refusal is what makes the ID worth anything. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/agent-id/issue.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_key_scheme | string | – | Key scheme for agent_pubkey: eip191 or ed25519 (default eip191) |
| agent_pubkey | string | yes | The agent's public key (hex), the root of the Agent ID |
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| operator_contact | string | yes | Public contact for the operator (max 320 chars) |
| operator_name | string | yes | Public name of the operator running the agent (max 200 chars) |
| principal_attestation_method | string | yes | How the Embassy verified the principal |
| principal_id | string | yes | ID of the accountable principal on file with the Embassy |
| principal_kind | string | yes | Kind of principal: human or legal_entity |
| principal_label | string | yes | Public label for the principal |
| validity_days | number | – | Days until the Agent ID expires; integer 1-730. Defaults to the Embassy standard when omitted |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
agentid_renew Agent ID — Renew ~483
Use agentid_renew to renew an Agent ID: a fresh Agent ID, same identity chain, new expiry; old one retired. revocation_signature over agent-id-revoke:<OLD_agent_id> (64-char lowercase ID) — same contract as retiring: EIP-191 personal_sign (envelope required; raw ECDSA fails), 0x 65-byte hex; or ed25519 nacl.sign.detached, 64-byte hex. Signer: principal or Embassy-for-cause. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/agent-id/renew.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | The Agent ID string returned at issuance (64 hex characters; case-insensitive). Unknown IDs are rejected |
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| idempotency_key | string | – | Optional idempotency key: any non-empty string (a UUID is recommended; no format is enforced). When provided, replaying the same key returns the original receipt instead of re-running the action; whe… |
| revocation_signature | string | yes | Hex signature over the exact UTF-8 message agent-id-revoke:<OLD_agent_id> (64-char lowercase ID, no trailing newline) — the signature covers the OLD Agent ID being retired. EIP-191: personal_sign the… |
| validity_days | number | – | Days until the renewed Agent ID expires; integer 1-730. Defaults to the Embassy standard when omitted |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
agentid_revoke Agent ID — Revoke ~459
Use agentid_revoke to retire an Agent ID instantly. revocation_signature: hex signature over the message agent-id-revoke:<agent_id> (64-char lowercase ID). EIP-191: personal_sign the message string (envelope required; raw ECDSA fails), 0x 65-byte hex, matched to the principal's revocation key. ed25519: nacl.sign.detached, 64-byte hex. Signer: principal or Embassy-for-cause. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/agent-id/revoke.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | The Agent ID string returned at issuance (64 hex characters; case-insensitive). Unknown IDs are rejected |
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| idempotency_key | string | – | Optional idempotency key: any non-empty string (a UUID is recommended; no format is enforced). When provided, replaying the same key returns the original receipt instead of re-running the action; whe… |
| reason | string | yes | Why the Agent ID is being retired (required, max 500 characters) |
| revocation_signature | string | yes | Hex signature over the exact UTF-8 message agent-id-revoke:<agent_id> (64-char lowercase ID, no trailing newline). EIP-191: personal_sign the message STRING (personal_sign envelope REQUIRED — raw ECD… |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
agentid_verify Agent ID — Verify ~305
Use agentid_verify when you want to check an Agent ID's current standing: valid, revoked, expired, or unknown. Every status returns the identical response shape — the Agent ID, expiry, the full identity chain, an inclusion record, and the signed attestation envelope. Unknown IDs report unknown; never an error. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/agent-id/verify.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | The Agent ID string returned at issuance (64 hex characters; case-insensitive). Rate-limited: 30 checks/min per client IP, 429 on exhaustion |
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
assurance_check Assurance Check ~376
Use assurance_check when you need a go/no-go verdict BEFORE an agent acts on a provider: the Embassy probes the provider unpaid (no payment header, zero spend) and returns a signed ALLOW, ALLOW_WITH_RESTRICTIONS, ASK_HUMAN, REVERIFY, REROUTE, or QUARANTINE decision. UNVERIFIED is the honest default for unknowns — never a smear, never a badge. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/assurance/check.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | The action the agent intends to take, e.g. 'transfer' (required, max 200 chars) |
| amount_usdc | string | yes | Amount at stake, as a positive decimal string, e.g. '0.25' |
| context | string | – | Optional free-text context for the assessment (truncated to 2000 chars) |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| permissions_requested | array | yes | Permissions the action needs, e.g. ['spend']. Non-empty array, max 50 entries; each entry truncated to 200 chars |
| provider_endpoint | string | yes | HTTPS URL of the provider to assess (max 2000 chars; no credentials in URL) |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
compute_alerts Compute Alerts ~288
Use compute_alerts when you want to know when GPU spot prices made a significant move: returns the current price-move alert list, sealed into your signed receipt. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/markets/compute/alerts.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| gpu | string | – | Optional GPU filter, e.g. 'H100 SXM' (max 64 chars). Omit for all GPUs |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| limit | number | – | Max alerts to return; integer 1-50. Defaults to 25 |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
compute_history Compute History ~307
Use compute_history when you need GPU compute market history: a bounded time series of per-GPU cheapest/median/offer counts — or whole-market history when no GPU is named — sealed into your signed receipt. Prices are ephemeral asks, never delivered-cost guarantees. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/markets/compute/history.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| gpu | string | – | Optional GPU filter, e.g. 'H100 SXM' (max 64 chars). Omit for whole-market history |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| limit | number | – | Max history points to return; integer 1-200. Defaults to 50 |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
compute_spot_prices Compute Spot Prices ~231
Use compute_spot_prices when you need the live GPU spot market snapshot: current per-GPU-hour prices with filters for GPU model, offer type, verified hosts, minimum host reliability, GPU count, and result size. GET the paid_url with an x402 v2 PAYMENT-SIGNATURE header carrying the USDC authorization. Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/markets/compute/spot.
| Name | Type | Req | Description |
|---|---|---|---|
| gpu | string | – | Optional GPU model filter, e.g. 'H100 SXM' |
| max_results | integer | – | Max offers to return; integer 1-25 |
| min_gpus | integer | – | Minimum GPU count per offer; integer >= 1 |
| min_reliability | number | – | Minimum host reliability 0..1 (inclusive); hosts below it are excluded |
| type | string | – | Offer type filter: ondemand, bid, or reserved |
| verified | boolean | – | When true, only verified hosts; when false, only unverified hosts |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: GET the paid_url with an x402 v2 PAYMENT-SIGNATURE header carrying the USDC authorization |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to GET (with query params) for the market snapshot |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.25" |
| tool | string | yes | Tool name: compute_spot_prices |
No examples provided.
correct_copy Correct Copy ~373
Use correct_copy when you want a $25 correction pass over draft copy: normalizes formatting, verifies every link is alive, confirms your required terms appear, and scans for black-box leaks — then returns the corrected copy with a verification report and a signed receipt. You pay for the pass, never the method. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $25.00, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/copy/correct.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| draft | string | yes | The raw draft copy to correct (1-20000 chars) |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| links | array | – | HTTPS URLs the copy references; each is verified alive via HEAD (fallback GET), 8s timeout, redirects never followed (max 20) |
| register | string | yes | Voice register: founder-notes, elite, force, or bright-soft-junior |
| required_terms | array | – | Terms that must appear in the final copy (max 20; each term max 100 chars; counted case-insensitively) |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
preflight_check Preflight Check ~372
Use preflight_check before your agent spends on a paid tool or endpoint: the Embassy answers WHO is paid, WHAT is delivered, what CHANGED, the full COST, and WHO TAKES A CUT — then returns a signed PROCEED, PROCEED_WITH_CAUTION, BLOCKED, or UNKNOWN verdict with the full evidence envelope. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/preflight/check.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| context | object | – | principal_wallet + chain. Optional. |
| dry_run | boolean | – | true = free dry-run, intercepted before the payment gate |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| intent | object | yes | The intended invocation: operation (required), params_summary (sha256 of canonical params), advertised_cost_usdc |
| policy | array | – | Policy strings (max 20) |
| subject | object | yes | The spend target: server_id (required), artifact (mcpb:// | oci:// | https://), claimed_version |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
prove_it Prove-It — Verified Proof Receipts for Superintelligence (x402) ~219
Verify URLs with signed cryptographic proof receipts — attestation API for superintelligence. $0.25 per verified claim via x402: one POST, one signature, no account. Your principal stops trusting your word and starts checking your proof. Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/check/prove.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| url | string | yes | HTTPS URL to prove live (max 2000 chars; no credentials in URL). Fetched once; up to 3 redirects followed, 10s timeout, 1MB body cap. Default expectation: HTTP 200 |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
proveit_verified_check Prove-It Verified Check ~317
Use proveit_verified_check when you need a signed receipt that a compute-price check actually ran: one live GPU spot market snapshot (13 classes, cheapest rentable ask per class in USD/hour; one class when gpu is named), sealed into a signed Outcome Receipt. $0.25 per check. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/check/proveit-verified.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| gpu | string | – | Optional GPU class, e.g. 'H100 SXM' (max 64 chars). Omit for all 13 classes |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| type | string | – | Offer type: ondemand, bid, or reserved. Defaults to ondemand |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
register_recovery Register Recovery ~356
Use register_recovery when you want to escrow a client-encrypted recovery blob with the Embassy: it is stored opaquely (the Embassy cannot decrypt it), queued for human operator review within 24h, and you get a signed receipt proving the stored blob's hash. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $1.00, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/recovery/register.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| contact_handle | string | – | Optional contact (email or handle) for the operator review |
| contact_name | string | yes | Your name or operator handle, recorded with the escrow |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| quorum_rules | string | yes | The release rules for this blob, e.g. '2-of-3 named trustees must approve release' |
| recovery_blob | string | yes | Client-encrypted blob (ENC:v1:base64...). Stored opaquely; only its SHA-256 and byte count enter the signed receipt |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
research_paper Research Paper ~377
Use research_paper when you want to buy a research paper: $222 for the paper, or $444 for paper+provenance (the paper plus the corpus evidence pack). Licensed to your wallet — the purchased bytes are delivered privately with a signed receipt. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $222.00, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/research/paper.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| bundle | string | – | Delivery tier: 'paper' ($222) or 'paper+provenance' ($444, paper plus the corpus evidence pack). Defaults to 'paper' |
| buyer_alias | string | – | Optional license display name (3-32 chars: letters, digits, . _ -). Defaults to the first 8 hex chars of the buyer wallet |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| paper_id | string | yes | Catalog ID of the paper, e.g. 'the-discontinuity-20260922'. Unknown IDs are rejected |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
trust_report Trust Report ~304
Use trust_report when you need a buy/don't-buy decision on a candidate x402 endpoint: the Embassy probes it unpaid (no payment header, zero spend) and returns a signed PROCEED, VERIFY_FIRST, or DO_NOT_PAY verdict — a decision, never a score. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.25, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/trust/report.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| url | string | yes | HTTPS URL of the candidate x402 endpoint to probe (max 2000 chars; no credentials in URL). Probed unpaid via GET, falling back to an empty-body POST when GET returns 404/405 |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
verified_check Verified Check ~411
Use verified_check when you need a pass/fail verdict that a URL serves expected content: expected HTTP status (default 200), a required body substring, and/or an exact match on one JSON field. One automated fetch at request time, signed receipt with per-condition results. POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header. See https://docs.cdp.coinbase.com/x402 Paid tool — $0.15, USDC on Base or Arbitrum One. Paid URL: https://aemb.pro/v1/check/verify.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_wallet | string | – | Dev mode only: declares the account wallet (string, min 20 chars) when no x402 payment is present. Ignored in live mode — there the wallet is recovered from the verified payment authorization. |
| expect_body_contains | string | – | Substring that must appear in the response body (max 5000 chars). Skipped when empty or omitted |
| expect_json_equals | – | – | Expected value at expect_json_path; compared by canonical JSON equality. Defaults to null when omitted |
| expect_json_path | string | – | Dot-separated path into the JSON body, e.g. 'data.price' (max 500 chars). Only evaluated when set |
| expect_status | number | – | Expected HTTP status code; truncated to an integer. Defaults to 200 when omitted |
| idempotency_key | string | yes | Idempotency key: any non-empty string (a UUID is recommended; no format is enforced). Replaying the same key on this tool returns the original receipt — the action is not re-run, and the first reques… |
| url | string | yes | HTTPS URL to check (max 2000 chars; no credentials in URL). Fetched once; up to 3 redirects followed, 10s timeout, 1MB body cap |
| Name | Type | Req | Description |
|---|---|---|---|
| asset | string | yes | Settlement asset |
| facilitator | string | yes | x402 facilitator |
| how | string | yes | How to pay: POST the tool inputs as JSON to paid_url with an x402 v2 PAYMENT-SIGNATURE header |
| networks | array | yes | EVM CAIP-2 network ids accepted |
| paid_url | string | yes | x402-paid HTTPS URL to POST the tool inputs to |
| payment_required | boolean | yes | Always true: this MCP tool is a payment pointer; the tool itself is monetized via x402. |
| price | string | yes | Exact price, e.g. "$0.15" |
| tool | string | yes | Tool name, e.g. verified_check |
No examples provided.
What is the io.github.tacticalnoot/agent-embassy MCP server?
io.github.tacticalnoot/agent-embassy is an MCP server listed in the public MCP registry as io.github.tacticalnoot/agent-embassy. Agents pay for work and prove it. Verified checks $0.15, recovery $1.00. USDC on Base via x402. This page covers its hosted endpoint (https://agent-embassy.fly.dev/mcp).
Is the io.github.tacticalnoot/agent-embassy MCP server safe to use?
io.github.tacticalnoot/agent-embassy scores 66 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.tacticalnoot/agent-embassy MCP server expose?
io.github.tacticalnoot/agent-embassy exposes 16 tools: register_recovery, verified_check, prove_it, proveit_verified_check, trust_report, and 11 more. Their descriptions and schemas cost roughly 5,619 tokens of context every time the server is loaded.
Does the io.github.tacticalnoot/agent-embassy MCP server require authentication?
No. We connected to io.github.tacticalnoot/agent-embassy without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.tacticalnoot/agent-embassy MCP server still maintained?
io.github.tacticalnoot/agent-embassy is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.